Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-1999-0322 |
N/A
|
The open() function in FreeBSD allows local attac… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:34:51.955Z |
| CVE-1999-0343 |
N/A
|
A malicious Palace server can force a client to e… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:34:52.029Z |
| CVE-1999-0408 |
N/A
|
Files created from interactive shell sessions in … |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:34:52.089Z |
| CVE-1999-0409 |
N/A
|
Buffer overflow in gnuplot in Linux version 3.5 a… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:41:44.207Z |
| CVE-1999-0421 |
N/A
|
During a reboot after an installation of Linux Sl… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:41:44.242Z |
| CVE-1999-0428 |
N/A
|
OpenSSL and SSLeay allow remote attackers to reus… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:41:44.712Z |
| CVE-1999-0439 |
N/A
|
Buffer overflow in procmail before version 3.12 a… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:41:44.765Z |
| CVE-1999-0470 |
N/A
|
A weak encryption algorithm is used for passwords… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:41:44.977Z |
| CVE-1999-0674 |
N/A
|
The BSD profil system call allows a local user to… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.024Z |
| CVE-1999-0680 |
N/A
|
Windows NT Terminal Server performs extra work wh… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.488Z |
| CVE-1999-0682 |
N/A
|
Microsoft Exchange 5.5 allows a remote attacker t… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.013Z |
| CVE-1999-0685 |
N/A
|
Buffer overflow in Netscape Communicator via EMBE… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.318Z |
| CVE-1999-0686 |
N/A
|
Denial of service in Netscape Enterprise Server (… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:36.975Z |
| CVE-1999-0687 |
N/A
|
The ToolTalk ttsession daemon uses weak RPC authe… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.419Z |
| CVE-1999-0688 |
N/A
|
Buffer overflows in HP Software Distributor (SD) … |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.600Z |
| CVE-1999-0689 |
N/A
|
The CDE dtspcd daemon allows local users to execu… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.000Z |
| CVE-1999-0690 |
N/A
|
HP CDE program includes the current directory in … |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.451Z |
| CVE-1999-0691 |
N/A
|
Buffer overflow in the AddSuLog function of the C… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.364Z |
| CVE-1999-0692 |
N/A
|
The default configuration of the Array Services d… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.566Z |
| CVE-1999-0693 |
N/A
|
Buffer overflow in TT_SESSION environment variabl… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.755Z |
| CVE-1999-0695 |
N/A
|
The Sybase PowerDynamo personal web server allows… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.510Z |
| CVE-1999-0699 |
N/A
|
The Bluestone Sapphire web server allows session … |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.166Z |
| CVE-1999-0700 |
N/A
|
Buffer overflow in Microsoft Phone Dialer (dialer… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.618Z |
| CVE-1999-0701 |
N/A
|
After an unattended installation of Windows NT 4.… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.583Z |
| CVE-1999-0702 |
N/A
|
Internet Explorer 5.0 and 5.01 allows remote atta… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.636Z |
| CVE-1999-0703 |
N/A
|
OpenBSD, BSDI, and other Unix operating systems a… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.536Z |
| CVE-1999-0704 |
N/A
|
Buffer overflow in Berkeley automounter daemon (a… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.805Z |
| CVE-1999-0705 |
N/A
|
Buffer overflow in INN inews program. |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.884Z |
| CVE-1999-0706 |
N/A
|
Linux xmonisdn package allows local users to gain… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.646Z |
| CVE-1999-0707 |
N/A
|
The default FTP configuration in HP Visualize Con… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.412Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-1999-0322 |
N/A
|
The open() function in FreeBSD allows local attac… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:34:51.955Z |
| CVE-1999-0343 |
N/A
|
A malicious Palace server can force a client to e… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:34:52.029Z |
| CVE-1999-0408 |
N/A
|
Files created from interactive shell sessions in … |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:34:52.089Z |
| CVE-1999-0409 |
N/A
|
Buffer overflow in gnuplot in Linux version 3.5 a… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:41:44.207Z |
| CVE-1999-0421 |
N/A
|
During a reboot after an installation of Linux Sl… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:41:44.242Z |
| CVE-1999-0428 |
N/A
|
OpenSSL and SSLeay allow remote attackers to reus… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:41:44.712Z |
| CVE-1999-0439 |
N/A
|
Buffer overflow in procmail before version 3.12 a… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:41:44.765Z |
| CVE-1999-0470 |
N/A
|
A weak encryption algorithm is used for passwords… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:41:44.977Z |
| CVE-1999-0674 |
N/A
|
The BSD profil system call allows a local user to… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.024Z |
| CVE-1999-0680 |
N/A
|
Windows NT Terminal Server performs extra work wh… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.488Z |
| CVE-1999-0682 |
N/A
|
Microsoft Exchange 5.5 allows a remote attacker t… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.013Z |
| CVE-1999-0685 |
N/A
|
Buffer overflow in Netscape Communicator via EMBE… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.318Z |
| CVE-1999-0686 |
N/A
|
Denial of service in Netscape Enterprise Server (… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:36.975Z |
| CVE-1999-0687 |
N/A
|
The ToolTalk ttsession daemon uses weak RPC authe… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.419Z |
| CVE-1999-0688 |
N/A
|
Buffer overflows in HP Software Distributor (SD) … |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.600Z |
| CVE-1999-0689 |
N/A
|
The CDE dtspcd daemon allows local users to execu… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.000Z |
| CVE-1999-0690 |
N/A
|
HP CDE program includes the current directory in … |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.451Z |
| CVE-1999-0691 |
N/A
|
Buffer overflow in the AddSuLog function of the C… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.364Z |
| CVE-1999-0692 |
N/A
|
The default configuration of the Array Services d… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.566Z |
| CVE-1999-0693 |
N/A
|
Buffer overflow in TT_SESSION environment variabl… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.755Z |
| CVE-1999-0695 |
N/A
|
The Sybase PowerDynamo personal web server allows… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.510Z |
| CVE-1999-0699 |
N/A
|
The Bluestone Sapphire web server allows session … |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.166Z |
| CVE-1999-0700 |
N/A
|
Buffer overflow in Microsoft Phone Dialer (dialer… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.618Z |
| CVE-1999-0701 |
N/A
|
After an unattended installation of Windows NT 4.… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.583Z |
| CVE-1999-0702 |
N/A
|
Internet Explorer 5.0 and 5.01 allows remote atta… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.636Z |
| CVE-1999-0703 |
N/A
|
OpenBSD, BSDI, and other Unix operating systems a… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.536Z |
| CVE-1999-0704 |
N/A
|
Buffer overflow in Berkeley automounter daemon (a… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.805Z |
| CVE-1999-0705 |
N/A
|
Buffer overflow in INN inews program. |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.884Z |
| CVE-1999-0706 |
N/A
|
Linux xmonisdn package allows local users to gain… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.646Z |
| CVE-1999-0707 |
N/A
|
The default FTP configuration in HP Visualize Con… |
n/a |
n/a |
2000-01-04T05:00:00 | 2024-08-01T16:48:37.412Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-1999-0059 | IRIX fam service allows an attacker to obtain a list of all files on the server. | 1997-07-14T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0146 | The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary … | 1997-07-15T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0025 | root privileges via buffer overflow in df command on SGI IRIX systems. | 1997-07-16T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0026 | root privileges via buffer overflow in pset command on SGI IRIX systems. | 1997-07-16T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0027 | root privileges via buffer overflow in eject command on SGI IRIX systems. | 1997-07-16T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0028 | root privileges via buffer overflow in login/scheme command on SGI IRIX systems. | 1997-07-16T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0029 | root privileges via buffer overflow in ordist command on SGI IRIX systems. | 1997-07-16T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0030 | root privileges via buffer overflow in xlock command on SGI IRIX systems. | 1997-07-16T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1182 | Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local use… | 1997-07-17T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0122 | Buffer overflow in AIX lchangelv gives root access. | 1997-07-21T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0247 | Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary … | 1997-07-21T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1208 | Buffer overflow in ping in AIX 4.2 and earlier allows local users to gain root privileges via a lon… | 1997-07-21T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0971 | Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a… | 1997-07-22T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1068 | Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a den… | 1997-07-23T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1217 | The PATH in Windows NT includes the current working directory (.), which could allow local users to… | 1997-07-25T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1419 | Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to ga… | 1997-07-30T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1308 | Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over… | 1997-07-31T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0238 | php.cgi allows attackers to read any file on the system. | 1997-08-01T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0301 | Buffer overflow in SunOS/Solaris ps command. | 1997-08-01T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0524 | ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. | 1997-08-01T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0566 | An attacker can write to syslog files from any location, causing a denial of service by filling up … | 1997-08-01T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1262 | Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the … | 1997-08-01T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1446 | Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located … | 1997-08-05T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0152 | The DG/UX finger daemon allows remote command execution through shell metacharacters. | 1997-08-11T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0024 | DNS cache poisoning via BIND, by predictable query IDs. | 1997-08-13T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1250 | Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other s… | 1997-08-19T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1399 | spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by s… | 1997-08-20T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1220 | Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the adverti… | 1997-08-24T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1225 | rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to deter… | 1997-08-24T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0071 | Apache httpd cookie buffer overflow for versions 1.1.1 and earlier. | 1997-09-01T04:00:00.000 | 2025-04-03T01:03:51.193 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-3jqw-crqj-w8qw |
7.5 (3.1)
8.7 (4.0)
|
Denial of service in django | 2018-07-23T19:51:35Z | 2024-09-16T22:34:20Z |
| ghsa-fwr5-q9rx-294f |
6.5 (3.1)
7.1 (4.0)
|
Improper query string handling in Django | 2018-07-23T19:51:40Z | 2024-11-18T16:26:08Z |
| ghsa-4m72-rmm9-2qjr |
6.1 (3.1)
5.3 (4.0)
|
feedparser Cross-site Scripting vulnerability | 2018-07-23T19:51:43Z | 2024-09-20T17:27:57Z |
| ghsa-77hv-8796-8ccp |
7.5 (3.1)
8.7 (4.0)
|
HTTP header injection in Plone and Zope2 | 2018-07-23T19:51:50Z | 2024-10-11T20:53:34Z |
| ghsa-7wph-fc4w-wqp2 |
7.5 (3.1)
6.6 (4.0)
|
Improper date handling in Django | 2018-07-23T19:51:59Z | 2024-09-17T15:03:58Z |
| ghsa-p6h9-hpcg-c6gm |
|
High severity vulnerability that affects Plone and Zope2 | 2018-07-23T19:52:02Z | 2024-11-26T15:51:27Z |
| ghsa-879r-7f3w-8jj3 |
6.5 (3.1)
7.1 (4.0)
|
Plone and Zope2 vulnerable to unauthorized access to restricted attributes | 2018-07-23T19:52:06Z | 2024-10-11T20:52:23Z |
| ghsa-2p78-8hh6-96xc |
6.1 (3.1)
5.3 (4.0)
|
feedparser Cross-site Scripting vulnerability | 2018-07-23T19:52:21Z | 2024-09-20T17:20:05Z |
| ghsa-7g9h-c88w-r7h2 |
9.1 (3.1)
9.3 (4.0)
|
Directory traversal in Django | 2018-07-23T19:52:31Z | 2024-09-16T21:55:42Z |
| ghsa-prr5-pfr8-q9f3 |
7.5 (3.1)
8.7 (4.0)
|
Plone allows remote attackers to read hidden folder contents | 2018-07-23T19:52:35Z | 2024-10-14T21:48:06Z |
| ghsa-x88j-93vc-wpmp |
4.0 (3.1)
6.9 (4.0)
|
Session manipulation in Django | 2018-07-23T19:52:39Z | 2024-09-16T23:03:58Z |
| ghsa-fxpg-gg9g-76gj |
6.1 (3.1)
5.3 (4.0)
|
Cross-site scripting in django | 2018-07-23T19:52:42Z | 2024-09-16T22:57:31Z |
| ghsa-2qx8-589j-gcpx |
6.5 (3.1)
7.1 (4.0)
|
Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts | 2018-07-23T20:26:45Z | 2024-10-09T21:30:27Z |
| ghsa-xj3h-vc9j-j823 |
7.5 (3.1)
|
Directory Traversal in nodeaaaaa | 2018-07-23T20:39:32Z | 2023-09-07T20:39:09Z |
| ghsa-xqfm-ff6g-24c7 |
7.5 (3.1)
|
Directory Traversal in dgard8.lab6 | 2018-07-23T20:39:44Z | 2023-09-11T23:14:40Z |
| ghsa-qmhf-qg6f-pc4v |
7.5 (3.1)
|
Directory Traversal in fbr-client | 2018-07-23T20:39:51Z | 2023-09-12T21:23:21Z |
| ghsa-5jg5-w395-9684 |
7.5 (3.1)
|
Directory Traversal in ltt | 2018-07-23T20:39:59Z | 2023-09-11T19:00:46Z |
| ghsa-79p8-4cwq-rhqh |
|
Directory Traversal in jn_jj_server | 2018-07-23T20:40:07Z | 2023-09-05T23:24:25Z |
| ghsa-78h7-fgq9-625x |
7.5 (3.1)
|
Directory Traversal in quickserver | 2018-07-23T20:40:14Z | 2023-09-11T16:38:49Z |
| ghsa-x5x2-mfc7-r22f |
|
Directory Traversal in picard | 2018-07-23T20:40:20Z | 2023-09-05T23:33:31Z |
| ghsa-4vcm-qfxh-p6c3 |
7.5 (3.1)
|
Directory Traversal in getcityapi.yoehoehne | 2018-07-23T20:40:29Z | 2023-09-11T23:14:01Z |
| ghsa-rw6j-rhw7-q94c |
7.5 (3.1)
|
Directory Traversal in sly07 | 2018-07-23T20:40:34Z | 2023-09-12T19:35:17Z |
| ghsa-f7jg-mcvw-9gwv |
7.5 (3.1)
|
Directory Traversal in reecerver | 2018-07-23T20:40:40Z | 2023-09-11T23:12:52Z |
| ghsa-jpjp-vxv6-59hm |
7.5 (3.1)
|
Directory Traversal in open-device | 2018-07-23T20:41:11Z | 2023-09-11T23:12:30Z |
| ghsa-wh33-4p32-g7vh |
7.5 (3.1)
|
Directory Traversal in serverxxx | 2018-07-23T20:43:56Z | 2023-09-07T22:25:41Z |
| ghsa-pr49-5hhf-6mm6 |
7.5 (3.1)
|
Directory Traversal in serverabc | 2018-07-23T20:44:34Z | 2023-09-08T23:29:43Z |
| ghsa-23wc-v4mf-x7v4 |
7.5 (3.1)
|
Directory Traversal in intsol-package | 2018-07-23T20:44:45Z | 2023-09-07T22:48:16Z |
| ghsa-5x5w-v4xq-p64r |
7.5 (3.1)
|
Directory Traversal in ewgaddis.lab6 | 2018-07-23T20:44:52Z | 2023-09-11T16:34:18Z |
| ghsa-m874-69ww-w7jq |
7.5 (3.1)
|
Directory Traversal in whispercast | 2018-07-23T20:45:01Z | 2023-09-12T19:34:57Z |
| ghsa-68cm-mgv7-vg5c |
7.5 (3.1)
|
Directory Traversal in utahcityfinder | 2018-07-23T20:45:11Z | 2023-09-07T22:52:46Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2015-39 |
|
The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo… | glance | 2015-08-19T15:59:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2015-40 |
|
Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack … | horizon | 2015-08-20T20:59:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2015-22 |
|
contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before … | django | 2015-08-24T14:59:00Z | 2021-07-15T02:22:09.927134Z |
| pysec-2015-23 |
|
The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.fl… | django | 2015-08-24T14:59:00Z | 2021-07-15T02:22:10.010649Z |
| pysec-2015-24 |
|
Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py i… | ipython | 2015-09-21T19:59:00Z | 2021-07-15T02:22:14.906376Z |
| pysec-2015-26 |
|
Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py i… | notebook | 2015-09-21T19:59:00Z | 2021-07-15T02:22:16.172109Z |
| pysec-2015-25 |
|
The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allow… | ipython | 2015-09-29T19:59:00Z | 2021-07-15T02:22:14.948088Z |
| pysec-2015-27 |
|
The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allow… | notebook | 2015-09-29T19:59:00Z | 2021-07-15T02:22:16.210618Z |
| pysec-2015-13 |
|
CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject ar… | kallithea | 2015-10-29T20:59:00Z | 2021-07-05T00:01:22.184837Z |
| pysec-2015-41 |
|
providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.… | ipsilon | 2015-11-17T15:59:00Z | 2024-12-05T09:35:27.711043Z |
| pysec-2015-42 |
|
providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.… | ipsilon | 2015-11-17T15:59:00Z | 2024-12-05T09:35:27.751929Z |
| pysec-2015-28 |
|
OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is… | ironic-inspector | 2015-11-25T20:59:00Z | 2021-07-25T23:34:38.274751Z |
| pysec-2015-11 |
|
The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x b… | django | 2015-12-07T20:59:00Z | 2021-09-01T08:35:41.190803Z |
| pysec-2016-32 |
|
The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 throug… | pygments | 2016-01-08T20:59:00Z | 2021-08-27T03:22:17.226462Z |
| pysec-2016-10 |
|
The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attacker… | rsa | 2016-01-13T15:59:00Z | 2021-07-05T00:01:25.929299Z |
| pysec-2016-20 |
|
The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x be… | keystonemiddleware | 2016-02-03T18:59:00Z | 2021-07-25T23:34:39.104396Z |
| pysec-2016-36 |
|
The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to rea… | radicale | 2016-02-03T18:59:00Z | 2021-12-14T08:18:58.605498Z |
| pysec-2016-37 |
|
Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_onl… | radicale | 2016-02-03T18:59:00Z | 2021-12-14T08:18:58.669643Z |
| pysec-2016-14 |
|
Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenti… | django | 2016-02-08T19:59:00Z | 2021-07-15T02:22:10.055528Z |
| pysec-2016-15 |
|
The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows… | django | 2016-04-08T15:59:00Z | 2021-07-15T02:22:10.137209Z |
| pysec-2016-16 |
|
The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1… | django | 2016-04-08T15:59:00Z | 2021-07-15T02:22:10.225115Z |
| pysec-2016-35 |
|
The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline in… | tripleo-heat-templates | 2016-04-11T21:59:00Z | 2021-08-27T03:22:48.456695Z |
| pysec-2016-23 |
|
Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, whic… | salt | 2016-04-12T14:59:00Z | 2021-07-25T23:34:53.906248Z |
| pysec-2016-33 |
|
schema.py in Roundup before 1.5.1 does not properly limit attributes included in default … | roundup | 2016-04-13T14:59:00Z | 2021-08-27T03:22:19.738380Z |
| pysec-2016-11 |
|
model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.… | trytond | 2016-04-13T15:59:00Z | 2021-07-05T00:01:27.588881Z |
| pysec-2016-19 |
|
Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 an… | pillow | 2016-04-13T16:59:00Z | 2021-07-15T02:22:17.074309Z |
| pysec-2016-26 |
|
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted gi… | mercurial | 2016-04-13T16:59:00Z | 2021-08-27T03:22:06.833176Z |
| pysec-2016-27 |
|
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted na… | mercurial | 2016-04-13T16:59:00Z | 2021-08-27T03:22:06.881570Z |
| pysec-2016-29 |
|
The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arb… | mercurial | 2016-04-13T16:59:00Z | 2021-08-27T03:22:06.971468Z |
| pysec-2016-5 |
|
Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow… | pillow | 2016-04-13T16:59:00Z | 2021-07-05T00:01:23.915090Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2022-2751 | Malicious code in enterprise_api_app (npm) | 2022-05-31T13:22:05Z | 2022-05-31T13:22:06Z |
| mal-2022-6084 | Malicious code in sherlocksecure (npm) | 2022-05-31T13:22:05Z | 2022-05-31T13:22:06Z |
| MAL-2022-5380 | Malicious code in pm-web-mapp-shared (npm) | 2022-05-31T13:22:06Z | 2022-05-31T13:22:06Z |
| mal-2022-5380 | Malicious code in pm-web-mapp-shared (npm) | 2022-05-31T13:22:06Z | 2022-05-31T13:22:06Z |
| MAL-2022-871 | Malicious code in ads-monsuperpackage-dependency-confusion (npm) | 2022-05-31T13:23:31Z | 2022-05-31T13:24:08Z |
| mal-2022-871 | Malicious code in ads-monsuperpackage-dependency-confusion (npm) | 2022-05-31T13:23:31Z | 2022-05-31T13:24:08Z |
| MAL-2022-4825 | Malicious code in next-plugin-normal (npm) | 2022-05-31T13:24:03Z | 2022-05-31T13:24:12Z |
| MAL-2022-5376 | Malicious code in plugin-welcome (npm) | 2022-05-31T13:24:03Z | 2022-05-31T13:24:11Z |
| MAL-2022-6210 | Malicious code in some-crazy-dep-that-doesnt-exist (npm) | 2022-05-31T13:24:03Z | 2022-05-31T13:24:11Z |
| MAL-2022-6645 | Malicious code in trezor-translations-manager (npm) | 2022-05-31T13:24:03Z | 2022-05-31T13:24:08Z |
| MAL-2022-6646 | Malicious code in trezor-ui-components (npm) | 2022-05-31T13:24:03Z | 2022-05-31T13:24:08Z |
| MAL-2022-6647 | Malicious code in trezor-wallet (npm) | 2022-05-31T13:24:03Z | 2022-05-31T13:24:08Z |
| mal-2022-4825 | Malicious code in next-plugin-normal (npm) | 2022-05-31T13:24:03Z | 2022-05-31T13:24:12Z |
| mal-2022-5376 | Malicious code in plugin-welcome (npm) | 2022-05-31T13:24:03Z | 2022-05-31T13:24:11Z |
| mal-2022-6210 | Malicious code in some-crazy-dep-that-doesnt-exist (npm) | 2022-05-31T13:24:03Z | 2022-05-31T13:24:11Z |
| mal-2022-6645 | Malicious code in trezor-translations-manager (npm) | 2022-05-31T13:24:03Z | 2022-05-31T13:24:08Z |
| mal-2022-6646 | Malicious code in trezor-ui-components (npm) | 2022-05-31T13:24:03Z | 2022-05-31T13:24:08Z |
| mal-2022-6647 | Malicious code in trezor-wallet (npm) | 2022-05-31T13:24:03Z | 2022-05-31T13:24:08Z |
| MAL-2022-6364 | Malicious code in sushi-client (npm) | 2022-05-31T13:24:36Z | 2022-05-31T13:24:37Z |
| mal-2022-6364 | Malicious code in sushi-client (npm) | 2022-05-31T13:24:36Z | 2022-05-31T13:24:37Z |
| MAL-2022-6362 | Malicious code in survey-widgets (npm) | 2022-05-31T13:25:26Z | 2022-05-31T13:25:27Z |
| mal-2022-6362 | Malicious code in survey-widgets (npm) | 2022-05-31T13:25:26Z | 2022-05-31T13:25:27Z |
| MAL-2022-4469 | Malicious code in malicious-pre-install-package (npm) | 2022-05-31T13:25:41Z | 2022-05-31T13:25:42Z |
| mal-2022-4469 | Malicious code in malicious-pre-install-package (npm) | 2022-05-31T13:25:41Z | 2022-05-31T13:25:42Z |
| MAL-2022-2823 | Malicious code in eslint-plugin-pan (npm) | 2022-05-31T13:26:34Z | 2022-05-31T13:26:34Z |
| mal-2022-2823 | Malicious code in eslint-plugin-pan (npm) | 2022-05-31T13:26:34Z | 2022-05-31T13:26:34Z |
| MAL-2022-837 | Malicious code in activity-dropdown-legacy (npm) | 2022-05-31T13:27:24Z | 2022-05-31T13:27:24Z |
| mal-2022-837 | Malicious code in activity-dropdown-legacy (npm) | 2022-05-31T13:27:24Z | 2022-05-31T13:27:24Z |
| MAL-2022-4645 | Malicious code in mmccii (npm) | 2022-05-31T13:28:47Z | 2022-05-31T13:28:47Z |
| mal-2022-4645 | Malicious code in mmccii (npm) | 2022-05-31T13:28:47Z | 2022-05-31T13:28:47Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2023-1641 | cURL: Mehrere Schwachstellen | 2018-10-30T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-2984 | Apache Tomcat JK Connector: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2018-10-31T23:00:00.000+00:00 | 2023-11-21T23:00:00.000+00:00 |
| wid-sec-w-2024-1999 | Red Hat Enterprise Linux/QEMU: Schwachstelle ermöglicht Denial of Service | 2018-10-31T23:00:00.000+00:00 | 2024-09-02T22:00:00.000+00:00 |
| wid-sec-w-2024-2000 | QEMU: Schwachstelle ermöglicht Denial of Service | 2018-10-31T23:00:00.000+00:00 | 2024-09-02T22:00:00.000+00:00 |
| wid-sec-w-2024-1998 | QEMU: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2018-11-01T23:00:00.000+00:00 | 2024-09-02T22:00:00.000+00:00 |
| wid-sec-w-2022-1517 | poppler: Schwachstelle ermöglicht Denial of Service | 2018-11-04T23:00:00.000+00:00 | 2023-07-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2511 | Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2018-11-06T23:00:00.000+00:00 | 2023-09-28T22:00:00.000+00:00 |
| wid-sec-w-2025-0059 | PowerDNS: Mehrere Schwachstellen ermöglichen Denial of Service | 2018-11-06T23:00:00.000+00:00 | 2025-01-14T23:00:00.000+00:00 |
| wid-sec-w-2022-1518 | poppler: Mehrere Schwachstellen ermöglichen Denial of Service | 2018-11-07T23:00:00.000+00:00 | 2023-07-20T22:00:00.000+00:00 |
| wid-sec-w-2023-1851 | poppler: Schwachstelle ermöglicht Denial of Service | 2018-11-11T23:00:00.000+00:00 | 2023-07-20T22:00:00.000+00:00 |
| wid-sec-w-2024-1997 | QEMU: Schwachstelle ermöglicht Denial of Service | 2018-11-25T23:00:00.000+00:00 | 2024-09-02T22:00:00.000+00:00 |
| wid-sec-w-2025-0211 | Perl: Mehrere Schwachstellen | 2018-11-29T23:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2024-3598 | Ansible: Schwachstelle ermöglicht Offenlegung von Informationen | 2018-12-04T23:00:00.000+00:00 | 2024-12-03T23:00:00.000+00:00 |
| wid-sec-w-2024-1996 | QEMU: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2018-12-06T23:00:00.000+00:00 | 2024-09-02T22:00:00.000+00:00 |
| wid-sec-w-2023-2148 | ImageMagick/GraphicsMagick: Schwachstelle ermöglicht Denial of Service | 2018-12-09T23:00:00.000+00:00 | 2024-03-19T23:00:00.000+00:00 |
| wid-sec-w-2024-1099 | python-crypto: Mehrere Schwachstellen | 2018-12-10T23:00:00.000+00:00 | 2024-10-23T22:00:00.000+00:00 |
| wid-sec-w-2024-1995 | QEMU: Mehrere Schwachstellen | 2018-12-13T23:00:00.000+00:00 | 2024-09-02T22:00:00.000+00:00 |
| wid-sec-w-2023-0767 | GraphicsMagick: Mehrere Schwachstellen ermöglichen Denial of Service | 2018-12-17T23:00:00.000+00:00 | 2023-03-27T22:00:00.000+00:00 |
| wid-sec-w-2024-3164 | OpenLDAP: Schwachstelle ermöglicht Denial of Service | 2018-12-17T23:00:00.000+00:00 | 2024-10-14T22:00:00.000+00:00 |
| wid-sec-w-2024-1994 | QEMU: Mehrere Schwachstellen ermöglichen Denial of Service | 2018-12-18T23:00:00.000+00:00 | 2024-09-02T22:00:00.000+00:00 |
| wid-sec-w-2024-3597 | Ansible: Schwachstelle ermöglicht Offenlegung von Informationen | 2018-12-18T23:00:00.000+00:00 | 2024-12-03T23:00:00.000+00:00 |
| wid-sec-w-2023-2147 | ImageMagick: Schwachstelle ermöglicht Denial of Service | 2018-12-26T23:00:00.000+00:00 | 2024-08-22T22:00:00.000+00:00 |
| wid-sec-w-2022-1519 | poppler: Schwachstelle ermöglicht Denial of Service | 2019-01-01T23:00:00.000+00:00 | 2023-07-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2290 | poppler: Schwachstelle ermöglicht Denial of Service | 2019-01-03T23:00:00.000+00:00 | 2023-12-21T23:00:00.000+00:00 |
| wid-sec-w-2023-0199 | MIT Kerberos: Schwachstelle ermöglicht Denial of Service | 2019-01-07T23:00:00.000+00:00 | 2023-01-25T23:00:00.000+00:00 |
| wid-sec-w-2023-0858 | Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen | 2019-01-07T23:00:00.000+00:00 | 2023-04-10T22:00:00.000+00:00 |
| wid-sec-w-2022-2030 | BusyBox: Schwachstelle ermöglicht Offenlegung von Informationen | 2019-01-09T23:00:00.000+00:00 | 2022-11-28T23:00:00.000+00:00 |
| wid-sec-w-2024-2070 | libarchive: Mehrere Schwachstellen ermöglichen Denial of Service | 2019-01-09T23:00:00.000+00:00 | 2024-10-27T23:00:00.000+00:00 |
| wid-sec-w-2023-1850 | poppler: Mehrere Schwachstellen ermöglichen Denial of Service | 2019-01-10T23:00:00.000+00:00 | 2023-07-20T22:00:00.000+00:00 |
| wid-sec-w-2024-0872 | OpenSSH: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2019-01-10T23:00:00.000+00:00 | 2024-05-07T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0047 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-02-11T19:16:04.610648Z | 2025-02-11T19:16:04.610648Z |
| ncsc-2025-0048 | Kwetsbaarheden verholpen in Microsoft Azure | 2025-02-11T19:17:03.555400Z | 2025-02-11T19:17:03.555400Z |
| ncsc-2025-0049 | Kwetsbaarheden verholpen in Microsoft Visual Studio | 2025-02-11T19:17:58.768578Z | 2025-02-11T19:17:58.768578Z |
| ncsc-2025-0050 | Kwetsbaarheden verholpen in Microsoft Office | 2025-02-11T19:19:24.863294Z | 2025-02-11T19:19:24.863294Z |
| ncsc-2025-0051 | Kwetsbaarheden verholpen in Siemens producten | 2025-02-11T19:40:34.993264Z | 2025-02-11T19:40:34.993264Z |
| ncsc-2025-0052 | Kwetsbaarheden verholpen in Ivanti Connect Secure en Ivanti Policy Secure | 2025-02-12T09:35:30.260596Z | 2025-02-12T09:35:30.260596Z |
| ncsc-2025-0053 | Kwetsbaarheden verholpen in Fortinet FortiSwitch, FortiManager, FortiAnalyzer, FortiOS en FortiProxy | 2025-02-12T12:39:02.366846Z | 2025-02-18T08:09:48.619964Z |
| ncsc-2025-0054 | Kwetsbaarheden verholpen in Adobe Commerce en Magento | 2025-02-13T06:46:08.560650Z | 2025-02-13T06:46:08.560650Z |
| ncsc-2025-0055 | Kwetsbaarheid verholpen in CrowdStrike Falcon sensor | 2025-02-13T08:22:07.880125Z | 2025-02-13T08:22:07.880125Z |
| ncsc-2025-0056 | Kwetsbaarheden verholpen in Schneider Electric ASCO | 2025-02-13T09:07:55.191514Z | 2025-02-13T09:07:55.191514Z |
| ncsc-2025-0057 | Kwetsbaarheden verholpen in GitLab CE/EE | 2025-02-13T09:09:26.087113Z | 2025-02-13T09:09:26.087113Z |
| ncsc-2025-0058 | Kwetsbaarheden verholpen in Palo Alto Networks PAN-OS | 2025-02-13T09:28:54.459828Z | 2025-02-21T08:08:58.513404Z |
| ncsc-2025-0059 | Kwetsbaarheid verholpen in Fortinet FortiOS | 2025-02-13T09:29:35.625977Z | 2025-02-13T09:29:35.625977Z |
| ncsc-2025-0060 | Kwetsbaarheid verholpen in Veeam | 2025-02-13T09:48:03.729080Z | 2025-02-13T09:48:03.729080Z |
| ncsc-2025-0061 | Kwetsbaarheden verholpen in Siemens producten | 2025-02-14T08:46:28.240775Z | 2025-02-14T08:46:28.240775Z |
| ncsc-2025-0062 | Kwetsbaarheid verholpen in Juniper Session Smart Router | 2025-02-18T14:25:56.916762Z | 2025-02-18T14:25:56.916762Z |
| ncsc-2025-0063 | Kwetsbaarheid verholpen in PostgreSQL | 2025-02-19T09:11:55.511966Z | 2025-02-19T09:11:55.511966Z |
| ncsc-2025-0064 | Kwetsbaarheden verholpen in IBM Cognos Controller | 2025-02-21T08:40:26.849797Z | 2025-02-21T08:40:26.849797Z |
| ncsc-2025-0065 | Kwetsbaarheden verholpen in Nagios XI | 2025-02-21T12:32:41.120020Z | 2025-02-21T12:32:41.120020Z |
| ncsc-2025-0066 | Kwetsbaarheid verholpen in XWiki | 2025-02-21T12:33:24.503983Z | 2025-02-21T12:33:24.503983Z |
| ncsc-2025-0067 | Kwetsbaarheid verholpen in Exim | 2025-02-21T12:54:32.376733Z | 2025-02-21T12:54:32.376733Z |
| ncsc-2025-0068 | Kwetsbaarheden verholpen in Mattermost | 2025-02-24T12:04:19.392654Z | 2025-02-24T12:04:19.392654Z |
| ncsc-2025-0069 | Kwetsbaarheid verholpen in MITRE Caldera | 2025-02-25T07:42:48.535179Z | 2025-02-25T07:42:48.535179Z |
| ncsc-2025-0070 | Kwetsbaarheden verholpen in GitLab | 2025-03-03T14:10:30.120360Z | 2025-03-03T14:10:30.120360Z |
| ncsc-2025-0071 | Kwetsbaarheid verholpen in Zohocorp ManageEngine ADSelfService Plus | 2025-03-03T14:11:46.709999Z | 2025-03-03T14:11:46.709999Z |
| ncsc-2025-0072 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2025-03-04T10:15:32.203439Z | 2025-03-04T10:15:32.203439Z |
| ncsc-2025-0073 | Kwetsbaarheden verholpen in VMware producten | 2025-03-04T14:11:56.959153Z | 2025-03-04T14:11:56.959153Z |
| ncsc-2025-0074 | Kwetsbaarheden verholpen in IBM Storage producten | 2025-03-04T14:14:48.398751Z | 2025-03-04T14:14:48.398751Z |
| ncsc-2025-0075 | Kwetsbaarheid verholpen in Elastic Kibana | 2025-03-07T13:51:51.509917Z | 2025-03-07T13:51:51.509917Z |
| ncsc-2025-0076 | Kwetsbaarheden verholpen in SAP software | 2025-03-11T12:20:06.258896Z | 2025-03-11T12:20:06.258896Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-332410 | SSA-332410: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 1 | 2023-01-10T00:00:00Z | 2023-01-10T00:00:00Z |
| ssa-476715 | SSA-476715: Two Vulnerabilities in Automation License Manager | 2023-01-10T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-482757 | SSA-482757: Missing Immutable Root of Trust in S7-1500 CPU devices | 2023-01-10T00:00:00Z | 2025-01-14T00:00:00Z |
| ssa-496604 | SSA-496604: Cross-Site Scripting Vulnerability in Mendix SAML Module | 2023-01-10T00:00:00Z | 2023-01-10T00:00:00Z |
| ssa-936212 | SSA-936212: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Solid Edge | 2023-01-10T00:00:00Z | 2023-01-10T00:00:00Z |
| ssa-997779 | SSA-997779: File Parsing Vulnerability in Solid Edge before V2023 MP1 | 2023-01-10T00:00:00Z | 2023-01-10T00:00:00Z |
| ssa-252808 | SSA-252808: XPath Constraint Vulnerability in Mendix Runtime | 2023-02-14T00:00:00Z | 2023-02-14T00:00:00Z |
| ssa-450613 | SSA-450613: Insyde BIOS Vulnerabilities in RUGGEDCOM APE1808 Product Family | 2023-02-14T00:00:00Z | 2023-09-12T00:00:00Z |
| ssa-491245 | SSA-491245: Multiple File Parsing Vulnerabilities in Solid Edge | 2023-02-14T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-565356 | SSA-565356: X_T File Parsing Vulnerabilities in Simcenter Femap before V2023.1 | 2023-02-14T00:00:00Z | 2023-02-14T00:00:00Z |
| ssa-617755 | SSA-617755: Denial of Service Vulnerability in the SNMP Agent of SCALANCE X-200IRT Products | 2023-02-14T00:00:00Z | 2023-02-14T00:00:00Z |
| ssa-640968 | SSA-640968: Untrusted Search Path Vulnerability in TIA Project-Server formerly known as TIA Multiuser Server | 2023-02-14T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-658793 | SSA-658793: Command Injection Vulnerability in SiPass integrated AC5102 / ACC-G2 and ACC-AP | 2023-02-14T00:00:00Z | 2023-02-14T00:00:00Z |
| ssa-686975 | SSA-686975: IPU 2022.3 Vulnerabilities in Siemens Industrial Products using Intel CPUs | 2023-02-14T00:00:00Z | 2025-04-08T00:00:00Z |
| ssa-744259 | SSA-744259: Golang Vulnerabilities in Brownfield Connectivity - Gateway before V1.10.1 | 2023-02-14T00:00:00Z | 2023-02-14T00:00:00Z |
| ssa-836777 | SSA-836777: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Parasolid | 2023-02-14T00:00:00Z | 2023-02-14T00:00:00Z |
| ssa-847261 | SSA-847261: Multiple SPP File Parsing Vulnerabilities in Tecnomatix Plant Simulation | 2023-02-14T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-953464 | SSA-953464: Multiple Vulnerabilites in Siemens Brownfield Connectivity - Client before V2.15 | 2023-02-14T00:00:00Z | 2023-02-14T00:00:00Z |
| ssa-203374 | SSA-203374: Multiple OpenSSL Vulnerabilities in SCALANCE W1750D Devices | 2023-03-14T00:00:00Z | 2024-04-09T00:00:00Z |
| ssa-260625 | SSA-260625: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.2 | 2023-03-14T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-320629 | SSA-320629: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.3 | 2023-03-14T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-419740 | SSA-419740: Multiple Third-Party Component Vulnerabilities in RUGGEDCOM and SCALANCE Products before V7.2 | 2023-03-14T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-565386 | SSA-565386: Third-Party Component Vulnerabilities in SCALANCE W-700 IEEE 802.11ax devices before V2.0 | 2023-03-14T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-726834 | SSA-726834: Denial of Service Vulnerability in the RADIUS Client of SIPROTEC 5 Devices | 2023-03-14T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-851884 | SSA-851884: Authentication Bypass Vulnerability in Mendix SAML Module | 2023-03-14T00:00:00Z | 2023-08-08T00:00:00Z |
| ssa-116924 | SSA-116924: Path Traversal Vulnerability in TIA Portal | 2023-04-11T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-322980 | SSA-322980: Denial of Service Vulnerability in SIPROTEC 5 Devices | 2023-04-11T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-472454 | SSA-472454: Command Injection Vulnerability in CPCI85 Firmware of SICAM A8000 Devices | 2023-04-11T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-479249 | SSA-479249: Weak Encryption Vulnerability in SCALANCE X-200IRT Devices | 2023-04-11T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-511182 | SSA-511182: Use of Static TLS Certificate Known Hard Coded Private Keys in Adaptec Maxview Application | 2023-04-11T00:00:00Z | 2023-04-11T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2003:085 | Red Hat Security Advisory: tcpdump security update | 2003-03-11T08:53:00+00:00 | 2025-11-21T17:25:44+00:00 |
| rhsa-2003_085 | Red Hat Security Advisory: tcpdump security update | 2003-03-11T08:53:00+00:00 | 2024-11-21T22:37:46+00:00 |
| rhsa-2003:098 | Red Hat Security Advisory: : Updated 2.4 kernel fixes vulnerability | 2003-03-17T16:11:00+00:00 | 2025-11-21T17:25:50+00:00 |
| rhsa-2003_098 | Red Hat Security Advisory: : Updated 2.4 kernel fixes vulnerability | 2003-03-17T16:11:00+00:00 | 2024-11-21T22:42:21+00:00 |
| rhsa-2003:095 | Red Hat Security Advisory: : New samba packages fix security vulnerabilities | 2003-03-18T00:56:00+00:00 | 2025-11-21T17:25:49+00:00 |
| rhsa-2003_095 | Red Hat Security Advisory: : New samba packages fix security vulnerabilities | 2003-03-18T00:56:00+00:00 | 2024-11-21T22:42:43+00:00 |
| rhsa-2003:104 | Red Hat Security Advisory: apache, openssl, php security update for Stronghold | 2003-03-18T11:01:00+00:00 | 2025-11-21T17:25:52+00:00 |
| rhsa-2003_104 | Red Hat Security Advisory: apache, openssl, php security update for Stronghold | 2003-03-18T11:01:00+00:00 | 2024-11-21T22:41:57+00:00 |
| rhsa-2003:089 | Red Hat Security Advisory: : Updated glibc packages fix vulnerabilities in RPC XDR decoder | 2003-03-19T22:09:00+00:00 | 2025-11-21T17:25:47+00:00 |
| rhsa-2003_089 | Red Hat Security Advisory: : Updated glibc packages fix vulnerabilities in RPC XDR decoder | 2003-03-19T22:09:00+00:00 | 2024-11-21T22:38:39+00:00 |
| rhsa-2003:088 | Red Hat Security Advisory: : New kernel 2.2 packages fix vulnerabilities | 2003-03-20T08:56:00+00:00 | 2025-11-21T17:25:45+00:00 |
| rhsa-2003_088 | Red Hat Security Advisory: : New kernel 2.2 packages fix vulnerabilities | 2003-03-20T08:56:00+00:00 | 2024-11-21T22:42:17+00:00 |
| rhsa-2003:096 | Red Hat Security Advisory: samba security update | 2003-03-20T21:19:00+00:00 | 2025-11-21T17:25:49+00:00 |
| rhsa-2003_096 | Red Hat Security Advisory: samba security update | 2003-03-20T21:19:00+00:00 | 2024-11-21T22:42:47+00:00 |
| rhsa-2003:103 | Red Hat Security Advisory: kernel security update | 2003-03-21T08:53:00+00:00 | 2025-11-21T17:25:50+00:00 |
| rhsa-2003_103 | Red Hat Security Advisory: kernel security update | 2003-03-21T08:53:00+00:00 | 2024-11-21T22:42:25+00:00 |
| rhsa-2003:051 | Red Hat Security Advisory: : Updated kerberos packages fix various vulnerabilities | 2003-03-26T21:49:00+00:00 | 2025-11-21T17:25:34+00:00 |
| rhsa-2003_051 | Red Hat Security Advisory: : Updated kerberos packages fix various vulnerabilities | 2003-03-26T21:49:00+00:00 | 2024-11-21T22:38:30+00:00 |
| rhsa-2003:052 | Red Hat Security Advisory: krb5 security update | 2003-03-27T19:43:00+00:00 | 2025-11-21T17:25:35+00:00 |
| rhsa-2003_052 | Red Hat Security Advisory: krb5 security update | 2003-03-27T19:43:00+00:00 | 2024-11-21T22:38:34+00:00 |
| rhsa-2003:116 | Red Hat Security Advisory: apache, openssl security update for Stronghold | 2003-03-28T13:43:00+00:00 | 2025-11-21T17:25:54+00:00 |
| rhsa-2003_116 | Red Hat Security Advisory: apache, openssl security update for Stronghold | 2003-03-28T13:43:00+00:00 | 2024-11-21T22:43:00+00:00 |
| rhsa-2003:102 | Red Hat Security Advisory: openssl security update | 2003-03-31T12:00:00+00:00 | 2025-11-21T17:25:50+00:00 |
| rhsa-2003_102 | Red Hat Security Advisory: openssl security update | 2003-03-31T12:00:00+00:00 | 2024-11-21T22:42:57+00:00 |
| rhsa-2003:121 | Red Hat Security Advisory: sendmail security update | 2003-03-31T15:23:00+00:00 | 2025-11-21T17:25:55+00:00 |
| rhsa-2003_121 | Red Hat Security Advisory: sendmail security update | 2003-03-31T15:23:00+00:00 | 2024-11-21T22:43:58+00:00 |
| rhsa-2003:061 | Red Hat Security Advisory: netpbm security update | 2003-03-31T15:31:00+00:00 | 2025-11-21T17:25:37+00:00 |
| rhsa-2003_061 | Red Hat Security Advisory: netpbm security update | 2003-03-31T15:31:00+00:00 | 2024-11-21T22:39:23+00:00 |
| rhsa-2003:120 | Red Hat Security Advisory: : Updated sendmail packages fix vulnerability | 2003-03-31T17:14:00+00:00 | 2025-11-21T17:25:55+00:00 |
| rhsa-2003_120 | Red Hat Security Advisory: : Updated sendmail packages fix vulnerability | 2003-03-31T17:14:00+00:00 | 2024-11-21T22:43:53+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-15-167-01 | Schneider Electric StruxureWare Building Expert Plaintext Credentials Vulnerability | 2015-03-19T06:00:00.000000Z | 2025-06-06T21:42:37.652958Z |
| icsa-15-169-01b | Wind River VXWorks TCP Predictability Vulnerability in ICS Devices (Update B) | 2015-03-21T06:00:00.000000Z | 2025-06-18T19:03:57.981923Z |
| icsa-15-169-02 | Schneider Electric Wonderware System Platform Vulnerabilities | 2015-03-21T06:00:00.000000Z | 2025-06-18T19:04:04.192744Z |
| icsa-15-174-01 | Hospira Symbiq Infusion System Vulnerability | 2015-03-26T06:00:00.000000Z | 2025-06-06T21:42:57.240178Z |
| icsa-15-176-01 | Siemens Climatix BACnet/IP Communication Module Cross-site Scripting Vulnerability | 2015-03-28T06:00:00.000000Z | 2025-06-06T21:43:03.687724Z |
| icsa-15-176-02 | PACTware Exceptional Conditions Vulnerability | 2015-03-28T06:00:00.000000Z | 2025-06-06T21:43:10.139031Z |
| icsa-15-181-01 | Baxter SIGMA Spectrum Infusion System Vulnerabilities | 2015-04-02T06:00:00.000000Z | 2025-06-06T21:43:16.616537Z |
| icsa-15-181-02a | SMA Solar Technology AG Sunny WebBox Hard-Coded Account Vulnerability | 2015-04-02T06:00:00.000000Z | 2025-06-06T16:09:27.695836Z |
| icsa-15-195-01 | Siemens SICAM MIC Authentication Bypass Vulnerability | 2015-04-16T06:00:00.000000Z | 2025-06-06T21:43:23.165608Z |
| icsa-15-202-01 | Siemens SIPROTEC Denial-of-Service Vulnerability | 2015-04-23T06:00:00.000000Z | 2025-06-25T22:54:08.041405Z |
| icsa-15-202-02 | Siemens Sm@rtClient Password Storage Vulnerability | 2015-04-23T06:00:00.000000Z | 2025-06-25T22:54:14.268360Z |
| icsa-15-202-03b | Siemens RUGGEDCOM ROS and ROX-based Devices TLS POODLE Vulnerability (Update B) | 2015-04-23T06:00:00.000000Z | 2025-06-06T21:43:42.534859Z |
| icsa-15-211-01 | Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Password Storage Vulnerability | 2015-05-02T06:00:00.000000Z | 2025-06-06T21:43:48.989760Z |
| icsa-15-223-01 | Schneider Electric IMT25 DTM Vulnerability | 2015-05-14T06:00:00.000000Z | 2025-06-06T21:43:55.748554Z |
| icsa-15-232-01 | Everest Software PeakHMI Pointer Dereference Vulnerabilities | 2015-05-23T06:00:00.000000Z | 2025-06-09T16:22:44.799609Z |
| icsa-15-237-01 | Endress+Hauser HART Device DTM Vulnerability | 2015-05-28T06:00:00.000000Z | 2025-06-06T16:08:22.636411Z |
| icsa-15-237-02 | EasyIO-30P-SF Hard-Coded Credential Vulnerability | 2015-05-28T06:00:00.000000Z | 2025-06-09T16:22:51.381445Z |
| icsa-15-239-01 | Moxa SoftCMS Buffer Overflow Vulnerabilities | 2015-05-30T06:00:00.000000Z | 2025-06-06T16:10:00.281281Z |
| icsa-15-239-02 | Siemens SIMATIC S7-1200 CSRF Vulnerability | 2015-05-30T06:00:00.000000Z | 2025-06-06T16:08:35.760091Z |
| icsa-15-239-03 | Innominate mGuard VPN Vulnerability | 2015-05-30T06:00:00.000000Z | 2025-06-06T16:09:34.476889Z |
| icsa-15-244-01 | Siemens RUGGEDCOM ROS IP Forwarding Vulnerability | 2015-06-04T06:00:00.000000Z | 2025-06-06T16:10:32.525653Z |
| icsa-15-246-01 | Cogent DataHub Code Injection Vulnerability | 2015-06-06T06:00:00.000000Z | 2025-06-06T16:07:24.191912Z |
| icsa-15-246-02 | Schneider Electric Modicon PLC Vulnerabilities | 2015-06-06T06:00:00.000000Z | 2025-06-06T16:10:13.250913Z |
| icsa-15-246-03 | Moxa Industrial Managed Switch Vulnerabilities | 2015-06-06T06:00:00.000000Z | 2025-06-06T16:10:26.107916Z |
| icsa-15-251-01a | Advantech WebAccess Buffer Overflow Vulnerability | 2015-06-11T06:00:00.000000Z | 2025-06-06T16:08:29.333916Z |
| icsa-15-253-01 | Yokogawa Multiple Products Buffer Overflow Vulnerabilities | 2015-06-13T06:00:00.000000Z | 2025-06-06T16:09:40.885670Z |
| icsa-15-258-01 | Schneider Electric StruxureWare Building Expert Plaintext Credentials Vulnerability | 2015-06-18T06:00:00.000000Z | 2025-06-05T21:57:20.047982Z |
| icsa-15-258-03 | GE MDS PulseNET Vulnerabilities | 2015-06-18T06:00:00.000000Z | 2025-06-05T21:54:12.344535Z |
| icsa-15-258-04 | Advantech WebAccess Stack-Based Buffer Overflow Vulnerability | 2015-06-18T06:00:00.000000Z | 2025-06-09T16:22:57.599223Z |
| icsa-15-260-01 | Harman-Kardon Uconnect Vulnerability | 2015-06-20T06:00:00.000000Z | 2025-06-09T16:23:03.824948Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20180815-asr-ptp-dos | Cisco ASR 9000 Series Aggregation Services Routers Precision Time Protocol Denial of Service Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-15T16:00:00+00:00 |
| cisco-sa-20180815-csb-wap-dos | Cisco Small Business 100 Series and 300 Series Wireless Access Points Denial of Service Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-15T16:00:00+00:00 |
| cisco-sa-20180815-cucdm-xss | Cisco Unified Communications Domain Manager Reflected Cross-Site Scripting Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-15T16:00:00+00:00 |
| cisco-sa-20180815-dna-injection | Cisco Digital Network Architecture Center Command Injection Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-15T16:00:00+00:00 |
| cisco-sa-20180815-esa-file-bypass | Cisco Email Security Appliance EXE File Scanning Bypass Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-20T16:31:00+00:00 |
| cisco-sa-20180815-res-xss | Cisco Registered Envelope Service Stored Cross-Site Scripting Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-15T16:00:00+00:00 |
| cisco-sa-20180815-sb-wap-encrypt | Cisco Small Business 100 Series and 300 Series Wireless Access Points Encryption Algorithm Downgrade Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-15T16:00:00+00:00 |
| cisco-sa-20180815-ucmimps-dos | Cisco Unified Communications Manager IM & Presence Service Denial of Service Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-09-04T15:53:00+00:00 |
| cisco-sa-20180815-wsa-dos | Cisco Web Security Appliance Web Proxy Memory Exhaustion Denial of Service Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-15T16:00:00+00:00 |
| cisco-sa-20180815-wsa-escalation | Cisco Web Security Appliance Privilege Escalation Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-15T16:00:00+00:00 |
| cisco-sa-20180823-apache-struts | Apache Struts Remote Code Execution Vulnerability Affecting Cisco Products: August 2018 | 2018-08-23T20:00:00+00:00 | 2018-09-17T18:52:00+00:00 |
| cisco-sa-20180824-linux-ip-fragment | Linux Kernel IP Fragment Reassembly Denial of Service Vulnerability Affecting Cisco Products: August 2018 | 2018-08-24T21:30:00+00:00 | 2019-02-18T16:35:00+00:00 |
| cisco-sa-20180824-linux-tcp | Linux and FreeBSD Kernels TCP Reassembly Denial of Service Vulnerabilities Affecting Cisco Products: August 2018 | 2018-08-24T21:30:00+00:00 | 2018-11-06T18:09:00+00:00 |
| cisco-sa-20180828-dcnm-traversal | Cisco Data Center Network Manager Path Traversal Vulnerability | 2018-08-28T21:00:00+00:00 | 2018-09-14T18:59:00+00:00 |
| cisco-sa-20180905-acsxxe | Cisco Secure Access Control Server XML External Entity Injection Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-cdcnm-escalation | Cisco Data Center Network Manager Privilege Escalation to Underlying Operating System Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-cimc-injection | Cisco Integrated Management Controller Command Injection Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-cpar-dos | Cisco Prime Access Registrar Denial of Service Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-csp2100-injection | Cisco Cloud Services Platform 2100 Command Injection Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-dcnm-xss | Cisco Data Center Network Manager Cross-Site Scripting Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-esa-url-bypass | Cisco Email Security Appliance URL Filtering Bypass Vulnerability | 2018-09-05T16:00:00+00:00 | 2019-04-11T18:01:00+00:00 |
| cisco-sa-20180905-meeting-csrf | Cisco Meeting Server Cross-Site Request Forgery Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-nfvis-dos | Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-nfvis-dos1 | Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-nfvis-infodis | Cisco Enterprise NFV Infrastructure Software Information Disclosure Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-nso-infodis | Cisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-06T13:47:00+00:00 |
| cisco-sa-20180905-pca-xss | Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-pcce | Multiple Vulnerabilities in Cisco Packaged Contact Center Enterprise | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-rv-routers-disclosure | Cisco RV110W, RV130W, and RV215W Routers Management Interface Information Disclosure Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-rv-routers-injection | Cisco RV110W, RV130W, and RV215W Routers Management Interface Command Injection Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2019-9169 | In the GNU C Library (aka glibc or libc6) through 2.29 proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match. | 2019-02-02T00:00:00.000Z | 2020-08-18T00:00:00.000Z |
| msrc_cve-2019-9192 | In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion | 2019-02-02T00:00:00.000Z | 2025-10-01T23:11:03.000Z |
| msrc_cve-2019-9210 | In AdvanceCOMP 2.1 png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size which results in an attempted memcpy to write into a buffer that is too small. (There is also a heap-based buffer over-read.) | 2019-02-02T00:00:00.000Z | 2023-05-25T00:00:00.000Z |
| msrc_cve-2019-3816 | Openwsman versions up to and including 2.6.9 are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request to openwsman server. | 2019-03-02T00:00:00.000Z | 2025-05-27T00:00:00.000Z |
| msrc_cve-2019-3832 | It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash. | 2019-03-02T00:00:00.000Z | 2021-01-28T00:00:00.000Z |
| msrc_cve-2019-3833 | Openwsman versions up to and including 2.6.9 are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote unauthenticated attacker can exploit this vulnerability by sending malicious HTTP request to cause denial of service to openwsman server. | 2019-03-02T00:00:00.000Z | 2025-05-27T00:00:00.000Z |
| msrc_cve-2019-5737 | In Node.js including 6.x before 6.17.0 8.x before 8.15.1 10.x before 10.15.2 and 11.x before 11.10.1 an attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated resources alive for a long period of time. Potential attacks are mitigated by the use of a load balancer or other proxy layer. This vulnerability is an extension of CVE-2018-12121 addressed in November and impacts all active Node.js release lines including 6.x before 6.17.0 8.x before 8.15.1 10.x before 10.15.2 and 11.x before 11.10.1. | 2019-03-02T00:00:00.000Z | 2021-06-06T00:00:00.000Z |
| msrc_cve-2019-6454 | An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1 causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic). | 2019-03-02T00:00:00.000Z | 2020-08-18T00:00:00.000Z |
| msrc_cve-2019-9185 | Controller/Async/FilesystemManager.php in the filemanager in Bolt allows remote attacke | 2019-03-02T00:00:00.000Z | 2025-10-01T23:11:03.000Z |
| msrc_cve-2019-9741 | An issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter as demonstrated by the second argument to http.NewRequest with \r\n followed by an HTTP header or a Redis command. | 2019-03-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2016-1585 | AppArmor mount rules grant excessive permissions | 2019-04-02T00:00:00.000Z | 2025-05-02T00:00:00.000Z |
| msrc_cve-2018-20505 | SQLite 3.25.2 when queries are run on a table with a malformed PRIMARY KEY allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). | 2019-04-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-20506 | SQLite before 3.25.3 when the FTS3 extension is enabled encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346. | 2019-04-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2019-10906 | In Pallets Jinja before 2.10.1 str.format_map allows a sandbox escape. | 2019-04-02T00:00:00.000Z | 2024-09-23T00:00:00.000Z |
| msrc_cve-2019-11236 | In the urllib3 library through 1.24.1 for Python CRLF injection is possible if the attacker controls the request parameter. | 2019-04-02T00:00:00.000Z | 2020-12-21T00:00:00.000Z |
| msrc_cve-2019-11324 | The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument. | 2019-04-02T00:00:00.000Z | 2025-09-03T23:00:29.000Z |
| msrc_cve-2019-11358 | jQuery before 3.4.0 as used in Drupal Backdrop CMS and other products mishandles jQuery.extend(true {} ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property it could extend the native Object.prototype. | 2019-04-02T00:00:00.000Z | 2025-02-11T00:00:00.000Z |
| msrc_cve-2019-2708 | Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138 prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Data Store. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L). | 2019-04-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2019-3842 | In systemd before v242-rc4 it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker in some particular configurations to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any". | 2019-04-02T00:00:00.000Z | 2020-08-18T00:00:00.000Z |
| msrc_cve-2019-3843 | It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future when the UID/GID will be recycled. | 2019-04-02T00:00:00.000Z | 2020-08-18T00:00:00.000Z |
| msrc_cve-2019-3844 | It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future when the GID will be recycled. | 2019-04-02T00:00:00.000Z | 2020-08-18T00:00:00.000Z |
| msrc_cve-2019-3870 | A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC files are created in a private subdirectory of the install location. This directory is typically mode 0700 that is owner (root) only access. However in some upgraded installations it will have other permissions such as 0755 because this was the default before Samba 4.8. Within this directory files are created with mode 0666 which is world-writable including a sample krb5.conf and the list of DNS names and servicePrincipalName values to update. | 2019-04-02T00:00:00.000Z | 2024-10-15T00:00:00.000Z |
| msrc_cve-2019-3886 | An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block. | 2019-04-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2019-3887 | A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that L1 guest could access L0's APIC register values via L2 guest when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash the host kernel resulting in DoS issue. Kernel versions from 4.16 and newer are vulnerable to this issue. | 2019-04-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2019-11834 | cJSON before 1.7.11 allows out-of-bounds access related to \x00 in a string literal. | 2019-05-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2019-11835 | cJSON before 1.7.11 allows out-of-bounds access related to multiline comments. | 2019-05-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2019-12439 | bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations (related to XDG_RUNTIME_DIR) a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code. | 2019-05-02T00:00:00.000Z | 2020-08-18T00:00:00.000Z |
| msrc_cve-2019-12450 | file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead default permissions are used. | 2019-05-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2019-8457 | SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables. | 2019-05-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-20843 | In libexpat in Expat before 2.2.7 XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks). | 2019-06-02T00:00:00.000Z | 2020-08-18T00:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202010-1651 | NP301 is a serial port networking server that enables serial devices to have networking c… | 2022-05-04T08:52:27.803000Z |
| var-202009-1681 | Rockchip Microelectronics has a R&D team specializing in system-level chip design and alg… | 2022-05-04T08:52:33.170000Z |
| var-202009-1702 | YzmCMS is a lightweight open source content management system based on PHP+Mysql architec… | 2022-05-04T08:52:33.158000Z |
| var-202009-1723 | GX Work2 is a PLC programming software developed by Mitsubishi Electric Automation Co., L… | 2022-05-04T08:52:33.146000Z |
| var-202008-1266 | ZLAN5102 serial server is a protocol converter between RS232/485 and TCP/IP developed by … | 2022-05-04T08:52:35.840000Z |
| var-202008-1287 | China Pulian Technology Co., Ltd. is the world's leading supplier of network communicatio… | 2022-05-04T08:52:35.829000Z |
| var-202007-1476 | DH-NHB5000 is a new generation full touch network keyboard independently designed and dev… | 2022-05-04T08:52:37.413000Z |
| var-202007-1518 | China Mobile Railcom's main business is communication technology, information system deve… | 2022-05-04T08:52:37.390000Z |
| var-202006-1814 | A vulnerability in the image verification feature of Cisco IOS Software for Cisco 809 and… | 2022-05-04T08:52:42.426000Z |
| var-202006-1898 | The EPX3000 series is a high-performance multimedia communication switching equipment, wh… | 2022-05-04T08:52:42.291000Z |
| var-202006-1961 | WideField3 is a PLC programming software developed by Yokogawa Electric Group. WideFi… | 2022-05-04T08:52:42.263000Z |
| var-202005-1067 | Allen-Bradley Micro850 is a programmable logic controller (PLC) from Rockwell Automation … | 2022-05-04T08:52:45.276000Z |
| var-202005-1088 | KUNBUS-GW Modbus TCP is a programmable logic controller (PLC) that provides an integrated… | 2022-05-04T08:52:45.264000Z |
| var-202005-1235 | GX Works2 is the PLC programming software of Mitsubishi Electric of Japan. GX Works2 … | 2022-05-04T08:52:45.184000Z |
| var-202004-2275 | Tenda AC6 is a 1200M 11ac dual-band wireless router specifically designed for home users … | 2022-05-04T08:52:50.277000Z |
| var-202003-1820 | ZTE is the world's only full-standard core network system supplier, capable of providing … | 2022-05-04T08:52:55.065000Z |
| var-202002-1690 | Pulian Technology Co., Ltd. (hereinafter referred to as "TP-LINK") is a supplier of netwo… | 2022-05-04T08:53:01.028000Z |
| var-202001-1974 | H3C S5000PV3-EI series Ethernet switches are H3C based on the industry-leading comware V7… | 2022-05-04T08:53:04.728000Z |
| var-202001-1995 | ZXR10 1800-2S is a router product of ZTE Corporation of China. ZTE ZXR10 1800-2S has … | 2022-05-04T08:53:04.717000Z |
| var-201910-0578 | A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modico… | 2022-05-04T08:53:20.771000Z |
| var-201908-2202 | Dlink DIR-816 is a wireless router. Dlink DIR-816 d_wl ***. Asp page has a buffer overfl… | 2022-05-04T08:53:27.114000Z |
| var-201907-1758 | Tpshop is a multi-business model mall system developed by Shenzhen Sobao Network Co., Ltd… | 2022-05-04T08:53:30.129000Z |
| var-201905-0986 | If a process running within Aruba Instant crashes, it may leave behind a "core dump", whi… | 2022-05-04T08:54:09.632000Z |
| var-201905-0988 | A reflected cross-site scripting (XSS) vulnerability is present in an unauthenticated Aru… | 2022-05-04T08:54:09.739000Z |
| var-201905-0987 | A command injection vulnerability is present that permits an unauthenticated user with ac… | 2022-05-04T08:54:12.738000Z |
| var-201905-1039 | A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, M… | 2022-05-04T08:54:13.235000Z |
| var-201903-1647 | Kodak Video Cloud MCU A weak password exists on the device, allowing initial password login | 2022-05-04T08:54:22.633000Z |
| var-201902-0929 | A DoS Vulnerability was found in JP1/Base.An attacker may conduct denial-of-service attacks. | 2022-05-04T08:54:25.636000Z |
| var-201901-1697 | D-LINK Central WifiManager CWM-100 is D-LINK centralized wireless management software. D… | 2022-05-04T08:54:30.535000Z |
| var-201812-0243 | XXE in GE Proficy Cimplicity GDS versions 9.0 R2, 9.5, 10.0. GE Proficy Cimplicity GDS Is… | 2022-05-04T08:54:39.630000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2008-000028 | WEB MART from KENT WEB vulnerable to cross-site scripting | 2008-06-06T12:01+09:00 | 2008-06-06T12:01+09:00 |
| jvndb-2006-000639 | Pixelpost cross-site scripting vulnerability | 2008-06-10T13:57+09:00 | 2008-06-10T13:57+09:00 |
| jvndb-2008-000029 | Sleipnir and Grani vulnerable to arbitrary script execution when Bookmark search results are restored from history | 2008-06-10T13:59+09:00 | 2008-06-10T13:59+09:00 |
| jvndb-2008-001043 | X.Org Foundation X server buffer overflow vulnerability | 2008-06-13T17:11+09:00 | 2008-11-21T12:19+09:00 |
| jvndb-2008-000030 | BlognPlus SQL injection vulnerability | 2008-06-20T13:45+09:00 | 2008-06-20T13:45+09:00 |
| jvndb-2008-000031 | CGIWrap error page cross-site scripting vulnerability | 2008-06-20T13:46+09:00 | 2008-06-20T13:46+09:00 |
| jvndb-2008-000032 | nProtect : Netizen denial of service (DoS) vulnerability | 2008-07-07T10:24+09:00 | 2008-07-07T10:24+09:00 |
| jvndb-2008-001417 | Vulnerability in Sample Code in Hitachi uCosminexus Portal Framework Manuals | 2008-07-07T10:38+09:00 | 2008-07-07T10:38+09:00 |
| jvndb-2008-000033 | Multiple Cybozu products vulnerable to cross-site request forgery | 2008-07-08T12:14+09:00 | 2008-07-08T12:14+09:00 |
| jvndb-2008-000034 | Cybozu Garoon session fixation vulnerability | 2008-07-08T12:14+09:00 | 2008-07-08T12:14+09:00 |
| jvndb-2008-000035 | Cybozu Garoon vulnerable to arbitrary script execution | 2008-07-08T12:14+09:00 | 2008-07-08T12:14+09:00 |
| jvndb-2008-000036 | FreeStyleWiki cross-site scripting vulnerability | 2008-07-08T12:14+09:00 | 2008-07-08T12:14+09:00 |
| jvndb-2008-000038 | Redmine vulnerable to cross-site scripting | 2008-07-08T12:15+09:00 | 2008-07-08T12:15+09:00 |
| jvndb-2008-000039 | Safari installed in iPod touch and iPhone vulnerable in handling server certificates | 2008-07-16T12:27+09:00 | 2008-07-16T12:27+09:00 |
| jvndb-2008-000040 | Directory traversal vulnerability in WebLogic Server and WebLogic Express plug-ins | 2008-07-24T14:22+09:00 | 2008-07-24T14:22+09:00 |
| jvndb-2008-000041 | WebProxy from LunarNight Laboratory vulnerable to cross-site scripting | 2008-07-24T14:23+09:00 | 2008-07-24T14:23+09:00 |
| jvndb-2008-000042 | Multiple Century Systems routers vulnerable to cross-site request forgery | 2008-07-24T14:23+09:00 | 2008-07-24T14:23+09:00 |
| jvndb-2008-000043 | K's CGI Access Log Kaiseki (jcode.pl) vulnerable to cross-site scripting | 2008-07-29T14:56+09:00 | 2008-07-29T14:56+09:00 |
| jvndb-2008-000044 | K's CGI Access Log Kaiseki (Jcode.pm) vulnerable to cross-site scripting | 2008-07-29T14:56+09:00 | 2008-07-29T14:56+09:00 |
| jvndb-2008-000045 | Geeklog Forum Plugin vulnerable to cross-site scripting | 2008-07-29T14:57+09:00 | 2008-07-29T14:57+09:00 |
| jvndb-2008-001513 | Cross-Site Scripting Vulnerability in Hitachi Web Server Status Information Display Function | 2008-07-30T13:45+09:00 | 2014-05-21T18:19+09:00 |
| jvndb-2008-001514 | Cross-Site Scripting Vulnerability in Hitachi Collaboration - Online Community Management | 2008-07-30T13:46+09:00 | 2008-07-30T13:46+09:00 |
| jvndb-2008-000037 | Multiple Panasonic Communications Co., Ltd. network cameras vulnerable to cross-site scripting | 2008-08-04T14:34+09:00 | 2008-08-04T14:34+09:00 |
| jvndb-2008-000050 | Virus Security and Virus Security ZERO denial of service (DoS) vulnerability | 2008-08-14T18:15+09:00 | 2008-08-14T18:15+09:00 |
| jvndb-2008-000046 | La!cooda WIZ and LacoodaST vulnerable to cross-site request forgery | 2008-09-02T16:58+09:00 | 2008-09-02T16:58+09:00 |
| jvndb-2008-000047 | LacoodaST from SpaceTag, Inc. session fixation vulnerability | 2008-09-02T17:01+09:00 | 2008-09-02T17:01+09:00 |
| jvndb-2008-000048 | La!cooda WIZ and LacoodaST vulnerable to cross-site scripting | 2008-09-02T17:02+09:00 | 2008-09-02T17:02+09:00 |
| jvndb-2008-000049 | Vulnerability in La!cooda WIZ and LacoodaST allowing an arbitrary PHP script execution | 2008-09-02T17:03+09:00 | 2008-09-02T17:03+09:00 |
| jvndb-2008-000053 | mysql-lists from AquaGardenSoft Co.,Ltd. vulnerable to cross-site scripting | 2008-09-02T17:05+09:00 | 2008-09-02T17:05+09:00 |
| jvndb-2008-000054 | Blogn vulnerable to cross-site request forgery | 2008-09-02T17:22+09:00 | 2008-09-02T17:22+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:20815-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_6 | 2025-10-07T15:38:32Z | 2025-10-07T15:38:32Z |
| suse-su-2025:20816-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 | 2025-10-07T15:38:32Z | 2025-10-07T15:38:32Z |
| suse-su-2025:20817-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_8 | 2025-10-07T15:38:32Z | 2025-10-07T15:38:32Z |
| suse-su-2025:20818-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_9 | 2025-10-07T15:38:32Z | 2025-10-07T15:38:32Z |
| suse-su-2025:20826-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-10-07T15:38:32Z | 2025-10-07T15:38:32Z |
| suse-su-2025:20827-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-10-07T15:38:32Z | 2025-10-07T15:38:32Z |
| suse-su-2025:20828-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_6 | 2025-10-07T15:38:32Z | 2025-10-07T15:38:32Z |
| suse-su-2025:20829-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 | 2025-10-07T15:38:32Z | 2025-10-07T15:38:32Z |
| suse-su-2025:20830-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_8 | 2025-10-07T15:38:32Z | 2025-10-07T15:38:32Z |
| suse-su-2025:20831-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_9 | 2025-10-07T15:38:32Z | 2025-10-07T15:38:32Z |
| suse-su-2025:20819-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-10-07T15:45:16Z | 2025-10-07T15:45:16Z |
| suse-su-2025:20840-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-10-07T15:45:16Z | 2025-10-07T15:45:16Z |
| suse-su-2025:20820-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_10 | 2025-10-07T15:45:17Z | 2025-10-07T15:45:17Z |
| suse-su-2025:20841-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_3 | 2025-10-07T15:45:17Z | 2025-10-07T15:45:17Z |
| suse-su-2025:20842-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_10 | 2025-10-07T15:45:17Z | 2025-10-07T15:45:17Z |
| suse-su-2025:03479-1 | Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP7) | 2025-10-07T16:36:03Z | 2025-10-07T16:36:03Z |
| suse-su-2025:03480-1 | Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP7) | 2025-10-07T17:05:18Z | 2025-10-07T17:05:18Z |
| suse-su-2025:03482-1 | Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5) | 2025-10-07T21:33:48Z | 2025-10-07T21:33:48Z |
| suse-su-2025:03483-1 | Security update for the Linux Kernel (Live Patch 67 for SLE 12 SP5) | 2025-10-07T23:58:50Z | 2025-10-07T23:58:50Z |
| suse-su-2025:03485-1 | Security update for the Linux Kernel (Live Patch 70 for SLE 12 SP5) | 2025-10-08T00:36:00Z | 2025-10-08T00:36:00Z |
| suse-su-2025:03490-1 | Security update for cairo | 2025-10-08T07:36:44Z | 2025-10-08T07:36:44Z |
| suse-su-2025:03491-1 | Security update for libxslt | 2025-10-08T07:37:40Z | 2025-10-08T07:37:40Z |
| suse-su-2025:03494-1 | Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6) | 2025-10-08T12:58:55Z | 2025-10-08T12:58:55Z |
| suse-su-2025:03495-1 | Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP6) | 2025-10-08T12:58:58Z | 2025-10-08T12:58:58Z |
| suse-su-2025:03496-1 | Security update for the Linux Kernel (Live Patch 65 for SLE 12 SP5) | 2025-10-08T13:17:47Z | 2025-10-08T13:17:47Z |
| suse-su-2025:03497-1 | Security update for the Linux Kernel (Live Patch 69 for SLE 12 SP5) | 2025-10-08T14:35:21Z | 2025-10-08T14:35:21Z |
| suse-su-2025:03498-1 | Security update for the Linux Kernel (Live Patch 68 for SLE 12 SP5) | 2025-10-08T15:35:37Z | 2025-10-08T15:35:37Z |
| suse-su-2025:03499-1 | Security update for valkey | 2025-10-08T18:35:18Z | 2025-10-08T18:35:18Z |
| suse-su-2025:03500-1 | Security update for redis7 | 2025-10-08T18:35:29Z | 2025-10-08T18:35:29Z |
| suse-su-2025:03501-1 | Security update for redis7 | 2025-10-08T21:04:45Z | 2025-10-08T21:04:45Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15753-1 | ansible-12-12.2.0-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:15754-1 | ansible-core-2.19-2.19.4-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:15755-1 | blender-4.5-4.5.4-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:15756-1 | blender-5.0-5.0.0-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:15757-1 | curl-8.17.0-1.1 on GA media | 2025-11-21T00:00:00Z | 2025-11-21T00:00:00Z |
| opensuse-su-2025:15758-1 | fontforge-20251009-2.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15759-1 | libIex-3_4-33-3.4.3-2.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15760-1 | python311-3.11.14-2.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15761-1 | rclone-1.72.0-1.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15762-1 | librnp0-0.18.1-1.1 on GA media | 2025-11-24T00:00:00Z | 2025-11-24T00:00:00Z |
| opensuse-su-2025:15763-1 | cloudflared-2025.11.1-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15764-1 | etcd-for-k8s1.32-3.5.24-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15765-1 | gnutls-3.8.11-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15766-1 | libsoup-3_0-0-3.6.5-9.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15767-1 | openbao-2.4.4-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15768-1 | python310-3.10.19-2.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025:15769-1 | libwireshark19-4.6.1-1.1 on GA media | 2025-11-25T00:00:00Z | 2025-11-25T00:00:00Z |
| opensuse-su-2025-20081-1 | Security update for the Linux Kernel | 2025-11-25T07:35:00Z | 2025-11-25T07:35:00Z |
| opensuse-su-2025-20083-1 | Security update for lasso | 2025-11-25T13:27:21Z | 2025-11-25T13:27:21Z |
| opensuse-su-2025:15770-1 | bash-git-prompt-2.7.1-4.1 on GA media | 2025-11-26T00:00:00Z | 2025-11-26T00:00:00Z |
| opensuse-su-2025:15771-1 | git-bug-0.10.1-3.1 on GA media | 2025-11-26T00:00:00Z | 2025-11-26T00:00:00Z |
| opensuse-su-2025:15772-1 | kubevirt-container-disk-1.6.3-1.1 on GA media | 2025-11-26T00:00:00Z | 2025-11-26T00:00:00Z |
| opensuse-su-2025-20089-1 | Security update for mysql-connector-java | 2025-11-26T08:12:25Z | 2025-11-26T08:12:25Z |
| opensuse-su-2025-20097-1 | Security update for helmfile | 2025-11-26T14:11:10Z | 2025-11-26T14:11:10Z |
| opensuse-su-2025-20090-1 | Security update for curl | 2025-11-26T14:30:14Z | 2025-11-26T14:30:14Z |
| opensuse-su-2025-20091-1 | Security update for the Linux Kernel | 2025-11-26T17:04:24Z | 2025-11-26T17:04:24Z |
| opensuse-su-2025:15773-1 | cheat-4.4.2-3.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15774-1 | netbird-0.60.3-1.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15775-1 | opa-1.11.0-1.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15776-1 | python311-pypdf-6.4.0-1.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2015-00238 | WordPress插件Shopping Cart 'banneruploaderscript.php'任意文件上传漏洞 | 2015-01-12 | 2015-01-13 |
| cnvd-2015-00239 | Cisco WebEx Meetings Server存在未明漏洞 | 2015-01-12 | 2015-01-13 |
| cnvd-2015-00251 | BEdita CMS 'index.php'存在多个HTML注入漏洞 | 2015-01-12 | 2015-01-13 |
| cnvd-2015-00252 | PHP 'regcomp.c'空指针拒绝服务漏洞 | 2015-01-12 | 2015-01-13 |
| cnvd-2015-00253 | OpenStack Neutron本地拒绝服务漏洞 | 2015-01-12 | 2015-01-13 |
| cnvd-2015-00254 | e107 '/e107_admin/filemanager.php'跨站脚本漏洞 | 2015-01-12 | 2015-01-13 |
| cnvd-2015-00255 | Drupal Batch Jobs模块存在多个跨站请求伪造漏洞 | 2015-01-12 | 2015-01-13 |
| cnvd-2015-00256 | Drupal Todo Filter模块存在多个跨站请求伪造漏洞 | 2015-01-12 | 2015-01-13 |
| cnvd-2015-00257 | Drupal Log Watcher模块存在多个跨站请求伪造漏洞 | 2015-01-12 | 2015-01-13 |
| cnvd-2015-00258 | Drupal Jammer模块存在多个跨站请求伪造漏洞 | 2015-01-12 | 2015-01-13 |
| cnvd-2015-00259 | Drupal Linkit模块存在多个跨站脚本漏洞 | 2015-01-12 | 2015-01-13 |
| cnvd-2015-00260 | Drupal Field Display Label模块跨站脚本漏洞 | 2015-01-12 | 2015-01-13 |
| cnvd-2015-00279 | TR-069自动配置服务器任意代码执行漏洞(CNVD-2015-00279) | 2015-01-12 | 2015-01-14 |
| cnvd-2015-00280 | TR-069自动配置服务器任意代码执行漏洞( CNVD-2015-00280) | 2015-01-12 | 2015-01-14 |
| cnvd-2015-00281 | TR-069自动配置服务器任意代码执行漏洞(CNVD-2015-00281) | 2015-01-12 | 2015-01-14 |
| cnvd-2015-00282 | TR-069自动配置服务器任意代码执行漏洞(CNVD-2015-00282) | 2015-01-12 | 2015-01-14 |
| cnvd-2015-00283 | TR-069自动配置服务器任意代码执行漏洞(CNVD-2015-00283) | 2015-01-12 | 2015-01-14 |
| cnvd-2015-00284 | TR-069自动配置服务器任意代码执行漏洞(CNVD-2015-00284) | 2015-01-12 | 2015-01-14 |
| cnvd-2015-00263 | CodeWrights 'HART DTM' Library本地拒绝服务漏洞 | 2015-01-13 | 2015-01-14 |
| cnvd-2015-00264 | WordPress插件Pods存在多个跨站请求伪造漏洞 | 2015-01-13 | 2015-01-14 |
| cnvd-2015-00265 | WordPress插件Pods跨站脚本漏洞 | 2015-01-13 | 2015-01-14 |
| cnvd-2015-00266 | Linux Kernel 'vdso_addr()'函数本地安全绕过漏洞 | 2015-01-13 | 2015-01-14 |
| cnvd-2015-00267 | MantisBT未完全修复存在多个URI重定向漏洞 | 2015-01-13 | 2015-01-14 |
| cnvd-2015-00268 | Privoxy信息泄露漏洞 | 2015-01-13 | 2015-01-14 |
| cnvd-2015-00269 | Privoxy存在多个远程代码执行漏洞 | 2015-01-13 | 2015-01-14 |
| cnvd-2015-00270 | libpng存在多个堆缓冲区溢出漏洞 | 2015-01-13 | 2015-01-14 |
| cnvd-2015-00271 | Tapatalk for WoltLab Burning Board 'welcome.php'存在多个跨站脚本漏洞 | 2015-01-13 | 2015-01-14 |
| cnvd-2015-00272 | Tapatalk for WoltLab Burning Board URI重定向漏洞 | 2015-01-13 | 2015-01-14 |
| cnvd-2015-00273 | Croogo CMS跨站脚本漏洞 | 2015-01-13 | 2015-01-14 |
| cnvd-2015-00274 | PHPKIT WCMS 'include.php'跨站脚本漏洞 | 2015-01-13 | 2015-01-14 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2001-avi-072 | Vulnérabilité dans ypbind sous SunOS | 2001-07-05T00:00:00.000000 | 2001-07-05T00:00:00.000000 |
| certa-2001-avi-073 | Vulnérabilité d'Oracle | 2001-07-05T00:00:00.000000 | 2001-07-05T00:00:00.000000 |
| CERTA-2001-AVI-074 | Vulnérabilités dans les Cisco VN 5420 | 2001-07-12T00:00:00.000000 | 2001-07-12T00:00:00.000000 |
| certa-2001-avi-074 | Vulnérabilités dans les Cisco VN 5420 | 2001-07-12T00:00:00.000000 | 2001-07-12T00:00:00.000000 |
| CERTA-2001-AVI-075 | Vulnérabilité de Firewall-1 | 2001-07-13T00:00:00.000000 | 2001-07-13T00:00:00.000000 |
| CERTA-2001-AVI-076 | Vulnérabilité dans PPTP sous CISCO IOS | 2001-07-13T00:00:00.000000 | 2001-07-13T00:00:00.000000 |
| CERTA-2001-AVI-077 | Vulnérabilité dans xloadimage | 2001-07-13T00:00:00.000000 | 2001-07-13T00:00:00.000000 |
| certa-2001-avi-075 | Vulnérabilité de Firewall-1 | 2001-07-13T00:00:00.000000 | 2001-07-13T00:00:00.000000 |
| certa-2001-avi-076 | Vulnérabilité dans PPTP sous CISCO IOS | 2001-07-13T00:00:00.000000 | 2001-07-13T00:00:00.000000 |
| certa-2001-avi-077 | Vulnérabilité dans xloadimage | 2001-07-13T00:00:00.000000 | 2001-07-13T00:00:00.000000 |
| CERTA-2001-AVI-078 | Vulnérabilité de l'identification SMTP sous Windows 2000 | 2001-07-19T00:00:00.000000 | 2001-07-19T00:00:00.000000 |
| certa-2001-avi-078 | Vulnérabilité de l'identification SMTP sous Windows 2000 | 2001-07-19T00:00:00.000000 | 2001-07-19T00:00:00.000000 |
| CERTA-2001-AVI-079 | Vulnérabilité dans SSH Secure Shell 3.0.0 | 2001-07-24T00:00:00.000000 | 2001-07-24T00:00:00.000000 |
| certa-2001-avi-079 | Vulnérabilité dans SSH Secure Shell 3.0.0 | 2001-07-24T00:00:00.000000 | 2001-07-24T00:00:00.000000 |
| CERTA-2001-AVI-080 | Vulnérabilité dans Microsoft Services pour Unix 2.0 | 2001-07-25T00:00:00.000000 | 2001-07-25T00:00:00.000000 |
| CERTA-2001-AVI-081 | Débordement de mémoire dans telnetd | 2001-07-25T00:00:00.000000 | 2002-06-11T00:00:00.000000 |
| certa-2001-avi-080 | Vulnérabilité dans Microsoft Services pour Unix 2.0 | 2001-07-25T00:00:00.000000 | 2001-07-25T00:00:00.000000 |
| certa-2001-avi-081 | Débordement de mémoire dans telnetd | 2001-07-25T00:00:00.000000 | 2002-06-11T00:00:00.000000 |
| CERTA-2001-AVI-082 | Vulnérabilité dans le serveur Terminal sous Windows NT et 2000 | 2001-07-26T00:00:00.000000 | 2001-07-26T00:00:00.000000 |
| certa-2001-avi-082 | Vulnérabilité dans le serveur Terminal sous Windows NT et 2000 | 2001-07-26T00:00:00.000000 | 2001-07-26T00:00:00.000000 |
| CERTA-2001-AVI-083 | Débordement de mémoire de Windows Media Player | 2001-07-27T00:00:00.000000 | 2001-07-27T00:00:00.000000 |
| CERTA-2001-AVI-084 | Vulnérabilité dans les serveurs RPC sous Windows | 2001-07-27T00:00:00.000000 | 2002-04-24T00:00:00.000000 |
| certa-2001-avi-083 | Débordement de mémoire de Windows Media Player | 2001-07-27T00:00:00.000000 | 2001-07-27T00:00:00.000000 |
| certa-2001-avi-084 | Vulnérabilité dans les serveurs RPC sous Windows | 2001-07-27T00:00:00.000000 | 2002-04-24T00:00:00.000000 |
| CERTA-2001-AVI-085 | Vulnérabilité dans sendmail | 2001-08-23T00:00:00.000000 | 2001-08-23T00:00:00.000000 |
| certa-2001-avi-085 | Vulnérabilité dans sendmail | 2001-08-23T00:00:00.000000 | 2001-08-23T00:00:00.000000 |
| CERTA-2001-AVI-086 | Multiples vulnérabilités dans Cisco CBOS | 2001-08-27T00:00:00.000000 | 2001-08-27T00:00:00.000000 |
| certa-2001-avi-086 | Multiples vulnérabilités dans Cisco CBOS | 2001-08-27T00:00:00.000000 | 2001-08-27T00:00:00.000000 |
| CERTA-2001-AVI-087 | Vulnérabilité de HP Openview NNM | 2001-08-28T00:00:00.000000 | 2001-08-28T00:00:00.000000 |
| certa-2001-avi-087 | Vulnérabilité de HP Openview NNM | 2001-08-28T00:00:00.000000 | 2001-08-28T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTA-2010-ALE-018 | Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat | 2010-10-28T00:00:00.000000 | 2010-11-18T00:00:00.000000 |
| certa-2010-ale-018 | Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat | 2010-10-28T00:00:00.000000 | 2010-11-18T00:00:00.000000 |
| CERTA-2010-ALE-019 | Vulnérabilité dans Microsoft Internet Explorer | 2010-11-03T00:00:00.000000 | 2010-12-17T00:00:00.000000 |
| certa-2010-ale-019 | Vulnérabilité dans Microsoft Internet Explorer | 2010-11-03T00:00:00.000000 | 2010-12-17T00:00:00.000000 |
| CERTA-2010-ALE-020 | Vulnérabilité dans Adobe Reader et Acrobat | 2010-11-05T00:00:00.000000 | 2010-11-17T00:00:00.000000 |
| certa-2010-ale-020 | Vulnérabilité dans Adobe Reader et Acrobat | 2010-11-05T00:00:00.000000 | 2010-11-17T00:00:00.000000 |
| CERTA-2010-ALE-021 | Vulnérabilité dans Microsoft Internet Explorer | 2010-12-22T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2010-ale-021 | Vulnérabilité dans Microsoft Internet Explorer | 2010-12-22T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| CERTA-2011-ALE-001 | Vulnérabilité dans le moteur de rendu graphique de Windows | 2011-01-05T00:00:00.000000 | 2011-02-10T00:00:00.000000 |
| certa-2011-ale-001 | Vulnérabilité dans le moteur de rendu graphique de Windows | 2011-01-05T00:00:00.000000 | 2011-02-10T00:00:00.000000 |
| CERTA-2011-ALE-002 | Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat | 2011-03-15T00:00:00.000000 | 2011-03-22T00:00:00.000000 |
| certa-2011-ale-002 | Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat | 2011-03-15T00:00:00.000000 | 2011-03-22T00:00:00.000000 |
| CERTA-2011-ALE-003 | Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat | 2011-04-12T00:00:00.000000 | 2011-06-20T00:00:00.000000 |
| certa-2011-ale-003 | Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat | 2011-04-12T00:00:00.000000 | 2011-06-20T00:00:00.000000 |
| CERTA-2011-ALE-004 | Vulnérabilités dans Apple iOS | 2011-07-05T00:00:00.000000 | 2011-07-18T00:00:00.000000 |
| certa-2011-ale-004 | Vulnérabilités dans Apple iOS | 2011-07-05T00:00:00.000000 | 2011-07-18T00:00:00.000000 |
| CERTA-2011-ALE-005 | Exploitation malveillante d'une fonctionnalité du protocole SSL afin de provoquer un déni de service | 2011-10-27T00:00:00.000000 | 2011-10-27T00:00:00.000000 |
| certa-2011-ale-005 | Exploitation malveillante d'une fonctionnalité du protocole SSL afin de provoquer un déni de service | 2011-10-27T00:00:00.000000 | 2011-10-27T00:00:00.000000 |
| CERTA-2011-ALE-006 | Exploitation d'une vulnérabilité dans la gestion des polices TrueType sur Windows | 2011-11-04T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| certa-2011-ale-006 | Exploitation d'une vulnérabilité dans la gestion des polices TrueType sur Windows | 2011-11-04T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| CERTA-2011-ALE-007 | Vulnérabilité dans ftpd et ProFTPD sur FreeBSD | 2011-12-02T00:00:00.000000 | 2011-12-26T00:00:00.000000 |
| certa-2011-ale-007 | Vulnérabilité dans ftpd et ProFTPD sur FreeBSD | 2011-12-02T00:00:00.000000 | 2011-12-26T00:00:00.000000 |
| CERTA-2011-ALE-008 | Vulnérabilité dans Adobe Reader et Acrobat | 2011-12-07T00:00:00.000000 | 2012-01-10T00:00:00.000000 |
| certa-2011-ale-008 | Vulnérabilité dans Adobe Reader et Acrobat | 2011-12-07T00:00:00.000000 | 2012-01-10T00:00:00.000000 |
| CERTA-2012-ALE-001 | Vulnérabilité dans Cisco IronPort | 2012-02-01T00:00:00.000000 | 2013-02-05T00:00:00.000000 |
| certa-2012-ale-001 | Vulnérabilité dans Cisco IronPort | 2012-02-01T00:00:00.000000 | 2013-02-05T00:00:00.000000 |
| CERTA-2012-ALE-002 | Vulnérabilité dans Windows RDP | 2012-03-14T00:00:00.000000 | 2012-04-13T00:00:00.000000 |
| certa-2012-ale-002 | Vulnérabilité dans Windows RDP | 2012-03-14T00:00:00.000000 | 2012-04-13T00:00:00.000000 |
| CERTA-2012-ALE-003 | Vulnérabilité dans Microsoft XML Core Services | 2012-06-14T00:00:00.000000 | 2012-08-17T00:00:00.000000 |
| certa-2012-ale-003 | Vulnérabilité dans Microsoft XML Core Services | 2012-06-14T00:00:00.000000 | 2012-08-17T00:00:00.000000 |