Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2026-6027
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
Totolink A7100RU CGI cstecgi.cgi setUrlFilterRules os … Totolink
A7100RU
2026-04-10T06:00:22.402Z 2026-04-10T06:00:22.402Z
CVE-2026-4432
6.5 (3.1)
YITH WooCommerce Wishlist < 4.13.0 - Unauthenticated A… Unknown
YITH WooCommerce Wishlist
2026-04-10T06:00:15.515Z 2026-04-10T18:35:19.917Z
CVE-2025-14545
6.5 (3.1)
YML for Yandex Market < 5.0.26 - Shop Manager+ RCE via… Unknown
YML for Yandex Market
2026-04-10T06:00:13.825Z 2026-04-10T18:37:24.983Z
CVE-2026-28704
7.8 (3.0)
8.4 (4.0)
Emocheck insecurely loads Dynamic Link Libraries … Japan Computer Emergency Response Team Coordination Center (JPCERT/CC)
Emocheck
2026-04-10T05:49:59.632Z 2026-04-10T14:03:26.770Z
CVE-2026-6026
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat o… Totolink
A7100RU
2026-04-10T05:45:10.860Z 2026-04-10T11:52:41.453Z
CVE-2026-6025
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
Totolink A7100RU CGI cstecgi.cgi setSyslogCfg os comma… Totolink
A7100RU
2026-04-10T05:30:21.486Z 2026-04-10T14:59:13.478Z
CVE-2026-6024
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal Tenda
i6
2026-04-10T05:15:13.771Z 2026-04-10T15:54:20.628Z
CVE-2026-5477
8.2 (4.0)
Prefix-substitution forgery via integer overflow in wo… wolfSSL
wolfSSL
2026-04-10T05:06:22.884Z 2026-04-10T14:04:00.411Z
CVE-2026-6016
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
Tenda AC9 POST Request WizardHandle decodePwd stack-ba… Tenda
AC9
2026-04-10T05:00:23.163Z 2026-04-10T13:40:04.879Z
CVE-2026-6015
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
Tenda AC9 POST Request QuickIndex formQuickIndex stack… Tenda
AC9
2026-04-10T04:45:15.605Z 2026-04-10T04:45:15.605Z
CVE-2026-6014
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
D-Link DIR-513 POST Request formAdvanceSetup buffer overflow D-Link
DIR-513
2026-04-10T04:30:21.978Z 2026-04-10T11:58:43.540Z
CVE-2026-4482
6.8 (4.0)
Insight Agent Private Key Information Disclosure via I… Rapid7
Insight Agent
2026-04-10T04:22:38.719Z 2026-04-10T15:33:30.608Z
CVE-2026-6013
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
D-Link DIR-513 POST Request formSetRoute buffer overflow D-Link
DIR-513
2026-04-10T04:15:13.189Z 2026-04-10T15:35:06.404Z
CVE-2026-6012
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
D-Link DIR-513 POST Request formSetPassword buffer overflow D-Link
DIR-513
2026-04-10T04:00:16.952Z 2026-04-10T15:54:28.106Z
CVE-2026-6011
6.3 (4.0)
5.6 (3.1)
5.6 (3.0)
OpenClaw assertPublicHostname web-fetch.ts server-side… n/a
OpenClaw
2026-04-10T03:45:14.380Z 2026-04-10T13:41:20.869Z
CVE-2026-2305
6.4 (3.1)
AddFunc Head & Footer Code <= 2.3 - Authenticated (Con… addfunc
AddFunc Head & Footer Code
2026-04-10T03:35:35.305Z 2026-04-10T17:03:14.663Z
CVE-2026-6010
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
CodeAstro Online Classroom takeassessment2.php sql injection CodeAstro
Online Classroom
2026-04-10T03:30:14.967Z 2026-04-10T03:30:14.967Z
CVE-2026-5188
2.3 (4.0)
Integer underflow in X.509 SAN parsing in wolfSSL wolfSSL
wolfSSL
2026-04-10T03:24:21.126Z 2026-04-10T13:41:51.326Z
CVE-2026-6007
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
itsourcecode Construction Management System del.php sq… itsourcecode
Construction Management System
2026-04-10T03:15:12.064Z 2026-04-10T12:08:17.415Z
CVE-2026-5500
8.7 (4.0)
Improper Validation of AES-GCM Authentication Tag Leng… wolfSSL
wolfSSL
2026-04-10T03:10:25.671Z 2026-04-10T13:42:28.091Z
CVE-2026-5501
8.6 (4.0)
Improper Certificate Signature Verification in X.509 C… wolfSSL
wolfSSL
2026-04-10T03:07:39.604Z 2026-04-10T13:43:04.704Z
CVE-2026-5466
7.6 (4.0)
wc_VerifyEccsiHash missing sanity check wolfSSL
wolfSSL
2026-04-10T03:00:42.976Z 2026-04-10T13:43:34.035Z
CVE-2026-6006
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
code-projects Patient Record Management System edit_hp… code-projects
Patient Record Management System
2026-04-10T03:00:20.534Z 2026-04-10T17:04:11.688Z
CVE-2026-6005
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
code-projects Patient Record Management System hematol… code-projects
Patient Record Management System
2026-04-10T02:45:12.085Z 2026-04-10T15:54:38.282Z
CVE-2026-5479
7.6 (4.0)
wolfSSL EVP ChaCha20-Poly1305 AEAD authentication tag wolfSSL
wolfSSL
2026-04-10T02:38:39.918Z 2026-04-10T13:44:05.956Z
CVE-2026-6004
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
code-projects Simple IT Discussion Forum delete-catego… code-projects
Simple IT Discussion Forum
2026-04-10T02:30:23.693Z 2026-04-10T13:44:55.927Z
CVE-2026-6003
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
code-projects Simple IT Discussion Forum user.php cros… code-projects
Simple IT Discussion Forum
2026-04-10T02:15:14.177Z 2026-04-10T02:15:14.177Z
CVE-2026-6000
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
code-projects Online Library Management System SQL Dat… code-projects
Online Library Management System
2026-04-10T02:00:18.782Z 2026-04-10T12:09:00.502Z
CVE-2026-5999
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
JeecgBoot SysAnnouncementController improper authorization n/a
JeecgBoot
2026-04-10T01:45:14.036Z 2026-04-10T17:05:03.875Z
CVE-2026-5998
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
zhayujie chatgpt-on-wechat CowAgent API Memory Content… zhayujie
chatgpt-on-wechat CowAgent
2026-04-10T01:30:17.358Z 2026-04-10T15:54:44.452Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-33455
5.3 (4.0)
Livestatus injection in monitoring quicksearch Checkmk GmbH
Checkmk
2026-04-10T08:30:20.089Z 2026-04-10T12:48:27.066Z
CVE-2026-6035
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
code-projects Vehicle Showroom Management System Servi… code-projects
Vehicle Showroom Management System
2026-04-10T08:00:17.813Z 2026-04-10T15:14:30.174Z
CVE-2026-6034
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
code-projects Vehicle Showroom Management System Profi… code-projects
Vehicle Showroom Management System
2026-04-10T07:45:10.191Z 2026-04-10T15:54:13.540Z
CVE-2026-6033
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
CodeAstro Online Classroom updatedetailsfromstudent.ph… CodeAstro
Online Classroom
2026-04-10T07:30:13.796Z 2026-04-10T12:59:53.115Z
CVE-2026-6032
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
code-projects Simple Laundry System checkcheckout.php … code-projects
Simple Laundry System
2026-04-10T07:15:13.733Z 2026-04-10T07:15:13.733Z
CVE-2026-6031
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
code-projects Simple IT Discussion Forum add-category-… code-projects
Simple IT Discussion Forum
2026-04-10T07:00:25.770Z 2026-04-10T11:48:27.122Z
CVE-2026-5525
6 (3.1)
Stack-Based Buffer Overflow in Notepad++ File Drop Han… Notepad++ Project
Notepad++
2026-04-10T07:40:59.902Z 2026-04-10T12:49:59.124Z
CVE-2026-40212
5.4 (3.1)
OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 … OpenStack
Skyline
2026-04-10T00:00:00.000Z 2026-04-10T15:32:11.199Z
CVE-2026-22750
7.5 (3.1)
SSL bundle configuration silently bypassed in Spring C… VMware
Spring Cloud Gateway
2026-04-10T07:32:31.260Z 2026-04-10T12:59:14.451Z
CVE-2026-6030
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
itsourcecode Construction Management System del1.php s… itsourcecode
Construction Management System
2026-04-10T06:45:10.429Z 2026-04-10T15:15:49.331Z
CVE-2026-6029
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os c… Totolink
A7100RU
2026-04-10T06:30:19.345Z 2026-04-10T15:45:55.950Z
CVE-2026-6028
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
Totolink A7100RU CGI cstecgi.cgi setPptpServerCfg os c… Totolink
A7100RU
2026-04-10T06:15:26.783Z 2026-04-10T13:39:19.307Z
CVE-2026-6027
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
Totolink A7100RU CGI cstecgi.cgi setUrlFilterRules os … Totolink
A7100RU
2026-04-10T06:00:22.402Z 2026-04-10T06:00:22.402Z
CVE-2026-6026
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat o… Totolink
A7100RU
2026-04-10T05:45:10.860Z 2026-04-10T11:52:41.453Z
CVE-2026-4432
6.5 (3.1)
YITH WooCommerce Wishlist < 4.13.0 - Unauthenticated A… Unknown
YITH WooCommerce Wishlist
2026-04-10T06:00:15.515Z 2026-04-10T18:35:19.917Z
CVE-2026-28704
7.8 (3.0)
8.4 (4.0)
Emocheck insecurely loads Dynamic Link Libraries … Japan Computer Emergency Response Team Coordination Center (JPCERT/CC)
Emocheck
2026-04-10T05:49:59.632Z 2026-04-10T14:03:26.770Z
CVE-2026-1115
9.6 (3.0)
Stored XSS in parisneo/lollms parisneo
parisneo/lollms
2026-04-10T06:23:13.463Z 2026-04-10T13:01:44.634Z
CVE-2025-14545
6.5 (3.1)
YML for Yandex Market < 5.0.26 - Shop Manager+ RCE via… Unknown
YML for Yandex Market
2026-04-10T06:00:13.825Z 2026-04-10T18:37:24.983Z
CVE-2026-6025
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
Totolink A7100RU CGI cstecgi.cgi setSyslogCfg os comma… Totolink
A7100RU
2026-04-10T05:30:21.486Z 2026-04-10T14:59:13.478Z
CVE-2026-6024
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal Tenda
i6
2026-04-10T05:15:13.771Z 2026-04-10T15:54:20.628Z
CVE-2026-6016
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
Tenda AC9 POST Request WizardHandle decodePwd stack-ba… Tenda
AC9
2026-04-10T05:00:23.163Z 2026-04-10T13:40:04.879Z
CVE-2026-6015
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
Tenda AC9 POST Request QuickIndex formQuickIndex stack… Tenda
AC9
2026-04-10T04:45:15.605Z 2026-04-10T04:45:15.605Z
CVE-2026-5477
8.2 (4.0)
Prefix-substitution forgery via integer overflow in wo… wolfSSL
wolfSSL
2026-04-10T05:06:22.884Z 2026-04-10T14:04:00.411Z
CVE-2026-6014
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
D-Link DIR-513 POST Request formAdvanceSetup buffer overflow D-Link
DIR-513
2026-04-10T04:30:21.978Z 2026-04-10T11:58:43.540Z
CVE-2026-6013
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
D-Link DIR-513 POST Request formSetRoute buffer overflow D-Link
DIR-513
2026-04-10T04:15:13.189Z 2026-04-10T15:35:06.404Z
CVE-2026-6012
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
D-Link DIR-513 POST Request formSetPassword buffer overflow D-Link
DIR-513
2026-04-10T04:00:16.952Z 2026-04-10T15:54:28.106Z
CVE-2026-6011
6.3 (4.0)
5.6 (3.1)
5.6 (3.0)
OpenClaw assertPublicHostname web-fetch.ts server-side… n/a
OpenClaw
2026-04-10T03:45:14.380Z 2026-04-10T13:41:20.869Z
CVE-2026-4482
6.8 (4.0)
Insight Agent Private Key Information Disclosure via I… Rapid7
Insight Agent
2026-04-10T04:22:38.719Z 2026-04-10T15:33:30.608Z
CVE-2026-6010
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
CodeAstro Online Classroom takeassessment2.php sql injection CodeAstro
Online Classroom
2026-04-10T03:30:14.967Z 2026-04-10T03:30:14.967Z
CVE-2026-6007
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
itsourcecode Construction Management System del.php sq… itsourcecode
Construction Management System
2026-04-10T03:15:12.064Z 2026-04-10T12:08:17.415Z
ID Description Published Updated
fkie_cve-2025-36552 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:31.700 2026-02-13T19:16:31.700
fkie_cve-2025-36545 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:31.640 2026-02-13T19:16:31.640
fkie_cve-2025-36542 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:31.580 2026-02-13T19:16:31.580
fkie_cve-2025-36538 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:31.520 2026-02-13T19:16:31.520
fkie_cve-2025-36534 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:31.460 2026-02-13T19:16:31.460
fkie_cve-2025-36532 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:31.400 2026-02-13T19:16:31.400
fkie_cve-2025-36526 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:31.343 2026-02-13T19:16:31.343
fkie_cve-2025-36524 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:31.283 2026-02-13T19:16:31.283
fkie_cve-2025-36523 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:31.220 2026-02-13T19:16:31.220
fkie_cve-2025-36517 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:31.160 2026-02-13T19:16:31.160
fkie_cve-2025-35997 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:31.103 2026-02-13T19:16:31.103
fkie_cve-2025-35993 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:31.043 2026-02-13T19:16:31.043
fkie_cve-2025-35976 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:30.980 2026-02-13T19:16:30.980
fkie_cve-2025-35962 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:30.920 2026-02-13T19:16:30.920
fkie_cve-2025-35961 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:30.863 2026-02-13T19:16:30.863
fkie_cve-2025-35960 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:30.800 2026-02-13T19:16:30.800
fkie_cve-2025-32734 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:30.447 2026-02-13T19:16:30.447
fkie_cve-2025-32733 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:30.387 2026-02-13T19:16:30.387
fkie_cve-2025-32090 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:30.330 2026-02-13T19:16:30.330
fkie_cve-2025-32085 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:30.270 2026-02-13T19:16:30.270
fkie_cve-2025-32082 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:30.213 2026-02-13T19:16:30.213
fkie_cve-2025-32009 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:30.157 2026-02-13T19:16:30.157
fkie_cve-2025-31942 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:30.093 2026-02-13T19:16:30.093
fkie_cve-2025-31364 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:30.033 2026-02-13T19:16:30.033
fkie_cve-2025-31358 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:29.877 2026-02-13T19:16:29.877
fkie_cve-2025-31145 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:29.810 2026-02-13T19:16:29.810
fkie_cve-2025-30517 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:29.747 2026-02-13T19:16:29.747
fkie_cve-2025-29869 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:29.563 2026-02-13T19:16:29.563
fkie_cve-2025-27941 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:29.500 2026-02-13T19:16:29.500
fkie_cve-2025-27928 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because … 2026-02-13T19:16:29.443 2026-02-13T19:16:29.443
ID Severity Description Published Updated
ghsa-98g2-jqvc-f33c
4.3 (3.1)
2.1 (4.0)
A vulnerability was found in code-projects Simple Laundry System 1.0. This impacts an unknown funct… 2026-04-10T09:31:16Z 2026-04-10T09:31:16Z
ghsa-8hrp-2fqv-gvrx
6.0 (3.1)
A stack-based buffer overflow vulnerability exists in Notepad++ version 8.9.3 in the file drop hand… 2026-04-10T09:31:16Z 2026-04-10T09:31:16Z
ghsa-8gxr-c98h-cwxm
5.3 (4.0)
Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 all… 2026-04-10T09:31:16Z 2026-04-10T09:31:16Z
ghsa-734f-8p5w-pjw7
7.3 (3.1)
5.5 (4.0)
A vulnerability was determined in code-projects Vehicle Showroom Management System 1.0. This affect… 2026-04-10T09:31:16Z 2026-04-10T09:31:16Z
ghsa-47p4-rx3f-4xcm
7.3 (3.1)
5.5 (4.0)
A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. The impacted ele… 2026-04-10T09:31:16Z 2026-04-10T09:31:16Z
ghsa-2qh3-3rmv-x43w
3.3 (3.1)
4.8 (4.0)
A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the… 2026-04-10T09:31:16Z 2026-04-10T12:31:44Z
ghsa-wqxj-7q65-946x
9.8 (3.1)
8.9 (4.0)
A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability af… 2026-04-10T09:31:15Z 2026-04-10T09:31:15Z
ghsa-w3qf-xc88-m8c9
9.8 (3.1)
8.9 (4.0)
A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This issue affects the fun… 2026-04-10T09:31:15Z 2026-04-10T09:31:16Z
ghsa-r2fc-mm5p-v3mp
6.5 (3.1)
The YITH WooCommerce Wishlist WordPress plugin before 4.13.0 does not properly validate wishlist ow… 2026-04-10T09:31:15Z 2026-04-10T21:31:14Z
ghsa-hwqh-2684-54fc
7.5 (3.1)
Spring Cloud Gateway's SSL bundle configuration silently bypassed 2026-04-10T09:31:15Z 2026-04-10T22:11:21Z
ghsa-frp9-cw9x-gf7v
6.5 (3.1)
The YML for Yandex Market WordPress plugin before 5.0.26 is vulnerable to Remote Code Execution via… 2026-04-10T09:31:15Z 2026-04-10T21:31:14Z
ghsa-cvcj-h2fq-82fw
7.8 (3.1)
8.4 (4.0)
Emocheck insecurely loads Dynamic Link Libraries (DLLs). If a crafted DLL file is placed to the sam… 2026-04-10T09:31:15Z 2026-04-10T09:31:15Z
ghsa-976v-qqvp-vpgg
9.8 (3.1)
8.9 (4.0)
A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is th… 2026-04-10T09:31:15Z 2026-04-10T09:31:16Z
ghsa-8wrq-fv5f-pfp2
9.6 (3.1)
parisneo/lollms vulnerable to stored XSS in the social feature 2026-04-10T09:31:15Z 2026-04-10T22:11:10Z
ghsa-2w2j-5vf6-6jfw
9.8 (3.1)
8.9 (4.0)
A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the … 2026-04-10T09:31:15Z 2026-04-10T09:31:16Z
ghsa-x6gx-rmhg-wc3f
8.8 (3.1)
7.4 (4.0)
A security vulnerability has been detected in D-Link DIR-513 1.10. This affects the function formSe… 2026-04-10T06:31:38Z 2026-04-10T06:31:38Z
ghsa-wqhq-hx3v-9xwh
8.8 (3.1)
7.4 (4.0)
A vulnerability was found in Tenda AC9 15.03.02.13. The affected element is the function decodePwd … 2026-04-10T06:31:38Z 2026-04-10T06:31:38Z
ghsa-m77r-vqw2-hffx
8.7 (4.0)
wolfSSL's wc_PKCS7_DecodeAuthEnvelopedData() does not properly sanitize the AES-GCM authentication … 2026-04-10T06:31:38Z 2026-04-10T06:31:38Z
ghsa-hg75-4cmp-f367
8.6 (4.0)
wolfSSL_X509_verify_cert in the OpenSSL compatibility layer accepts a certificate chain in which th… 2026-04-10T06:31:38Z 2026-04-10T06:31:38Z
ghsa-h7vm-f9h4-hh64
6.3 (3.1)
2.1 (4.0)
A vulnerability was found in itsourcecode Construction Management System 1.0. This affects an unkno… 2026-04-10T06:31:38Z 2026-04-10T06:31:38Z
ghsa-h6p7-635q-vpx7
6.3 (3.1)
2.1 (4.0)
A vulnerability has been found in code-projects Patient Record Management System 1.0. The impacted … 2026-04-10T06:31:38Z 2026-04-10T06:31:38Z
ghsa-grqc-3vmg-p68x
8.2 (4.0)
An integer overflow existed in the wolfCrypt CMAC implementation, that could be exploited to forge … 2026-04-10T06:31:38Z 2026-04-10T06:31:38Z
ghsa-ch75-q946-9j9r
8.8 (3.1)
7.4 (4.0)
A flaw has been found in D-Link DIR-513 1.10. This issue affects the function formAdvanceSetup of t… 2026-04-10T06:31:38Z 2026-04-10T06:31:38Z
ghsa-9qjr-82wx-8hcx
6.3 (3.1)
2.1 (4.0)
A flaw has been found in code-projects Patient Record Management System 1.0. The affected element i… 2026-04-10T06:31:38Z 2026-04-10T06:31:38Z
ghsa-9jxj-33wq-5v9p
8.8 (3.1)
7.4 (4.0)
A vulnerability has been found in Tenda AC9 15.03.02.13. Impacted is the function formQuickIndex of… 2026-04-10T06:31:38Z 2026-04-10T06:31:38Z
ghsa-7796-2cv5-g5f4
9.8 (3.1)
8.9 (4.0)
A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function … 2026-04-10T06:31:38Z 2026-04-10T06:31:38Z
ghsa-5v5f-c63q-mm7g
7.3 (3.1)
5.5 (4.0)
A vulnerability was determined in Tenda i6 1.0.0.7(2204). Affected by this issue is the function R7… 2026-04-10T06:31:38Z 2026-04-10T06:31:38Z
ghsa-52vj-fvrv-7q82
5.6 (3.1)
2.9 (4.0)
OpenClaw vulnerable to SSRF in src/agents/tools/web-fetch.ts 2026-04-10T06:31:38Z 2026-04-10T22:10:22Z
ghsa-42q7-q9v4-qq54
6.3 (3.1)
2.1 (4.0)
A security flaw has been discovered in CodeAstro Online Classroom 1.0/2.php. Affected by this vulne… 2026-04-10T06:31:38Z 2026-04-10T06:31:38Z
ghsa-3r4x-4pr5-j666
6.8 (4.0)
The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted… 2026-04-10T06:31:38Z 2026-04-10T06:31:38Z
ID Severity Description Package Published Updated
pysec-2023-287
4.3 (3.1)
Nautobot is a Network Source of Truth and Network Automation Platform built as a web appl… nautobot 2023-12-22T17:15:00+00:00 2024-11-21T14:22:55.764934+00:00
pysec-2023-267
6.5 (3.1)
Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an auth… apache-airflow 2023-12-21T10:15:00+00:00 2024-11-21T14:22:40.744438+00:00
pysec-2023-266
6.5 (3.1)
Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker … apache-airflow 2023-12-21T10:15:00+00:00 2024-11-21T14:22:40.683792+00:00
pysec-2023-265
4.3 (3.1)
Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows… apache-airflow 2023-12-21T10:15:00+00:00 2024-11-21T14:22:40.621314+00:00
pysec-2023-264
5.4 (3.1)
Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a… apache-airflow 2023-12-21T10:15:00+00:00 2024-11-21T14:22:40.559945+00:00
pysec-2023-301
7.8 (3.1)
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36. transformers 2023-12-20T17:15:00+00:00 2024-11-21T14:23:01.933055+00:00
pysec-2023-300
8.8 (3.1)
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36. transformers 2023-12-19T13:15:00+00:00 2024-11-21T14:23:01.871022+00:00
pysec-2023-252
7.5 (3.1)
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. mlflow 2023-12-18T04:15:00+00:00 2024-02-06T22:20:23.832000+00:00
pysec-2023-253
8.1 (3.1)
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. mlflow 2023-12-15T01:15:00+00:00 2024-02-14T00:26:12.242703+00:00
pysec-2023-255
8.1 (3.1)
Command Injection in GitHub repository gradio-app/gradio prior to main. gradio 2023-12-14T14:15:00+00:00 2024-02-28T16:22:37.359017+00:00
pysec-2023-307
7.5 (3.1)
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Contr… vyper 2023-12-13T20:15:00+00:00 2024-11-21T14:23:02.808922+00:00
pysec-2023-297
7.5 (3.1)
A path traversal vulnerability has been detected in Repox, which allows an attacker to re… repox 2023-12-13T10:15:00Z 2024-11-21T14:23:00.892241Z
pysec-2023-296
7.5 (3.1)
An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere… repox 2023-12-13T10:15:00Z 2024-11-21T14:23:00.841929Z
pysec-2023-295
5.4 (3.1)
An XSS vulnerability stored in Repox has been identified, which allows a local attacker t… repox 2023-12-13T10:15:00Z 2024-11-21T14:23:00.792103Z
pysec-2023-294
6.1 (3.1)
An XSS vulnerability has been detected in Repox, which allows an attacker to compromise i… repox 2023-12-13T10:15:00Z 2024-11-21T14:23:00.74018Z
pysec-2023-293
7.5 (3.1)
An authentication bypass vulnerability has been found in Repox, which allows a remote use… repox 2023-12-13T09:15:00Z 2024-11-21T14:23:00.689595Z
pysec-2023-309
8.8 (3.1)
Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2. mlflow 2023-12-13T00:15:07+00:00 2025-04-09T17:27:26.271200+00:00
pysec-2023-286
5.3 (3.1)
Nautobot is a Network Source of Truth and Network Automation Platform built as a web appl… nautobot 2023-12-12T23:15:00+00:00 2024-11-21T14:22:55.664554+00:00
pysec-2023-262
9.8 (3.1)
main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code … searchor 2023-12-12T18:15:00+00:00 2024-10-09T19:20:24.594458+00:00
pysec-2023-281
8.8 (3.1)
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repositor… mlflow 2023-12-12T04:15:00+00:00 2024-11-21T14:22:54.938745+00:00
pysec-2023-261
9.8 (3.1)
SAP BTP Security Services Integration Library ([Python] sap-xssec) - versions < 4.1.0, al… sap-xssec 2023-12-12T02:15:00+00:00 2024-09-29T00:37:11.092461+00:00
pysec-2023-278
5.3 (3.1)
MindsDB connects artificial intelligence models to real time data. Versions prior to 23.1… mindsdb 2023-12-11T21:15:00Z 2026-03-03T16:29:37.448520Z
pysec-2023-277
5.3 (3.1)
MindsDB connects artificial intelligence models to real time data. Versions prior to 23.1… mindsdb 2023-12-11T19:15:00+00:00 2024-11-21T14:22:54.391272+00:00
pysec-2023-292
7.8 (3.1)
PyInstaller bundles a Python application and all its dependencies into a single package. … pyinstaller 2023-12-09T01:15:00+00:00 2024-11-21T14:22:59.796437+00:00
pysec-2023-260
6.1 (3.1)
A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow reposito… mlflow 2023-12-07T05:15:00+00:00 2024-04-16T15:20:55.191003+00:00
pysec-2023-291
7.8 (3.1)
PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Goo… pydrive2 2023-12-05T21:15:00+00:00 2024-11-21T14:22:59.681617+00:00
pysec-2023-272
4.3 (3.1)
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints… jupyter-server 2023-12-04T21:15:00+00:00 2024-11-21T14:22:52.227754+00:00
pysec-2023-250
5.3 (3.1)
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper … aiohttp 2023-11-30T07:15:00+00:00 2024-01-29T16:22:26.409794+00:00
pysec-2023-251
5.3 (3.1)
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper … aiohttp 2023-11-29T20:15:00+00:00 2024-01-29T16:22:26.513672+00:00
pysec-2023-254
7.5 (3.1)
cryptography is a package designed to expose cryptographic primitives and recipes to Pyth… cryptography 2023-11-29T19:15:00+00:00 2024-02-17T07:18:27.688636+00:00
ID Description Updated
ID Description Published Updated
mal-2026-2148 Malicious code in mattermost-data-warehouse (PyPI) 2026-03-24T22:23:16Z 2026-03-24T22:23:16Z
mal-2026-2150 Malicious code in snooty (PyPI) 2026-03-24T22:23:01Z 2026-03-24T23:14:27Z
mal-2026-2149 Malicious code in sentry-filter-forks (PyPI) 2026-03-24T22:22:42Z 2026-03-24T22:22:42Z
mal-2026-2147 Malicious code in mattermost-airflow (PyPI) 2026-03-24T22:21:52Z 2026-03-24T22:21:52Z
mal-2026-2146 Malicious code in databricks-clean-room-orchestrator (PyPI) 2026-03-24T22:21:37Z 2026-03-24T22:21:37Z
mal-2026-2145 Malicious code in compose-rl (PyPI) 2026-03-24T22:21:23Z 2026-03-24T23:14:27Z
mal-2026-2152 Malicious code in target-iceberg (PyPI) 2026-03-24T22:20:29Z 2026-03-24T22:20:29Z
mal-2026-2151 Malicious code in tap-wordpress (PyPI) 2026-03-24T22:19:29Z 2026-03-24T22:19:29Z
mal-2026-2142 Malicious code in roboat-util (PyPI) 2026-03-24T20:33:53Z 2026-03-24T20:33:53Z
mal-2026-2143 Malicious code in roboated (PyPI) 2026-03-24T20:30:36Z 2026-03-24T20:30:36Z
mal-2026-2141 Malicious code in corexloader (PyPI) 2026-03-24T20:07:25Z 2026-03-24T20:07:25Z
mal-2026-2140 Malicious code in coreloader (PyPI) 2026-03-24T20:07:01Z 2026-03-24T20:07:01Z
mal-2026-2139 Malicious code in stats-helpers (PyPI) 2026-03-24T19:42:44Z 2026-03-24T19:42:44Z
mal-2026-2138 Malicious code in open-vp-cal (PyPI) 2026-03-24T19:30:00Z 2026-03-24T19:30:00Z
mal-2026-2398 Malicious code in xrpl-hooks-ide (npm) 2026-03-24T16:04:59Z 2026-04-07T14:41:26Z
mal-2026-2397 Malicious code in wraith-module (npm) 2026-03-24T16:04:43Z 2026-04-07T14:41:26Z
mal-2026-2396 Malicious code in voodoo-internal-api (npm) 2026-03-24T16:03:29Z 2026-04-07T14:41:26Z
mal-2026-2395 Malicious code in uuidvalidatorarabis (npm) 2026-03-24T16:03:12Z 2026-04-07T14:41:25Z
mal-2026-2394 Malicious code in typescript-mock-data (npm) 2026-03-24T16:02:29Z 2026-04-07T14:41:25Z
mal-2026-2393 Malicious code in this-is-my-test-package (npm) 2026-03-24T16:01:46Z 2026-04-07T14:41:25Z
mal-2026-2392 Malicious code in stormbreaker-shade (npm) 2026-03-24T16:00:27Z 2026-04-07T14:41:25Z
mal-2026-2391 Malicious code in ssr-catalogue-sfcc (npm) 2026-03-24T16:00:16Z 2026-04-07T14:41:25Z
mal-2026-2390 Malicious code in ssh-common (npm) 2026-03-24T16:00:14Z 2026-04-07T14:41:25Z
mal-2026-2389 Malicious code in spectral-module (npm) 2026-03-24T16:00:11Z 2026-04-07T14:41:25Z
mal-2026-2388 Malicious code in spectral-engine (npm) 2026-03-24T16:00:10Z 2026-04-07T14:41:25Z
mal-2026-2387 Malicious code in securefiles-common (npm) 2026-03-24T15:59:00Z 2026-04-07T14:41:24Z
mal-2026-2386 Malicious code in react-native-forter (npm) 2026-03-24T15:57:26Z 2026-04-07T14:41:24Z
mal-2026-2385 Malicious code in product-status (npm) 2026-03-24T15:56:11Z 2026-04-07T14:41:24Z
mal-2026-2384 Malicious code in piyush_test_vadapav (npm) 2026-03-24T15:55:29Z 2026-04-07T14:41:24Z
mal-2026-2383 Malicious code in phantom-module (npm) 2026-03-24T15:55:16Z 2026-04-07T14:41:24Z
ID Description Published Updated
wid-sec-w-2025-2885 Mozilla Firefox: Mehrere Schwachstellen 2025-12-18T23:00:00.000+00:00 2025-12-21T23:00:00.000+00:00
wid-sec-w-2025-2882 Red Hat Enterprise Linux (audiofile): Schwachstelle ermöglicht Denial of Service 2025-12-17T23:00:00.000+00:00 2026-01-05T23:00:00.000+00:00
wid-sec-w-2025-2881 Red Hat Enterprise Linux (multicluster global hub): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-12-17T23:00:00.000+00:00 2026-03-25T23:00:00.000+00:00
wid-sec-w-2025-2872 Drupal HTTP Client Manager: Schwachstelle ermöglicht Offenlegung von Informationen 2025-12-17T23:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2025-2871 GIMP: Mehrere Schwachstellen ermöglichen Codeausführung 2025-12-17T23:00:00.000+00:00 2026-02-23T23:00:00.000+00:00
wid-sec-w-2025-2868 Linux Kernel: Mehrere Schwachstellen 2025-12-16T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2867 HPE OneView: Schwachstelle ermöglicht Codeausführung 2025-12-16T23:00:00.000+00:00 2026-01-07T23:00:00.000+00:00
wid-sec-w-2025-2866 Dropbear SSH: Schwachstelle ermöglicht Erlangen von Administratorrechten 2025-12-16T23:00:00.000+00:00 2025-12-21T23:00:00.000+00:00
wid-sec-w-2025-2860 JetBrains TeamCity: Mehrere Schwachstellen 2025-12-16T23:00:00.000+00:00 2025-12-17T23:00:00.000+00:00
wid-sec-w-2025-2858 Google Chrome/Microsoft Edge: Mehrere Schwachstellen 2025-12-16T23:00:00.000+00:00 2025-12-21T23:00:00.000+00:00
wid-sec-w-2025-2857 Apache Commons Text: Schwachstelle ermöglicht Codeausführung 2025-12-16T23:00:00.000+00:00 2025-12-16T23:00:00.000+00:00
wid-sec-w-2025-2854 Roundcube: Mehrere Schwachstellen 2025-12-15T23:00:00.000+00:00 2026-03-08T23:00:00.000+00:00
wid-sec-w-2025-2849 Red Hat Enterprise Linux (Keylime): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-12-15T23:00:00.000+00:00 2025-12-21T23:00:00.000+00:00
wid-sec-w-2025-2846 strongSwan (NetworkManager-Plugin): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-12-14T23:00:00.000+00:00 2026-03-08T23:00:00.000+00:00
wid-sec-w-2025-2840 Exim: Schwachstelle ermöglicht Codeausführung 2025-12-14T23:00:00.000+00:00 2026-01-04T23:00:00.000+00:00
wid-sec-w-2025-2836 Apple iOS und iPadOS: Mehrere Schwachstellen 2025-12-14T23:00:00.000+00:00 2026-02-11T23:00:00.000+00:00
wid-sec-w-2025-2830 Red Hat Enterprise Linux (libsoup): Schwachstelle ermöglicht Denial of Service 2025-12-11T23:00:00.000+00:00 2026-01-05T23:00:00.000+00:00
wid-sec-w-2025-2825 MediaWiki: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2025-12-10T23:00:00.000+00:00 2025-12-30T23:00:00.000+00:00
wid-sec-w-2025-2823 Drupal (Acquia Content Hub): Schwachstelle ermöglicht Darstellen falscher Informationen 2025-12-10T23:00:00.000+00:00 2026-01-28T23:00:00.000+00:00
wid-sec-w-2025-2816 ImageMagick: Schwachstelle ermöglicht Offenlegung von Informationen 2025-12-10T23:00:00.000+00:00 2026-01-05T23:00:00.000+00:00
wid-sec-w-2025-2814 Google Chrome/Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2025-12-10T23:00:00.000+00:00 2025-12-21T23:00:00.000+00:00
wid-sec-w-2025-2812 Mozilla Firefox: Mehrere Schwachstellen 2025-12-09T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2025-2807 TianoCore EDK2: Schwachstelle ermöglicht Offenlegung von Informationen 2025-12-09T23:00:00.000+00:00 2026-01-06T23:00:00.000+00:00
wid-sec-w-2025-2805 TianoCore EDK2: Schwachstelle ermöglicht Codeausführung 2025-12-09T23:00:00.000+00:00 2026-01-05T23:00:00.000+00:00
wid-sec-w-2025-2802 Notepad++: Schwachstelle ermöglicht Codeausführung 2025-12-09T23:00:00.000+00:00 2026-02-03T23:00:00.000+00:00
wid-sec-w-2025-2798 Red Hat OpenShift Service Mesh: Mehrere Schwachstellen 2025-12-09T23:00:00.000+00:00 2026-02-16T23:00:00.000+00:00
wid-sec-w-2025-2789 Adobe Experience Manager: Mehrere Schwachstellen 2025-12-09T23:00:00.000+00:00 2025-12-10T23:00:00.000+00:00
wid-sec-w-2025-2781 Microsoft Windows: Mehrere Schwachstellen 2025-12-09T23:00:00.000+00:00 2026-01-19T23:00:00.000+00:00
wid-sec-w-2025-2765 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-12-08T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2759 IBM WebSphere Application Server: Schwachstelle ermöglicht Cross-Site Scripting 2025-12-08T23:00:00.000+00:00 2026-01-07T23:00:00.000+00:00
ID Description Published Updated
icsa-25-226-21 Siemens BFCClient 2025-08-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-25-226-20 Siemens RUGGEDCOM ROX II 2025-08-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-25-226-19 Siemens SINUMERIK 2025-08-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-25-226-18 Siemens SIMOTION SCOUT, SIMOTION SCOUT TIA, and SINAMICS STARTER 2025-08-12T00:00:00.000000Z 2025-10-14T00:00:00.000000Z
icsa-25-226-17 Siemens SINEC Traffic Analyzer 2025-08-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-25-226-16 Siemens SICAM Q100/Q200 2025-08-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-25-226-15 Siemens SINEC OS 2025-08-12T00:00:00.000000Z 2026-02-25T07:00:00.000000Z
icsa-25-226-14 Siemens RUGGEDCOM ROX II 2025-08-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-25-226-13 Siemens SIMATIC RTLS Locating Manager 2025-08-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-25-226-12 Siemens SIPROTEC 4 and SIPROTEC 4 Compact 2025-08-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-25-226-11 Siemens SIMATIC S7-PLCSIM 2025-08-12T00:00:00.000000Z 2025-12-09T00:00:00.000000Z
icsa-25-226-10 Siemens SIPROTEC 5 2025-08-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-25-226-09 Siemens RUGGEDCOM APE1808 2025-08-12T00:00:00.000000Z 2026-01-14T22:05:42.880807Z
icsa-25-226-08 Siemens RUGGEDCOM CROSSBOW Station Access Controller 2025-08-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-25-226-07 Siemens Third-Party Components in SINEC OS 2025-08-12T00:00:00.000000Z 2026-02-25T07:00:00.000000Z
icsa-25-226-06 Siemens Opcenter Quality 2025-08-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-25-226-05 Siemens WIBU CodeMeter Runtime 2025-08-12T00:00:00.000000Z 2025-09-09T00:00:00.000000Z
icsa-25-226-04 Siemens Simcenter Femap 2025-08-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-25-226-03 Siemens SIMATIC S7-PLCSIM 2025-08-12T00:00:00.000000Z 2025-12-09T00:00:00.000000Z
icsa-25-226-02 Siemens COMOS 2025-08-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-25-226-01 Siemens SIMATIC RTLS Locating Manager 2025-08-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
icsa-25-219-08 Yealink IP Phones and RPS (Redirect and Provisioning Service) 2025-08-07T06:00:00.000000Z 2025-08-07T06:00:00.000000Z
icsa-25-219-07 EG4 Electronics EG4 Inverters (Update B) 2025-08-07T06:00:00.000000Z 2025-09-09T06:00:00.000000Z
icsa-25-219-05 Packet Power EMX and EG 2025-08-07T06:00:00.000000Z 2025-08-07T06:00:00.000000Z
icsa-25-219-04 Rockwell Automation Arena 2025-08-07T06:00:00.000000Z 2025-08-07T06:00:00.000000Z
icsa-25-219-03 Burk Technology ARC Solo 2025-08-07T06:00:00.000000Z 2025-08-07T06:00:00.000000Z
icsa-25-219-02 Johnson Controls FX Server, FX80 and FX90 (Update A) 2025-08-07T06:00:00.000000Z 2025-12-04T07:00:00.000000Z
icsa-25-219-01 Delta Electronics DIAView 2025-08-07T06:00:00.000000Z 2025-08-07T06:00:00.000000Z
icsa-25-219-06 Dreame Technology iOS and Android Mobile Applications 2025-08-07T04:00:00.000000Z 2025-08-07T04:00:00.000000Z
va-25-219-01 Tyler Technologies ERP Pro 9 2025-08-07T00:00:00Z 2025-08-07T00:00:00Z
ID Description Published Updated
cisco-sa-dnac-ssh-e4uodasj Cisco Catalyst Center Static SSH Host Key Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-cpp-vfr-dos-nhhkggo Cisco IOS XE Software IPv4 Fragmentation Reassembly Denial of Service Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-c9800-cwa-acl-npsbhsna Cisco IOS XE Software for Wireless Controllers CWA Pre-Authentication ACL Bypass Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-pak-mem-exhst-3ke9fefy Cisco IOS XR Software UDP Packet Memory Exhaustion Vulnerability 2024-09-11T16:00:00+00:00 2024-09-11T16:00:00+00:00
cisco-sa-nso-auth-bypass-qnteesp Multiple Cisco Products Web-Based Management Interface Privilege Escalation Vulnerability 2024-09-11T16:00:00+00:00 2024-09-25T13:05:54+00:00
cisco-sa-l2services-2mvhdnuc Cisco IOS XR Software Network Convergence System Denial of Service Vulnerability 2024-09-11T16:00:00+00:00 2024-09-11T16:00:00+00:00
cisco-sa-isis-xehpbvne Cisco IOS XR Software Segment Routing for Intermediate System-to-Intermediate System Denial of Service Vulnerability 2024-09-11T16:00:00+00:00 2024-09-11T16:00:00+00:00
cisco-sa-iosxr-xml-tcpdos-zexvru2s Cisco IOS XR Software Dedicated XML Agent TCP Denial of Service Vulnerability 2024-09-11T16:00:00+00:00 2024-09-11T16:00:00+00:00
cisco-sa-iosxr-shellutil-hcb278wd Cisco IOS XR Software CLI Arbitrary File Read Vulnerability 2024-09-11T16:00:00+00:00 2024-09-11T16:00:00+00:00
cisco-sa-iosxr-priv-esc-crg5vhcq Cisco IOS XR Software CLI Privilege Escalation Vulnerability 2024-09-11T16:00:00+00:00 2024-09-11T16:00:00+00:00
cisco-sa-iosxr-ponctlr-ci-ohchmsfl Cisco Routed Passive Optical Network Controller Vulnerabilities 2024-09-11T16:00:00+00:00 2024-09-11T16:00:00+00:00
cisco-sa-meraki-agent-dll-hj-ptn7ptke Cisco Meraki Systems Manager Agent for Windows Privilege Escalation Vulnerability 2024-09-04T16:00:00+00:00 2024-09-04T16:00:00+00:00
cisco-sa-ise-injection-6kn9tsxm Cisco Identity Services Engine Command Injection Vulnerability 2024-09-04T16:00:00+00:00 2024-09-04T16:00:00+00:00
cisco-sa-expressway-auth-kdfrcz2j Cisco Expressway Edge Improper Authorization Vulnerability 2024-09-04T16:00:00+00:00 2024-09-04T16:00:00+00:00
cisco-sa-duo-epic-info-sdlv6h8y Cisco Duo Epic for Hyperdrive Information Disclosure Vulnerability 2024-09-04T16:00:00+00:00 2024-09-04T16:00:00+00:00
cisco-sa-cslu-7ghmzwmw Cisco Smart Licensing Utility Vulnerabilities 2024-09-04T16:00:00+00:00 2025-04-04T17:44:00+00:00
cisco-sa-nxos-psbe-ce-yvbtn5du Cisco NX-OS Software Python Sandbox Escape Vulnerabilities 2024-08-28T16:00:00+00:00 2024-08-28T16:00:00+00:00
cisco-sa-nxos-dhcp6-relay-dos-zneaa6xn Cisco NX-OS Software DHCPv6 Relay Agent Denial of Service Vulnerability 2024-08-28T16:00:00+00:00 2024-08-28T16:00:00+00:00
cisco-sa-nxos-cmdinj-lq6jszhh Cisco NX-OS Software Command Injection Vulnerability 2024-08-28T16:00:00+00:00 2024-08-28T16:00:00+00:00
cisco-sa-nxos-bshacepe-bapehsx7 Cisco NX-OS Software Bash Arbitrary Code Execution and Privilege Escalation Vulnerabilities 2024-08-28T16:00:00+00:00 2024-08-28T16:00:00+00:00
cisco-sa-capic-priv-esc-uyqjjnuu Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability 2024-08-28T16:00:00+00:00 2024-08-28T16:00:00+00:00
cisco-sa-apic-cousmo-ubpbygbq Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability 2024-08-28T16:00:00+00:00 2024-08-28T16:00:00+00:00
cisco-sa-ise-rest-5bpkrntz Cisco Identity Services Engine REST API Blind SQL Injection Vulnerabilities 2024-08-21T16:00:00+00:00 2024-08-22T15:15:53+00:00
cisco-sa-ise-info-exp-vdf8jbyk Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability 2024-08-21T16:00:00+00:00 2024-09-05T13:14:02+00:00
cisco-sa-ise-csrf-y4zuz5rj Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability 2024-08-21T16:00:00+00:00 2024-08-21T16:00:00+00:00
cisco-sa-cucm-xss-9zmfhyz Cisco Unified Communications Manager Cross-Site Scripting Vulnerability 2024-08-21T16:00:00+00:00 2024-09-20T15:48:56+00:00
cisco-sa-cucm-dos-kkhq43we Cisco Unified Communications Manager Denial of Service Vulnerability 2024-08-21T16:00:00+00:00 2024-08-21T16:00:00+00:00
cisco-sa-spa-http-vulns-rjzmx2xz Cisco Small Business SPA300 Series and SPA500 Series IP Phones Web UI Vulnerabilities 2024-08-07T16:00:00+00:00 2024-08-07T16:00:00+00:00
cisco-sa-ise-xss-v2bm9jcy Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities 2024-08-07T16:00:00+00:00 2024-08-07T16:00:00+00:00
cisco-sa-webex-app-zjnm8x8j Cisco Webex App Vulnerabilities 2024-07-17T16:00:00+00:00 2024-07-17T16:00:00+00:00
ID Description Published Updated
msrc_cve-2026-23367 wifi: radiotap: reject radiotap with unknown bits 2026-03-02T00:00:00.000Z 2026-03-27T14:44:07.000Z
msrc_cve-2026-23365 net: usb: kalmia: validate USB endpoints 2026-03-02T00:00:00.000Z 2026-03-27T14:44:33.000Z
msrc_cve-2026-23364 ksmbd: Compare MACs in constant time 2026-03-02T00:00:00.000Z 2026-03-27T14:41:20.000Z
msrc_cve-2026-23361 PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry 2026-03-02T00:00:00.000Z 2026-03-31T14:38:36.000Z
msrc_cve-2026-23359 bpf: Fix stack-out-of-bounds write in devmap 2026-03-02T00:00:00.000Z 2026-03-27T14:40:21.000Z
msrc_cve-2026-23357 can: mcp251x: fix deadlock in error path of mcp251x_open 2026-03-02T00:00:00.000Z 2026-03-27T14:42:33.000Z
msrc_cve-2026-23356 drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() 2026-03-02T00:00:00.000Z 2026-03-27T14:43:54.000Z
msrc_cve-2026-23352 x86/efi: defer freeing of boot services memory 2026-03-02T00:00:00.000Z 2026-03-27T14:41:33.000Z
msrc_cve-2026-23351 netfilter: nft_set_pipapo: split gc into unlink and reclaim phase 2026-03-02T00:00:00.000Z 2026-03-27T14:42:20.000Z
msrc_cve-2026-23348 cxl: Fix race of nvdimm_bus object when creating nvdimm objects 2026-03-02T00:00:00.000Z 2026-03-31T14:43:33.000Z
msrc_cve-2026-23347 can: usb: f81604: correctly anchor the urb in the read bulk callback 2026-03-02T00:00:00.000Z 2026-03-27T14:43:34.000Z
msrc_cve-2026-23346 arm64: io: Extract user memory type in ioremap_prot() 2026-03-02T00:00:00.000Z 2026-03-31T14:43:09.000Z
msrc_cve-2026-23343 xdp: produce a warning when calculated tailroom is negative 2026-03-02T00:00:00.000Z 2026-03-27T14:44:00.000Z
msrc_cve-2026-23340 net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs 2026-03-02T00:00:00.000Z 2026-03-27T14:42:13.000Z
msrc_cve-2026-23339 nfc: nci: free skb on nci_transceive early error paths 2026-03-02T00:00:00.000Z 2026-03-27T01:36:59.000Z
msrc_cve-2026-23336 wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() 2026-03-02T00:00:00.000Z 2026-03-27T14:42:47.000Z
msrc_cve-2026-23335 RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() 2026-03-02T00:00:00.000Z 2026-03-27T01:37:07.000Z
msrc_cve-2026-23334 can: usb: f81604: handle short interrupt urb messages properly 2026-03-02T00:00:00.000Z 2026-03-27T14:41:40.000Z
msrc_cve-2026-23333 netfilter: nft_set_rbtree: validate open interval overlap 2026-03-02T00:00:00.000Z 2026-03-31T14:37:18.000Z
msrc_cve-2026-23330 nfc: nci: complete pending data exchange on device close 2026-03-02T00:00:00.000Z 2026-03-27T01:36:13.000Z
msrc_cve-2026-23327 cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() 2026-03-02T00:00:00.000Z 2026-03-27T01:37:50.000Z
msrc_cve-2026-23325 wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() 2026-03-02T00:00:00.000Z 2026-03-27T01:36:22.000Z
msrc_cve-2026-23324 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback 2026-03-02T00:00:00.000Z 2026-03-27T14:44:14.000Z
msrc_cve-2026-23320 usb: gadget: f_ncm: align net_device lifecycle with bind/unbind 2026-03-02T00:00:00.000Z 2026-03-31T14:44:36.000Z
msrc_cve-2026-23319 bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim 2026-03-02T00:00:00.000Z 2026-03-27T14:42:40.000Z
msrc_cve-2026-23318 ALSA: usb-audio: Use correct version for UAC3 header validation 2026-03-02T00:00:00.000Z 2026-03-27T14:40:28.000Z
msrc_cve-2026-23317 drm/vmwgfx: Return the correct value in vmw_translate_ptr functions 2026-03-02T00:00:00.000Z 2026-03-27T14:43:27.000Z
msrc_cve-2026-23315 wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() 2026-03-02T00:00:00.000Z 2026-03-27T14:39:35.000Z
msrc_cve-2026-23313 i40e: Fix preempt count leak in napi poll tracepoint 2026-03-02T00:00:00.000Z 2026-03-31T14:40:37.000Z
msrc_cve-2026-23312 net: usb: kaweth: validate USB endpoints 2026-03-02T00:00:00.000Z 2026-03-27T14:39:48.000Z
ID Description Published Updated
ncsc-2025-0186 Kwetsbaarheden verholpen in SAP Producten 2025-06-10T10:15:56.898255Z 2025-06-10T10:15:56.898255Z
ncsc-2025-0185 Kwetsbaarheden verholpen in Google Android en Samsung Mobile 2025-06-10T07:19:02.701613Z 2025-06-10T07:19:02.701613Z
ncsc-2025-0184 Kwetsbaarheden verholpen in HPE StoreOnce Software 2025-06-05T10:37:04.196801Z 2025-06-05T10:37:04.196801Z
ncsc-2025-0183 Kwetsbaarheid verholpen in Cisco Identity Services Engine voor cloudplatformen 2025-06-05T10:25:46.291683Z 2025-06-05T10:25:46.291683Z
ncsc-2025-0182 Kwetsbaarheden verholpen in Google Chrome en Microsoft Edge 2025-06-03T07:52:36.009178Z 2025-06-10T18:44:36.060357Z
ncsc-2025-0181 Kwetsbaarheid verholpen in Roundcube Webmail 2025-06-02T09:04:58.900416Z 2025-06-05T14:19:00.303593Z
ncsc-2025-0180 Kwetsbaarheid verholpen in IBM Tivoli Monitoring 2025-06-02T09:00:25.515472Z 2025-06-02T09:00:25.515472Z
ncsc-2025-0179 Kwetsbaarheid verholpen in Siemens SiPass Integrated 2025-05-27T11:42:46.878569Z 2025-05-27T11:42:46.878569Z
ncsc-2025-0178 Kwetsbaarheden verholpen in Infoblox NETMRI 2025-05-23T08:55:37.586046Z 2025-05-23T08:55:37.586046Z
ncsc-2025-0177 Kwetsbaarheden verholpen in ABB ASPECT-productlijn 2025-05-23T08:40:56.272804Z 2025-05-23T08:40:56.272804Z
ncsc-2025-0176 Kwetsbaarheden verholpen in GitLab 2025-05-23T08:38:34.688022Z 2025-05-23T08:38:34.688022Z
ncsc-2025-0175 Kwetsbaarheden verholpen in Trend Micro Apex Central 2025-05-23T08:28:52.215347Z 2025-05-23T08:28:52.215347Z
ncsc-2025-0174 Kwetsbaarheden verholpen in Cisco Unified Intelligence Center 2025-05-22T08:14:14.245836Z 2025-05-22T08:14:14.245836Z
ncsc-2025-0173 Kwetsbaarheid verholpen in Cisco Identity Services Engine 2025-05-22T08:14:06.046824Z 2025-05-22T08:14:06.046824Z
ncsc-2025-0172 Kwetsbaarheden verholpen in Cisco Webex 2025-05-22T08:13:51.228348Z 2025-05-22T08:13:51.228348Z
ncsc-2025-0171 Kwetsbaarheden verholpen in VMware producten 2025-05-21T13:08:22.714183Z 2025-05-21T13:08:22.714183Z
ncsc-2025-0170 Kwetsbaarheden verholpen in VMware Cloud Foundation 2025-05-21T09:12:05.676292Z 2025-05-21T09:12:05.676292Z
ncsc-2025-0169 Kwetsbaarheden verholpen in Google Chrome 2025-05-16T12:41:47.685095Z 2025-05-16T12:41:47.685095Z
ncsc-2025-0168 Kwetsbaarheid verholpen in FortiVoice 2025-05-14T13:50:54.001151Z 2025-05-14T13:50:54.001151Z
ncsc-2025-0167 Kwetsbaarheden verholpen in Zoho ManageEngine 2025-05-14T13:19:58.768414Z 2025-05-14T13:19:58.768414Z
ncsc-2025-0166 Kwetsbaarheden verholpen in Fortinet producten 2025-05-14T08:41:08.980708Z 2025-05-14T08:41:08.980708Z
ncsc-2025-0165 Kwetsbaarheid verholpen in Adobe Illustrator 2025-05-14T08:25:17.869407Z 2025-05-14T08:25:17.869407Z
ncsc-2025-0164 Kwetsbaarheden verholpen in Adobe Photoshop 2025-05-14T08:24:02.186984Z 2025-05-14T08:24:02.186984Z
ncsc-2025-0163 Kwetsbaarheden verholpen in Adobe Animate 2025-05-14T08:21:49.917725Z 2025-05-14T08:21:49.917725Z
ncsc-2025-0162 Kwetsbaarheden verholpen in Adobe ColdFusion 2025-05-14T08:18:54.775740Z 2025-05-14T08:18:54.775740Z
ncsc-2025-0161 Kwetsbaarheid verholpen in Ivanti Neurons for ITSM 2025-05-14T08:16:04.867590Z 2025-05-14T08:16:04.867590Z
ncsc-2025-0160 Kwetsbaarheden verholpen in Siemens producten 2025-05-14T07:13:32.957900Z 2025-05-14T07:13:32.957900Z
ncsc-2025-0159 Kwetsbaarheden verholpen in Microsoft Windows 2025-05-13T19:47:12.555983Z 2025-05-13T19:47:12.555983Z
ncsc-2025-0158 Kwetsbaarheden verholpen in Microsoft Edge 2025-05-13T19:17:52.478234Z 2025-05-13T19:17:52.478234Z
ncsc-2025-0157 Kwetsbaarheden verholpen in Microsoft Defender 2025-05-13T19:14:25.545635Z 2025-05-13T19:14:25.545635Z
ID Description Published Updated
opensuse-su-2026:20329-1 Security update for gstreamer-rtsp-server, gstreamer-plugins-ugly, gstreamer-plugins-rs, gstreamer-plugins-libav, gstreamer-plugins-good, gstreamer-plugins-base, gstreamer-plugins-bad, gstreamer-docs, gstreamer-devtools, gstreamer 2026-03-05T18:13:13Z 2026-03-05T18:13:13Z
opensuse-su-2026:20322-1 Security update for python-joserfc 2026-03-05T14:32:35Z 2026-03-05T14:32:35Z
opensuse-su-2026:20327-1 Security update for helm 2026-03-05T14:27:21Z 2026-03-05T14:27:21Z
opensuse-su-2026:20326-1 Security update for virtiofsd 2026-03-05T14:23:19Z 2026-03-05T14:23:19Z
opensuse-ru-2026:20325-1 Recommended update for shim 2026-03-05T14:21:04Z 2026-03-05T14:21:04Z
opensuse-su-2026:10294-1 telemetrygen-0.147.0-1.1 on GA media 2026-03-05T00:00:00Z 2026-03-05T00:00:00Z
opensuse-su-2026:10293-1 python311-joserfc-1.6.3-1.1 on GA media 2026-03-05T00:00:00Z 2026-03-05T00:00:00Z
opensuse-su-2026:10292-1 python311-Django-5.2.12-1.1 on GA media 2026-03-05T00:00:00Z 2026-03-05T00:00:00Z
opensuse-su-2026:10291-1 libsoup-2_4-1-2.74.3-18.1 on GA media 2026-03-05T00:00:00Z 2026-03-05T00:00:00Z
opensuse-su-2026:10290-1 heroic-games-launcher-2.20.1-2.1 on GA media 2026-03-05T00:00:00Z 2026-03-05T00:00:00Z
opensuse-su-2026:10289-1 freetype2-devel-2.14.2-1.1 on GA media 2026-03-05T00:00:00Z 2026-03-05T00:00:00Z
opensuse-su-2026:20320-1 Security update for freerdp2 2026-03-04T17:52:31Z 2026-03-04T17:52:31Z
opensuse-su-2026:20312-1 Security update for libxml2, libxslt 2026-03-04T10:51:24Z 2026-03-04T10:51:24Z
opensuse-su-2026:10288-1 libblkid-devel-2.41.3-4.1 on GA media 2026-03-04T00:00:00Z 2026-03-04T00:00:00Z
opensuse-su-2026:10287-1 sdbootutil-1+git20260303.90d816d-1.1 on GA media 2026-03-04T00:00:00Z 2026-03-04T00:00:00Z
opensuse-su-2026:10286-1 ruby4.0-rubygem-rack-2.2-2.2.22-1.1 on GA media 2026-03-04T00:00:00Z 2026-03-04T00:00:00Z
opensuse-su-2026:10285-1 python311-pillow-heif-1.3.0-1.1 on GA media 2026-03-04T00:00:00Z 2026-03-04T00:00:00Z
opensuse-su-2026:10284-1 python311-PyPDF2-2.11.1-5.1 on GA media 2026-03-04T00:00:00Z 2026-03-04T00:00:00Z
opensuse-su-2026:10283-1 python313-Django6-6.0.3-1.1 on GA media 2026-03-04T00:00:00Z 2026-03-04T00:00:00Z
opensuse-su-2026:10282-1 python311-Django4-4.2.29-1.1 on GA media 2026-03-04T00:00:00Z 2026-03-04T00:00:00Z
opensuse-su-2026:10281-1 mchange-commons-0.4.0-1.1 on GA media 2026-03-04T00:00:00Z 2026-03-04T00:00:00Z
opensuse-su-2026:10280-1 incus-6.22-1.1 on GA media 2026-03-04T00:00:00Z 2026-03-04T00:00:00Z
opensuse-su-2026:10279-1 c3p0-0.12.0-1.1 on GA media 2026-03-04T00:00:00Z 2026-03-04T00:00:00Z
opensuse-su-2026:10278-1 ImageMagick-7.1.2.15-2.1 on GA media 2026-03-04T00:00:00Z 2026-03-04T00:00:00Z
opensuse-su-2026:20308-1 Security update for go1.24-openssl 2026-03-03T17:46:58Z 2026-03-03T17:46:58Z
opensuse-su-2026:20306-1 Security update for expat 2026-03-03T16:13:34Z 2026-03-03T16:13:34Z
opensuse-su-2026:20305-1 Security update for podman 2026-03-03T16:13:34Z 2026-03-03T16:13:34Z
opensuse-su-2026:20318-1 Security update for gitea-tea 2026-03-03T14:44:11Z 2026-03-03T14:44:11Z
opensuse-su-2026:20301-1 Security update for go1.25-openssl 2026-03-03T09:04:46Z 2026-03-03T09:04:46Z
opensuse-su-2026:20298-1 Security update for assertj-core 2026-03-02T16:00:38Z 2026-03-02T16:00:38Z
ID Description Published Updated
rhsa-2026:5391 Red Hat Security Advisory: gimp security update 2026-03-23T15:14:34+00:00 2026-03-23T19:18:22+00:00
rhsa-2026:5393 Red Hat Security Advisory: python security update 2026-03-23T14:28:39+00:00 2026-04-09T15:17:08+00:00
rhsa-2026:5394 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 director Operator container images 2026-03-23T13:04:11+00:00 2026-04-13T10:27:59+00:00
rhsa-2026:5389 Red Hat Security Advisory: gimp security update 2026-03-23T13:03:19+00:00 2026-03-23T19:18:24+00:00
rhsa-2026:5390 Red Hat Security Advisory: gimp security update 2026-03-23T13:02:14+00:00 2026-03-23T19:18:24+00:00
rhsa-2026:5388 Red Hat Security Advisory: gimp security update 2026-03-23T12:57:44+00:00 2026-03-23T19:18:19+00:00
rhsa-2026:5327 Red Hat Security Advisory: osbuild-composer security update 2026-03-23T07:40:40+00:00 2026-04-13T10:28:00+00:00
rhsa-2026:5326 Red Hat Security Advisory: libvpx security update 2026-03-23T07:17:43+00:00 2026-03-23T13:12:21+00:00
rhsa-2026:5324 Red Hat Security Advisory: libvpx security update 2026-03-23T06:53:03+00:00 2026-03-23T13:12:20+00:00
rhsa-2026:5320 Red Hat Security Advisory: libvpx security update 2026-03-23T06:51:33+00:00 2026-03-23T13:12:23+00:00
rhsa-2026:5323 Red Hat Security Advisory: libvpx security update 2026-03-23T06:44:58+00:00 2026-03-23T13:12:21+00:00
rhsa-2026:5319 Red Hat Security Advisory: libvpx security update 2026-03-23T06:27:12+00:00 2026-03-23T13:12:23+00:00
rhsa-2026:5315 Red Hat Security Advisory: python3.12 security update 2026-03-23T05:31:13+00:00 2026-04-09T15:17:07+00:00
rhsa-2026:5231 Red Hat Security Advisory: libvpx security update 2026-03-23T04:03:52+00:00 2026-03-23T13:12:19+00:00
rhsa-2026:5226 Red Hat Security Advisory: python3.9 security update 2026-03-23T04:02:32+00:00 2026-04-09T15:17:07+00:00
rhsa-2026:5225 Red Hat Security Advisory: python3.9 security update 2026-03-23T03:31:47+00:00 2026-04-09T15:17:07+00:00
rhsa-2026:5229 Red Hat Security Advisory: libvpx security update 2026-03-23T03:09:47+00:00 2026-03-23T13:12:21+00:00
rhsa-2026:5218 Red Hat Security Advisory: python3.9 security update 2026-03-23T02:53:27+00:00 2026-04-09T15:17:05+00:00
rhsa-2026:5233 Red Hat Security Advisory: grub2 security update 2026-03-23T02:43:17+00:00 2026-04-09T14:37:34+00:00
rhsa-2026:5215 Red Hat Security Advisory: python3 security update 2026-03-23T02:43:07+00:00 2026-04-09T15:17:04+00:00
rhsa-2026:5230 Red Hat Security Advisory: libvpx security update 2026-03-23T02:43:01+00:00 2026-03-23T13:12:21+00:00
rhsa-2026:5222 Red Hat Security Advisory: podman security update 2026-03-23T02:37:08+00:00 2026-04-02T16:47:09+00:00
rhsa-2026:5234 Red Hat Security Advisory: skopeo security update 2026-03-23T02:36:02+00:00 2026-04-13T08:42:28+00:00
rhsa-2026:5224 Red Hat Security Advisory: capstone security update 2026-03-23T02:35:37+00:00 2026-04-08T14:06:57+00:00
rhsa-2026:5219 Red Hat Security Advisory: python3.9 security update 2026-03-23T02:19:02+00:00 2026-04-09T15:17:06+00:00
rhsa-2026:5223 Red Hat Security Advisory: python3.11 security update 2026-03-23T02:17:22+00:00 2026-04-09T15:17:07+00:00
rhsa-2026:5227 Red Hat Security Advisory: libvpx security update 2026-03-23T02:13:52+00:00 2026-03-23T13:12:22+00:00
rhsa-2026:5228 Red Hat Security Advisory: libvpx security update 2026-03-23T02:09:07+00:00 2026-03-23T13:12:21+00:00
rhsa-2026:5221 Red Hat Security Advisory: python3 security update 2026-03-23T01:42:52+00:00 2026-04-09T15:17:06+00:00
rhsa-2026:5214 Red Hat Security Advisory: compat-openssl11 security update 2026-03-23T01:41:57+00:00 2026-04-09T23:06:45+00:00
ID Description Published Updated
ssa-699386 SSA-699386: Multiple Vulnerabilities in SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family before V4.5 2023-11-14T00:00:00Z 2024-03-12T00:00:00Z
ssa-625850 SSA-625850: Multiple WIBU Systems CodeMeter Vulnerabilities Affecting the Desigo CC Product Family and SENTRON powermanager 2023-11-14T00:00:00Z 2024-08-13T00:00:00Z
ssa-617233 SSA-617233: Urgent/11 TCP/IP Stack Vulnerabilities in SIPROTEC 4 7SJ66 Devices 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-478780 SSA-478780: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-457702 SSA-457702: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W700 Product Family 2023-11-14T00:00:00Z 2024-04-09T00:00:00Z
ssa-456933 SSA-456933: Multiple Vulnerabilities in SIMATIC PCS neo before V4.1 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-292063 SSA-292063: Multiple Vulnerabilities in Nozomi Guardian/CMC before 22.6.3 and 23.1.0 on RUGGEDCOM APE1808 devices 2023-11-14T00:00:00Z 2024-05-14T00:00:00Z
ssa-268517 SSA-268517: Code Execution Vulnerability (libwebp CVE-2023-4863) in Mendix Studio Pro 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-197270 SSA-197270: Information Disclosure Vulnerability in Siemens OPC UA Modeling Editor (SiOME) 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-150063 SSA-150063: Multiple Vulnerabilities in SINEC PNI before V2.0 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-137900 SSA-137900: Multiple Vulnerabilities in COMOS 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-099606 SSA-099606: Multiple Vulnerabilities in SIMATIC MV500 before V3.3.5 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-084182 SSA-084182: Privilege Escalation Vulnerability in Mendix Runtime 2023-11-14T00:00:00Z 2023-11-14T00:00:00Z
ssa-843070 SSA-843070: Multiple Vulnerabilities in SCALANCE W1750D 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-829656 SSA-829656: Stack Overflow Vulnerability in Xpedition Layout Browser 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-784849 SSA-784849: Direct Memory Access Vulnerabilities in SIMATIC CP Devices 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-770890 SSA-770890: Path Traversal Vulnerability in the Web Server of CPCI85 Firmware of SICAM A8000 Devices 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-647455 SSA-647455: Multiple Vulnerabilities in Nozomi Guardian/CMC before 22.6.2 on RUGGEDCOM APE1808 devices 2023-10-10T00:00:00Z 2024-05-14T00:00:00Z
ssa-594373 SSA-594373: Cross-Site-Scripting (XSS) Vulnerability in SINEMA Server V14 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-524778 SSA-524778: File Parsing Vulnerabilities in Tecnomatix Plant Simulation 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-386812 SSA-386812: Remote Code Execution Vulnerability in Simcenter Amesim before V2021.1 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-295483 SSA-295483: User Enumeration Vulnerability in Mendix Forgot Password Module 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-160243 SSA-160243: Multiple Vulnerabilities in SINEC NMS before V2.0 2023-10-10T00:00:00Z 2024-07-09T00:00:00Z
ssa-134651 SSA-134651: Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices 2023-10-10T00:00:00Z 2023-10-10T00:00:00Z
ssa-035466 SSA-035466: Incorrect Permission Assignment in SICAM PAS/PQS 2023-10-10T00:00:00Z 2024-06-11T00:00:00Z
ssa-646240 SSA-646240: Sensitive Information Disclosure in SIMATIC PCS neo Administration Console 2023-09-14T00:00:00Z 2023-09-14T00:00:00Z
ssa-357182 SSA-357182: Local Privilege Escalation Vulnerability in Spectrum Power 7 2023-09-14T00:00:00Z 2023-09-14T00:00:00Z
ssa-981975 SSA-981975: Information Disclosure Vulnerability in Intel-CPUs (CVE-2022-40982) Impacting SIMATIC IPCs 2023-09-12T00:00:00Z 2024-12-10T00:00:00Z
ssa-957369 SSA-957369: Insyde BIOS Vulnerabilities in RUGGEDCOM APE1808 Product Family 2023-09-12T00:00:00Z 2023-09-12T00:00:00Z
ssa-711309 SSA-711309: Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products 2023-09-12T00:00:00Z 2025-11-11T00:00:00Z
ID Description Published Updated
suse-su-2026:0936-1 Security update for libssh 2026-03-20T07:46:48Z 2026-03-20T07:46:48Z
suse-su-2026:20916-1 Security update for vim 2026-03-20T03:15:49Z 2026-03-20T03:15:49Z
suse-su-2026:20759-1 Security update for vim 2026-03-20T03:15:49Z 2026-03-20T03:15:49Z
suse-su-2026:20915-1 Security update for gstreamer-plugins-ugly 2026-03-19T13:48:27Z 2026-03-19T13:48:27Z
suse-su-2026:20796-1 Security update for python311 2026-03-19T12:47:35Z 2026-03-19T12:47:35Z
suse-su-2026:20795-1 Security update for dpkg 2026-03-19T12:23:49Z 2026-03-19T12:23:49Z
suse-su-2026:20794-1 Security update for sqlite3 2026-03-19T12:20:26Z 2026-03-19T12:20:26Z
suse-su-2026:20767-1 Security update for libssh 2026-03-19T11:23:34Z 2026-03-19T11:23:34Z
suse-su-2026:20766-1 Security update for dpkg 2026-03-19T11:22:45Z 2026-03-19T11:22:45Z
suse-su-2026:0933-1 Security update for freerdp 2026-03-19T10:34:05Z 2026-03-19T10:34:05Z
suse-su-2026:0932-1 Security update for tomcat 2026-03-19T10:26:49Z 2026-03-19T10:26:49Z
suse-su-2026:20941-1 Security update for ucode-intel 2026-03-19T09:31:38Z 2026-03-19T09:31:38Z
suse-su-2026:20758-1 Security update for ucode-intel 2026-03-19T09:31:38Z 2026-03-19T09:31:38Z
suse-su-2026:0931-1 Security update for jq 2026-03-19T08:23:28Z 2026-03-19T08:23:28Z
suse-su-2026:20912-1 Security update for keylime 2026-03-19T08:18:07Z 2026-03-19T08:18:07Z
suse-su-2026:20913-1 Security update for libsodium 2026-03-19T08:17:20Z 2026-03-19T08:17:20Z
suse-su-2026:20756-1 Security update for libsodium 2026-03-19T08:17:20Z 2026-03-19T08:17:20Z
suse-su-2026:20911-1 Security update for poppler 2026-03-19T08:11:56Z 2026-03-19T08:11:56Z
suse-su-2026:20910-1 Security update for librsvg 2026-03-19T08:09:57Z 2026-03-19T08:09:57Z
suse-su-2026:20755-1 Security update for librsvg 2026-03-19T08:09:57Z 2026-03-19T08:09:57Z
suse-su-2026:0930-1 Security update for krb5-appl 2026-03-18T23:08:02Z 2026-03-18T23:08:02Z
suse-su-2026:20907-1 Security update for protobuf 2026-03-18T18:11:52Z 2026-03-18T18:11:52Z
suse-su-2026:20753-1 Security update for protobuf 2026-03-18T18:11:52Z 2026-03-18T18:11:52Z
suse-su-2026:20906-1 Security update for postgresql17 2026-03-18T15:32:41Z 2026-03-18T15:32:41Z
suse-su-2026:20905-1 Security update for busybox 2026-03-18T15:27:18Z 2026-03-18T15:27:18Z
suse-su-2026:20738-1 Security update for vim 2026-03-18T13:40:49Z 2026-03-18T13:40:49Z
suse-su-2026:20737-1 Security update for libsoup 2026-03-18T13:39:43Z 2026-03-18T13:39:43Z
suse-su-2026:0928-1 Security update for the Linux Kernel 2026-03-18T13:32:23Z 2026-03-18T13:32:23Z
suse-su-2026:20904-1 Security update for cosign 2026-03-18T11:27:44Z 2026-03-18T11:27:44Z
suse-su-2026:20903-1 Security update for libjxl 2026-03-18T10:12:38Z 2026-03-18T10:12:38Z
ID Description Published Updated
alsa-2026:0437 Important: buildah security update 2026-01-12T00:00:00Z 2026-01-16T15:38:30Z
alsa-2026:0436 Important: buildah security update 2026-01-12T00:00:00Z 2026-01-16T15:50:15Z
alsa-2026:0423 Important: libsoup3 security update 2026-01-12T00:00:00Z 2026-01-16T15:49:08Z
alsa-2026:0422 Important: libsoup security update 2026-01-12T00:00:00Z 2026-01-16T15:46:52Z
alsa-2026:0421 Important: libsoup security update 2026-01-12T00:00:00Z 2026-01-16T15:44:34Z
alsa-2026:0337 Moderate: openssl security update 2026-01-08T00:00:00Z 2026-01-16T15:42:22Z
alsa-2026:0312 Moderate: cups security update 2026-01-08T00:00:00Z 2026-01-16T15:40:37Z
alsa-2026:0247 Important: mariadb:10.11 security update 2026-01-07T00:00:00Z 2026-01-12T10:57:59Z
alsa-2026:0241 Important: libpng security update 2026-01-07T00:00:00Z 2026-01-07T21:34:12Z
alsa-2026:0238 Important: libpng security update 2026-01-07T00:00:00Z 2026-01-07T21:36:21Z
alsa-2026:0237 Important: libpng security update 2026-01-07T00:00:00Z 2026-01-07T21:38:33Z
alsa-2026:0233 Important: mariadb:10.5 security update 2026-01-07T00:00:00Z 2026-01-12T10:45:28Z
alsa-2026:0232 Important: mariadb:10.11 security update 2026-01-07T00:00:00Z 2026-01-12T10:48:54Z
alsa-2026:0225 Important: mariadb:10.3 security update 2026-01-07T00:00:00Z 2026-01-12T10:51:12Z
alsa-2026:0137 Important: mariadb security update 2026-01-06T00:00:00Z 2026-01-07T14:24:03Z
alsa-2026:0136 Important: mariadb10.11 security update 2026-01-06T00:00:00Z 2026-01-12T10:55:58Z
alsa-2026:0130 Moderate: poppler security update 2026-01-06T00:00:00Z 2026-01-07T14:26:34Z
alsa-2026:0128 Moderate: poppler security update 2026-01-06T00:00:00Z 2026-01-07T14:29:22Z
alsa-2026:0126 Moderate: poppler security update 2026-01-06T00:00:00Z 2026-01-07T14:21:37Z
alsa-2026:0125 Important: mingw-libpng security update 2026-01-06T00:00:00Z 2026-01-07T21:32:21Z
alsa-2026:0123 Moderate: python3.12 security update 2026-01-06T00:00:00Z 2026-01-07T14:18:43Z
alsa-2026:0108 Moderate: gcc-toolset-15-binutils security update 2026-01-06T00:00:00Z 2026-01-07T14:17:02Z
alsa-2026:0067 Moderate: tar security update 2026-01-05T00:00:00Z 2026-01-13T08:42:22Z
alsa-2026:0052 Moderate: gcc-toolset-14-binutils security update 2026-01-05T00:00:00Z 2026-01-05T20:18:34Z
alsa-2026:0026 Important: thunderbird security update 2026-01-05T00:00:00Z 2026-01-05T10:18:14Z
alsa-2026:0025 Important: thunderbird security update 2026-01-05T00:00:00Z 2026-01-05T10:10:00Z
alsa-2026:0002 Moderate: tar security update 2026-01-05T00:00:00Z 2026-01-05T09:20:37Z
alsa-2025:23948 Moderate: grafana security update 2025-12-22T00:00:00Z 2025-12-23T13:42:03Z
alsa-2025:23940 Moderate: python3.12 security update 2025-12-22T00:00:00Z 2025-12-23T05:59:49Z
alsa-2025:23932 Important: httpd security update 2025-12-22T00:00:00Z 2025-12-23T06:01:50Z
ID Description Published Updated
osv-2024-1266 UNKNOWN READ in llama_output_reserve 2024-11-03T00:14:31.568857Z 2024-11-03T00:14:31.569247Z
osv-2024-1261 Stack-buffer-overflow in _pcre2_compile_class_not_nested_16 2024-11-02T00:11:51.445365Z 2024-11-02T00:11:51.445768Z
osv-2024-1254 Security exception in org.apache.lucene.util.ArrayUtil.growExact 2024-11-01T00:07:39.301298Z 2026-02-26T14:30:06.734190Z
osv-2024-1253 Segv on unknown address in llama_output_reserve 2024-11-01T00:03:18.217276Z 2024-11-01T00:03:18.217677Z
osv-2023-1398 Heap-buffer-overflow in load_1 2024-11-01T00:02:38.719507Z 2024-11-01T00:02:38.719949Z
osv-2024-1251 UNKNOWN WRITE in s_DCTD_process 2024-11-01T00:02:31.749497Z 2025-04-29T14:29:01.935923Z
osv-2024-1249 Heap-buffer-overflow in extract_ice_option 2024-10-30T00:15:55.709182Z 2025-03-18T00:40:00.171776Z
osv-2024-1244 Heap-buffer-overflow in extract_fmtp 2024-10-27T00:10:45.337287Z 2024-11-06T14:24:14.483448Z
osv-2024-1241 Heap-buffer-overflow in polygonToCellsExperimental 2024-10-25T00:13:57.330581Z 2024-10-25T00:13:57.331154Z
osv-2024-1239 Heap-buffer-overflow in convsamp 2024-10-24T00:06:22.931512Z 2024-10-25T14:18:35.097668Z
osv-2024-1237 Use-of-uninitialized-value in jit_compile 2024-10-22T00:13:19.495791Z 2024-10-22T00:13:19.496460Z
osv-2024-1232 Segv on unknown address in cranelift_filetests::function_runner::Trampoline::call::hb2e77cf3a13ebaf4 2024-10-19T00:15:15.010866Z 2024-10-19T00:15:15.011237Z
osv-2024-1230 Heap-buffer-overflow in extract_rtpmap 2024-10-19T00:00:26.792754Z 2025-01-10T05:21:03.406469Z
osv-2024-1220 UNKNOWN READ in Assimp::NDOImporter::InternReadFile 2024-10-14T00:17:45.088625Z 2026-01-25T14:14:41.961973Z
osv-2024-1218 UNKNOWN READ in Poco::UTF16Encoding::queryConvert 2024-10-14T00:08:40.382545Z 2025-04-10T14:48:52.198172Z
osv-2024-1216 Use-of-uninitialized-value in Poco::Net::NTLMCredentials::parseChallengeMessage 2024-10-13T00:11:43.323181Z 2025-03-18T00:32:42.736858Z
osv-2024-1212 Heap-buffer-overflow in cram_encode_container 2024-10-11T00:16:27.350249Z 2024-10-11T00:16:27.350643Z
osv-2024-1210 Heap-buffer-overflow in parse_mixed_content 2024-10-11T00:15:50.054920Z 2025-01-10T05:11:11.351763Z
osv-2024-1209 Heap-use-after-free in xmlValidateOneElement 2024-10-11T00:15:43.610812Z 2025-03-18T00:30:11.577855Z
osv-2024-1206 Heap-buffer-overflow in extract_sendrecv_mode 2024-10-11T00:13:47.835312Z 2025-01-10T05:11:09.130549Z
osv-2024-1205 Memcpy-param-overlap in repeat 2024-10-11T00:12:59.211479Z 2025-06-02T14:22:48.890155Z
osv-2024-1203 Global-buffer-overflow in AnnouncePunctuation 2024-10-11T00:02:53.598773Z 2024-10-11T00:02:53.599146Z
osv-2024-1201 Heap-buffer-overflow in polygonToCellsExperimental 2024-10-11T00:02:38.496890Z 2024-10-11T00:02:38.497374Z
osv-2024-1200 UNKNOWN READ in eat_line 2024-10-11T00:02:19.537501Z 2025-01-10T05:09:26.885831Z
osv-2024-1191 Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII 2024-10-09T00:04:49.628226Z 2025-06-20T16:39:29.501730Z
osv-2024-1186 UNKNOWN READ in cfl_sds_len 2024-10-08T00:15:47.433219Z 2025-05-13T14:48:36.393777Z
osv-2024-1181 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr 2024-10-06T00:14:54.118103Z 2024-10-06T00:14:54.118486Z
osv-2024-1179 UNKNOWN READ in __dynamic_cast 2024-10-06T00:01:54.176437Z 2024-10-06T00:01:54.177068Z
osv-2024-1175 Use-of-uninitialized-value in mark_context 2024-10-04T00:14:55.661266Z 2024-10-04T00:14:55.661697Z
osv-2024-1164 Use-of-uninitialized-value in format_message 2024-10-02T00:13:05.449687Z 2025-04-05T14:45:16.595433Z
ID Description Published Updated
rustsec-2024-0387 `opentelemetry_api` has been merged into the `opentelemetry` crate 2024-07-03T12:00:00Z 2024-11-10T13:29:25Z
rustsec-2024-0347 Incorrect usage of `#[repr(packed)]` 2024-07-01T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2024-0346 Incorrect usage of `#[repr(packed)]` 2024-07-01T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2024-0388 `derivative` is unmaintained; consider using an alternative 2024-06-26T12:00:00Z 2024-11-10T13:34:40Z
rustsec-2024-0345 Low severity (DoS) vulnerability in sequoia-openpgp 2024-06-26T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2024-0395 The maintainer of chrono-english is unresponsive 2024-06-24T12:00:00Z 2024-11-10T20:38:56Z
rustsec-2024-0344 Timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub` 2024-06-18T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2024-0394 mmap unmaintained 2024-06-10T12:00:00Z 2024-11-10T14:06:58Z
rustsec-2024-0343 Reduced entropy due to inadequate character set usage 2024-06-03T12:00:00Z 2024-06-15T13:11:33Z
rustsec-2024-0353 Refs and paths with reserved Windows device names access the devices 2024-05-22T12:00:00Z 2024-07-08T15:14:36Z
rustsec-2024-0352 Refs and paths with reserved Windows device names access the devices 2024-05-22T12:00:00Z 2024-07-08T15:14:36Z
rustsec-2024-0351 Refs and paths with reserved Windows device names access the devices 2024-05-22T12:00:00Z 2024-07-08T15:14:36Z
rustsec-2024-0350 Traversal outside working tree enables arbitrary code execution 2024-05-22T12:00:00Z 2024-07-08T15:12:43Z
rustsec-2024-0349 Traversal outside working tree enables arbitrary code execution 2024-05-22T12:00:00Z 2024-07-08T15:12:43Z
rustsec-2024-0348 Traversal outside working tree enables arbitrary code execution 2024-05-22T12:00:00Z 2024-07-08T15:12:43Z
rustsec-2024-0406 BTreeMap memory leak when deallocating nodes with overflows 2024-05-17T12:00:00Z 2024-12-04T12:44:24Z
rustsec-2024-0340 Tor path lengths too short when "full Vanguards" configured 2024-05-15T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2024-0339 Tor path lengths too short when "Vanguards lite" configured 2024-05-15T12:00:00Z 2024-05-21T02:12:32Z
rustsec-2024-0342 Degraded secret zeroization capabilities 2024-05-02T12:00:00Z 2024-05-20T15:25:56Z
rustsec-2024-0338 Arithmetic overflows in cosmwasm-std 2024-04-24T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2024-0337 The crate `zip_next` has been renamed to `zip`. 2024-04-20T12:00:00Z 2024-04-24T14:13:51Z
rustsec-2024-0336 `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input 2024-04-19T12:00:00Z 2024-04-20T02:21:14Z
rustsec-2024-0335 gix-transport indirect code execution via malicious username 2024-04-13T12:00:00Z 2024-07-02T23:39:37Z
rustsec-2024-0333 `rsa-export` is unmaintained 2024-04-06T12:00:00Z 2024-04-12T16:29:46Z
rustsec-2024-0334 `libp2p-tokio-socks5` is unmaintained 2024-04-05T12:00:00Z 2024-04-12T16:31:39Z
rustsec-2024-0332 Degradation of service in h2 servers with CONTINUATION Flood 2024-04-03T12:00:00Z 2024-04-11T16:16:20Z
rustsec-2024-0441 Panic when using a dropped extenref-typed element segment 2024-04-02T12:00:00Z 2025-05-02T08:23:27Z
rustsec-2024-0331 Puccinier is unmainted. 2024-03-31T12:00:00Z 2024-03-31T14:44:37Z
rustsec-2024-0429 Unsoundness in `Iterator` and `DoubleEndedIterator` impls for `glib::VariantStrIter` 2024-03-30T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2024-0320 yaml-rust is unmaintained. 2024-03-20T12:00:00Z 2024-11-01T12:31:51Z
ID Description Published Updated
bit-kibana-2026-26935 Improper Input Validation in Kibana Leading to Denial of Service 2026-03-03T08:43:25.969Z 2026-03-03T09:19:06.344Z
bit-kibana-2026-26934 Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service 2026-03-03T08:43:24.256Z 2026-03-03T09:19:06.344Z
bit-elk-2026-26938 Improper Neutralization of Special Elements Used in a Template Engine in Kibana Workflows Leading to Server-Side Request Forgery (SSRF) 2026-03-03T08:40:14.378Z 2026-03-03T09:19:06.344Z
bit-elk-2026-26937 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service 2026-03-03T08:40:12.613Z 2026-03-03T09:19:06.344Z
bit-elk-2026-26936 Inefficient Regular Expression Complexity in Kibana Leading to Denial of Service 2026-03-03T08:40:11.205Z 2026-03-03T09:19:06.344Z
bit-elk-2026-26935 Improper Input Validation in Kibana Leading to Denial of Service 2026-03-03T08:40:09.731Z 2026-03-03T09:19:06.344Z
bit-elk-2026-26934 Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service 2026-03-03T08:40:08.176Z 2026-03-03T09:19:06.344Z
bit-parse-2026-27804 Parse Server: Account takeover via JWT algorithm confusion in Google auth adapter 2026-03-02T11:46:50.810Z 2026-03-11T18:56:50.865Z
bit-nats-2026-27571 nats-server websockets are vulnerable to pre-auth memory DoS 2026-03-02T11:44:25.393Z 2026-03-02T12:11:51.083Z
bit-gitlab-2026-2845 Allocation of Resources Without Limits or Throttling in GitLab 2026-03-02T09:08:47.577Z 2026-03-02T09:10:16.414Z
bit-gitlab-2026-1747 Authentication Bypass Using an Alternate Path or Channel in GitLab 2026-03-02T09:08:43.992Z 2026-03-02T09:10:16.414Z
bit-gitlab-2026-1725 Allocation of Resources Without Limits or Throttling in GitLab 2026-03-02T09:08:42.293Z 2026-03-02T09:10:16.414Z
bit-gitlab-2026-1662 Allocation of Resources Without Limits or Throttling in GitLab 2026-03-02T09:08:40.525Z 2026-03-02T09:10:16.414Z
bit-gitlab-2026-1388 Inefficient Regular Expression Complexity in GitLab 2026-03-02T09:08:35.227Z 2026-03-02T09:10:16.414Z
bit-gitlab-2026-0752 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2026-03-02T09:08:25.612Z 2026-03-02T09:10:16.414Z
bit-gitlab-2025-3525 Allocation of Resources Without Limits or Throttling in GitLab 2026-03-02T09:06:54.236Z 2026-03-02T09:10:16.414Z
bit-gitlab-2025-14511 Improper Validation of Specified Quantity in Input in GitLab 2026-03-02T09:05:49.359Z 2026-03-02T09:10:16.414Z
bit-gitlab-2025-14103 Missing Authorization in GitLab 2026-03-02T09:05:45.582Z 2026-03-02T09:10:16.414Z
bit-superset-2026-23984 Apache Superset: SQLLab Read-Only Bypass on PostgreSQL 2026-03-02T08:51:08.893Z 2026-03-03T09:19:06.344Z
bit-superset-2026-23969 Apache Superset: Exposure of Sensitive Information via Incomplete ClickHouse Function Filtering 2026-03-02T08:51:03.240Z 2026-03-02T09:10:16.414Z
bit-moodle-2026-26047 Moodle: moodle: uncontrolled resource consumption in tex formula editor leading to denial of service 2026-03-02T08:50:27.185Z 2026-03-02T09:10:16.414Z
bit-moodle-2026-26046 Moodle: moodle: improper input sanitization in tex filter administration setting 2026-03-02T08:50:25.461Z 2026-03-02T09:10:16.414Z
bit-moodle-2026-26045 Moodle: moodle: improper validation in file restore functionality leading to remote code execution 2026-03-02T08:50:23.910Z 2026-03-02T09:10:16.414Z
bit-mastodon-2026-27477 Mastodon has SSRF via unvalidated FASP Provider base_url 2026-03-02T08:42:58.043Z 2026-03-02T09:10:16.414Z
bit-mastodon-2026-27468 Mastodon may allow unconfirmed FASP to make subscriptions 2026-03-02T08:42:56.320Z 2026-03-02T09:10:16.414Z
bit-grafana-2026-21725 Authorization Bypass via TOCTOU in Grafana Datasource Deletion by Name 2026-03-02T08:41:16.926Z 2026-03-02T09:10:16.414Z
bit-pytorch-2025-2149 PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization 2026-02-26T15:23:05.500Z 2026-02-26T15:46:51.306Z
bit-pytorch-2025-2148 PyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruption 2026-02-26T15:23:02.496Z 2026-02-26T15:46:51.306Z
bit-neo4j-2026-1337 Insufficient escaping of unicode characters in query log 2026-02-26T15:16:17.899Z 2026-02-26T15:46:51.306Z
bit-superset-2026-23983 Apache Superset: Sensitive Data Exposure via REST API (disabled by default) 2026-02-26T08:54:03.107Z 2026-02-26T09:13:58.886Z
ID Description Published Updated
cleanstart-2026-vu62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-02-26T00:41:56.473097Z 2026-02-25T07:34:17Z
cleanstart-2026-kk99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-02-26T00:41:27.004859Z 2026-02-25T07:34:17Z
cleanstart-2026-dc63423 Within HostnameError 2026-02-26T00:40:26.756005Z 2026-02-25T07:34:17Z
cleanstart-2026-rd09851 net/url package does not set a limit on the number of query parameters in a query 2026-02-25T00:53:44.039015Z 2026-02-24T09:23:19Z
cleanstart-2026-cy44461 Within HostnameError 2026-02-25T00:53:13.101959Z 2026-02-24T09:23:19Z
cleanstart-2026-uk11127 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ... 2026-02-25T00:52:43.391940Z 2026-02-24T09:23:19Z
cleanstart-2026-wk32717 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ... 2026-02-25T00:52:13.178542Z 2026-02-24T09:23:19Z
cleanstart-2026-vi85055 Within HostnameError 2026-02-25T00:51:12.873948Z 2026-02-24T09:23:19Z
cleanstart-2026-pm90259 Cancelling a query (e 2026-02-25T00:50:43.010672Z 2026-02-24T09:23:19Z
cleanstart-2026-vz85637 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-02-25T00:50:42.986205Z 2026-02-24T09:23:19Z
cleanstart-2026-ig94553 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-02-25T00:49:42.735675Z 2026-02-24T09:23:19Z
cleanstart-2026-ha44046 Within HostnameError 2026-02-25T00:49:42.693487Z 2026-02-24T09:23:19Z
cleanstart-2026-oo47906 Security fixes for GHSA-VC5P-V9HR-52MJ applied in versions: 4.1.1-r0 2026-02-25T00:49:14.177631Z 2026-02-24T09:23:19Z
cleanstart-2026-zs11519 Security fixes for GHSA-vc5p-v9hr-52mj applied in versions: 4.1.1-r0 2026-02-25T00:49:13.663387Z 2026-02-24T09:23:19Z
cleanstart-2026-fm65506 html 2026-02-25T00:49:12.988018Z 2026-02-24T09:23:19Z
cleanstart-2026-ds30740 go-git is a highly extensible git implementation library written in pure Go 2026-02-25T00:46:12.495329Z 2026-02-24T09:23:19Z
cleanstart-2026-oa82425 go-git is a highly extensible git implementation library written in pure Go 2026-02-25T00:44:42.034173Z 2026-02-24T09:23:19Z
cleanstart-2026-uq43569 go-git is a highly extensible git implementation library written in pure Go 2026-02-25T00:44:12.116432Z 2026-02-24T09:23:19Z
cleanstart-2026-ia56615 go-git is a highly extensible git implementation library written in pure Go 2026-02-25T00:44:12.047442Z 2026-02-24T09:23:19Z
cleanstart-2026-rh10099 When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11 2026-02-25T00:43:12.068903Z 2026-02-24T09:23:19Z
cleanstart-2026-lo42921 Within HostnameError 2026-02-25T00:42:42.699243Z 2026-02-24T09:23:19Z
cleanstart-2026-dv04077 go-git is a highly extensible git implementation library written in pure Go 2026-02-25T00:42:42.369607Z 2026-02-24T09:23:19Z
cleanstart-2026-dc27717 OpenVPN version 2 2026-02-25T00:39:42.192253Z 2026-02-24T09:23:19Z
cleanstart-2026-dn18334 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ... 2026-02-25T00:39:41.622120Z 2026-02-24T09:23:19Z
cleanstart-2026-xk29348 Security fixes for GHSA-f6x5-jh6r-wrfv, GHSA-j5w8-q4qc-rx2x applied in versions: 8.4.0-r0 2026-02-25T00:39:11.477214Z 2026-02-24T09:23:19Z
cleanstart-2026-hw19594 Within HostnameError 2026-02-24T00:45:50.891263Z 2026-02-23T12:58:32Z
cleanstart-2026-uo76615 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate 2026-02-24T00:45:21.009333Z 2026-02-23T12:58:32Z
cleanstart-2026-yq79300 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate 2026-02-24T00:45:20.890998Z 2026-02-23T12:58:32Z
cleanstart-2026-pn58989 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate 2026-02-24T00:45:20.977848Z 2026-02-23T12:58:32Z
cleanstart-2026-sp64433 Security fixes for GHSA-6rw7-vpxm-498p, GHSA-73rr-hh4g-fpgx, GHSA-8qq5-rm4j-mr97 applied in versions: 4.2.1.1-r1 2026-02-24T00:44:51.180009Z 2026-02-23T12:58:32Z
ID Description Updated
ID Description Published Updated
CERTFR-2016-ALE-001 Campagne de messages électroniques non sollicités de type Locky 2016-02-19T00:00:00.000000 2016-04-07T00:00:00.000000
certfr-2015-ale-015 Campagne de messages électroniques non sollicités de type TeslaCrypt 2015-12-21T00:00:00.000000 2016-03-10T00:00:00.000000
CERTFR-2015-ALE-015 Campagne de messages électroniques non sollicités de type TeslaCrypt 2015-12-21T00:00:00.000000 2016-03-10T00:00:00.000000
certfr-2015-ale-014 Vulnérabilité dans Juniper ScreenOS 2015-12-18T00:00:00.000000 2016-04-11T00:00:00.000000
CERTFR-2015-ALE-014 Vulnérabilité dans Juniper ScreenOS 2015-12-18T00:00:00.000000 2016-04-11T00:00:00.000000
certfr-2015-ale-013 Vulnérabilité dans Joomla! 2015-12-14T00:00:00.000000 2016-08-01T00:00:00.000000
CERTFR-2015-ALE-013 Vulnérabilité dans Joomla! 2015-12-14T00:00:00.000000 2016-08-01T00:00:00.000000
certfr-2015-ale-012 Campagne de messages électroniques non sollicités de type Dridex 2015-10-23T00:00:00.000000 2015-11-26T00:00:00.000000
CERTFR-2015-ALE-012 Campagne de messages électroniques non sollicités de type Dridex 2015-10-23T00:00:00.000000 2015-11-26T00:00:00.000000
certfr-2015-ale-011 Vulnérabilité dans Adobe Flash Player 2015-10-14T00:00:00.000000 2015-10-19T00:00:00.000000
CERTFR-2015-ALE-011 Vulnérabilité dans Adobe Flash Player 2015-10-14T00:00:00.000000 2015-10-19T00:00:00.000000
certfr-2015-ale-010 Multiples vulnérabilités dans Google Android 2015-07-28T00:00:00.000000 2015-10-06T00:00:00.000000
CERTFR-2015-ALE-010 Multiples vulnérabilités dans Google Android 2015-07-28T00:00:00.000000 2015-10-06T00:00:00.000000
certfr-2015-ale-009 Vulnérabilité dans Apple Mac OS X 2015-07-24T00:00:00.000000 2015-12-22T00:00:00.000000
CERTFR-2015-ALE-009 Vulnérabilité dans Apple Mac OS X 2015-07-24T00:00:00.000000 2015-12-22T00:00:00.000000
certfr-2015-ale-008 Vulnérabilité dans le pilote de gestion des polices de caractères de Microsoft Windows 2015-07-20T00:00:00.000000 2015-07-30T00:00:00.000000
CERTFR-2015-ALE-008 Vulnérabilité dans le pilote de gestion des polices de caractères de Microsoft Windows 2015-07-20T00:00:00.000000 2015-07-30T00:00:00.000000
certfr-2015-ale-007 Vulnérabilité dans Oracle Java SE 2015-07-13T00:00:00.000000 2015-07-20T00:00:00.000000
CERTFR-2015-ALE-007 Vulnérabilité dans Oracle Java SE 2015-07-13T00:00:00.000000 2015-07-20T00:00:00.000000
certfr-2015-ale-006 Vulnérabilité dans Adobe Flash Player 2015-07-11T00:00:00.000000 2015-07-20T00:00:00.000000
CERTFR-2015-ALE-006 Vulnérabilité dans Adobe Flash Player 2015-07-11T00:00:00.000000 2015-07-20T00:00:00.000000
certfr-2015-ale-005 Vulnérabilité dans Adobe Flash Player 2015-07-08T00:00:00.000000 2015-07-10T00:00:00.000000
CERTFR-2015-ALE-005 Vulnérabilité dans Adobe Flash Player 2015-07-08T00:00:00.000000 2015-07-10T00:00:00.000000
certfr-2015-ale-004 Vulnérabilité dans Microsoft Internet Explorer 2015-02-10T00:00:00.000000 2015-03-31T00:00:00.000000
CERTFR-2015-ALE-004 Vulnérabilité dans Microsoft Internet Explorer 2015-02-10T00:00:00.000000 2015-03-31T00:00:00.000000
certfr-2015-ale-003 Nouvelle campagne d'hameçonnage de type rançongiciel 2015-02-05T00:00:00.000000 2015-07-10T00:00:00.000000
CERTFR-2015-ALE-003 Nouvelle campagne d'hameçonnage de type rançongiciel 2015-02-05T00:00:00.000000 2015-07-10T00:00:00.000000
certfr-2015-ale-002 Vulnérabilité dans Adobe Flash Player 2015-02-02T00:00:00.000000 2015-02-05T00:00:00.000000
CERTFR-2015-ALE-002 Vulnérabilité dans Adobe Flash Player 2015-02-02T00:00:00.000000 2015-02-05T00:00:00.000000
certfr-2015-ale-001 Vulnérabilité dans Adobe Flash Player 2015-01-22T00:00:00.000000 2015-01-30T00:00:00.000000
ID Description Published Updated
CERTFR-2026-AVI-0136 Vulnérabilité dans Fortinet FortiClientEMS 2026-02-09T00:00:00.000000 2026-02-09T00:00:00.000000
CERTFR-2026-AVI-0135 Vulnérabilité dans GitLab AI Gateway 2026-02-09T00:00:00.000000 2026-02-09T00:00:00.000000
CERTFR-2026-AVI-0134 Vulnérabilité dans Microsoft Edge 2026-02-09T00:00:00.000000 2026-02-09T00:00:00.000000
CERTFR-2026-AVI-0133 Multiples vulnérabilités dans Roundcube 2026-02-09T00:00:00.000000 2026-03-27T00:00:00.000000
CERTFR-2026-AVI-0132 Multiples vulnérabilités dans VMware Tanzu Greenplum 2026-02-09T00:00:00.000000 2026-02-09T00:00:00.000000
certfr-2026-avi-0131 Multiples vulnérabilités dans les produits IBM 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
certfr-2026-avi-0130 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
certfr-2026-avi-0129 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
certfr-2026-avi-0128 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
certfr-2026-avi-0127 Vulnérabilité dans NetApp ONTAP 9 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
certfr-2026-avi-0126 Vulnérabilité dans ESET Management Agent 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
certfr-2026-avi-0125 Multiples vulnérabilités dans les produits Moxa 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
certfr-2026-avi-0124 Multiples vulnérabilités dans Microsoft Edge 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
certfr-2026-avi-0123 Multiples vulnérabilités dans Asterisk 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
certfr-2026-avi-0122 Multiples vulnérabilités dans Tenable Nessus 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
certfr-2026-avi-0121 Vulnérabilité dans les produits Juniper Networks 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
CERTFR-2026-AVI-0131 Multiples vulnérabilités dans les produits IBM 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
CERTFR-2026-AVI-0130 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
CERTFR-2026-AVI-0129 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
CERTFR-2026-AVI-0128 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
CERTFR-2026-AVI-0127 Vulnérabilité dans NetApp ONTAP 9 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
CERTFR-2026-AVI-0126 Vulnérabilité dans ESET Management Agent 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
CERTFR-2026-AVI-0125 Multiples vulnérabilités dans les produits Moxa 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
CERTFR-2026-AVI-0124 Multiples vulnérabilités dans Microsoft Edge 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
CERTFR-2026-AVI-0123 Multiples vulnérabilités dans Asterisk 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
CERTFR-2026-AVI-0122 Multiples vulnérabilités dans Tenable Nessus 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
CERTFR-2026-AVI-0121 Vulnérabilité dans les produits Juniper Networks 2026-02-06T00:00:00.000000 2026-02-06T00:00:00.000000
certfr-2026-avi-0120 Multiples vulnérabilités dans les produits F5 2026-02-05T00:00:00.000000 2026-02-05T00:00:00.000000
certfr-2026-avi-0119 Multiples vulnérabilités dans les produits Cisco 2026-02-05T00:00:00.000000 2026-02-05T00:00:00.000000
certfr-2026-avi-0118 Multiples vulnérabilités dans les produits Splunk 2026-02-05T00:00:00.000000 2026-02-05T00:00:00.000000
ID Description Published Updated
jvndb-2024-000093 WordPress Plugin "Advanced Custom Fields" vulnerable to cross-site scripting 2024-09-04T13:01+09:00 2024-09-04T13:01+09:00
jvndb-2024-007002 Panasonic Control FPWIN Pro7 vulnerable to stack-based buffer overflow 2024-09-02T14:57+09:00 2024-09-02T14:57+09:00
jvndb-2024-000091 IPCOM vulnerable to information disclosure 2024-08-30T14:56+09:00 2024-08-30T14:56+09:00
jvndb-2024-000092 Multiple vulnerabilities in WordPress plugin "Carousel Slider" 2024-08-30T13:58+09:00 2024-08-30T13:58+09:00
jvndb-2024-000089 WindLDR and WindO/I-NV4 store sensitive information in cleartext 2024-08-29T15:08+09:00 2024-09-24T17:14+09:00
jvndb-2024-006787 xfpt vulnerable to stack-based buffer overflow 2024-08-29T14:07+09:00 2024-08-29T14:07+09:00
jvndb-2024-000088 Multiple vulnerabilities in ELECOM wireless LAN routers and access points 2024-08-27T14:40+09:00 2024-11-26T15:17+09:00
jvndb-2024-006646 Authentication Bypass Vulnerability in Hitachi Ops Center Common Services 2024-08-27T12:01+09:00 2024-08-27T12:01+09:00
jvndb-2024-006367 Unquoted Service Path in Hitachi Device Manager 2024-08-26T16:27+09:00 2024-08-26T16:27+09:00
jvndb-2024-000087 BUFFALO wireless LAN routers and wireless LAN repeaters vulnerable to OS command injection 2024-08-23T14:17+09:00 2024-08-23T14:17+09:00
jvndb-2024-000086 Multiple Safie products vulnerable to improper server certificate verification 2024-08-22T13:51+09:00 2024-08-29T12:23+09:00
jvndb-2020-007305 Installer of Trend Micro Security 2020 (Consumer) may insecurely load Dynamic Link Libraries 2024-08-22T11:33+09:00 2024-08-22T11:33+09:00
jvndb-2017-009536 Packetbeat vulnerable to denial-of-service (DoS) 2024-08-21T17:54+09:00 2024-08-21T17:54+09:00
jvndb-2018-009127 Multiple vulnerabilities in LogonTracer 2024-08-21T17:37+09:00 2024-08-21T17:37+09:00
jvndb-2020-002957 A vulnerability in TOYOTA MOTOR's DCU (Display Control Unit) 2024-08-20T18:12+09:00 2024-08-20T18:12+09:00
jvndb-2020-007306 Trend Micro Security (Consumer) Driver vulnerable to Out-of-bounds Read 2024-08-20T17:52+09:00 2024-08-20T17:52+09:00
jvndb-2024-000085 "Rakuten Ichiba App" fails to restrict custom URL schemes properly 2024-08-20T16:56+09:00 2024-08-20T16:56+09:00
jvndb-2024-005167 EL Injection Vulnerability in Hitachi Tuning Manager 2024-08-15T09:38+09:00 2024-08-15T09:38+09:00
jvndb-2016-000124 WAON service app for Android fails to verify SSL server certificates 2024-08-15T09:36+09:00 2024-08-15T09:36+09:00
jvndb-2024-000083 Firmware update for RICOH JavaTM Platform resets the TLS configuration 2024-08-06T15:13+09:00 2024-08-06T15:13+09:00
jvndb-2024-000079 Cybozu Office vulnerable to bypass browsing restrictions in Custom App 2024-08-06T14:59+09:00 2024-08-06T14:59+09:00
jvndb-2024-000082 Pimax Play and PiTool accept WebSocket connections from unintended endpoints 2024-08-05T13:58+09:00 2024-08-05T13:58+09:00
jvndb-2024-000084 Multiple vulnerabilities in ZEXELON ZWX-2000CSW2-HN 2024-08-05T13:46+09:00 2024-08-05T13:46+09:00
jvndb-2024-000077 FFRI AMC vulnerable to OS command injection 2024-07-30T16:40+09:00 2024-07-30T16:40+09:00
jvndb-2024-000078 Multiple vulnerabilities in ELECOM wireless LAN routers 2024-07-30T15:34+09:00 2026-02-03T15:35+09:00
jvndb-2024-000081 EC-CUBE plugin (for EC-CUBE 4 series) "EC-CUBE Web API Plugin" vulnerable to stored cross-site scripting 2024-07-30T14:06+09:00 2024-07-30T14:06+09:00
jvndb-2024-000080 EC-CUBE 4 Series improper input validation when installing plugins 2024-07-30T13:56+09:00 2024-07-30T13:56+09:00
jvndb-2024-004595 Multiple vulnerabilities in FutureNet NXR series, VXR series and WXR series 2024-07-29T17:51+09:00 2025-06-30T09:56+09:00
jvndb-2024-000076 SDoP contains a stack-based buffer overflow vulnerability. 2024-07-29T17:24+09:00 2024-07-29T17:24+09:00
jvndb-2024-000074 Multiple vulnerabilities in SKYSEA Client View 2024-07-29T15:28+09:00 2024-07-31T14:12+09:00
ID Description Published Updated
cnvd-2026-13250 Apache Superset安全绕过漏洞 2026-03-09 2026-03-10
cnvd-2026-13249 Apache Superset SQL注入漏洞 2026-03-09 2026-03-10
cnvd-2026-13248 Apache Airflow日志信息泄露漏洞 2026-03-09 2026-03-10
cnvd-2026-13153 D-Link DIR-513堆栈缓冲区溢出漏洞 2026-03-09 2026-03-11
cnvd-2026-13152 D-Link DIR-513 goform/formSetDomainFilter文件缓冲区溢出漏洞 2026-03-09 2026-03-11
cnvd-2026-13151 Google Android存在未明漏洞(CNVD-2026-13151) 2026-03-09 2026-03-10
cnvd-2026-13150 Google Android拒绝服务漏洞(CNVD-2026-13150) 2026-03-09 2026-03-10
cnvd-2026-13149 Google Android权限提升漏洞(CNVD-2026-13149) 2026-03-09 2026-03-10
cnvd-2026-13148 Google Android权限提升漏洞(CNVD-2026-13148) 2026-03-09 2026-03-10
cnvd-2026-13147 Google Android拒绝服务漏洞(CNVD-2026-13147) 2026-03-09 2026-03-10
cnvd-2026-13146 Google Android权限提升漏洞(CNVD-2026-13146) 2026-03-09 2026-03-10
cnvd-2026-13145 Google Android权限提升漏洞(CNVD-2026-13145) 2026-03-09 2026-03-10
cnvd-2026-13144 Google Android权限提升漏洞(CNVD-2026-13144) 2026-03-09 2026-03-10
cnvd-2026-13143 Google Android存在未明漏洞(CNVD-2026-13143) 2026-03-09 2026-03-10
cnvd-2026-13142 Google Android信息泄露漏洞(CNVD-2026-13142) 2026-03-09 2026-03-10
cnvd-2026-12905 Microsoft ACI Confidential Containers特权提升漏洞 2026-03-09 2026-03-09
cnvd-2026-12904 Microsoft ACI Confidential Containers信息泄露漏洞 2026-03-09 2026-03-09
cnvd-2026-12903 Microsoft Payment Orchestrator Service访问控制错误漏洞 2026-03-09 2026-03-09
cnvd-2026-12902 Microsoft Devices Pricing Program代码问题漏洞 2026-03-09 2026-03-09
cnvd-2026-13784 IBM Cloud Pak System信息泄露漏洞(CNVD-2026-13784) 2026-03-06 2026-03-16
cnvd-2026-13783 IBM Cloud Pak System访问控制错误漏洞 2026-03-06 2026-03-16
cnvd-2026-13583 FunAdmin访问控制错误漏洞 2026-03-06 2026-03-12
cnvd-2026-13370 OpenClaw信息泄露漏洞(CNVD-2026-13370) 2026-03-06 2026-03-12
cnvd-2026-12909 Microsoft Semantic Kernel代码注入漏洞 2026-03-06 2026-03-09
cnvd-2026-12908 Microsoft Azure Arc访问控制错误漏洞 2026-03-06 2026-03-09
cnvd-2026-12907 Microsoft Azure Functions信息泄露漏洞 2026-03-06 2026-03-09
cnvd-2026-12906 Microsoft Azure Front Door访问控制错误漏洞 2026-03-06 2026-03-09
cnvd-2026-12777 FreeRDP缓冲区溢出漏洞(CNVD-2026-12777) 2026-03-06 2026-03-06
cnvd-2026-12776 Textream资源管理错误漏洞 2026-03-06 2026-03-06
cnvd-2026-13371 OpenClaw存在未明漏洞(CNVD-2026-13371) 2026-03-04 2026-03-12
ID Description Published Updated
bdu:2026-01364 Уязвимость функции ffs_func_eps_enable() модуля drivers/usb/gadget/function/f_fs.c драйве… 06.02.2026 06.02.2026
bdu:2026-01363 Уязвимость функции multiq3_attach() модуля drivers/comedi/drivers/multiq3.c поддержки уст… 06.02.2026 06.02.2026
bdu:2026-01362 Уязвимость функции dc_stream_get_scanoutpos() модуля drivers/gpu/drm/amd/display/dc/core/… 06.02.2026 06.02.2026
bdu:2026-01361 Уязвимость функции f2fs_alloc_nid() модуля fs/f2fs/node.c файловой системы F2FS ядра опер… 06.02.2026 06.02.2026
bdu:2026-01360 Уязвимость функции find_sdca_entity_control() модуля sound/soc/sdca/sdca_functions.c подд… 06.02.2026 06.02.2026
bdu:2026-01359 Уязвимость функции mptcp_do_fastclose() модуля net/mptcp/protocol.c ядра операционной сис… 06.02.2026 06.02.2026
bdu:2026-01358 Уязвимость функции pci_aer_init() модуля drivers/pci/pcie/aer.c драйвера устройств PCI я… 06.02.2026 06.02.2026
bdu:2026-01357 Уязвимость функции init_amd_zen4() модуля arch/x86/kernel/cpu/amd.c поддержки платформы x… 06.02.2026 06.02.2026
bdu:2026-01356 Уязвимость функции __page_pool_alloc_netmems_slow() модуля net/core/page_pool.c поддержки… 06.02.2026 06.02.2026
bdu:2026-01355 Уязвимость функции copy_highpage() модуля arch/arm64/mm/copypage.c поддержки платформы AR… 06.02.2026 06.02.2026
bdu:2026-01354 Уязвимость функции devlink_notify_unregister() модуля net/devlink/leftover.c реализации с… 06.02.2026 06.02.2026
bdu:2026-01353 Уязвимость механизма обеспечения безопасности программной платформы Node.js, позволяющая … 06.02.2026 06.02.2026
bdu:2026-01352 Уязвимость функции stmmac_rx() ядра операционной системы Linux, позволяющая нарушителю, д… 06.02.2026 06.02.2026
bdu:2026-01351 Уязвимость функции blkg_conf_prep() модуля block/blk-cgroup.c поддержки блочного уровня я… 06.02.2026 06.02.2026
bdu:2026-01350 Уязвимость функции ufs_qcom_suspend() модуля drivers/ufs/host/ufs-qcom.c поддержки хост-к… 06.02.2026 06.02.2026
bdu:2026-01349 Уязвимость функции ext4_destroy_inline_data_nolock() модуля fs/ext4/inline.c файловой си… 06.02.2026 06.02.2026
bdu:2026-01348 Уязвимость функции ieee80211_register_hw() ядра операционной системы Linux, позволяющая н… 06.02.2026 06.02.2026
bdu:2026-01347 Уязвимость функции ext4_prepare_inline_data() модуля fs/ext4/inline.c файловой системы Ex… 06.02.2026 06.02.2026
bdu:2026-01346 Уязвимость функции stripe_io_hints() ядра операционной системы Linux, позволяющая нарушит… 06.02.2026 06.02.2026
bdu:2026-01345 Уязвимость функции bfs_iget() модуля fs/bfs/inode.c файловой системы ядра операционной си… 06.02.2026 06.02.2026
bdu:2026-01344 Уязвимость функций appendChild() и _clear_id_cache() интерпретатора языка программировани… 06.02.2026 06.02.2026
bdu:2026-01343 Уязвимость функции l2cap_connect_create_rsp() ядра операционной системы Linux, позволяюща… 06.02.2026 06.02.2026
bdu:2026-01342 Уязвимость функции machine_crash_nonpanic_core() модуля arch/arm/kernel/machine_kexec.c п… 06.02.2026 06.02.2026
bdu:2026-01341 Уязвимость функции SMB2_negotiate() ядра операционной системы Linux, позволяющая нарушите… 06.02.2026 06.02.2026
bdu:2026-01340 Уязвимость функции hfsplus_iget() модуля fs/hfsplus/super.c поддержки расширенной файлово… 06.02.2026 06.02.2026
bdu:2026-01339 Уязвимость функции hdr_find_e() ядра операционной системы Linux, позволяющая нарушителю п… 06.02.2026 06.02.2026
bdu:2026-01338 Уязвимость функции txInit() модуля fs/jfs/jfs_txnmgr.c файловой системы JFS ядра операцио… 06.02.2026 06.02.2026
bdu:2026-01337 Уязвимость функции ftrace_module_enable() модуля kernel/trace/ftrace.c поддержки трассиро… 06.02.2026 06.02.2026
bdu:2026-01336 Уязвимость функции drm_gem_dma_free() модуля drivers/gpu/drm/drm_gem_dma_helper.c драйвер… 06.02.2026 06.02.2026
bdu:2026-01335 Уязвимость функции hfs_asc2mac() ядра операционной системы Linux, позволяющая нарушителю … 06.02.2026 06.02.2026
ID Description Updated
var-201902-0360 In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popov… 2024-07-23T21:44:51.239000Z
var-202210-0043 The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fie… 2024-07-23T21:44:46.557000Z
var-200809-0187 Finder in Apple Mac OS X 10.5.2 through 10.5.4 allows remote attackers to cause a denial … 2024-07-23T21:44:13.542000Z
var-202203-0664 BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions… 2024-07-23T21:44:12.287000Z
var-201109-0214 Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers… 2024-07-23T21:44:12.444000Z
var-200901-0466 The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for co… 2024-07-23T21:44:12.668000Z
var-201202-0137 Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote at… 2024-07-23T21:43:37.915000Z
var-201806-1468 An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… 2024-07-23T21:43:36.931000Z
var-201110-0321 FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterpri… 2024-07-23T21:43:33.476000Z
var-200703-0009 Integer overflow in Apple QuickTime before 7.1.5, when installed on Windows operating sys… 2024-07-23T21:43:33.598000Z
var-200102-0029 Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial… 2024-07-23T21:43:33.797000Z
var-201710-1405 An issue was discovered in certain Apple products. iOS before 11 is affected. Safari befo… 2024-07-23T21:43:29.001000Z
var-201912-0457 A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tv… 2024-07-23T21:43:28.933000Z
var-201302-0309 Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.… 2024-07-23T21:43:28.487000Z
var-202103-1464 An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello m… 2024-07-23T21:43:25.615000Z
var-201710-1409 An issue was discovered in certain Apple products. iOS before 11 is affected. Safari befo… 2024-07-23T21:43:25.189000Z
var-201210-0343 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-07-23T21:43:24.967000Z
var-201912-0551 A memory corruption issue was addressed with improved state management. This issue is fix… 2024-07-23T21:43:21.002000Z
var-201211-0366 Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on … 2024-07-23T21:42:50.004000Z
var-200609-0310 Multiple buffer overflows in Apple QuickTime before 7.1.3 allow user-assisted remote atta… 2024-07-23T21:42:44.179000Z
var-200909-0789 libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when Open… 2024-07-23T21:42:38.375000Z
var-201606-0382 Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified … 2024-07-23T21:42:37.934000Z
var-201206-0058 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-07-23T21:42:36.964000Z
var-201912-1860 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T21:42:32.013000Z
var-200711-0560 Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matc… 2024-07-23T21:42:00.915000Z
var-201109-0209 Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) t… 2024-07-23T21:41:33.003000Z
var-201007-0319 The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit i… 2024-07-23T21:41:32.923000Z
var-201302-0136 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-07-23T21:41:31.932000Z
var-200703-0018 Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to… 2024-07-23T21:41:31.383000Z
var-201603-0222 The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denia… 2024-07-23T21:40:58.575000Z
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated