Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62470 |
7.8 (3.1)
|
Windows Common Log File System Driver Elevation of Pri… |
Microsoft |
Windows 10 Version 1607 |
2025-12-09T17:55:36.983Z | 2026-04-16T14:18:32.198Z |
| CVE-2025-62469 |
7 (3.1)
|
Microsoft Brokering File System Elevation of Privilege… |
Microsoft |
Windows 11 Version 24H2 |
2025-12-09T17:55:36.456Z | 2026-04-16T14:18:31.537Z |
| CVE-2026-32217 |
5.5 (3.1)
|
Windows Kernel Information Disclosure Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:38.988Z | 2026-04-16T14:18:31.520Z |
| CVE-2025-62466 |
7.8 (3.1)
|
Windows Client-Side Caching Elevation of Privilege Vul… |
Microsoft |
Windows 10 Version 1607 |
2025-12-09T17:55:35.762Z | 2026-04-16T14:18:30.910Z |
| CVE-2026-32216 |
5.5 (3.1)
|
Windows Redirected Drive Buffering System Denial of Se… |
Microsoft |
Windows 11 version 26H1 |
2026-04-14T16:57:38.302Z | 2026-04-16T14:18:30.906Z |
| CVE-2025-62458 |
7.8 (3.1)
|
Win32k Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2025-12-09T17:55:34.989Z | 2026-04-16T14:18:30.205Z |
| CVE-2026-32215 |
5.5 (3.1)
|
Windows Kernel Information Disclosure Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2026-04-14T16:57:37.693Z | 2026-04-16T14:18:29.343Z |
| CVE-2025-62457 |
7.8 (3.1)
|
Windows Cloud Files Mini Filter Driver Elevation of Pr… |
Microsoft |
Windows 10 Version 1809 |
2025-12-09T17:55:34.137Z | 2026-04-16T14:18:20.988Z |
| CVE-2026-32202 |
4.3 (3.1)
|
Windows Shell Spoofing Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:36.996Z | 2026-04-16T14:18:20.780Z |
| CVE-2025-62456 |
8.8 (3.1)
|
Windows Resilient File System (ReFS) Remote Code Execu… |
Microsoft |
Windows 11 version 22H3 |
2025-12-09T17:55:33.275Z | 2026-04-16T14:18:20.423Z |
| CVE-2026-32195 |
7 (3.1)
|
Windows Kernel Elevation of Privilege Vulnerability |
Microsoft |
Windows 11 version 26H1 |
2026-04-14T16:57:36.253Z | 2026-04-16T14:18:20.212Z |
| CVE-2025-62454 |
7.8 (3.1)
|
Windows Cloud Files Mini Filter Driver Elevation of Pr… |
Microsoft |
Windows 10 Version 1809 |
2025-12-09T17:55:32.317Z | 2026-04-16T14:18:19.763Z |
| CVE-2026-32192 |
7.8 (3.1)
|
Azure Monitor Agent Elevation of Privilege Vulnerability |
Microsoft |
Azure Monitor |
2026-04-14T16:57:35.447Z | 2026-04-16T14:18:19.716Z |
| CVE-2025-62223 |
4.3 (3.1)
|
Microsoft Edge (Chromium-based) for Mac Spoofing Vulne… |
Microsoft |
Microsoft Edge (Chromium-based) |
2025-12-05T00:21:41.975Z | 2026-04-16T14:18:19.263Z |
| CVE-2026-32189 |
7.8 (3.1)
|
Microsoft Excel Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-04-14T16:57:34.818Z | 2026-04-16T14:18:19.064Z |
| CVE-2026-32188 |
7.1 (3.1)
|
Microsoft Excel Information Disclosure Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-04-14T16:57:33.959Z | 2026-04-16T14:18:18.530Z |
| CVE-2026-32184 |
7.8 (3.1)
|
Microsoft High Performance Compute (HPC) Pack Elevatio… |
Microsoft |
Microsoft HPC Pack 2019 |
2026-04-14T16:57:33.267Z | 2026-04-16T14:18:17.753Z |
| CVE-2026-32183 |
7.8 (3.1)
|
Windows Snipping Tool Remote Code Execution Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:32.625Z | 2026-04-16T14:18:17.150Z |
| CVE-2026-32181 |
5.5 (3.1)
|
Connected User Experiences and Telemetry Service Denia… |
Microsoft |
Windows 10 Version 21H2 |
2026-04-14T16:57:31.919Z | 2026-04-16T14:18:16.542Z |
| CVE-2026-32178 |
7.5 (3.1)
|
.NET Spoofing Vulnerability |
Microsoft |
.NET 10.0 |
2026-04-14T16:57:31.355Z | 2026-04-16T14:18:15.923Z |
| CVE-2026-32168 |
7.8 (3.1)
|
Azure Monitor Agent Elevation of Privilege Vulnerability |
Microsoft |
Azure Monitor |
2026-04-14T16:57:30.819Z | 2026-04-16T14:18:15.180Z |
| CVE-2026-40316 |
8.8 (3.1)
|
OWASP BLT has RCE in Github Actions via untrusted Djan… |
OWASP-BLT |
BLT |
2026-04-15T22:49:18.636Z | 2026-04-16T14:18:12.374Z |
| CVE-2026-32167 |
6.7 (3.1)
|
SQL Server Elevation of Privilege Vulnerability |
Microsoft |
Microsoft SQL Server 2016 Service Pack 3 (GDR) |
2026-04-14T16:57:30.245Z | 2026-04-16T14:17:59.800Z |
| CVE-2026-32165 |
7.8 (3.1)
|
Windows User Interface Core Elevation of Privilege Vul… |
Microsoft |
Windows 10 Version 1809 |
2026-04-14T16:57:29.653Z | 2026-04-16T14:17:58.333Z |
| CVE-2026-0390 |
6.7 (3.1)
|
UEFI Secure Boot Security Feature Bypass Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:29.034Z | 2026-04-16T14:17:57.757Z |
| CVE-2026-32160 |
7.8 (3.1)
|
Windows Push Notifications Elevation of Privilege Vuln… |
Microsoft |
Windows 10 Version 1809 |
2026-04-14T16:57:28.539Z | 2026-04-16T14:17:57.123Z |
| CVE-2026-32159 |
7.8 (3.1)
|
Windows Push Notifications Elevation of Privilege Vuln… |
Microsoft |
Windows 10 Version 1809 |
2026-04-14T16:57:27.950Z | 2026-04-16T14:17:56.444Z |
| CVE-2026-32158 |
7.8 (3.1)
|
Windows Push Notifications Elevation of Privilege Vuln… |
Microsoft |
Windows 10 Version 1809 |
2026-04-14T16:57:27.119Z | 2026-04-16T14:17:55.557Z |
| CVE-2026-32157 |
8.8 (3.1)
|
Remote Desktop Client Remote Code Execution Vulnerability |
Microsoft |
Remote Desktop client for Windows Desktop |
2026-04-14T16:57:26.472Z | 2026-04-16T14:17:54.619Z |
| CVE-2026-32156 |
7.4 (3.1)
|
Windows UPnP Device Host Remote Code Execution Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:25.840Z | 2026-04-16T14:17:53.876Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-33617 |
5.3 (3.1)
|
MB connect line mbCONNECT24 vulnerable to an unauthent… |
MB connect line |
mbCONNECT24 |
2026-04-02T09:00:10.713Z | 2026-04-03T17:21:51.783Z |
| CVE-2026-27284 |
7.8 (3.1)
|
InDesign Desktop | Out-of-bounds Read (CWE-125) |
Adobe |
InDesign Desktop |
2026-04-14T16:45:55.885Z | 2026-04-15T03:58:30.100Z |
| CVE-2026-27283 |
7.8 (3.1)
|
InDesign Desktop | Use After Free (CWE-416) |
Adobe |
InDesign Desktop |
2026-04-14T16:45:52.852Z | 2026-04-15T03:58:28.922Z |
| CVE-2026-27238 |
7.8 (3.1)
|
InDesign Desktop | Heap-based Buffer Overflow (CWE-122) |
Adobe |
InDesign Desktop |
2026-04-14T16:45:51.566Z | 2026-04-15T03:58:36.317Z |
| CVE-2026-27286 |
5.5 (3.1)
|
InDesign Desktop | Heap-based Buffer Overflow (CWE-122) |
Adobe |
InDesign Desktop |
2026-04-14T16:45:54.103Z | 2026-04-14T19:37:43.093Z |
| CVE-2026-27285 |
5.5 (3.1)
|
InDesign Desktop | Heap-based Buffer Overflow (CWE-122) |
Adobe |
InDesign Desktop |
2026-04-14T16:45:54.941Z | 2026-04-14T19:41:12.307Z |
| CVE-2026-6409 |
7.1 (4.0)
|
Denial of Service (DoS) vulnerability exists in the Pr… |
Protocol Buffers |
Protobuf-php (Pecl) |
2026-04-16T14:30:51.568Z | 2026-04-16T15:24:43.164Z |
| CVE-2026-40786 |
4.3 (3.1)
|
WordPress MyRewards plugin <= 5.7.3 - Broken Access Co… |
Long Watch Studio |
MyRewards |
2026-04-15T10:21:36.068Z | 2026-04-16T14:20:54.766Z |
| CVE-2026-40778 |
5.3 (3.1)
|
WordPress Majestic Support plugin <= 1.1.2 - Broken Ac… |
Majestic Support |
Majestic Support |
2026-04-15T10:21:35.665Z | 2026-04-16T14:35:34.783Z |
| CVE-2026-40763 |
5.3 (3.1)
|
WordPress Royal Elementor Addons plugin <= 1.7.1056 - … |
WP Royal |
Royal Elementor Addons |
2026-04-15T10:21:35.155Z | 2026-04-16T14:41:45.860Z |
| CVE-2026-40744 |
8.5 (3.1)
|
WordPress Beaver Builder plugin <= 2.10.1.2 - SQL Inje… |
Beaver Builder |
Beaver Builder |
2026-04-15T10:21:34.729Z | 2026-04-16T14:47:03.967Z |
| CVE-2026-40740 |
5.4 (3.1)
|
WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Co… |
Themeum |
Tutor LMS |
2026-04-15T10:21:34.311Z | 2026-04-16T14:52:07.805Z |
| CVE-2026-40734 |
6.5 (3.1)
|
WordPress Categories Images plugin <= 3.3.1 - Cross Si… |
Zahlan |
Categories Images |
2026-04-15T10:21:33.995Z | 2026-04-16T15:06:08.721Z |
| CVE-2026-40729 |
4.3 (3.1)
|
WordPress 3D viewer – Embed 3D Models plugin <= 1.8.5 … |
bPlugins |
3D viewer – Embed 3D Models |
2026-04-15T10:21:33.661Z | 2026-04-16T15:09:41.105Z |
| CVE-2026-40104 |
6.9 (4.0)
|
XWiki's REST APIs can list all pages/spaces, leading t… |
xwiki |
org.xwiki.platform:xwiki-platform-oldcore |
2026-04-15T00:01:58.583Z | 2026-04-16T14:08:58.592Z |
| CVE-2026-3324 |
8.2 (3.1)
|
Authentication Bypass |
Zohocorp |
ManageEngine Log360 |
2026-04-16T14:30:55.130Z | 2026-04-16T15:21:19.911Z |
| CVE-2026-37344 |
N/A
|
SourceCodester Vehicle Parking Area Management Sy… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T14:56:26.706Z |
| CVE-2026-37343 |
N/A
|
SourceCodester Vehicle Parking Area Management Sy… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T14:53:42.067Z |
| CVE-2026-37342 |
N/A
|
SourceCodester Vehicle Parking Area Management Sy… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T14:52:06.099Z |
| CVE-2026-37341 |
N/A
|
SourceCodester Vehicle Parking Area Management Sy… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T14:49:44.408Z |
| CVE-2026-37340 |
N/A
|
SourceCodester Simple Music Cloud Community Syste… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T14:40:33.498Z |
| CVE-2026-37339 |
N/A
|
SourceCodester Simple Music Cloud Community Syste… |
n/a |
n/a |
2026-04-16T00:00:00.000Z | 2026-04-16T14:38:34.839Z |
| CVE-2026-33804 |
7.4 (3.1)
|
@fastify/middie vulnerable to middleware bypass via de… |
@fastify/middie |
@fastify/middie |
2026-04-16T13:56:56.176Z | 2026-04-16T14:41:48.659Z |
| CVE-2026-30993 |
9.8 (3.1)
|
Slah CMS v1.5.0 and below was discovered to conta… |
n/a |
n/a |
2026-04-15T00:00:00.000Z | 2026-04-16T14:06:34.679Z |
| CVE-2026-30625 |
9.8 (3.1)
|
Upsonic 0.71.6 contains a remote code execution v… |
n/a |
n/a |
2026-04-15T00:00:00.000Z | 2026-04-16T13:55:52.158Z |
| CVE-2026-30461 |
8.3 (3.1)
|
Daylight Studio FuelCMS v1.5.2 was discovered to … |
n/a |
n/a |
2026-04-15T00:00:00.000Z | 2026-04-16T14:02:08.595Z |
| CVE-2026-2840 |
6.4 (3.1)
|
Email Encoder – Protect Email Addresses and Phone Numb… |
onlineoptimisation |
Email Encoder – Protect Email Addresses and Phone Numbers |
2026-04-16T14:10:29.114Z | 2026-04-16T14:42:53.905Z |
| CVE-2025-67841 |
7.5 (3.1)
|
Nordic Semiconductor IronSide SE for nRF54H20 bef… |
n/a |
n/a |
2026-04-15T00:00:00.000Z | 2026-04-16T14:04:21.040Z |
| CVE-2026-31381 |
5.3 (3.1)
|
Gainsight Assist plugin information disclosure |
Gainsight |
Gainsight Assist |
2026-03-20T13:02:07.185Z | 2026-03-23T10:21:31.048Z |
| CVE-2024-35512 |
5.3 (3.1)
|
hmq v1.5.5 is vulnerable to Denial of Service (Do… |
n/a |
n/a |
2024-05-29T16:55:34.086Z | 2026-04-16T14:39:03.891Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-33617 | An unauthenticated remote attacker can access a configuration file containing database credentials.… | 2026-04-02T10:16:17.260 | 2026-04-16T15:40:56.680 |
| fkie_cve-2026-27284 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerabil… | 2026-04-14T17:16:48.040 | 2026-04-16T15:35:38.830 |
| fkie_cve-2026-27283 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Use After Free vulnerability t… | 2026-04-14T17:16:47.883 | 2026-04-16T15:35:29.583 |
| fkie_cve-2026-27238 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vul… | 2026-04-14T17:16:47.717 | 2026-04-16T15:35:21.867 |
| fkie_cve-2026-27286 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vul… | 2026-04-14T17:16:48.357 | 2026-04-16T15:33:03.350 |
| fkie_cve-2026-27285 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vul… | 2026-04-14T17:16:48.200 | 2026-04-16T15:32:29.730 |
| fkie_cve-2026-6409 | A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of un… | 2026-04-16T15:17:41.910 | 2026-04-16T15:17:41.910 |
| fkie_cve-2026-40786 | Missing Authorization vulnerability in Long Watch Studio MyRewards woorewards allows Exploiting Inc… | 2026-04-15T11:16:37.153 | 2026-04-16T15:17:40.500 |
| fkie_cve-2026-40778 | Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support allows Ex… | 2026-04-15T11:16:36.900 | 2026-04-16T15:17:40.333 |
| fkie_cve-2026-40763 | Missing Authorization vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allow… | 2026-04-15T11:16:36.657 | 2026-04-16T15:17:40.167 |
| fkie_cve-2026-40744 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-04-15T11:16:36.413 | 2026-04-16T15:17:39.990 |
| fkie_cve-2026-40740 | Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Config… | 2026-04-15T11:16:36.177 | 2026-04-16T15:17:39.827 |
| fkie_cve-2026-40734 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-04-15T11:16:35.937 | 2026-04-16T15:17:39.660 |
| fkie_cve-2026-40729 | Missing Authorization vulnerability in bPlugins 3D viewer – Embed 3D Models 3d-viewer allows Exploi… | 2026-04-15T11:16:35.683 | 2026-04-16T15:17:39.487 |
| fkie_cve-2026-40104 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top o… | 2026-04-15T04:17:47.953 | 2026-04-16T15:17:38.437 |
| fkie_cve-2026-3324 | Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass o… | 2026-04-16T15:17:38.010 | 2026-04-16T15:17:38.010 |
| fkie_cve-2026-37344 | SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the fi… | 2026-04-16T15:17:37.340 | 2026-04-16T15:17:37.340 |
| fkie_cve-2026-37343 | SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the fi… | 2026-04-16T15:17:37.230 | 2026-04-16T15:17:37.230 |
| fkie_cve-2026-37342 | SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the fi… | 2026-04-16T15:17:37.120 | 2026-04-16T15:17:37.120 |
| fkie_cve-2026-37341 | SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the fi… | 2026-04-16T15:17:37.007 | 2026-04-16T15:17:37.007 |
| fkie_cve-2026-37340 | SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file … | 2026-04-16T15:17:36.900 | 2026-04-16T15:17:36.900 |
| fkie_cve-2026-37339 | SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file … | 2026-04-16T15:17:36.790 | 2026-04-16T15:17:36.790 |
| fkie_cve-2026-33804 | @fastify/middie versions 9.3.1 and earlier are vulnerable to middleware bypass when the deprecated … | 2026-04-16T15:17:34.633 | 2026-04-16T15:17:34.633 |
| fkie_cve-2026-30993 | Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in … | 2026-04-15T18:16:59.913 | 2026-04-16T15:17:18.010 |
| fkie_cve-2026-30625 | Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation funct… | 2026-04-15T16:16:36.787 | 2026-04-16T15:17:17.690 |
| fkie_cve-2026-30461 | Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RC… | 2026-04-15T16:16:36.050 | 2026-04-16T15:17:17.503 |
| fkie_cve-2026-2840 | The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to… | 2026-04-16T15:17:17.190 | 2026-04-16T15:17:17.190 |
| fkie_cve-2025-67841 | Nordic Semiconductor IronSide SE for nRF54H20 before 23.0.2+17 has an Algorithmic complexity issue. | 2026-04-15T16:16:33.997 | 2026-04-16T15:17:00.520 |
| fkie_cve-2026-31381 | An attacker can extract user email addresses (PII) exposed in base64 encoding via the state paramet… | 2026-03-20T14:16:14.567 | 2026-04-16T15:16:53.553 |
| fkie_cve-2024-35512 | hmq v1.5.5 is vulnerable to Denial of Service (DoS) due to a Null Pointer Exception. A remote attac… | 2024-05-29T17:16:20.540 | 2026-04-16T15:16:48.460 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-6v58-5584-rv99 |
8.1 (3.1)
|
Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment. If at least o… | 2026-04-16T03:31:06Z | 2026-04-16T03:31:06Z |
| ghsa-49h6-4qj3-4f42 |
5.4 (4.0)
|
A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Cente… | 2026-04-16T03:31:06Z | 2026-04-16T03:31:06Z |
| ghsa-48wr-p98v-9w5h |
4.9 (3.1)
|
FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryp… | 2026-04-16T03:31:06Z | 2026-04-16T03:31:06Z |
| ghsa-3r49-76f3-pf2m |
9.8 (3.1)
9.3 (4.0)
|
Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec … | 2026-04-16T03:31:06Z | 2026-04-16T03:31:06Z |
| ghsa-x87c-g7pw-2xr5 |
6.3 (3.1)
5.3 (4.0)
|
GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulner… | 2026-04-10T21:31:15Z | 2026-04-16T03:31:05Z |
| ghsa-v8f7-cg9p-w5jx |
6.3 (3.1)
5.3 (4.0)
|
GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulner… | 2026-04-10T21:31:15Z | 2026-04-16T03:31:05Z |
| ghsa-9w66-jgph-vx6j |
8.8 (3.1)
8.7 (4.0)
|
OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows remote g… | 2026-04-16T03:31:05Z | 2026-04-16T03:31:05Z |
| ghsa-7rhq-9q45-5gm4 |
8.4 (4.0)
|
radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's print… | 2026-04-16T03:31:05Z | 2026-04-16T03:31:05Z |
| ghsa-6f54-qjvm-wwq3 |
5.1 (4.0)
|
wger has Stored XSS via Unescaped License Attribution Fields | 2026-04-16T01:37:21Z | 2026-04-16T01:37:21Z |
| ghsa-xppv-4jrx-qf8m |
7.6 (3.1)
|
wger has Broken Access Control in Global Gym Configuration Update Endpoint | 2026-04-16T01:35:16Z | 2026-04-16T01:35:16Z |
| ghsa-m32f-8vh9-2hh3 |
6.9 (3.1)
|
Keycloak: Arbitrary code execution via Stored Cross-Site Scripting (XSS) in organization selection … | 2026-04-14T15:30:35Z | 2026-04-16T01:34:56Z |
| ghsa-5vjq-5jmg-39xq |
6.3 (3.1)
|
Renovate affected by remote code execution was possible using the bazel-module or bazelisk managers… | 2026-04-16T01:34:39Z | 2026-04-16T01:34:40Z |
| ghsa-3qcm-pj6q-w4c5 |
4.3 (3.1)
5.3 (4.0)
|
Nodcms contains a cross-site request forgery vulnerability | 2026-04-04T21:30:27Z | 2026-04-16T01:34:08Z |
| ghsa-fpx9-9hq8-w2xc |
8.5 (3.1)
|
Webkul Krayin CRM has Server-Side Request Forgery (SSRF) | 2026-04-14T18:30:35Z | 2026-04-16T01:32:29Z |
| ghsa-2xx8-j85v-j7wh |
8.1 (3.1)
|
Webkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Contact/Persons/PersonContro… | 2026-04-14T18:30:35Z | 2026-04-16T01:32:19Z |
| ghsa-r8rp-5f55-5j9x |
8.8 (3.1)
|
Webkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Settings/UserController.php | 2026-04-14T18:30:35Z | 2026-04-16T01:31:46Z |
| ghsa-rm5f-3c25-p4cw |
8.1 (3.1)
|
Webkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Controllers/Lead/LeadControl… | 2026-04-14T18:30:35Z | 2026-04-16T01:31:36Z |
| ghsa-hm2w-vr2p-hq7w |
9.8 (3.1)
|
UEFI Firmware Parser has a heap out-of-bounds write in tiano decompressor ReadCLen | 2026-04-16T01:31:09Z | 2026-04-16T01:31:09Z |
| ghsa-2689-5p89-6j3j |
9.8 (3.1)
|
UEFI Firmware Parser has a stack out-of-bounds write in tiano decompressor MakeTable | 2026-04-16T01:30:48Z | 2026-04-16T01:30:48Z |
| ghsa-mp82-fmj6-f22v |
4.8 (3.1)
|
pyLoad has a Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Glo… | 2026-04-16T01:20:49Z | 2026-04-16T01:21:32Z |
| ghsa-rr7j-v2q5-chgv |
5.3 (3.1)
|
LangSmith SDK: Streaming token events bypass output redaction | 2026-04-16T01:20:37Z | 2026-04-16T01:20:37Z |
| ghsa-pfx2-9x9m-7ghx |
7.7 (3.1)
|
OpenStack Keystone: LDAP identity backend does not convert enabled attribute to boolean | 2026-04-14T21:31:48Z | 2026-04-16T01:20:22Z |
| ghsa-vp22-38m5-r39r |
6.9 (4.0)
|
PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.valid… | 2026-04-16T01:09:17Z | 2026-04-16T01:09:17Z |
| ghsa-gvvw-8j96-8g5r |
9.8 (3.1)
|
MsQuic has a Remote Elevation of Privilege Vulnerability | 2026-04-16T01:04:03Z | 2026-04-16T01:04:03Z |
| ghsa-6hw5-45gm-fj88 |
9.1 (4.0)
|
@fastify/express has a middleware authentication bypass via URL normalization gaps (duplicate slash… | 2026-04-16T01:03:46Z | 2026-04-16T01:03:46Z |
| ghsa-hrwm-hgmj-7p9c |
9.1 (3.1)
|
@fastify/express's middleware path doubling causes authentication bypass in child plugin scopes | 2026-04-16T01:03:25Z | 2026-04-16T01:03:25Z |
| ghsa-gwhp-pf74-vj37 |
9.0 (4.0)
|
Fastify's connection header abuse enables stripping of proxy-added headers | 2026-04-16T01:02:59Z | 2026-04-16T01:02:59Z |
| ghsa-33r3-4whc-44c2 |
8.4 (4.0)
|
Path traversal in vite-plus/binding downloadPackageManager() writes outside VP_HOME | 2026-04-16T01:02:48Z | 2026-04-16T01:02:48Z |
| ghsa-458j-xx4x-4375 |
4.3 (3.1)
|
hono Improperly Handles JSX Attribute Names Allows HTML Injection in hono/jsx SSR | 2026-04-16T01:02:24Z | 2026-04-16T01:02:24Z |
| ghsa-w59f-67xm-rxx7 |
9.9 (3.1)
|
Froxlor has Local File Inclusion via path traversal in API `def_language` parameter leads to Remote… | 2026-04-16T01:02:12Z | 2026-04-16T01:02:12Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2022-43147 |
9.8 (3.1)
|
pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact… | pyanxdns | 2022-06-08T20:15:00Z | 2024-11-21T14:22:59.309018Z |
| pysec-2017-146 |
7.5 (3.1)
|
Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users abou… | pyignite | 2017-06-28T13:29:00Z | 2024-11-21T14:22:59.736776Z |
| pysec-2014-115 |
|
The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using… | portage | 2014-09-29T22:55:00Z | 2024-11-21T14:22:59.10272Z |
| pysec-2011-27 |
|
The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 do… | products-plonehotfix20110928 | 2011-10-10T10:55:00Z | 2024-11-21T14:22:59.206417Z |
| pysec-2011-26 |
|
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9… | products-plonehotfix20110928 | 2011-10-10T10:55:00Z | 2024-11-21T14:22:59.154748Z |
| pysec-2024-146 |
9.8 (3.1)
|
PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.401329+00:00 |
| pysec-2024-145 |
7.5 (3.1)
|
FPE in paddle.argmin and paddle.argmax in PaddlePaddle before 2.6.0. This flaw can cause … | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.341995+00:00 |
| pysec-2024-144 |
7.5 (3.1)
|
Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a ru… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.282654+00:00 |
| pysec-2024-143 |
9.8 (3.1)
|
PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.223275+00:00 |
| pysec-2024-142 |
9.8 (3.1)
|
PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resul… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.166295+00:00 |
| pysec-2024-141 |
9.8 (3.1)
|
Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw … | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.106968+00:00 |
| pysec-2024-140 |
7.5 (3.1)
|
FPE in paddle.amin in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and … | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:58.044369+00:00 |
| pysec-2024-139 |
9.8 (3.1)
|
Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lea… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.974712+00:00 |
| pysec-2024-138 |
7.5 (3.1)
|
FPE in paddle.lerp in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and … | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.913569+00:00 |
| pysec-2024-137 |
7.5 (3.1)
|
FPE in paddle.topk in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and … | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.844840+00:00 |
| pysec-2024-136 |
9.8 (3.1)
|
Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.785687+00:00 |
| pysec-2024-135 |
7.5 (3.1)
|
Nullptr in paddle.put_along_axis in PaddlePaddle before 2.6.0. This flaw can cause a runt… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.726582+00:00 |
| pysec-2024-134 |
7.5 (3.1)
|
Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime c… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.667127+00:00 |
| pysec-2024-133 |
7.5 (3.1)
|
OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime cra… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.605277+00:00 |
| pysec-2024-132 |
7.5 (3.1)
|
FPE in paddle.linalg.eig in PaddlePaddle before 2.6.0. This flaw can cause a runtime cras… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.546560+00:00 |
| pysec-2024-131 |
7.5 (3.1)
|
Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash a… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.485379+00:00 |
| pysec-2024-130 |
7.5 (3.1)
|
FPE in paddle.linalg.matrix_rank in PaddlePaddle before 2.6.0. This flaw can cause a runt… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.427583+00:00 |
| pysec-2024-129 |
7.5 (3.1)
|
FPE in paddle.nanmedian in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash… | paddlepaddle | 2024-01-03T09:15:00+00:00 | 2024-11-21T14:22:57.364643+00:00 |
| pysec-2022-43143 |
6.5 (3.1)
|
OpenZeppelin Contracts for Cairo is a library for contract development written in Cairo f… | openzeppelin-cairo-contracts-test | 2022-07-15T18:15:00Z | 2024-11-21T14:22:57.304802Z |
| pysec-2022-43142 |
7.8 (3.1)
|
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3. | octoprint | 2022-08-22T12:15:00+00:00 | 2024-11-21T14:22:57.145370+00:00 |
| pysec-2018-153 |
5.5 (3.1)
|
Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmen… | opencc-py | 2018-09-13T02:29:00Z | 2024-11-21T14:22:57.249534Z |
| pysec-2014-114 |
|
Cross-site scripting (XSS) vulnerability in lua/host_details.lua in ntopng 1.1 allows rem… | ntopng | 2014-06-19T10:50:00Z | 2024-11-21T14:22:57.09034Z |
| pysec-2013-45 |
|
keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an i… | nova | 2013-12-27T01:55:00Z | 2024-11-21T14:22:56.793365Z |
| pysec-2012-41 |
|
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM b… | nova | 2012-12-26T22:55:00Z | 2024-11-21T14:22:56.616552Z |
| pysec-2012-40 |
|
The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when D… | nova | 2012-07-17T21:55:00Z | 2024-11-21T14:22:56.558714Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33654 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.212436Z |
| gsd-2024-33653 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.211438Z |
| gsd-2024-33652 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.279059Z |
| gsd-2024-33651 | Cross-Site Request Forgery (CSRF) vulnerability in Matthew Fries MF Gig Calendar.This iss… | 2024-04-26T05:02:19.207978Z |
| gsd-2024-33650 | Cross-Site Request Forgery (CSRF) vulnerability in Cryout Creations Serious Slider.This i… | 2024-04-26T05:02:19.172076Z |
| gsd-2024-33649 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.185793Z |
| gsd-2024-33648 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.149332Z |
| gsd-2024-33647 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.188223Z |
| gsd-2024-33646 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.206029Z |
| gsd-2024-33645 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.239357Z |
| gsd-2024-33644 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.256945Z |
| gsd-2024-33643 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.131060Z |
| gsd-2024-33642 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-26T05:02:19.166814Z |
| gsd-2024-33641 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.213153Z |
| gsd-2024-33640 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.209462Z |
| gsd-2024-33639 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-26T05:02:19.283203Z |
| gsd-2024-33638 | Cross-Site Request Forgery (CSRF) vulnerability in Brijesh Kothari Smart Maintenance Mode… | 2024-04-26T05:02:19.155155Z |
| gsd-2024-33637 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.257652Z |
| gsd-2024-33636 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.188953Z |
| gsd-2024-33635 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.164031Z |
| gsd-2024-33634 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.138995Z |
| gsd-2024-33633 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.141967Z |
| gsd-2024-33632 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.238835Z |
| gsd-2024-33631 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.242437Z |
| gsd-2024-33630 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.283884Z |
| gsd-2024-33629 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.165154Z |
| gsd-2024-33628 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.149995Z |
| gsd-2024-33627 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:19.157764Z |
| gsd-2024-4226 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.358460Z |
| gsd-2024-4225 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.423760Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-2693 | Malicious code in vs-supplier-portal-web (npm) | 2026-04-15T14:57:24Z | 2026-04-15T14:57:25Z |
| mal-2026-2692 | Malicious code in fusion-events (npm) | 2026-04-15T14:57:24Z | 2026-04-15T14:57:25Z |
| mal-2026-2691 | Malicious code in base-counter-web (npm) | 2026-04-15T14:57:24Z | 2026-04-15T14:57:25Z |
| mal-2026-2001 | Malicious code in laserlogsink (npm) | 2026-03-20T17:21:01Z | 2026-04-15T14:52:01Z |
| mal-2026-2690 | Malicious code in @pnc-ref/harmony-support-v18 (npm) | 2026-04-15T14:19:35Z | 2026-04-15T14:19:42Z |
| mal-2026-2688 | Malicious code in @pnc-cib/cib-core-lib (npm) | 2026-04-15T14:19:35Z | 2026-04-15T14:19:42Z |
| mal-2026-2689 | Malicious code in @pnc-ref/harmony-core-v18 (npm) | 2026-04-15T14:19:35Z | 2026-04-15T14:19:36Z |
| mal-2026-2687 | Malicious code in com.baogong.app_push_permission (npm) | 2026-04-15T13:49:47Z | 2026-04-15T13:49:48Z |
| mal-2026-2685 | Malicious code in react-dom-19 (npm) | 2026-04-15T13:21:15Z | 2026-04-15T13:40:58Z |
| mal-2026-2686 | Malicious code in neverinstallme (PyPI) | 2026-04-15T13:10:53Z | 2026-04-15T13:10:53Z |
| mal-2026-2683 | Malicious code in @athena-ui-components/axios (npm) | 2026-04-15T09:40:47Z | 2026-04-15T09:40:47Z |
| mal-2026-2681 | Malicious code in @athena-ui-components/dashboard-widget (npm) | 2026-04-15T09:00:54Z | 2026-04-15T09:00:54Z |
| mal-2026-2682 | Malicious code in @athena-ui-components/deeplink (npm) | 2026-04-15T09:00:45Z | 2026-04-15T09:00:45Z |
| mal-2026-2827 | Malicious code in js-logger-pack (npm) | 2026-04-15T06:24:12Z | 2026-04-15T06:24:12Z |
| mal-2026-2680 | Malicious code in @veygo/component-library (npm) | 2026-04-15T03:25:57Z | 2026-04-15T03:25:57Z |
| mal-2026-1420 | Malicious code in cw-isdk (npm) | 2026-03-13T15:38:25Z | 2026-04-15T03:24:23Z |
| mal-2026-2679 | Malicious code in snitz-chief-cloud-config (npm) | 2026-04-15T03:12:05Z | 2026-04-15T03:12:06Z |
| mal-2026-2676 | Malicious code in moscova-plural-json-parser (npm) | 2026-04-15T03:12:05Z | 2026-04-15T03:12:06Z |
| mal-2026-2674 | Malicious code in chief-proxy-out (npm) | 2026-04-15T03:12:05Z | 2026-04-15T03:12:06Z |
| mal-2026-2678 | Malicious code in snitz-chief-cloud (npm) | 2026-04-15T03:12:05Z | 2026-04-15T03:12:05Z |
| mal-2026-2677 | Malicious code in pdf-linker (npm) | 2026-04-15T03:12:05Z | 2026-04-15T03:12:05Z |
| mal-2026-2673 | Malicious code in chief-documentation (npm) | 2026-04-15T03:12:05Z | 2026-04-15T03:12:05Z |
| mal-2026-2675 | Malicious code in mongoose-stamps (npm) | 2026-04-15T03:07:56Z | 2026-04-15T03:07:57Z |
| mal-2026-2672 | Malicious code in ahmed_salem_ph (npm) | 2026-04-15T03:02:45Z | 2026-04-15T03:02:45Z |
| mal-2026-2671 | Malicious code in kryptex-os (PyPI) | 2026-04-14T21:55:34Z | 2026-04-14T21:55:34Z |
| mal-2026-2670 | Malicious code in 7miners (PyPI) | 2026-04-14T21:55:03Z | 2026-04-14T21:55:03Z |
| mal-2026-2669 | Malicious code in ant-mcp-proxy-for-test (PyPI) | 2026-04-14T21:19:11Z | 2026-04-14T21:19:23Z |
| mal-2026-2668 | Malicious code in pnpm-workspaces (npm) | 2026-04-14T19:36:06Z | 2026-04-14T19:36:06Z |
| mal-2026-2667 | Malicious code in ckeditor5-minimap (npm) | 2026-04-14T19:06:02Z | 2026-04-14T19:06:02Z |
| mal-2026-2666 | Malicious code in moooo (PyPI) | 2026-04-14T15:21:49Z | 2026-04-14T15:21:49Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2931 | GIMP: Schwachstelle ermöglicht Codeausführung | 2025-12-29T23:00:00.000+00:00 | 2026-02-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2871 | GIMP: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-12-17T23:00:00.000+00:00 | 2026-02-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2608 | Golang Go: Schwachstelle ermöglicht Denial of Service | 2025-11-16T23:00:00.000+00:00 | 2026-02-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2301 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2025-10-14T22:00:00.000+00:00 | 2026-02-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2129 | GIMP: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-09-24T22:00:00.000+00:00 | 2026-02-23T23:00:00.000+00:00 |
| wid-sec-w-2025-2002 | libssh: Schwachstelle ermöglicht Denial of Service | 2025-09-09T22:00:00.000+00:00 | 2026-02-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0734 | GIMP: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-04-07T22:00:00.000+00:00 | 2026-02-23T23:00:00.000+00:00 |
| wid-sec-w-2026-0203 | SmarterTools SmarterMail: Schwachstelle ermöglicht Umgehung | 2026-01-22T23:00:00.000+00:00 | 2026-02-22T23:00:00.000+00:00 |
| wid-sec-w-2025-1208 | Roundcube: Schwachstelle ermöglicht Codeausführung | 2025-06-01T22:00:00.000+00:00 | 2026-02-22T23:00:00.000+00:00 |
| wid-sec-w-2026-0347 | Red Hat Build of Keycloak: Mehrere Schwachstellen | 2026-02-09T23:00:00.000+00:00 | 2026-02-19T23:00:00.000+00:00 |
| wid-sec-w-2026-0196 | CPython: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2026-01-21T23:00:00.000+00:00 | 2026-02-19T23:00:00.000+00:00 |
| wid-sec-w-2026-0083 | Microsoft Windows : Mehrere Schwachstellen | 2026-01-13T23:00:00.000+00:00 | 2026-02-19T23:00:00.000+00:00 |
| wid-sec-w-2026-0437 | Dell RecoverPoint for Virtual Machines: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und potenziell Privilegieneskalation | 2026-02-17T23:00:00.000+00:00 | 2026-02-18T23:00:00.000+00:00 |
| wid-sec-w-2026-0420 | Google Chrome und Microsoft Edge: Schwachstelle ermöglicht Codeausführung | 2026-02-15T23:00:00.000+00:00 | 2026-02-17T23:00:00.000+00:00 |
| wid-sec-w-2026-0426 | Apache Traffic Server: Mehrere Schwachstellen ermöglichen Denial of Service | 2019-08-14T22:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2026-0401 | Google Chrome: Mehrere Schwachstellen | 2026-02-11T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2026-0367 | Microsoft DeveloperTools (Visual Studio Code und .NET): Mehrere Schwachstellen | 2026-02-10T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2026-0304 | patch: Schwachstelle ermöglicht Denial of Service | 2021-12-22T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2026-0243 | Red Hat OpenShift Container Platform: Schwachstelle ermöglicht Denial of Service | 2026-01-27T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2026-0231 | GnuPG und Gpg4win: Mehrere Schwachstellen | 2026-01-27T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2026-0199 | Red Hat OpenShift Pipelines Operator (Fulcio): Schwachstelle ermöglicht Denial of Service | 2026-01-22T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2026-0136 | AMD EPYC-Prozessoren: Schwachstelle ermöglicht Manipulation von Daten | 2026-01-15T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2026-0116 | Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service | 2026-01-14T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2026-0105 | Red Hat Developer Hub: Mehrere Schwachstellen | 2026-01-13T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2026-0098 | Node.js: Mehrere Schwachstellen | 2026-01-13T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2026-0008 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2026-01-04T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2798 | Red Hat OpenShift Service Mesh: Mehrere Schwachstellen | 2025-12-09T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2755 | util-linux: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2025-12-07T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2730 | Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-02T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2025-2643 | Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-19T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-301-01 | Schneider Electric EcoStruxure | 2025-10-14T07:00:00.000000Z | 2025-10-14T07:00:00.000000Z |
| icsa-25-259-01 | Schneider Electric Altivar products ATVdPAC module ILC992 InterLink Converter (Update A) | 2025-09-09T04:00:00.000000Z | 2025-10-14T07:00:00.000000Z |
| icsa-25-140-08 | Schneider Electric Modicon Controllers (Update B) | 2025-05-13T04:00:00.000000Z | 2025-10-14T07:00:00.000000Z |
| icsa-24-352-04 | Schneider Electric Modicon | 2024-12-10T05:00:00.000000Z | 2025-10-14T07:00:00.000000Z |
| icsa-25-287-01 | Rockwell Automation 1715 EtherNet/IP Comms Module | 2025-10-14T06:00:00.000000Z | 2025-10-14T06:00:00.000000Z |
| icsa-25-294-04 | Siemens RUGGEDCOM ROS Devices | 2025-07-08T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-294-03 | Siemens SIMATIC S7-1200 CPU V1/V2 Devices | 2011-06-10T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-289-09 | Siemens TeleControl Server Basic | 2025-10-14T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-289-08 | Siemens SINEC NMS | 2025-10-14T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-289-07 | Siemens SIMATIC ET 200SP Communication Processors | 2025-10-14T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-289-05 | Siemens Solid Edge | 2025-10-14T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-254-07 | Siemens User Management Component (UMC) | 2025-09-09T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-148-01 | Siemens SiPass | 2025-05-23T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-135-09 | Siemens User Management Component (UMC) | 2025-05-13T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-24-284-10 | Siemens SIMATIC S7-1500 CPUs | 2024-10-08T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-24-284-01 | Siemens SIMATIC S7-1500 and S7-1200 CPUs | 2024-10-08T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-24-256-03 | Siemens User Management Component (UMC) | 2024-09-10T00:00:00.000000Z | 2025-10-14T00:00:00.000000Z |
| icsa-25-252-08 | Rockwell Automation Analytics LogixAI | 2025-09-09T06:00:00.000000Z | 2025-10-10T06:00:00.000000Z |
| va-25-282-01 | Newforma Project Center multiple vulnerabilities | 2025-10-09T19:50:00Z | 2025-10-09T19:50:00Z |
| icsa-25-282-03 | Rockwell Automation Stratix | 2025-10-09T06:00:00.000000Z | 2025-10-09T06:00:00.000000Z |
| icsa-25-282-02 | Rockwell Automation Lifecycle Services with Cisco | 2025-10-09T06:00:00.000000Z | 2025-10-09T06:00:00.000000Z |
| va-25-280-01 | OPEXUS FOIAXpress stored XSS | 2025-10-07T22:50:29Z | 2025-10-07T22:50:29Z |
| icsa-25-226-31 | Rockwell Automation 1756-EN4TR, 1756-EN4TRXT (Update B) | 2025-08-14T06:00:00.000000Z | 2025-10-07T06:00:00.000000Z |
| icsa-25-275-01 | Raise3D Pro2 Series 3D Printers** | 2025-10-02T05:00:00.000000Z | 2025-10-02T05:00:00.000000Z |
| icsa-25-343-02 | Festo LX Appliance | 2023-08-29T10:00:00.000000Z | 2025-10-01T10:00:00.000000Z |
| icsa-25-324-04 | Festo MSE6-C2M/D2M/E2M | 2023-09-05T10:00:00.000000Z | 2025-10-01T10:00:00.000000Z |
| icsa-25-324-05 | Festo Didactic products | 2023-10-17T06:00:00.000000Z | 2025-10-01T06:00:00.000000Z |
| icsa-25-289-11 | Hitachi Energy MACH GWS | 2025-09-30T12:50:29.000000Z | 2025-09-30T12:50:29.000000Z |
| icsa-24-116-02 | Hitachi Energy MACH SCM (Update A) | 2024-03-26T11:32:43.000000Z | 2025-09-30T11:32:43.000000Z |
| icsa-25-275-02 | Hitachi Energy MSM | 2025-09-30T09:02:31.000000Z | 2025-09-30T09:02:31.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-fmc-xss-infodisc-RL4mJFer | Cisco Secure Firewall Management Center Software Cross-Site Scripting and Information Disclosure Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-24T11:52:38+00:00 |
| cisco-sa-fmc-xss-dhjxqyzs | Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-xss-dhJxQYZs | Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-sql-inject-2EnmTC8v | Cisco Secure Firewall Management Center Software SQL Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2026-03-04T16:11:01+00:00 |
| cisco-sa-fmc-sql-inj-loyafcfq | Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-sql-inj-LOYAFcfq | Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-priv-esc-cmq4s6m7 | Cisco Secure Firewall Management Center Privilege Escalation Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-priv-esc-CMQ4S6m7 | Cisco Secure Firewall Management Center Privilege Escalation Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-html-inj-nfjeyhxz | Cisco Secure Firewall Management Center Software HTML Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-html-inj-nfJeYHxz | Cisco Secure Firewall Management Center Software HTML Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-file-read-5q4mqrn | Cisco Secure Firewall Management Center Software Arbitrary File Read Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-file-read-5q4mQRn | Cisco Secure Firewall Management Center Software Arbitrary File Read Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-v3awdqn7 | Cisco Secure Firewall Management Center Software Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-v3AWDqN7 | Cisco Secure Firewall Management Center Software Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-g8aokndp | Cisco Secure Firewall Management Center Software Cluster Backup Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-g8AOKnDP | Cisco Secure Firewall Management Center Software Cluster Backup Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-2hbka97g | Cisco Secure Firewall Management Center Software Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-fmc-cmd-inj-2HBkA97G | Cisco Secure Firewall Management Center Software Command Injection Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-csc-dos-xvphm3bj | Cisco Secure Client Software Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-csc-dos-XvPhM3bj | Cisco Secure Client Software Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftdvirtual-dos-muengnyr | Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftdvirtual-dos-MuenGnYR | Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-xss-yjj7zjvq | Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Cross-Site Scripting Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-xss-yjj7ZjVq | Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Cross-Site Scripting Vulnerabilities | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-webvpn-dos-honb9ph4 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Memory Management Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-webvpn-dos-hOnB9pH4 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Memory Management Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-snmp-dos-7tcnzxtu | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SNMP Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-snmp-dos-7TcnzxTU | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SNMP Denial of Service Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-persist-lce-vu3ekmj3 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| cisco-sa-asaftd-persist-lce-vU3ekMJ3 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability | 2024-10-23T16:00:00+00:00 | 2024-10-23T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-40024 | Sleuth Kit tsk_recover Path Traversal | 2026-04-02T00:00:00.000Z | 2026-04-11T01:40:50.000Z |
| msrc_cve-2026-40025 | Sleuth Kit APFS Keybag Parser Out-of-Bounds Read | 2026-04-02T00:00:00.000Z | 2026-04-11T01:40:44.000Z |
| msrc_cve-2026-40026 | Sleuth Kit ISO9660 SUSP Extension Reference Out-of-Bounds Read | 2026-04-02T00:00:00.000Z | 2026-04-11T01:40:37.000Z |
| msrc_cve-2026-35535 | CVE-2026-35535 | 2026-04-02T00:00:00.000Z | 2026-04-11T01:40:10.000Z |
| msrc_cve-2026-35385 | CVE-2026-35385 | 2026-04-02T00:00:00.000Z | 2026-04-11T01:40:03.000Z |
| msrc_cve-2026-35386 | CVE-2026-35386 | 2026-04-02T00:00:00.000Z | 2026-04-11T01:39:56.000Z |
| msrc_cve-2026-35388 | CVE-2026-35388 | 2026-04-02T00:00:00.000Z | 2026-04-11T01:39:45.000Z |
| msrc_cve-2026-29181 | OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification) | 2026-04-02T00:00:00.000Z | 2026-04-11T01:03:43.000Z |
| msrc_cve-2026-39882 | OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies | 2026-04-02T00:00:00.000Z | 2026-04-11T01:03:08.000Z |
| msrc_cve-2026-28810 | Predictable DNS Transaction IDs Enable Cache Poisoning in Built-in Resolver | 2026-04-02T00:00:00.000Z | 2026-04-11T01:01:30.000Z |
| msrc_cve-2026-39316 | CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer | 2026-04-02T00:00:00.000Z | 2026-04-11T01:01:21.000Z |
| msrc_cve-2026-39314 | CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported` | 2026-04-02T00:00:00.000Z | 2026-04-11T01:01:16.000Z |
| msrc_cve-2026-31790 | Incorrect Failure Handling in RSA KEM RSASVE Encapsulation | 2026-04-02T00:00:00.000Z | 2026-04-10T14:39:43.000Z |
| msrc_cve-2026-33119 | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability | 2026-04-02T07:00:00.000Z | 2026-04-10T07:00:00.000Z |
| msrc_cve-2026-33118 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 2026-04-02T07:00:00.000Z | 2026-04-10T07:00:00.000Z |
| msrc_cve-2026-24302 | Azure Arc Elevation of Privilege Vulnerability | 2026-02-10T08:00:00.000Z | 2026-04-10T07:00:00.000Z |
| msrc_cve-2026-23411 | apparmor: fix race between freeing data and fs accessing it | 2026-04-02T00:00:00.000Z | 2026-04-10T01:02:58.000Z |
| msrc_cve-2026-23410 | apparmor: fix race on rawdata dereference | 2026-04-02T00:00:00.000Z | 2026-04-10T01:02:51.000Z |
| msrc_cve-2026-23409 | apparmor: fix differential encoding verification | 2026-04-02T00:00:00.000Z | 2026-04-10T01:02:45.000Z |
| msrc_cve-2026-23408 | apparmor: Fix double free of ns_name in aa_replace_profiles() | 2026-04-02T00:00:00.000Z | 2026-04-10T01:02:39.000Z |
| msrc_cve-2026-23407 | apparmor: fix missing bounds check on DEFAULT table in verify_dfa() | 2026-04-02T00:00:00.000Z | 2026-04-10T01:02:33.000Z |
| msrc_cve-2026-23406 | apparmor: fix side-effect bug in match_char() macro usage | 2026-04-02T00:00:00.000Z | 2026-04-10T01:02:27.000Z |
| msrc_cve-2026-23405 | apparmor: fix: limit the number of levels of policy namespaces | 2026-04-02T00:00:00.000Z | 2026-04-10T01:02:21.000Z |
| msrc_cve-2026-23404 | apparmor: replace recursive profile removal with iterative approach | 2026-04-02T00:00:00.000Z | 2026-04-10T01:02:14.000Z |
| msrc_cve-2026-23403 | apparmor: fix memory leak in verify_header | 2026-04-02T00:00:00.000Z | 2026-04-10T01:02:07.000Z |
| msrc_cve-2026-32241 | Flannel vulnerable to cross-node remote code execution via extension backend BackendData injection | 2026-03-02T00:00:00.000Z | 2026-04-10T01:01:36.000Z |
| msrc_cve-2026-26133 | M365 Copilot Information Disclosure Vulnerability | 2026-03-10T07:00:00.000Z | 2026-04-09T07:00:00.000Z |
| msrc_cve-2026-0385 | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability | 2026-03-10T07:00:00.000Z | 2026-04-09T07:00:00.000Z |
| msrc_cve-2026-21715 | CVE-2026-21715 | 2026-03-02T00:00:00.000Z | 2026-04-09T01:40:20.000Z |
| msrc_cve-2026-21710 | CVE-2026-21710 | 2026-03-02T00:00:00.000Z | 2026-04-09T01:40:13.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0198 | Kwetsbaarheden verholpen in Veeam Backup | 2025-06-18T12:18:39.049977Z | 2025-06-18T12:18:39.049977Z |
| ncsc-2025-0197 | Kwetsbaarheid verholpen in GeoServer | 2025-06-18T10:17:42.472544Z | 2025-06-18T10:17:42.472544Z |
| ncsc-2025-0195 | Kwetsbaarheden verholpen in Apache Tomcat | 2025-06-18T08:01:06.984131Z | 2025-06-18T08:01:06.984131Z |
| ncsc-2025-0194 | Kwetsbaarheden verholpen in Trend Micro Apex One en Apex Central | 2025-06-12T11:12:33.408725Z | 2025-06-12T11:12:33.408725Z |
| ncsc-2025-0193 | Kwetsbaarheden verholpen in Ivanti Workspace Control | 2025-06-12T11:08:41.247215Z | 2025-06-12T11:08:41.247215Z |
| ncsc-2025-0192 | Kwetsbaarheden verholpen in Fortinet FortiOS | 2025-06-12T11:04:45.167843Z | 2025-06-12T11:04:45.167843Z |
| ncsc-2025-0191 | Kwetsbaarheden verholpen in Adobe Commerce en Magento | 2025-06-11T06:58:19.840921Z | 2025-06-11T06:58:19.840921Z |
| ncsc-2025-0190 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2025-06-10T18:46:10.932182Z | 2025-06-10T18:46:10.932182Z |
| ncsc-2025-0189 | Kwetsbaarheden verholpen in Microsoft Office | 2025-06-10T18:45:25.061778Z | 2025-06-10T18:45:25.061778Z |
| ncsc-2025-0182 | Kwetsbaarheden verholpen in Google Chrome en Microsoft Edge | 2025-06-03T07:52:36.009178Z | 2025-06-10T18:44:36.060357Z |
| ncsc-2025-0188 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-06-10T18:43:18.187461Z | 2025-06-10T18:43:18.187461Z |
| ncsc-2025-0187 | Kwetsbaarheden verholpen in Siemens producten | 2025-06-10T13:11:56.672768Z | 2025-06-10T13:11:56.672768Z |
| ncsc-2025-0186 | Kwetsbaarheden verholpen in SAP Producten | 2025-06-10T10:15:56.898255Z | 2025-06-10T10:15:56.898255Z |
| ncsc-2025-0185 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2025-06-10T07:19:02.701613Z | 2025-06-10T07:19:02.701613Z |
| ncsc-2025-0181 | Kwetsbaarheid verholpen in Roundcube Webmail | 2025-06-02T09:04:58.900416Z | 2025-06-05T14:19:00.303593Z |
| ncsc-2025-0184 | Kwetsbaarheden verholpen in HPE StoreOnce Software | 2025-06-05T10:37:04.196801Z | 2025-06-05T10:37:04.196801Z |
| ncsc-2025-0183 | Kwetsbaarheid verholpen in Cisco Identity Services Engine voor cloudplatformen | 2025-06-05T10:25:46.291683Z | 2025-06-05T10:25:46.291683Z |
| ncsc-2025-0180 | Kwetsbaarheid verholpen in IBM Tivoli Monitoring | 2025-06-02T09:00:25.515472Z | 2025-06-02T09:00:25.515472Z |
| ncsc-2025-0179 | Kwetsbaarheid verholpen in Siemens SiPass Integrated | 2025-05-27T11:42:46.878569Z | 2025-05-27T11:42:46.878569Z |
| ncsc-2025-0178 | Kwetsbaarheden verholpen in Infoblox NETMRI | 2025-05-23T08:55:37.586046Z | 2025-05-23T08:55:37.586046Z |
| ncsc-2025-0177 | Kwetsbaarheden verholpen in ABB ASPECT-productlijn | 2025-05-23T08:40:56.272804Z | 2025-05-23T08:40:56.272804Z |
| ncsc-2025-0176 | Kwetsbaarheden verholpen in GitLab | 2025-05-23T08:38:34.688022Z | 2025-05-23T08:38:34.688022Z |
| ncsc-2025-0175 | Kwetsbaarheden verholpen in Trend Micro Apex Central | 2025-05-23T08:28:52.215347Z | 2025-05-23T08:28:52.215347Z |
| ncsc-2025-0174 | Kwetsbaarheden verholpen in Cisco Unified Intelligence Center | 2025-05-22T08:14:14.245836Z | 2025-05-22T08:14:14.245836Z |
| ncsc-2025-0173 | Kwetsbaarheid verholpen in Cisco Identity Services Engine | 2025-05-22T08:14:06.046824Z | 2025-05-22T08:14:06.046824Z |
| ncsc-2025-0172 | Kwetsbaarheden verholpen in Cisco Webex | 2025-05-22T08:13:51.228348Z | 2025-05-22T08:13:51.228348Z |
| ncsc-2025-0171 | Kwetsbaarheden verholpen in VMware producten | 2025-05-21T13:08:22.714183Z | 2025-05-21T13:08:22.714183Z |
| ncsc-2025-0170 | Kwetsbaarheden verholpen in VMware Cloud Foundation | 2025-05-21T09:12:05.676292Z | 2025-05-21T09:12:05.676292Z |
| ncsc-2025-0169 | Kwetsbaarheden verholpen in Google Chrome | 2025-05-16T12:41:47.685095Z | 2025-05-16T12:41:47.685095Z |
| ncsc-2025-0152 | Kwetsbaarheden verholpen in Ivanti Endpoint Manager Mobile (EPMM, voormalig MobileIron) | 2025-05-13T15:35:45.784542Z | 2025-05-16T09:42:15.822544Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:10310-1 | go1.25-1.25.8-1.1 on GA media | 2026-03-08T00:00:00Z | 2026-03-08T00:00:00Z |
| opensuse-su-2026:20332-1 | Security update for chromium | 2026-03-07T12:59:14Z | 2026-03-07T12:59:14Z |
| opensuse-su-2026:10309-1 | weblate-5.16.1-1.1 on GA media | 2026-03-07T00:00:00Z | 2026-03-07T00:00:00Z |
| opensuse-su-2026:10308-1 | virtiofsd-1.13.2-2.1 on GA media | 2026-03-07T00:00:00Z | 2026-03-07T00:00:00Z |
| opensuse-su-2026:10307-1 | tomcat11-11.0.18-1.1 on GA media | 2026-03-07T00:00:00Z | 2026-03-07T00:00:00Z |
| opensuse-su-2026:10306-1 | tomcat10-10.1.52-1.1 on GA media | 2026-03-07T00:00:00Z | 2026-03-07T00:00:00Z |
| opensuse-su-2026:10305-1 | tomcat-9.0.115-1.1 on GA media | 2026-03-07T00:00:00Z | 2026-03-07T00:00:00Z |
| opensuse-su-2026:10304-1 | python311-nltk-3.9.3-1.1 on GA media | 2026-03-07T00:00:00Z | 2026-03-07T00:00:00Z |
| opensuse-su-2026:10303-1 | libIex-3_4-33-3.4.6-1.1 on GA media | 2026-03-07T00:00:00Z | 2026-03-07T00:00:00Z |
| opensuse-su-2026:10302-1 | kubeshark-cli-53.1.0-1.1 on GA media | 2026-03-07T00:00:00Z | 2026-03-07T00:00:00Z |
| opensuse-su-2026:10301-1 | kernel-devel-longterm-6.18.16-1.1 on GA media | 2026-03-07T00:00:00Z | 2026-03-07T00:00:00Z |
| opensuse-su-2026:10300-1 | jetty-annotations-9.4.58-3.1 on GA media | 2026-03-07T00:00:00Z | 2026-03-07T00:00:00Z |
| opensuse-su-2026:10299-1 | go1.26-1.26.1-1.1 on GA media | 2026-03-07T00:00:00Z | 2026-03-07T00:00:00Z |
| opensuse-su-2026:10298-1 | exiv2-0.28.8-1.1 on GA media | 2026-03-07T00:00:00Z | 2026-03-07T00:00:00Z |
| opensuse-su-2026:10297-1 | coredns-1.14.2-1.1 on GA media | 2026-03-07T00:00:00Z | 2026-03-07T00:00:00Z |
| opensuse-su-2026:10296-1 | chromedriver-145.0.7632.159-1.1 on GA media | 2026-03-07T00:00:00Z | 2026-03-07T00:00:00Z |
| opensuse-su-2026:10295-1 | NetworkManager-applet-strongswan-1.6.4-1.1 on GA media | 2026-03-07T00:00:00Z | 2026-03-07T00:00:00Z |
| opensuse-su-2026:20333-1 | Security update for python-PyPDF2 | 2026-03-06T21:01:39Z | 2026-03-06T21:01:39Z |
| opensuse-su-2026:20330-1 | Security update for python-uv | 2026-03-06T14:43:28Z | 2026-03-06T14:43:28Z |
| opensuse-su-2026:20323-1 | Security update for roundcubemail | 2026-03-05T18:31:03Z | 2026-03-05T18:31:03Z |
| opensuse-su-2026:20329-1 | Security update for gstreamer-rtsp-server, gstreamer-plugins-ugly, gstreamer-plugins-rs, gstreamer-plugins-libav, gstreamer-plugins-good, gstreamer-plugins-base, gstreamer-plugins-bad, gstreamer-docs, gstreamer-devtools, gstreamer | 2026-03-05T18:13:13Z | 2026-03-05T18:13:13Z |
| opensuse-su-2026:20322-1 | Security update for python-joserfc | 2026-03-05T14:32:35Z | 2026-03-05T14:32:35Z |
| opensuse-su-2026:20327-1 | Security update for helm | 2026-03-05T14:27:21Z | 2026-03-05T14:27:21Z |
| opensuse-su-2026:20326-1 | Security update for virtiofsd | 2026-03-05T14:23:19Z | 2026-03-05T14:23:19Z |
| opensuse-ru-2026:20325-1 | Recommended update for shim | 2026-03-05T14:21:04Z | 2026-03-05T14:21:04Z |
| opensuse-su-2026:10294-1 | telemetrygen-0.147.0-1.1 on GA media | 2026-03-05T00:00:00Z | 2026-03-05T00:00:00Z |
| opensuse-su-2026:10293-1 | python311-joserfc-1.6.3-1.1 on GA media | 2026-03-05T00:00:00Z | 2026-03-05T00:00:00Z |
| opensuse-su-2026:10292-1 | python311-Django-5.2.12-1.1 on GA media | 2026-03-05T00:00:00Z | 2026-03-05T00:00:00Z |
| opensuse-su-2026:10291-1 | libsoup-2_4-1-2.74.3-18.1 on GA media | 2026-03-05T00:00:00Z | 2026-03-05T00:00:00Z |
| opensuse-su-2026:10290-1 | heroic-games-launcher-2.20.1-2.1 on GA media | 2026-03-05T00:00:00Z | 2026-03-05T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:3337 | Red Hat Security Advisory: podman security update | 2026-02-25T11:48:26+00:00 | 2026-04-17T10:20:35+00:00 |
| rhsa-2026:3459 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.9.0 release | 2026-02-26T19:58:40+00:00 | 2026-04-17T10:20:34+00:00 |
| rhsa-2026:3428 | Red Hat Security Advisory: container-tools:rhel8 security update | 2026-02-26T14:36:45+00:00 | 2026-04-17T10:20:33+00:00 |
| rhsa-2026:3427 | Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.9.0 release | 2026-02-26T11:02:21+00:00 | 2026-04-17T10:20:33+00:00 |
| rhsa-2026:3416 | Red Hat Security Advisory: OpenShift Container Platform 4.17.50 packages and security update | 2026-03-04T09:07:15+00:00 | 2026-04-17T10:20:32+00:00 |
| rhsa-2026:3391 | Red Hat Security Advisory: OpenShift Container Platform 4.19.25 packages and security update | 2026-03-04T15:54:04+00:00 | 2026-04-17T10:20:31+00:00 |
| rhsa-2026:3343 | Red Hat Security Advisory: skopeo security update | 2026-02-25T11:50:40+00:00 | 2026-04-17T10:20:31+00:00 |
| rhsa-2026:3341 | Red Hat Security Advisory: containernetworking-plugins security update | 2026-02-25T12:14:45+00:00 | 2026-04-17T10:20:31+00:00 |
| rhsa-2026:3340 | Red Hat Security Advisory: skopeo security update | 2026-02-25T12:16:20+00:00 | 2026-04-17T10:20:31+00:00 |
| rhsa-2026:3336 | Red Hat Security Advisory: podman security update | 2026-02-25T11:30:01+00:00 | 2026-04-17T10:20:30+00:00 |
| rhsa-2026:3298 | Red Hat Security Advisory: buildah security update | 2026-02-25T09:32:15+00:00 | 2026-04-17T10:20:30+00:00 |
| rhsa-2026:3297 | Red Hat Security Advisory: buildah security update | 2026-02-25T09:09:30+00:00 | 2026-04-17T10:20:30+00:00 |
| rhsa-2026:3296 | Red Hat Security Advisory: RHTAS - Tech Preview Release Of the Policy Controller Operator | 2026-02-25T08:49:49+00:00 | 2026-04-17T10:20:29+00:00 |
| rhsa-2026:3291 | Red Hat Security Advisory: runc security update | 2026-02-25T07:41:04+00:00 | 2026-04-17T10:20:29+00:00 |
| rhsa-2026:3289 | Red Hat Security Advisory: opentelemetry-collector security update | 2026-02-25T07:10:59+00:00 | 2026-04-17T10:20:29+00:00 |
| rhsa-2026:3107 | Red Hat Security Advisory: Kiali 1.73.27 for Red Hat OpenShift Service Mesh 2.6 | 2026-02-23T17:16:07+00:00 | 2026-04-17T10:20:29+00:00 |
| rhsa-2026:3288 | Red Hat Security Advisory: opentelemetry-collector security update | 2026-02-25T06:54:49+00:00 | 2026-04-17T10:20:28+00:00 |
| rhsa-2026:3287 | Red Hat Security Advisory: opentelemetry-collector security update | 2026-02-25T07:05:39+00:00 | 2026-04-17T10:20:28+00:00 |
| rhsa-2026:3193 | Red Hat Security Advisory: golang security update | 2026-02-24T12:01:01+00:00 | 2026-04-17T10:20:27+00:00 |
| rhsa-2026:3192 | Red Hat Security Advisory: golang security update | 2026-02-24T12:06:46+00:00 | 2026-04-17T10:20:27+00:00 |
| rhsa-2026:3188 | Red Hat Security Advisory: grafana security update | 2026-02-24T11:39:36+00:00 | 2026-04-17T10:20:27+00:00 |
| rhsa-2026:3187 | Red Hat Security Advisory: grafana-pcp security update | 2026-02-24T11:39:51+00:00 | 2026-04-17T10:20:26+00:00 |
| rhsa-2026:3108 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.5 | 2026-02-23T17:24:11+00:00 | 2026-04-17T10:20:26+00:00 |
| rhsa-2026:3186 | Red Hat Security Advisory: Red Hat build of Cryostat 4.1.1: new RHEL 9 container image security update | 2026-02-26T02:56:36+00:00 | 2026-04-17T10:20:25+00:00 |
| rhsa-2026:3184 | Red Hat Security Advisory: RHTAS - Tech Preview Release Of the Policy Controller Operator | 2026-02-24T09:58:16+00:00 | 2026-04-17T10:20:25+00:00 |
| rhsa-2026:3111 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.2.2 | 2026-02-23T17:39:45+00:00 | 2026-04-17T10:20:25+00:00 |
| rhsa-2026:3104 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.0.8 | 2026-02-23T17:13:34+00:00 | 2026-04-17T10:20:24+00:00 |
| rhsa-2026:3092 | Red Hat Security Advisory: golang-github-openprinting-ipp-usb security update | 2026-02-23T15:34:28+00:00 | 2026-04-17T10:20:23+00:00 |
| rhsa-2026:3089 | Red Hat Security Advisory: Red Hat Developer Hub 1.8.4 release. | 2026-02-23T14:46:08+00:00 | 2026-04-17T10:20:23+00:00 |
| rhsa-2026:3087 | Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release | 2026-02-23T13:35:49+00:00 | 2026-04-17T10:20:23+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-473245 | SSA-473245: Denial of Service Vulnerability in Profinet Devices | 2019-10-08T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-381581 | SSA-381581: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 SP1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-346262 | SSA-346262: Denial of Service Vulnerability in SNMP Interface of Industrial Products | 2017-11-23T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-337522 | SSA-337522: Multiple Vulnerabilities in TIM 1531 IRC before V2.4.8 | 2024-06-11T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-313039 | SSA-313039: Deserialization Vulnerability in STEP 7 Safety before V19 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-160243 | SSA-160243: Multiple Vulnerabilities in SINEC NMS before V2.0 | 2023-10-10T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-064222 | SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-900277 | SSA-900277: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0012 and V2024.0001 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-879734 | SSA-879734: Multiple Vulnerabilities in SCALANCE XM-400/XR-500 before V6.6.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-871704 | SSA-871704: Multiple Vulnerabilities in SICAM Products | 2024-05-14T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-625862 | SSA-625862: Multiple Vulnerabilities in Third-Party Components in SIMATIC CP 1542SP-1 and CP 1543SP-1 before V2.3 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-620338 | SSA-620338: Buffer Overflow Vulnerability in SICAM AK3 / BC / TM | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-540640 | SSA-540640: Improper Privilege Management Vulnerability in Mendix Runtime | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-481506 | SSA-481506: Information Disclosure Vulnerability in SIMATIC S7-200 SMART Devices | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-341067 | SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-319319 | SSA-319319: Denial of Service Vulnerability in TIA Administrator | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-238730 | SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-093430 | SSA-093430: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V3.0 | 2024-05-14T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-035466 | SSA-035466: Incorrect Permission Assignment in SICAM PAS/PQS | 2023-10-10T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-024584 | SSA-024584: Authentication Bypass Vulnerability in PowerSys before V3.11 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-900277 | SSA-900277: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0012 and V2024.0001 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-879734 | SSA-879734: Multiple Vulnerabilities in SCALANCE XM-400/XR-500 before V6.6.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-871704 | SSA-871704: Multiple Vulnerabilities in SICAM Products | 2024-05-14T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-832273 | SSA-832273: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.3 on RUGGEDCOM APE1808 Devices | 2024-03-12T00:00:00Z | 2026-01-13T00:00:00Z |
| SSA-771940 | SSA-771940: X_T File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-06-11T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-753746 | SSA-753746: Denial of Service Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products | 2024-02-13T00:00:00Z | 2024-09-10T00:00:00Z |
| SSA-711309 | SSA-711309: Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products | 2023-09-12T00:00:00Z | 2025-11-11T00:00:00Z |
| SSA-690517 | SSA-690517: Multiple Vulnerabilities in SCALANCE W-700 IEEE 802.11ax Family | 2024-06-11T00:00:00Z | 2025-01-14T00:00:00Z |
| SSA-625862 | SSA-625862: Multiple Vulnerabilities in Third-Party Components in SIMATIC CP 1542SP-1 and CP 1543SP-1 before V2.3 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| SSA-620338 | SSA-620338: Buffer Overflow Vulnerability in SICAM AK3 / BC / TM | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:1090-1 | Security update for python3 | 2026-03-26T17:45:14Z | 2026-03-26T17:45:14Z |
| suse-su-2026:1089-1 | Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP6) | 2026-03-26T17:34:58Z | 2026-03-26T17:34:58Z |
| suse-su-2026:1088-1 | Security update for the Linux Kernel (Live Patch 67 for SUSE Linux Enterprise 12 SP5) | 2026-03-26T17:03:58Z | 2026-03-26T17:03:58Z |
| suse-su-2026:20948-1 | Security update for net-tools | 2026-03-26T15:12:29Z | 2026-03-26T15:12:29Z |
| suse-su-2026:20940-1 | Security update for net-tools | 2026-03-26T15:12:29Z | 2026-03-26T15:12:29Z |
| suse-su-2026:1083-1 | Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6) | 2026-03-26T15:03:57Z | 2026-03-26T15:03:57Z |
| suse-su-2026:1081-1 | Security update for the Linux Kernel | 2026-03-26T13:23:51Z | 2026-03-26T13:23:51Z |
| suse-su-2026:1078-1 | Security update for the Linux Kernel | 2026-03-26T12:43:07Z | 2026-03-26T12:43:07Z |
| suse-su-2026:1077-1 | Security update for the Linux Kernel | 2026-03-26T12:42:31Z | 2026-03-26T12:42:31Z |
| suse-su-2026:1076-1 | Security update for python-pyasn1 | 2026-03-26T12:42:05Z | 2026-03-26T12:42:05Z |
| suse-su-2026:1075-1 | Security update for python-pyasn1 | 2026-03-26T12:41:27Z | 2026-03-26T12:41:27Z |
| suse-su-2026:1074-1 | Security update for nghttp2 | 2026-03-26T12:39:53Z | 2026-03-26T12:39:53Z |
| suse-su-2026:1073-1 | Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6) | 2026-03-26T12:33:43Z | 2026-03-26T12:33:43Z |
| suse-su-2026:1068-1 | Security update for pgvector | 2026-03-26T10:39:31Z | 2026-03-26T10:39:31Z |
| suse-su-2026:1067-1 | Security update for python-urllib3 | 2026-03-26T10:39:06Z | 2026-03-26T10:39:06Z |
| suse-su-2026:1066-1 | Security update for ruby2.5 | 2026-03-26T10:38:44Z | 2026-03-26T10:38:44Z |
| suse-su-2026:1065-1 | Security update for sqlite3 | 2026-03-26T10:38:26Z | 2026-03-26T10:38:26Z |
| suse-su-2026:1064-1 | Security update for python-tornado6 | 2026-03-26T10:37:23Z | 2026-03-26T10:37:23Z |
| suse-su-2026:1063-1 | Security update for frr | 2026-03-26T10:36:49Z | 2026-03-26T10:36:49Z |
| suse-su-2026:1062-1 | Security update for python310 | 2026-03-26T10:36:25Z | 2026-03-26T10:36:25Z |
| suse-su-2026:1061-1 | Security update for systemd | 2026-03-26T10:35:55Z | 2026-03-26T10:35:55Z |
| suse-su-2026:1060-1 | Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5) | 2026-03-26T10:04:45Z | 2026-03-26T10:04:45Z |
| suse-su-2026:1059-1 | Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5) | 2026-03-26T10:04:27Z | 2026-03-26T10:04:27Z |
| suse-su-2026:20936-1 | Security update for openexr | 2026-03-26T10:00:01Z | 2026-03-26T10:00:01Z |
| suse-su-2026:20935-1 | Security update for fetchmail | 2026-03-26T09:57:50Z | 2026-03-26T09:57:50Z |
| suse-su-2026:1058-1 | Security update for tomcat | 2026-03-26T09:46:45Z | 2026-03-26T09:46:45Z |
| suse-su-2026:20871-1 | Security update for docker-compose | 2026-03-26T09:12:43Z | 2026-03-26T09:12:43Z |
| suse-su-2026:20870-1 | Security update for nghttp2 | 2026-03-26T09:10:44Z | 2026-03-26T09:10:44Z |
| suse-su-2026:1057-1 | Security update for frr | 2026-03-26T08:58:49Z | 2026-03-26T08:58:49Z |
| suse-su-2026:1056-1 | Security update for nghttp2 | 2026-03-26T08:57:39Z | 2026-03-26T08:57:39Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2026:0668 | Important: net-snmp security update | 2026-01-15T00:00:00Z | 2026-01-16T14:53:15Z |
| alsa-2026:0694 | Important: firefox security update | 2026-01-15T00:00:00Z | 2026-01-16T14:51:10Z |
| alsa-2026:0695 | Moderate: libpq security update | 2026-01-15T00:00:00Z | 2026-01-16T14:48:26Z |
| alsa-2026:0700 | Moderate: transfig security update | 2026-01-15T00:00:00Z | 2026-01-16T14:46:41Z |
| alsa-2026:0697 | Important: gnupg2 security update | 2026-01-15T00:00:00Z | 2026-01-16T08:52:59Z |
| alsa-2026:0728 | Important: gnupg2 security update | 2026-01-15T00:00:00Z | 2026-01-16T08:41:48Z |
| alsa-2026:0719 | Important: gnupg2 security update | 2026-01-15T00:00:00Z | 2026-01-16T08:23:06Z |
| alsa-2025:21020 | Important: sssd security update | 2025-11-11T00:00:00Z | 2026-01-14T12:41:29Z |
| alsa-2026:0067 | Moderate: tar security update | 2026-01-05T00:00:00Z | 2026-01-13T08:42:22Z |
| alsa-2026:0247 | Important: mariadb:10.11 security update | 2026-01-07T00:00:00Z | 2026-01-12T10:57:59Z |
| alsa-2026:0136 | Important: mariadb10.11 security update | 2026-01-06T00:00:00Z | 2026-01-12T10:55:58Z |
| alsa-2026:0225 | Important: mariadb:10.3 security update | 2026-01-07T00:00:00Z | 2026-01-12T10:51:12Z |
| alsa-2026:0232 | Important: mariadb:10.11 security update | 2026-01-07T00:00:00Z | 2026-01-12T10:48:54Z |
| alsa-2026:0233 | Important: mariadb:10.5 security update | 2026-01-07T00:00:00Z | 2026-01-12T10:45:28Z |
| alsa-2026:0237 | Important: libpng security update | 2026-01-07T00:00:00Z | 2026-01-07T21:38:33Z |
| alsa-2026:0238 | Important: libpng security update | 2026-01-07T00:00:00Z | 2026-01-07T21:36:21Z |
| alsa-2026:0241 | Important: libpng security update | 2026-01-07T00:00:00Z | 2026-01-07T21:34:12Z |
| alsa-2026:0125 | Important: mingw-libpng security update | 2026-01-06T00:00:00Z | 2026-01-07T21:32:21Z |
| alsa-2026:0128 | Moderate: poppler security update | 2026-01-06T00:00:00Z | 2026-01-07T14:29:22Z |
| alsa-2026:0130 | Moderate: poppler security update | 2026-01-06T00:00:00Z | 2026-01-07T14:26:34Z |
| alsa-2026:0137 | Important: mariadb security update | 2026-01-06T00:00:00Z | 2026-01-07T14:24:03Z |
| alsa-2026:0126 | Moderate: poppler security update | 2026-01-06T00:00:00Z | 2026-01-07T14:21:37Z |
| alsa-2026:0123 | Moderate: python3.12 security update | 2026-01-06T00:00:00Z | 2026-01-07T14:18:43Z |
| alsa-2026:0108 | Moderate: gcc-toolset-15-binutils security update | 2026-01-06T00:00:00Z | 2026-01-07T14:17:02Z |
| alsa-2025:14999 | Moderate: resource-agents security update | 2025-09-02T00:00:00Z | 2026-01-05T21:07:54Z |
| alsa-2025:19434 | Moderate: xorg-x11-server security update | 2025-11-03T00:00:00Z | 2026-01-05T21:05:53Z |
| alsa-2025:23062 | Moderate: ruby:3.3 security update | 2025-12-10T00:00:00Z | 2026-01-05T20:45:40Z |
| alsa-2025:23063 | Moderate: ruby:3.3 security update | 2025-12-10T00:00:00Z | 2026-01-05T20:38:49Z |
| alsa-2025:23141 | Moderate: ruby security update | 2025-12-11T00:00:00Z | 2026-01-05T20:34:29Z |
| alsa-2025:23241 | Important: kernel security update | 2025-12-16T00:00:00Z | 2026-01-05T20:29:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2025-677 | Heap-buffer-overflow in TGAHandler::read | 2025-08-23T00:05:27.168432Z | 2025-08-23T00:05:27.168725Z |
| osv-2025-373 | Heap-use-after-free in aiMesh::~aiMesh | 2025-05-17T00:11:17.621374Z | 2025-08-22T19:20:38.723565Z |
| osv-2022-908 | Heap-buffer-overflow in element_end | 2022-09-18T00:02:08.324002Z | 2025-08-20T14:46:01.613271Z |
| osv-2025-657 | Heap-use-after-free in ftp_pp_statemachine | 2025-08-20T00:12:09.699805Z | 2025-08-20T00:12:09.700264Z |
| osv-2022-624 | Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader | 2022-07-25T00:02:02.600456Z | 2025-08-19T09:51:59.993647Z |
| osv-2025-638 | Security exception in com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.deser | 2025-08-17T00:01:49.946822Z | 2025-08-17T14:48:59.288257Z |
| osv-2025-634 | Null-dereference READ in enc_fuzzer@Enc.EncTest | 2025-08-15T00:17:04.845331Z | 2025-08-15T00:17:04.845683Z |
| osv-2025-633 | UNKNOWN WRITE in _lou_handlePassVariableAction | 2025-08-15T00:16:54.142913Z | 2025-08-15T00:16:54.143400Z |
| osv-2025-631 | Null-dereference READ in advanced_api_fuzzer@AdvancedApi.AdvancedApiTest | 2025-08-15T00:02:42.080995Z | 2025-08-15T00:02:42.081563Z |
| osv-2024-772 | UNKNOWN READ in H5SL_search | 2024-08-16T00:00:44.075617Z | 2025-08-14T14:39:54.764895Z |
| osv-2024-1010 | UNKNOWN READ in H5SL_first | 2024-08-16T00:16:31.692553Z | 2025-08-14T14:39:40.358063Z |
| osv-2025-628 | Null-dereference READ in ubsan_GetStackTrace | 2025-08-14T00:15:27.806312Z | 2025-08-14T00:15:27.806631Z |
| osv-2025-627 | Null-dereference READ in ProcessRows | 2025-08-14T00:14:14.245302Z | 2025-08-14T00:14:14.245619Z |
| osv-2025-622 | Heap-buffer-overflow in cc_storage_append | 2025-08-13T00:16:18.937393Z | 2025-08-13T00:16:18.937719Z |
| osv-2025-620 | Heap-buffer-overflow in FragPrepareChunk | 2025-08-12T00:14:23.793424Z | 2025-08-12T00:14:23.793828Z |
| osv-2025-619 | Heap-buffer-overflow in webvtt_domnode_SelectNodesInTree | 2025-08-12T00:13:01.748418Z | 2025-08-12T00:13:01.748751Z |
| osv-2025-618 | Heap-buffer-overflow in iTUNTripletCallback | 2025-08-12T00:05:50.847179Z | 2025-08-12T00:05:50.847582Z |
| osv-2025-617 | UNKNOWN WRITE in MP4_BoxFree | 2025-08-12T00:04:18.009473Z | 2025-08-12T00:04:18.009816Z |
| osv-2025-616 | Heap-buffer-overflow in Open | 2025-08-12T00:00:48.056276Z | 2025-08-12T00:00:48.056623Z |
| osv-2025-615 | Index-out-of-bounds in hevc_get_picture_size | 2025-08-12T00:00:42.725434Z | 2025-08-12T00:00:42.725767Z |
| osv-2025-614 | Heap-buffer-overflow in hevc_hvcC_to_AnnexB_NAL | 2025-08-12T00:00:36.634849Z | 2025-08-12T00:00:36.635239Z |
| osv-2025-613 | Heap-buffer-overflow in check_sync_pes | 2025-08-12T00:00:33.354786Z | 2025-08-12T00:00:33.355391Z |
| osv-2025-608 | Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes | 2025-08-09T00:02:00.092320Z | 2025-08-11T14:17:56.957704Z |
| osv-2024-380 | Heap-use-after-free in H5FL__blk_gc_list | 2024-04-30T00:12:11.366893Z | 2025-08-06T15:10:14.893372Z |
| osv-2025-600 | Heap-buffer-overflow in generic_unpack | 2025-08-05T00:10:00.536266Z | 2025-08-05T00:10:00.536669Z |
| osv-2025-597 | Heap-buffer-overflow in generic_unpack | 2025-08-04T00:08:26.345735Z | 2025-08-04T00:08:26.346368Z |
| osv-2025-591 | UNKNOWN READ in mov_read_header | 2025-08-02T00:02:00.509459Z | 2025-08-02T00:02:00.510035Z |
| osv-2025-589 | Heap-buffer-overflow in isvcd_decode_recon_tfr_nmb_base_lyr | 2025-08-01T00:10:54.848946Z | 2025-08-01T00:10:54.849286Z |
| osv-2025-584 | Heap-buffer-overflow in isvcd_mark_err_slice_skip | 2025-07-31T00:09:08.538145Z | 2025-07-31T00:09:08.538507Z |
| osv-2025-93 | Heap-buffer-overflow in lj_strfmt_pushvf | 2025-02-05T00:18:14.584575Z | 2025-07-23T14:24:29.384461Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2025-0073 | DoS vulnerability on `alloy_dyn_abi::TypedData` hashing | 2025-10-15T12:00:00Z | 2025-10-15T13:11:39Z |
| rustsec-2025-0070 | Pingora MadeYouReset HTTP/2 vulnerability | 2025-09-17T12:00:00Z | 2025-09-18T07:10:31Z |
| rustsec-2025-0069 | `daemonize` is Unmaintained | 2025-09-14T12:00:00Z | 2025-09-15T14:42:32Z |
| rustsec-2023-0094 | `martin-mbtiles` has been renamed to `mbtiles` | 2023-10-30T12:00:00Z | 2025-09-14T19:19:34Z |
| rustsec-2025-0066 | The `google-apis-rs` project is now unmaintained | 2025-09-09T12:00:00Z | 2025-09-11T16:34:38Z |
| rustsec-2025-0065 | matrix-sdk-base: Panic in the `RoomMember::normalized_power_level()` method | 2025-09-11T12:00:00Z | 2025-09-11T12:21:52Z |
| rustsec-2025-0000 | matrix-sdk-base: Panic in the `RoomMember::normalized_power_level()` method | 2025-09-11T12:00:00Z | 2025-09-11T12:10:54Z |
| rustsec-2025-0064 | soundness issue and unmaintained | 2025-05-06T12:00:00Z | 2025-09-11T07:03:09Z |
| rustsec-2024-0376 | Remotely exploitable Denial of Service in Tonic | 2024-10-01T12:00:00Z | 2025-09-11T07:02:22Z |
| rustsec-2025-0061 | iron crate is unmaintained | 2025-09-08T12:00:00Z | 2025-09-08T09:09:54Z |
| rustsec-2025-0060 | crypto-hash crate is unmaintained | 2025-09-08T12:00:00Z | 2025-09-08T09:09:54Z |
| rustsec-2025-0059 | servo-fontconfig crate is unmaintained | 2025-09-08T12:00:00Z | 2025-09-08T09:09:54Z |
| rustsec-2025-0058 | custom_derive crate is unmaintained | 2025-09-07T12:00:00Z | 2025-09-07T08:38:20Z |
| rustsec-2025-0057 | fxhash - no longer maintained | 2025-09-05T12:00:00Z | 2025-09-05T19:09:01Z |
| rustsec-2025-0056 | adler crate is unmaintained, use adler2 instead | 2025-09-05T12:00:00Z | 2025-09-05T09:05:48Z |
| rustsec-2025-0055 | Logging user input may result in poisoning logs with ANSI escape sequences | 2025-08-29T12:00:00Z | 2025-09-02T11:05:02Z |
| rustsec-2020-0095 | difference is unmaintained | 2020-12-20T12:00:00Z | 2025-08-30T06:09:56Z |
| rustsec-2025-0052 | async-std has been discontinued | 2025-08-24T12:00:00Z | 2025-08-27T11:36:30Z |
| rustsec-2025-0048 | tsify-next is unmaintained, use tsify instead | 2025-07-29T12:00:00Z | 2025-08-13T14:05:32Z |
| rustsec-2025-0047 | Out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check | 2025-08-12T12:00:00Z | 2025-08-12T09:41:13Z |
| rustsec-2025-0012 | `backoff` is unmaintained. | 2025-03-04T12:00:00Z | 2025-08-06T09:33:04Z |
| rustsec-2025-0046 | Host panic with `fd_renumber` WASIp1 function | 2025-07-18T12:00:00Z | 2025-07-18T19:48:13Z |
| rustsec-2025-0045 | ConstStaticCell could have been used to pass non-Send values to another thread | 2025-07-17T12:00:00Z | 2025-07-17T14:38:11Z |
| rustsec-2025-0043 | matrix-sdk-sqlite: SQL injection vulnerability in `SqliteEventCacheStore::find_event_with_relations` | 2025-07-11T12:00:00Z | 2025-07-11T15:30:12Z |
| rustsec-2025-0041 | matrix-sdk-crypto vulnerable to encrypted event sender spoofing by homeserver administrator | 2025-06-11T12:00:00Z | 2025-06-12T09:17:43Z |
| rustsec-2025-0036 | surf is unmaintained | 2025-05-17T12:00:00Z | 2025-05-17T13:43:35Z |
| rustsec-2025-0028 | cve-rs introduces memory vulnerabilities in safe Rust | 2025-02-10T12:00:00Z | 2025-05-06T21:08:48Z |
| rustsec-2025-0030 | totally-safe-transmute allows transmuting any type to any other type in safe Rust | 2025-02-10T12:00:00Z | 2025-05-06T20:14:30Z |
| rustsec-2025-0029 | totally-safe introduces memory vulnerabilities in safe Rust | 2025-02-10T12:00:00Z | 2025-05-05T18:31:28Z |
| rustsec-2024-0441 | Panic when using a dropped extenref-typed element segment | 2024-04-02T12:00:00Z | 2025-05-02T08:23:27Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-tomcat-2024-23672 | Apache Tomcat: WebSocket DoS with incomplete closing handshake | 2025-07-17T08:09:47.503Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2023-34981 | Apache Tomcat: AJP response header mix-up | 2024-03-06T11:08:35.200Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2022-45143 | Apache Tomcat: JsonErrorReportValve escaping | 2024-03-06T11:09:02.789Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2022-42252 | Apache Tomcat request smuggling via malformed content-length | 2024-03-06T11:09:09.680Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2022-34305 | XSS in examples web application | 2024-03-06T11:09:17.789Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2022-29885 | EncryptInterceptor does not provide complete protection on insecure networks | 2024-03-06T11:09:24.492Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2022-23181 | Local privilege escalation with FileStore | 2024-03-06T11:09:36.902Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2021-43980 | Apache Tomcat: Information disclosure | 2024-03-06T11:09:43.693Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2021-42340 | DoS via memory leak with WebSocket connections | 2024-03-06T11:09:50.280Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2021-41079 | Apache Tomcat DoS with unexpected TLS packet | 2024-03-06T11:09:56.377Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2021-33037 | Incorrect Transfer-Encoding handling with HTTP/1.0 | 2024-03-06T11:10:01.262Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2021-30640 | Auth weakness in JNDIRealm | 2024-03-06T11:10:06.381Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2021-25329 | Incomplete fix for CVE-2020-9484 | 2024-03-06T11:10:17.511Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2021-25122 | Apache Tomcat h2c request mix-up | 2024-03-06T11:10:22.561Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2021-24122 | Apache Tomcat information disclosure | 2024-03-06T11:10:27.482Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2020-9484 | 2024-03-06T11:10:32.165Z | 2026-03-20T09:47:33.381Z | |
| bit-tomcat-2020-17527 | Apache Tomcat: Request header mix-up between HTTP/2 streams | 2024-03-06T11:11:37.082Z | 2026-03-20T09:47:33.381Z |
| bit-tomcat-2020-13943 | 2024-03-06T11:11:40.396Z | 2026-03-20T09:47:33.381Z | |
| bit-tomcat-2020-13935 | 2024-03-06T11:11:44.067Z | 2026-03-20T09:47:33.381Z | |
| bit-tomcat-2020-13934 | 2024-03-06T11:11:47.794Z | 2026-03-20T09:47:33.381Z | |
| bit-tomcat-2020-11996 | 2024-03-06T11:11:51.472Z | 2026-03-20T09:47:33.381Z | |
| bit-thrift-2020-13949 | 2026-03-20T09:20:15.378Z | 2026-03-20T09:47:33.381Z | |
| bit-spark-2025-54920 | Apache Spark: Spark History Server Code Execution Vulnerability | 2026-03-18T08:54:07.780Z | 2026-03-20T09:47:33.381Z |
| bit-solr-2020-9492 | 2024-03-06T11:07:01.582Z | 2026-03-20T09:47:33.381Z | |
| bit-redis-2023-45145 | Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window. | 2024-03-06T11:03:25.305Z | 2026-03-20T09:47:33.381Z |
| bit-python-2026-3479 | pkgutil.get_data() does not enforce documented restrictions | 2026-03-20T09:21:01.169Z | 2026-03-20T09:47:33.381Z |
| bit-python-2025-13462 | tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling | 2026-03-14T08:49:56.012Z | 2026-03-20T09:47:33.381Z |
| bit-parse-2026-32594 | Parse Server GraphQL WebSocket endpoint bypasses security middleware | 2026-03-20T09:19:20.642Z | 2026-03-20T09:47:33.381Z |
| bit-parse-2026-32269 | Parse Server OAuth2 adapter app ID validation sends wrong token to introspection endpoint | 2026-03-16T09:53:45.375Z | 2026-03-20T09:47:33.381Z |
| bit-parse-2026-32248 | Parse Server: Account takeover via operator injection in authentication data identifier | 2026-03-16T09:53:42.464Z | 2026-03-20T09:47:33.381Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cleanstart-2026-pp62083 | OpenTelemetry-Go is the Go implementation of OpenTelemetry | 2026-03-07T00:39:46.558367Z | 2026-03-06T13:08:41Z |
| cleanstart-2026-gi57625 | OpenTelemetry-Go is the Go implementation of OpenTelemetry | 2026-03-07T00:39:46.578400Z | 2026-03-06T13:08:41Z |
| cleanstart-2026-fn55648 | Security fixes for CVE-2025-25285, CVE-2026-21637, ghsa-23c5-xmqv-rm74, ghsa-72xf-g2v4-qvf3, ghsa-7r86-cg39-jmmj, ghsa-fj3w-jwp8-x2g3, ghsa-pfrx-2q88-qq97, ghsa-rc47-6667-2j5j, ghsa-rmvr-2pp2-xj38 applied in versions: 2.6.0-r1, 2.7.0-r0 | 2026-04-01T10:06:10.961683Z | 2026-03-06T13:00:09Z |
| cleanstart-2026-hd58055 | Security fixes for CVE-2025-25285, CVE-2026-21637, ghsa-23c5-xmqv-rm74, ghsa-3ppc-4f35-3m26, ghsa-72xf-g2v4-qvf3, ghsa-7r86-cg39-jmmj, ghsa-pfrx-2q88-qq97, ghsa-rc47-6667-2j5j, ghsa-rmvr-2pp2-xj38 applied in versions: 2.6.0-r1, 2.6.0-r2 | 2026-04-01T10:06:17.030926Z | 2026-03-06T12:59:45Z |
| cleanstart-2026-cy45415 | Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2025-68121, CVE-2026-1229, CVE-2026-24051, CVE-2026-25934, CVE-2026-26958, ghsa-2464-8j7c-4cjm, ghsa-2x5j-vhc8-9cwm, ghsa-fv92-fjc5-jj9h applied in versions: 3.6.16-r0, 3.7.4-r0, 3.7.7-r0 | 2026-04-01T10:06:30.444629Z | 2026-03-06T11:37:07Z |
| cleanstart-2026-ck64127 | Security fixes for ghsa-6rw7-vpxm-498p, ghsa-73rr-hh4g-fpgx, ghsa-8qq5-rm4j-mr97, ghsa-wqch-xfxh-vrr4 applied in versions: 4.2.1.1-r1 | 2026-04-01T10:06:15.177169Z | 2026-03-06T11:36:37Z |
| cleanstart-2026-fq05951 | Security fixes for CVE-2025-0913, CVE-2025-15558, CVE-2025-4673, CVE-2025-47907, CVE-2025-58181, CVE-2025-62156, CVE-2025-62157, CVE-2026-24051, CVE-2026-25934, CVE-2026-27141, ghsa-2x5j-vhc8-9cwm, ghsa-37cx-329c-33x3, ghsa-c2hv-4pfj-mm2r, ghsa-cfpf-hrx2-8rv6, ghsa-p436-gjf2-799p, ghsa-p84v-gxvw-73pf applied in versions: 3.6.13-r0, 3.6.15-r1, 3.6.18-r0, 3.6.19-r0, 3.6.19-r1, 3.7.0-r0, 3.7.3-r0 | 2026-04-01T10:07:02.415559Z | 2026-03-06T07:23:30Z |
| cleanstart-2026-fx27781 | Security fixes for CVE-2025-0913, CVE-2025-15558, CVE-2025-4673, CVE-2025-47907, CVE-2025-47914, CVE-2025-58181, CVE-2025-62156, CVE-2025-62157, CVE-2026-24051, CVE-2026-25934, CVE-2026-26958, CVE-2026-27141, ghsa-37cx-329c-33x3, ghsa-9h8m-3fm2-qjrq, ghsa-c2hv-4pfj-mm2r, ghsa-cfpf-hrx2-8rv6, ghsa-fw7p-63qq-7hpr, ghsa-p84v-gxvw-73pf applied in versions: 3.7.0-r0, 3.7.10-r0, 3.7.10-r1, 3.7.10-r2, 3.7.3-r0, 3.7.4-r0, 3.7.6-r0, 3.7.9-r0 | 2026-04-01T10:07:09.669593Z | 2026-03-06T06:49:13Z |
| cleanstart-2026-pf41398 | Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121 applied in versions: 3.19.0-r0, 3.19.5-r0, 4.0.1-r0 | 2026-04-01T10:07:15.004853Z | 2026-03-06T05:33:23Z |
| cleanstart-2026-eu58098 | Security fixes for CVE-2025-61732, CVE-2025-68121, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.8.4-r0, 0.8.7-r0 | 2026-04-01T10:06:48.673123Z | 2026-03-05T12:22:12Z |
| cleanstart-2026-mk40719 | Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-58181, CVE-2025-62156, CVE-2025-62157, CVE-2026-24051, CVE-2026-25934, CVE-2026-27141, ghsa-2x5j-vhc8-9cwm, ghsa-37cx-329c-33x3, ghsa-c2hv-4pfj-mm2r, ghsa-cfpf-hrx2-8rv6, ghsa-p84v-gxvw-73pf applied in versions: 3.6.13-r0, 3.6.15-r1, 3.6.18 r0, 3.6.18-r0, 3.7.0-r0, 3.7.3-r0 | 2026-04-01T10:07:36.130294Z | 2026-03-05T10:29:59Z |
| cleanstart-2026-yp32652 | Redis is an open source, in-memory database that persists on disk | 2026-03-04T00:42:01.150900Z | 2026-03-03T12:59:01Z |
| cleanstart-2026-xj84245 | Rack is a modular Ruby web server interface | 2026-03-04T00:43:02.364521Z | 2026-03-03T12:59:01Z |
| cleanstart-2026-wy43835 | PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access | 2026-03-04T00:41:31.079681Z | 2026-03-03T12:59:01Z |
| cleanstart-2026-vc01496 | Security fixes for GHSA-f6x5-jh6r-wrfv, GHSA-j5w8-q4qc-rx2x applied in versions: 0.8.4-r0 | 2026-03-04T00:39:30.734261Z | 2026-03-03T12:59:01Z |
| cleanstart-2026-sm37781 | Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic | 2026-03-04T00:45:05.719125Z | 2026-03-03T12:59:01Z |
| cleanstart-2026-na21773 | GNU patch through 2 | 2026-03-04T00:42:01.122309Z | 2026-03-03T12:59:01Z |
| cleanstart-2026-ew93264 | Security fixes for GHSA-4CX2-FC23-5WG6, GHSA-6XW4-3V39-52MM, GHSA-72QJ-48G4-5XGX, GHSA-MR3Q-G2MV-MR4Q, GHSA-P543-XPFM-54CP, GHSA-VC5P-V9HR-52MJ, GHSA-VQG5-3255-V292 applied in versions: 9.0.8-r2, 9.0.8-r3, 9.0.8-r4, 9.3.0-r1, 9.3.0-r2 | 2026-03-04T00:39:32.590174Z | 2026-03-03T12:59:01Z |
| cleanstart-2026-cq83284 | Redis is an open source, in-memory database that persists on disk | 2026-03-04T00:43:01.818359Z | 2026-03-03T12:59:01Z |
| cleanstart-2026-bz70876 | Redis is an open source, in-memory database that persists on disk | 2026-03-04T00:42:00.996564Z | 2026-03-03T12:59:01Z |
| cleanstart-2026-ay29369 | Redis is an open source, in-memory database that persists on disk | 2026-03-04T00:43:31.868035Z | 2026-03-03T12:59:01Z |
| cleanstart-2026-pm79547 | Security fixes for CVE-2018-20969, CVE-2018-6952, CVE-2019-13636, CVE-2019-13638, CVE-2019-20633 applied in versions: 2.7.6-r2, 2.7.6-r4, 2.7.6-r5, 2.7.6-r6, 2.7.6-r7 | 2026-04-01T10:07:37.644781Z | 2026-03-03T12:11:07Z |
| cleanstart-2026-ja70776 | Security fixes for CVE-2023-5870, CVE-2024-7348, CVE-2025-8713, CVE-2025-8714, CVE-2025-8715 applied in versions: 16.1-r0, 16.2-r0, 16.4-r0, 17.6-r0 | 2026-04-01T10:07:46.020645Z | 2026-03-03T12:09:34Z |
| cleanstart-2026-eq51133 | Security fixes for CVE-2023-5870, CVE-2024-7348, CVE-2025-8713, CVE-2025-8714, CVE-2025-8715 applied in versions: 16.1-r0, 16.2-r0, 16.4-r0, 17.6-r0 | 2026-04-01T10:07:46.021346Z | 2026-03-03T12:09:34Z |
| cleanstart-2026-mw73882 | filippo | 2026-03-03T00:39:03.237072Z | 2026-03-02T17:13:50Z |
| cleanstart-2026-by85815 | OpenTelemetry-Go is the Go implementation of OpenTelemetry | 2026-03-03T00:39:03.275022Z | 2026-03-02T17:13:50Z |
| cleanstart-2026-qf85840 | Security fixes for CVE-2025-55190, CVE-2025-55191, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-59537, CVE-2025-59538, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, CVE-2026-25934, ghsa-2v5j-vhc3-9cwm, ghsa-2vgg-9h3w-qbr4, ghsa-2x5j-vhc8-9cwm, ghsa-2xsj-vh29-9cwm, ghsa-3wgm-2mw2-vh5m, ghsa-4x4m-3c2p-qppc, ghsa-6v2p-p543-phr9, ghsa-92cp-5422-2m47, ghsa-93mq-9ffx-83m2, ghsa-f6x5-jh6r-wrfv, ghsa-hj2p-8wj8-pfq4, ghsa-j5w8-q4qc-rx2x, ghsa-mh63-6h87-95cp, ghsa-mw99-9chc-xw7r, ghsa-r6j8-c6r2-37rr applied in versions: 2.13.9-r0, 2.14.20-r0, 3.0.16-r0, 3.0.19-r0, 3.0.22-r0, 3.0.22-r1, 3.1.4-r0, 3.1.8.-r0, 3.1.9-r4 | 2026-04-01T10:09:04.049698Z | 2026-03-02T11:48:00Z |
| cleanstart-2026-nr51277 | Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.8.4-r0 | 2026-04-01T10:07:57.467759Z | 2026-03-02T11:41:08Z |
| cleanstart-2026-zn32454 | When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers | 2026-02-27T00:50:08.716833Z | 2026-02-26T12:09:56Z |
| cleanstart-2026-zg64300 | Within HostnameError | 2026-02-27T01:05:11.090007Z | 2026-02-26T12:09:56Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2015-ALE-014 | Vulnérabilité dans Juniper ScreenOS | 2015-12-18T00:00:00.000000 | 2016-04-11T00:00:00.000000 |
| certfr-2016-ale-002 | Vulnérabilité dans Adobe Flash Player | 2016-04-06T00:00:00.000000 | 2016-04-08T00:00:00.000000 |
| CERTFR-2016-ALE-002 | Vulnérabilité dans Adobe Flash Player | 2016-04-06T00:00:00.000000 | 2016-04-08T00:00:00.000000 |
| certfr-2016-ale-001 | Campagne de messages électroniques non sollicités de type Locky | 2016-02-19T00:00:00.000000 | 2016-04-07T00:00:00.000000 |
| CERTFR-2016-ALE-001 | Campagne de messages électroniques non sollicités de type Locky | 2016-02-19T00:00:00.000000 | 2016-04-07T00:00:00.000000 |
| certfr-2015-ale-015 | Campagne de messages électroniques non sollicités de type TeslaCrypt | 2015-12-21T00:00:00.000000 | 2016-03-10T00:00:00.000000 |
| CERTFR-2015-ALE-015 | Campagne de messages électroniques non sollicités de type TeslaCrypt | 2015-12-21T00:00:00.000000 | 2016-03-10T00:00:00.000000 |
| certfr-2015-ale-009 | Vulnérabilité dans Apple Mac OS X | 2015-07-24T00:00:00.000000 | 2015-12-22T00:00:00.000000 |
| CERTFR-2015-ALE-009 | Vulnérabilité dans Apple Mac OS X | 2015-07-24T00:00:00.000000 | 2015-12-22T00:00:00.000000 |
| certfr-2015-ale-012 | Campagne de messages électroniques non sollicités de type Dridex | 2015-10-23T00:00:00.000000 | 2015-11-26T00:00:00.000000 |
| CERTFR-2015-ALE-012 | Campagne de messages électroniques non sollicités de type Dridex | 2015-10-23T00:00:00.000000 | 2015-11-26T00:00:00.000000 |
| certfr-2015-ale-011 | Vulnérabilité dans Adobe Flash Player | 2015-10-14T00:00:00.000000 | 2015-10-19T00:00:00.000000 |
| CERTFR-2015-ALE-011 | Vulnérabilité dans Adobe Flash Player | 2015-10-14T00:00:00.000000 | 2015-10-19T00:00:00.000000 |
| certfr-2015-ale-010 | Multiples vulnérabilités dans Google Android | 2015-07-28T00:00:00.000000 | 2015-10-06T00:00:00.000000 |
| CERTFR-2015-ALE-010 | Multiples vulnérabilités dans Google Android | 2015-07-28T00:00:00.000000 | 2015-10-06T00:00:00.000000 |
| certfr-2015-ale-008 | Vulnérabilité dans le pilote de gestion des polices de caractères de Microsoft Windows | 2015-07-20T00:00:00.000000 | 2015-07-30T00:00:00.000000 |
| CERTFR-2015-ALE-008 | Vulnérabilité dans le pilote de gestion des polices de caractères de Microsoft Windows | 2015-07-20T00:00:00.000000 | 2015-07-30T00:00:00.000000 |
| certfr-2015-ale-007 | Vulnérabilité dans Oracle Java SE | 2015-07-13T00:00:00.000000 | 2015-07-20T00:00:00.000000 |
| certfr-2015-ale-006 | Vulnérabilité dans Adobe Flash Player | 2015-07-11T00:00:00.000000 | 2015-07-20T00:00:00.000000 |
| CERTFR-2015-ALE-007 | Vulnérabilité dans Oracle Java SE | 2015-07-13T00:00:00.000000 | 2015-07-20T00:00:00.000000 |
| CERTFR-2015-ALE-006 | Vulnérabilité dans Adobe Flash Player | 2015-07-11T00:00:00.000000 | 2015-07-20T00:00:00.000000 |
| certfr-2015-ale-005 | Vulnérabilité dans Adobe Flash Player | 2015-07-08T00:00:00.000000 | 2015-07-10T00:00:00.000000 |
| certfr-2015-ale-003 | Nouvelle campagne d'hameçonnage de type rançongiciel | 2015-02-05T00:00:00.000000 | 2015-07-10T00:00:00.000000 |
| CERTFR-2015-ALE-005 | Vulnérabilité dans Adobe Flash Player | 2015-07-08T00:00:00.000000 | 2015-07-10T00:00:00.000000 |
| CERTFR-2015-ALE-003 | Nouvelle campagne d'hameçonnage de type rançongiciel | 2015-02-05T00:00:00.000000 | 2015-07-10T00:00:00.000000 |
| certfr-2015-ale-004 | Vulnérabilité dans Microsoft Internet Explorer | 2015-02-10T00:00:00.000000 | 2015-03-31T00:00:00.000000 |
| CERTFR-2015-ALE-004 | Vulnérabilité dans Microsoft Internet Explorer | 2015-02-10T00:00:00.000000 | 2015-03-31T00:00:00.000000 |
| certfr-2015-ale-002 | Vulnérabilité dans Adobe Flash Player | 2015-02-02T00:00:00.000000 | 2015-02-05T00:00:00.000000 |
| CERTFR-2015-ALE-002 | Vulnérabilité dans Adobe Flash Player | 2015-02-02T00:00:00.000000 | 2015-02-05T00:00:00.000000 |
| certfr-2015-ale-001 | Vulnérabilité dans Adobe Flash Player | 2015-01-22T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0148 | Multiples vulnérabilités dans les produits Intel | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0147 | Multiples vulnérabilités dans les produits Fortinet | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0146 | Multiples vulnérabilités dans GitLab | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0145 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0143 | Multiples vulnérabilités dans Synology Storage Manager | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0142 | Multiples vulnérabilités dans MongoDB | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0153 | Multiples vulnérabilités dans les produits Microsoft | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0152 | Multiples vulnérabilités dans Microsoft Azure | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0151 | Vulnérabilité dans Microsoft .Net | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0150 | Multiples vulnérabilités dans Microsoft Windows | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0149 | Multiples vulnérabilités dans Microsoft Office | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0148 | Multiples vulnérabilités dans les produits Intel | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0147 | Multiples vulnérabilités dans les produits Fortinet | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0146 | Multiples vulnérabilités dans GitLab | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0145 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0143 | Multiples vulnérabilités dans Synology Storage Manager | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| CERTFR-2026-AVI-0142 | Multiples vulnérabilités dans MongoDB | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0141 | Multiples vulnérabilités dans les produits SAP | 2026-02-10T00:00:00.000000 | 2026-02-10T00:00:00.000000 |
| certfr-2026-avi-0140 | Multiples vulnérabilités dans les produits Axis | 2026-02-10T00:00:00.000000 | 2026-02-10T00:00:00.000000 |
| certfr-2026-avi-0139 | Multiples vulnérabilités dans les produits Siemens | 2026-02-10T00:00:00.000000 | 2026-02-10T00:00:00.000000 |
| certfr-2026-avi-0138 | Multiples vulnérabilités dans les produits Schneider Electric | 2026-02-10T00:00:00.000000 | 2026-02-10T00:00:00.000000 |
| certfr-2026-avi-0137 | Multiples vulnérabilités dans GnuTLS | 2026-02-10T00:00:00.000000 | 2026-02-10T00:00:00.000000 |
| CERTFR-2026-AVI-0141 | Multiples vulnérabilités dans les produits SAP | 2026-02-10T00:00:00.000000 | 2026-02-10T00:00:00.000000 |
| CERTFR-2026-AVI-0140 | Multiples vulnérabilités dans les produits Axis | 2026-02-10T00:00:00.000000 | 2026-02-10T00:00:00.000000 |
| CERTFR-2026-AVI-0139 | Multiples vulnérabilités dans les produits Siemens | 2026-02-10T00:00:00.000000 | 2026-02-10T00:00:00.000000 |
| CERTFR-2026-AVI-0138 | Multiples vulnérabilités dans les produits Schneider Electric | 2026-02-10T00:00:00.000000 | 2026-02-10T00:00:00.000000 |
| CERTFR-2026-AVI-0137 | Multiples vulnérabilités dans GnuTLS | 2026-02-10T00:00:00.000000 | 2026-02-10T00:00:00.000000 |
| CERTFR-2026-AVI-0133 | Multiples vulnérabilités dans Roundcube | 2026-02-09T00:00:00.000000 | 2026-03-27T00:00:00.000000 |
| certfr-2026-avi-0136 | Vulnérabilité dans Fortinet FortiClientEMS | 2026-02-09T00:00:00.000000 | 2026-02-09T00:00:00.000000 |
| certfr-2026-avi-0135 | Vulnérabilité dans GitLab AI Gateway | 2026-02-09T00:00:00.000000 | 2026-02-09T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-000107 | RevoWorks Cloud vulnerable to unintended process execution | 2024-09-30T15:17+09:00 | 2024-09-30T15:17+09:00 |
| jvndb-2024-003932 | File Permissions Vulnerability in Hitachi Ops Center Common Services | 2024-09-30T14:15+09:00 | 2024-09-30T14:15+09:00 |
| jvndb-2024-000105 | Multiple vulnerabilities in Smart-tab | 2024-09-30T14:14+09:00 | 2024-09-30T14:14+09:00 |
| jvndb-2024-009396 | SNMP service is enabled by default in Sharp NEC Display Solutions projectors | 2024-09-30T12:46+09:00 | 2024-09-30T12:46+09:00 |
| jvndb-2024-003049 | Multiple vulnerabilities in KEYENCE KV STUDIO, KV REPLAY VIEWER, and VT5-WX15/WX12 | 2024-04-01T12:31+09:00 | 2024-09-25T13:51+09:00 |
| jvndb-2024-000089 | WindLDR and WindO/I-NV4 store sensitive information in cleartext | 2024-08-29T15:08+09:00 | 2024-09-24T17:14+09:00 |
| jvndb-2024-000103 | The installer of e-Tax software(common program) vulnerable to privilege escalation | 2024-09-24T16:12+09:00 | 2024-09-24T16:12+09:00 |
| jvndb-2024-000101 | Multiple vulnerabilities in PLANEX COMMUNICATIONS network devices | 2024-09-24T15:26+09:00 | 2024-09-24T15:26+09:00 |
| jvndb-2024-003068 | Multiple vulnerabilities in Cente middleware | 2024-04-05T15:36+09:00 | 2024-09-24T15:00+09:00 |
| jvndb-2024-008391 | Multiple vulnerabilities in TAKENAKA ENGINEERING digital video recorders | 2024-09-19T14:07+09:00 | 2024-09-19T14:07+09:00 |
| jvndb-2024-000100 | Multiple vulnerabilities in WordPress plugin "Welcart e-Commerce" | 2024-09-18T14:34+09:00 | 2024-09-18T14:34+09:00 |
| jvndb-2024-000099 | Assimp vulnerable to heap-based buffer overflow | 2024-09-18T14:20+09:00 | 2024-09-18T14:20+09:00 |
| jvndb-2020-018328 | Falsification and eavesdropping of contents across multiple websites via Web Rehosting services | 2024-09-12T12:23+09:00 | 2024-09-12T12:23+09:00 |
| jvndb-2023-027250 | Security Problem in Web Browser Permission Mechanism | 2024-09-11T18:19+09:00 | 2024-09-11T18:19+09:00 |
| jvndb-2020-018327 | Malleability attack against executables encrypted by CBC mode with no integrity check | 2024-09-11T18:19+09:00 | 2024-09-11T18:19+09:00 |
| jvndb-2024-000095 | Multiple Alps System Integration products and the OEM products vulnerable to cross-site request forgery | 2024-09-09T16:40+09:00 | 2024-09-09T16:40+09:00 |
| jvndb-2024-000096 | Pgpool-II vulnerable to information disclosure | 2024-09-09T14:58+09:00 | 2024-09-09T14:58+09:00 |
| jvndb-2024-000094 | "@cosme" App fails to restrict custom URL schemes properly | 2024-09-09T14:20+09:00 | 2024-09-09T14:20+09:00 |
| jvndb-2024-000097 | WordPress Plugin "Forminator" vulnerable to cross-site scripting | 2024-09-09T13:51+09:00 | 2024-09-09T13:51+09:00 |
| jvndb-2024-000098 | Multiple products from KINGSOFT JAPAN vulnerable to path traversal | 2024-09-06T15:07+09:00 | 2024-09-06T15:07+09:00 |
| jvndb-2024-000090 | Secure Boot bypass Vulnerability in PRIMERGY | 2024-09-06T14:39+09:00 | 2024-09-06T14:39+09:00 |
| jvndb-2024-000093 | WordPress Plugin "Advanced Custom Fields" vulnerable to cross-site scripting | 2024-09-04T13:01+09:00 | 2024-09-04T13:01+09:00 |
| jvndb-2024-007002 | Panasonic Control FPWIN Pro7 vulnerable to stack-based buffer overflow | 2024-09-02T14:57+09:00 | 2024-09-02T14:57+09:00 |
| jvndb-2024-000091 | IPCOM vulnerable to information disclosure | 2024-08-30T14:56+09:00 | 2024-08-30T14:56+09:00 |
| jvndb-2024-000092 | Multiple vulnerabilities in WordPress plugin "Carousel Slider" | 2024-08-30T13:58+09:00 | 2024-08-30T13:58+09:00 |
| jvndb-2024-006787 | xfpt vulnerable to stack-based buffer overflow | 2024-08-29T14:07+09:00 | 2024-08-29T14:07+09:00 |
| jvndb-2024-000086 | Multiple Safie products vulnerable to improper server certificate verification | 2024-08-22T13:51+09:00 | 2024-08-29T12:23+09:00 |
| jvndb-2024-006646 | Authentication Bypass Vulnerability in Hitachi Ops Center Common Services | 2024-08-27T12:01+09:00 | 2024-08-27T12:01+09:00 |
| jvndb-2024-006367 | Unquoted Service Path in Hitachi Device Manager | 2024-08-26T16:27+09:00 | 2024-08-26T16:27+09:00 |
| jvndb-2024-000087 | BUFFALO wireless LAN routers and wireless LAN repeaters vulnerable to OS command injection | 2024-08-23T14:17+09:00 | 2024-08-23T14:17+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-14275 | 多款Apple产品拒绝服务漏洞(CNVD-2026-14275) | 2026-03-02 | 2026-03-19 |
| cnvd-2026-14274 | 多款Apple产品拒绝服务漏洞(CNVD-2026-14274) | 2026-03-02 | 2026-03-19 |
| cnvd-2026-14273 | 多款Apple产品拒绝服务漏洞(CNVD-2026-14273) | 2026-03-02 | 2026-03-19 |
| cnvd-2026-14272 | 多款Apple产品拒绝服务漏洞(CNVD-2026-14272) | 2026-03-02 | 2026-03-19 |
| cnvd-2026-14271 | 多款Apple产品拒绝服务漏洞(CNVD-2026-14271) | 2026-03-02 | 2026-03-19 |
| cnvd-2026-14252 | Apache Spark反序列化漏洞 | 2026-03-19 | 2026-03-19 |
| cnvd-2026-14251 | Apache Livy输入验证错误漏洞 | 2026-03-19 | 2026-03-19 |
| cnvd-2026-14250 | Zephyr缓冲区溢出漏洞 | 2026-03-19 | 2026-03-19 |
| cnvd-2026-14249 | Open5GS拒绝服务漏洞(CNVD-2026-14249) | 2026-03-19 | 2026-03-19 |
| cnvd-2026-14136 | Siemens RUGGEDCOM APE1808设备Fortigate NGFW V7.4.7之前版本存在多个漏洞 | 2026-03-10 | 2026-03-19 |
| cnvd-2026-14599 | Google Chrome WebView资源管理错误漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14597 | Google Chrome Agents资源管理错误漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14596 | Google Chrome WebMCP资源管理错误漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14595 | Google Chrome Extensions资源管理错误漏洞(CNVD-2026-14595) | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14594 | Google Chrome TextEncoding资源管理错误漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14593 | Google Chrome MediaStream内存错误引用漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14592 | Google Chrome WebMIDI内存错误引用漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14146 | WordPress插件Permalink Manager Lite信息泄露漏洞 | 2025-09-29 | 2026-03-18 |
| cnvd-2026-14145 | WordPress插件Document Pro Elementor信息泄露漏洞 | 2025-11-14 | 2026-03-18 |
| cnvd-2026-14144 | WordPress插件Comment Edit Core – Simple Comment Editing信息泄露漏洞 | 2025-11-18 | 2026-03-18 |
| cnvd-2026-14143 | WordPress插件wpForo Forum信息泄露漏洞 | 2026-03-11 | 2026-03-18 |
| cnvd-2026-14142 | WordPress插件My Tickets信息泄露漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14141 | WordPress插件Greenshift – animation and page builder blocks信息泄露漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14140 | WordPress插件Classified Listing信息泄露漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14139 | WordPress插件Chaty信息泄露漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14138 | WordPress插件WP Booking System信息泄露漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14137 | WordPress插件NextScripts: Social Networks Auto-Poster跨站脚本漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14007 | Huawei HarmonyOS资源调度模块权限控制漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-14000 | Huawei EMUI和Huawei HarmonyOS IMS模块越界写入漏洞 | 2026-03-17 | 2026-03-18 |
| cnvd-2026-13998 | Huawei EMUI和Huawei HarmonyOS电子邮件应用校验不当漏洞 | 2026-03-17 | 2026-03-18 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-12371 | Уязвимость компонента nfsd ядра операционной системы Linux, позволяющая нарушителю вызват… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12370 | Уязвимость компонента drm/nouveau ядра операционной системы Linux, позволяющая нарушителю… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12368 | Уязвимость компонента amdgpu_dm_hdcp.c ядра операционной системы Linux, позволяющая наруш… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12367 | Уязвимость компонента bus.c ядра операционной системы Linux, позволяющая нарушителю вызва… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12365 | Уязвимость ядра операционной системы Linux, связанная с использованием неинициализированн… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12357 | Уязвимость компонента nf_conncount ядра операционной системы Linux, позволяющая нарушител… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12356 | Уязвимость модуля `user` систем управления конфигурациями Ansible Core и Ansible, позволя… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12353 | Уязвимость компонента page_pool.c ядра операционной системы Linux, позволяющая нарушителю… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12352 | Уязвимость компонента ftrace.c ядра операционной системы Linux, позволяющая нарушителю вы… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12351 | Уязвимость функции st_lsm6dsx_read_tagged_fifo() компонента st_lsm6dsx_buffer.c ядра опер… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12350 | Уязвимость функции st_lsm6dsx_read_fifo() компонента st_lsm6dsx_buffer.c ядра операционно… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12349 | Уязвимость компонента net/sched/sch_hfsc.c ядра операционной системы Linux, позволяющая н… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12347 | Уязвимость компонента syscall.c ядра операционной системы Linux, позволяющая нарушителю в… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12344 | Уязвимость компонента vlan ядра операционной системы Linux, позволяющая нарушителю вызват… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12343 | Уязвимость ядра операционной системы Linux, связанная с ошибками при блокировке потоков, … | 29.09.2025 | 16.02.2026 |
| bdu:2025-12338 | Уязвимость компонента bpf_trace.c ядра операционной системы Linux, позволяющая нарушителю… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12336 | Уязвимость компонентов drivers/usb/typec/ucsi/ ядра операционной системы Linux, позволяющ… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12335 | Уязвимость модуля USB ядра операционной системы Linux, позволяющая нарушителю вызвать отк… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12334 | Уязвимость ядра операционной системы Linux, связанная с доступом к неинициализированному … | 29.09.2025 | 16.02.2026 |
| bdu:2025-12333 | Уязвимость ядра операционной системы Linux, связанная с доступом к неинициализированному … | 29.09.2025 | 16.02.2026 |
| bdu:2025-12330 | Уязвимость компонента jfs ядра операционной системы Linux, позволяющая нарушителю получит… | 29.09.2025 | 16.02.2026 |
| bdu:2025-12329 | Уязвимость компонента brcmnand.c ядра операционной системы Linux, позволяющая нарушителю … | 29.09.2025 | 16.02.2026 |
| bdu:2025-12325 | Уязвимость модуля email интерпретатора языка программирования Python, позволяющая наруши… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12324 | Уязвимость ядра операционной системы Linux, связанная с неправильным контролем идентифика… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12322 | Уязвимость функции kvalloc() компонента eventlog/acpi.c The ядра операционной системы Lin… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12309 | Уязвимость функции __send_empty_flush() драйвера dm ядра операционной системы Linux, позв… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12307 | Уязвимость компонента venus ядра операционной системы Linux, позволяющая нарушителю вызва… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12306 | Уязвимость компонента venus ядра операционной системы Linux, позволяющая нарушителю вызва… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12304 | Уязвимость компонента gtp ядра операционной системы Linux, позволяющая нарушителю вызвать… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12302 | Уязвимость сетевого протокола аутентификации Kerberos, связанная с записью за границами б… | 28.09.2025 | 16.02.2026 |
| ID | Description | Updated |
|---|---|---|
| var-201902-0360 | In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popov… | 2024-07-23T21:44:51.239000Z |
| var-202210-0043 | The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fie… | 2024-07-23T21:44:46.557000Z |
| var-200809-0187 | Finder in Apple Mac OS X 10.5.2 through 10.5.4 allows remote attackers to cause a denial … | 2024-07-23T21:44:13.542000Z |
| var-202203-0664 | BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions… | 2024-07-23T21:44:12.287000Z |
| var-201109-0214 | Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers… | 2024-07-23T21:44:12.444000Z |
| var-200901-0466 | The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for co… | 2024-07-23T21:44:12.668000Z |
| var-201202-0137 | Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote at… | 2024-07-23T21:43:37.915000Z |
| var-201806-1468 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… | 2024-07-23T21:43:36.931000Z |
| var-201110-0321 | FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterpri… | 2024-07-23T21:43:33.476000Z |
| var-200703-0009 | Integer overflow in Apple QuickTime before 7.1.5, when installed on Windows operating sys… | 2024-07-23T21:43:33.598000Z |
| var-200102-0029 | Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial… | 2024-07-23T21:43:33.797000Z |
| var-201710-1405 | An issue was discovered in certain Apple products. iOS before 11 is affected. Safari befo… | 2024-07-23T21:43:29.001000Z |
| var-201912-0457 | A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tv… | 2024-07-23T21:43:28.933000Z |
| var-201302-0309 | Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.… | 2024-07-23T21:43:28.487000Z |
| var-202103-1464 | An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello m… | 2024-07-23T21:43:25.615000Z |
| var-201710-1409 | An issue was discovered in certain Apple products. iOS before 11 is affected. Safari befo… | 2024-07-23T21:43:25.189000Z |
| var-201210-0343 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:43:24.967000Z |
| var-201912-0551 | A memory corruption issue was addressed with improved state management. This issue is fix… | 2024-07-23T21:43:21.002000Z |
| var-201211-0366 | Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on … | 2024-07-23T21:42:50.004000Z |
| var-200609-0310 | Multiple buffer overflows in Apple QuickTime before 7.1.3 allow user-assisted remote atta… | 2024-07-23T21:42:44.179000Z |
| var-200909-0789 | libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when Open… | 2024-07-23T21:42:38.375000Z |
| var-201606-0382 | Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified … | 2024-07-23T21:42:37.934000Z |
| var-201206-0058 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:42:36.964000Z |
| var-201912-1860 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T21:42:32.013000Z |
| var-200711-0560 | Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matc… | 2024-07-23T21:42:00.915000Z |
| var-201109-0209 | Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) t… | 2024-07-23T21:41:33.003000Z |
| var-201007-0319 | The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit i… | 2024-07-23T21:41:32.923000Z |
| var-201302-0136 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:41:31.932000Z |
| var-200703-0018 | Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to… | 2024-07-23T21:41:31.383000Z |
| var-201603-0222 | The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denia… | 2024-07-23T21:40:58.575000Z |