Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62221 |
7.8 (3.1)
|
Windows Cloud Files Mini Filter Driver Elevation of Pr… |
Microsoft |
Windows 10 Version 1809 |
2025-12-09T17:56:10.169Z | 2026-04-16T14:19:07.492Z |
| CVE-2025-64677 |
8.2 (3.1)
|
Office Out-of-Box Experience Spoofing Vulnerability |
Microsoft |
Office Out-of-Box Experience |
2025-12-18T22:02:08.421Z | 2026-04-16T14:19:06.932Z |
| CVE-2025-64675 |
8.3 (3.1)
|
Azure Cosmos DB Spoofing Vulnerability |
Microsoft |
Azure Cosmos DB |
2025-12-18T23:15:31.241Z | 2026-04-16T14:19:06.437Z |
| CVE-2025-64676 |
7.2 (3.1)
|
Microsoft Purview eDiscovery Remote Code Execution Vul… |
Microsoft |
Microsoft Purview |
2025-12-18T22:02:07.323Z | 2026-04-16T14:19:05.887Z |
| CVE-2025-65037 |
10 (3.1)
|
Azure Container Apps Remote Code Execution Vulnerability |
Microsoft |
Azure Container Apps |
2025-12-18T22:02:06.737Z | 2026-04-16T14:19:05.350Z |
| CVE-2025-65041 |
10 (3.1)
|
Microsoft Partner Center Elevation of Privilege Vulner… |
Microsoft |
Microsoft Partner Center |
2025-12-18T22:02:06.021Z | 2026-04-16T14:19:04.744Z |
| CVE-2025-64663 |
9.9 (3.1)
|
Custom Question Answering Elevation of Privilege Vulne… |
Microsoft |
Azure Cognitive Service for Language |
2025-12-18T22:02:05.377Z | 2026-04-16T14:19:04.162Z |
| CVE-2025-54100 |
7.8 (3.1)
|
PowerShell Remote Code Execution Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2025-12-09T17:56:09.562Z | 2026-04-16T14:19:03.292Z |
| CVE-2025-64680 |
7.8 (3.1)
|
Windows DWM Core Library Elevation of Privilege Vulner… |
Microsoft |
Windows 10 Version 1507 |
2025-12-09T17:56:08.904Z | 2026-04-16T14:19:01.509Z |
| CVE-2025-64679 |
7.8 (3.1)
|
Windows DWM Core Library Elevation of Privilege Vulner… |
Microsoft |
Windows 10 Version 1507 |
2025-12-09T17:56:08.304Z | 2026-04-16T14:19:00.931Z |
| CVE-2025-64678 |
8.8 (3.1)
|
Windows Routing and Remote Access Service (RRAS) Remot… |
Microsoft |
Windows 10 Version 1607 |
2025-12-09T17:56:07.648Z | 2026-04-16T14:19:00.282Z |
| CVE-2025-64672 |
8.8 (3.1)
|
Microsoft SharePoint Server Spoofing Vulnerability |
Microsoft |
Microsoft SharePoint Server Subscription Edition |
2025-12-09T17:56:06.979Z | 2026-04-16T14:18:59.703Z |
| CVE-2025-64671 |
8.4 (3.1)
|
GitHub Copilot for Jetbrains Remote Code Execution Vul… |
Microsoft |
GitHub Copilot Plugin for JetBrains IDEs |
2025-12-09T17:56:06.407Z | 2026-04-16T14:18:59.084Z |
| CVE-2025-64661 |
7.8 (3.1)
|
Windows Shell Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2025-12-09T17:56:05.748Z | 2026-04-16T14:18:58.138Z |
| CVE-2025-62565 |
7.3 (3.1)
|
Windows File Explorer Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2025-12-09T17:56:05.233Z | 2026-04-16T14:18:57.532Z |
| CVE-2025-62570 |
7.1 (3.1)
|
Windows Camera Frame Server Monitor Information Disclo… |
Microsoft |
Windows 11 Version 24H2 |
2025-12-09T17:56:04.617Z | 2026-04-16T14:18:56.980Z |
| CVE-2025-62569 |
7 (3.1)
|
Microsoft Brokering File System Elevation of Privilege… |
Microsoft |
Windows 11 Version 24H2 |
2025-12-09T17:56:04.070Z | 2026-04-16T14:18:56.482Z |
| CVE-2025-62567 |
5.3 (3.1)
|
Windows Hyper-V Denial of Service Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2025-12-09T17:56:03.534Z | 2026-04-16T14:18:55.794Z |
| CVE-2025-62560 |
7.8 (3.1)
|
Microsoft Excel Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2025-12-09T17:56:01.139Z | 2026-04-16T14:18:55.203Z |
| CVE-2025-62559 |
7.8 (3.1)
|
Microsoft Word Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2025-12-09T17:55:59.808Z | 2026-04-16T14:18:54.576Z |
| CVE-2025-62558 |
7.8 (3.1)
|
Microsoft Word Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2025-12-09T17:55:59.203Z | 2026-04-16T14:18:53.928Z |
| CVE-2025-62557 |
8.4 (3.1)
|
Microsoft Office Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2025-12-09T17:55:58.494Z | 2026-04-16T14:18:53.358Z |
| CVE-2025-62556 |
7.8 (3.1)
|
Microsoft Excel Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2025-12-09T17:55:57.872Z | 2026-04-16T14:18:52.764Z |
| CVE-2025-62555 |
7 (3.1)
|
Microsoft Word Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2025-12-09T17:55:57.189Z | 2026-04-16T14:18:52.184Z |
| CVE-2025-62554 |
8.4 (3.1)
|
Microsoft Office Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2025-12-09T17:55:56.579Z | 2026-04-16T14:18:51.572Z |
| CVE-2025-62553 |
7.8 (3.1)
|
Microsoft Excel Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2025-12-09T17:55:55.901Z | 2026-04-16T14:18:50.921Z |
| CVE-2025-62552 |
7.8 (3.1)
|
Microsoft Access Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2025-12-09T17:55:55.308Z | 2026-04-16T14:18:50.282Z |
| CVE-2025-62550 |
8.8 (3.1)
|
Azure Monitor Agent Remote Code Execution Vulnerability |
Microsoft |
Azure Monitor |
2025-12-09T17:55:54.642Z | 2026-04-16T14:18:49.736Z |
| CVE-2025-62474 |
7.8 (3.1)
|
Windows Remote Access Connection Manager Elevation of … |
Microsoft |
Windows 10 Version 1607 |
2025-12-09T17:55:53.947Z | 2026-04-16T14:18:49.072Z |
| CVE-2025-62468 |
5.5 (3.1)
|
Windows Defender Firewall Service Information Disclosu… |
Microsoft |
Windows 11 version 22H3 |
2025-12-09T17:55:53.221Z | 2026-04-16T14:18:48.602Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-34720 |
2.3 (4.0)
|
Zammad has an origin validation error in SSO mechanism |
zammad |
zammad |
2026-04-08T18:11:23.538Z | 2026-04-09T16:17:34.878Z |
| CVE-2026-37589 |
2.7 (3.1)
|
SourceCodester Storage Unit Rental Management Sys… |
n/a |
n/a |
2026-04-14T00:00:00.000Z | 2026-04-14T15:33:11.824Z |
| CVE-2025-12453 |
5.1 (4.0)
|
Improper neutralization of input during web page gener… |
OpenText™ |
Vertica |
2026-03-13T18:30:53.495Z | 2026-03-13T19:34:21.690Z |
| CVE-2026-40315 |
7.2 (4.0)
|
PraisonAI: SQLiteConversationStore didn't validate tab… |
MervinPraison |
PraisonAI |
2026-04-14T02:45:33.880Z | 2026-04-14T13:25:13.165Z |
| CVE-2026-40313 |
9.1 (3.1)
|
PraisonAI: ArtiPACKED Vulnerability via GitHub Actions… |
MervinPraison |
PraisonAI |
2026-04-14T03:10:23.697Z | 2026-04-14T16:27:49.836Z |
| CVE-2026-40289 |
9.1 (3.1)
|
PraisonAI Browser Server allows unauthenticated WebSoc… |
MervinPraison |
PraisonAI |
2026-04-14T03:05:05.514Z | 2026-04-14T20:18:37.319Z |
| CVE-2026-40288 |
9.8 (3.1)
|
PraisonAI: Critical RCE via `type: job` workflow YAML |
MervinPraison |
PraisonAI |
2026-04-14T03:00:21.547Z | 2026-04-14T15:57:15.812Z |
| CVE-2026-40287 |
8.4 (3.1)
|
PraisonAI has RCE via Automatic tools.py Import |
MervinPraison |
PraisonAI |
2026-04-14T02:55:38.270Z | 2026-04-14T13:23:29.807Z |
| CVE-2026-33929 |
N/A
|
Apache PDFBox Examples: Path Traversal in PDFBox Extra… |
Apache Software Foundation |
Apache PDFBox Examples |
2026-04-14T08:09:39.517Z | 2026-04-14T19:50:07.000Z |
| CVE-2026-33892 |
7.1 (3.1)
5.1 (4.0)
|
A vulnerability has been identified in Industrial… |
Siemens |
Industrial Edge Management Pro V1 |
2026-04-14T08:40:46.807Z | 2026-04-14T13:46:34.636Z |
| CVE-2026-31049 |
9.8 (3.1)
|
An issue in Hostbill v.2025-11-24 and 2025-12-01 … |
n/a |
n/a |
2026-04-14T00:00:00.000Z | 2026-04-16T12:06:52.366Z |
| CVE-2026-30480 |
6.5 (3.1)
|
A Local File Inclusion (LFI) vulnerability in the… |
n/a |
n/a |
2026-04-14T00:00:00.000Z | 2026-04-16T12:06:38.149Z |
| CVE-2026-2450 |
7.4 (4.0)
|
.NET misconfiguration: use of impersonation vulne… |
upKeeper Solutions |
upKeeper Instant Privilege Access |
2026-04-14T12:07:44.265Z | 2026-04-14T13:14:16.443Z |
| CVE-2026-2449 |
9 (4.0)
|
Improper neutralization of argument delimiters in… |
upKeeper Solutions |
upKeeper Instant Privilege Access |
2026-04-14T11:56:04.741Z | 2026-04-14T13:14:16.593Z |
| CVE-2026-24069 |
5.4 (3.1)
|
Improper Enforcement of Disabled Accounts in WebUI SSO… |
Kiuwan |
SAST |
2026-04-14T11:26:55.274Z | 2026-04-14T18:24:36.801Z |
| CVE-2026-2332 |
7.4 (3.1)
|
HTTP Request Smuggling via Chunked Extension Quoted-St… |
Eclipse Foundation |
Eclipse Jetty |
2026-04-14T10:59:10.193Z | 2026-04-15T03:58:12.322Z |
| CVE-2025-8095 |
9.1 (4.0)
|
Recoverable obfuscation using the OECH1 prefix encodin… |
Progress Software Corporation |
OpenEdge |
2026-04-14T13:13:43.739Z | 2026-04-15T03:58:13.601Z |
| CVE-2025-7389 |
8.2 (4.0)
|
Unauthorized Arbitrary File Read via RMI in AdminServe… |
Progress Software Corporation |
OpenEdge |
2026-04-14T13:12:54.559Z | 2026-04-14T14:04:52.165Z |
| CVE-2025-69993 |
6.1 (3.1)
|
Leaflet versions up to and including 1.9.4 are vu… |
n/a |
n/a |
2026-04-14T00:00:00.000Z | 2026-04-14T17:45:26.763Z |
| CVE-2025-69893 |
4.6 (3.1)
|
A side-channel vulnerability exists in the implem… |
n/a |
n/a |
2026-04-14T00:00:00.000Z | 2026-04-16T12:06:31.722Z |
| CVE-2025-61260 |
9.8 (3.1)
|
A vulnerability was identified in OpenAI Codex CL… |
n/a |
n/a |
2026-04-14T00:00:00.000Z | 2026-04-16T12:06:45.207Z |
| CVE-2025-13822 |
5.3 (4.0)
|
Authentication bypass in MCPHub |
MCPHub |
MCPHub |
2026-04-14T10:23:49.910Z | 2026-04-14T13:14:16.888Z |
| CVE-2026-34721 |
5.9 (4.0)
|
Zammad has Cross-site request forgery (CSRF) in OAuth … |
zammad |
zammad |
2026-04-08T18:12:32.504Z | 2026-04-09T14:22:33.535Z |
| CVE-2025-12454 |
5.1 (4.0)
|
Improper neutralization of input during web page gener… |
OpenText™ |
Vertica |
2026-03-13T18:30:40.822Z | 2026-03-13T19:33:59.150Z |
| CVE-2025-12455 |
5.1 (4.0)
|
Username Enumeration Observable Response Discrepancy v… |
OpenText™ |
Vertica |
2026-03-13T18:30:27.903Z | 2026-03-13T19:33:40.096Z |
| CVE-2026-6231 |
5.3 (4.0)
4.3 (3.1)
|
bson_validate may skip validation when processing cert… |
MongoDB Inc. |
C Driver |
2026-04-13T15:31:55.735Z | 2026-04-13T19:23:42.752Z |
| CVE-2026-6100 |
9.1 (4.0)
|
Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decomp… |
Python Software Foundation |
CPython |
2026-04-13T17:15:47.606Z | 2026-04-14T14:30:25.622Z |
| CVE-2026-5086 |
7.5 (3.1)
|
Crypt::SecretBuffer versions before 0.019 for Perl is … |
NERDVANA |
Crypt::SecretBuffer |
2026-04-13T22:54:53.724Z | 2026-04-15T20:03:28.442Z |
| CVE-2026-4786 |
7 (4.0)
|
Incomplete mitigation of CVE-2026-4519, %action expans… |
Python Software Foundation |
CPython |
2026-04-13T21:52:19.036Z | 2026-04-14T14:30:19.762Z |
| CVE-2026-34264 |
6.5 (3.1)
|
Information Disclosure vulnerability in SAP Human Capi… |
SAP_SE |
SAP Human Capital Management for SAP S/4HANA |
2026-04-14T00:09:12.272Z | 2026-04-14T13:14:17.154Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-34257 | Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated … | 2026-04-14T01:16:03.730 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-34256 | Due to a missing authorization check in SAP ERP and SAP S/4HANA (Private Cloud and On-Premise), an … | 2026-04-14T01:16:03.530 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-33858 | Dag Authors, who normally should not be able to execute code in the webserver context could craft X… | 2026-04-13T15:17:33.343 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-31924 | Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. tencent-cloud-cls … | 2026-04-14T09:16:35.953 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-31923 | Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. This can occur due… | 2026-04-14T09:16:35.817 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-31908 | Header injection vulnerability in Apache APISIX. The attacker can take advantage of certain config… | 2026-04-14T09:16:35.650 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-27683 | SAP BusinessObjects Business Intelligence application allows an authenticated attacker to inject ma… | 2026-04-14T00:16:06.717 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-27681 | Due to insufficient authorization checks in SAP Business Planning and Consolidation and SAP Busines… | 2026-04-14T00:16:06.560 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-27679 | Due to missing authorization checks in the SAP S/4HANA frontend OData Service (Manage Reference Str… | 2026-04-14T00:16:06.413 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-27678 | Due to missing authorization checks in the SAP S/4HANA backend OData Service (Manage Reference Stru… | 2026-04-14T00:16:06.270 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-27677 | Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Reference Equipment), … | 2026-04-14T00:16:06.130 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-27676 | Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Technical Object Struc… | 2026-04-14T00:16:05.987 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-27675 | SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could … | 2026-04-14T00:16:05.823 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-27674 | Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java), a… | 2026-04-14T00:16:05.670 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-27673 | Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an authenti… | 2026-04-14T00:16:05.477 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-27672 | The Material Master application does not enforce authorization checks for authenticated users when … | 2026-04-14T00:16:05.297 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-27668 | A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (Al… | 2026-04-14T09:16:35.480 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-25654 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3). Affected products do no… | 2026-04-14T09:16:35.150 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-24318 | Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence P… | 2026-04-14T00:16:04.913 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-24032 | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected a… | 2026-04-14T09:16:34.900 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-0512 | Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management (SICF… | 2026-04-14T00:16:03.700 | 2026-04-17T15:18:16.507 |
| fkie_cve-2025-66236 | Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager… | 2026-04-13T15:17:05.953 | 2026-04-17T15:18:16.507 |
| fkie_cve-2025-40745 | A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter… | 2026-04-14T09:16:34.683 | 2026-04-17T15:18:16.507 |
| fkie_cve-2025-3756 | A vulnerability exists in the command handling of the IEC 61850 communication stack included in the… | 2026-04-13T18:16:27.887 | 2026-04-17T15:18:16.507 |
| fkie_cve-2025-31991 | Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocit… | 2026-04-13T16:16:24.110 | 2026-04-17T15:18:16.507 |
| fkie_cve-2026-6414 | @fastify/static versions 8.0.0 through 9.1.0 decode percent-encoded path separators (%2F) before fi… | 2026-04-16T13:16:52.243 | 2026-04-17T15:17:00.957 |
| fkie_cve-2026-6410 | @fastify/static versions 8.0.0 through 9.1.0 allow path traversal when directory listing is enabled… | 2026-04-16T14:16:20.173 | 2026-04-17T15:17:00.957 |
| fkie_cve-2026-6409 | A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of un… | 2026-04-16T15:17:41.910 | 2026-04-17T15:17:00.957 |
| fkie_cve-2026-6385 | A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a speci… | 2026-04-15T20:16:44.230 | 2026-04-17T15:17:00.957 |
| fkie_cve-2026-6384 | A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's `… | 2026-04-15T20:16:44.033 | 2026-04-17T15:17:00.957 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-mgwx-w2xc-pjq7 |
7.5 (3.1)
8.7 (4.0)
|
MailGates/MailAudit developed by Openfind has a CRLF Injection vulnerability, allowing unauthentica… | 2026-04-16T03:31:06Z | 2026-04-16T03:31:06Z |
| ghsa-hx2j-xhcm-gv72 |
10.0 (4.0)
|
The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthentica… | 2026-04-16T03:31:06Z | 2026-04-16T03:31:06Z |
| ghsa-fwhx-4vqr-m9gj |
6.5 (3.1)
7.1 (4.0)
|
OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that allows remote gate… | 2026-04-16T03:31:06Z | 2026-04-16T03:31:06Z |
| ghsa-99qg-46r6-v9px |
6.4 (3.1)
|
The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-S… | 2026-04-16T03:31:06Z | 2026-04-16T03:31:06Z |
| ghsa-6v5j-prr3-phf9 |
9.8 (3.1)
9.3 (4.0)
|
MailGates/MailAudit developed by Openfind has a Stack-based Buffer Overflow vulnerability, allowing… | 2026-04-16T03:31:06Z | 2026-04-16T03:31:06Z |
| ghsa-6v58-5584-rv99 |
8.1 (3.1)
|
Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment. If at least o… | 2026-04-16T03:31:06Z | 2026-04-16T03:31:06Z |
| ghsa-49h6-4qj3-4f42 |
5.4 (4.0)
|
A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Cente… | 2026-04-16T03:31:06Z | 2026-04-16T03:31:06Z |
| ghsa-48wr-p98v-9w5h |
4.9 (3.1)
|
FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryp… | 2026-04-16T03:31:06Z | 2026-04-16T03:31:06Z |
| ghsa-3r49-76f3-pf2m |
9.8 (3.1)
9.3 (4.0)
|
Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec … | 2026-04-16T03:31:06Z | 2026-04-16T03:31:06Z |
| ghsa-x87c-g7pw-2xr5 |
6.3 (3.1)
5.3 (4.0)
|
GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulner… | 2026-04-10T21:31:15Z | 2026-04-16T03:31:05Z |
| ghsa-v8f7-cg9p-w5jx |
6.3 (3.1)
5.3 (4.0)
|
GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulner… | 2026-04-10T21:31:15Z | 2026-04-16T03:31:05Z |
| ghsa-9w66-jgph-vx6j |
8.8 (3.1)
8.7 (4.0)
|
OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows remote g… | 2026-04-16T03:31:05Z | 2026-04-16T03:31:05Z |
| ghsa-7rhq-9q45-5gm4 |
8.4 (4.0)
|
radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's print… | 2026-04-16T03:31:05Z | 2026-04-16T03:31:05Z |
| ghsa-6f54-qjvm-wwq3 |
5.1 (4.0)
|
wger has Stored XSS via Unescaped License Attribution Fields | 2026-04-16T01:37:21Z | 2026-04-16T01:37:21Z |
| ghsa-xppv-4jrx-qf8m |
7.6 (3.1)
|
wger has Broken Access Control in Global Gym Configuration Update Endpoint | 2026-04-16T01:35:16Z | 2026-04-16T01:35:16Z |
| ghsa-m32f-8vh9-2hh3 |
6.9 (3.1)
|
Keycloak: Arbitrary code execution via Stored Cross-Site Scripting (XSS) in organization selection … | 2026-04-14T15:30:35Z | 2026-04-16T01:34:56Z |
| ghsa-5vjq-5jmg-39xq |
6.3 (3.1)
|
Renovate affected by remote code execution was possible using the bazel-module or bazelisk managers… | 2026-04-16T01:34:39Z | 2026-04-16T01:34:40Z |
| ghsa-3qcm-pj6q-w4c5 |
4.3 (3.1)
5.3 (4.0)
|
Nodcms contains a cross-site request forgery vulnerability | 2026-04-04T21:30:27Z | 2026-04-16T01:34:08Z |
| ghsa-fpx9-9hq8-w2xc |
8.5 (3.1)
|
Webkul Krayin CRM has Server-Side Request Forgery (SSRF) | 2026-04-14T18:30:35Z | 2026-04-16T01:32:29Z |
| ghsa-2xx8-j85v-j7wh |
8.1 (3.1)
|
Webkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Contact/Persons/PersonContro… | 2026-04-14T18:30:35Z | 2026-04-16T01:32:19Z |
| ghsa-r8rp-5f55-5j9x |
8.8 (3.1)
|
Webkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Settings/UserController.php | 2026-04-14T18:30:35Z | 2026-04-16T01:31:46Z |
| ghsa-rm5f-3c25-p4cw |
8.1 (3.1)
|
Webkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Controllers/Lead/LeadControl… | 2026-04-14T18:30:35Z | 2026-04-16T01:31:36Z |
| ghsa-hm2w-vr2p-hq7w |
9.8 (3.1)
|
UEFI Firmware Parser has a heap out-of-bounds write in tiano decompressor ReadCLen | 2026-04-16T01:31:09Z | 2026-04-16T01:31:09Z |
| ghsa-2689-5p89-6j3j |
9.8 (3.1)
|
UEFI Firmware Parser has a stack out-of-bounds write in tiano decompressor MakeTable | 2026-04-16T01:30:48Z | 2026-04-16T01:30:48Z |
| ghsa-mp82-fmj6-f22v |
4.8 (3.1)
|
pyLoad has a Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Glo… | 2026-04-16T01:20:49Z | 2026-04-16T01:21:32Z |
| ghsa-rr7j-v2q5-chgv |
5.3 (3.1)
|
LangSmith SDK: Streaming token events bypass output redaction | 2026-04-16T01:20:37Z | 2026-04-16T01:20:37Z |
| ghsa-pfx2-9x9m-7ghx |
7.7 (3.1)
|
OpenStack Keystone: LDAP identity backend does not convert enabled attribute to boolean | 2026-04-14T21:31:48Z | 2026-04-16T01:20:22Z |
| ghsa-vp22-38m5-r39r |
6.9 (4.0)
|
PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.valid… | 2026-04-16T01:09:17Z | 2026-04-16T01:09:17Z |
| ghsa-gvvw-8j96-8g5r |
9.8 (3.1)
|
MsQuic has a Remote Elevation of Privilege Vulnerability | 2026-04-16T01:04:03Z | 2026-04-16T01:04:03Z |
| ghsa-6hw5-45gm-fj88 |
9.1 (4.0)
|
@fastify/express has a middleware authentication bypass via URL normalization gaps (duplicate slash… | 2026-04-16T01:03:46Z | 2026-04-16T01:03:46Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2012-35 |
|
OpenStack Keystone Essex (2012.1) and Folsom (2012.2) does not properly handle EC2 tokens… | keystone | 2012-12-18T01:55:00Z | 2024-11-21T14:22:52.404569Z |
| pysec-2012-34 |
|
OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenS… | keystone | 2012-07-31T10:45:00Z | 2024-11-21T14:22:52.344123Z |
| pysec-2023-271 |
5.3 (3.1)
|
Hail is an open-source, general-purpose, Python-based data analysis tool with additional … | hail | 2023-12-29T17:16:00+00:00 | 2024-11-21T14:22:51.672042+00:00 |
| pysec-2014-103 |
|
The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNT… | ipa | 2014-05-29T14:19:00Z | 2024-11-21T14:22:51.957056Z |
| pysec-2013-38 |
|
The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification… | ipa | 2013-01-27T18:55:00Z | 2024-11-21T14:22:51.898526Z |
| pysec-2013-37 |
|
store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and G… | glance | 2013-02-24T21:55:00Z | 2024-11-21T14:22:51.177765Z |
| pysec-2012-33 |
|
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allow… | horizon | 2012-06-05T22:55:00Z | 2024-11-21T14:22:51.786908Z |
| pysec-2012-32 |
|
Cross-site scripting (XSS) vulnerability in the refresh mechanism in the log viewer in ho… | horizon | 2012-06-05T22:55:00Z | 2024-11-21T14:22:51.729618Z |
| pysec-2012-31 |
|
libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, … | golismero | 2012-03-19T19:55:00Z | 2024-11-21T14:22:51.617446Z |
| pysec-2012-30 |
|
The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote… | glance | 2012-11-11T13:00:00Z | 2024-11-21T14:22:51.113933Z |
| pysec-2012-29 |
|
The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote… | glance | 2012-11-11T13:00:00Z | 2024-11-21T14:22:51.054769Z |
| pysec-2023-269 |
7.5 (3.1)
|
GeoNode is an open source platform that facilitates the creation, sharing, and collaborat… | geonode | 2023-08-24T23:15:00+00:00 | 2024-11-21T14:22:50.995218+00:00 |
| pysec-2021-888 |
7.8 (3.1)
|
netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (call… | gdal | 2021-07-20T07:15:00+00:00 | 2024-11-21T14:22:50.934313+00:00 |
| pysec-2021-887 |
9.8 (3.1)
|
GattLib 0.3-rc1 has a stack-based buffer over-read in get_device_path_from_mac in dbus/ga… | gattlib-py | 2021-05-27T11:15:00Z | 2024-11-21T14:22:50.881327Z |
| pysec-2021-886 |
6.5 (3.1)
|
A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 lea… | exiv2 | 2021-07-13T22:15:00Z | 2024-11-21T14:22:50.153222Z |
| pysec-2021-885 |
6.5 (3.1)
|
A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote at… | exiv2 | 2021-08-19T22:15:00Z | 2024-11-21T14:22:50.094265Z |
| pysec-2021-884 |
6.5 (3.1)
|
A float point exception in the printLong function in tags_int.cpp of Exiv2 0.27.99.0 allo… | exiv2 | 2021-08-23T22:15:00Z | 2024-11-21T14:22:50.034285Z |
| pysec-2019-250 |
8.8 (3.1)
|
GattLib 0.2 has a stack-based buffer over-read in gattlib_connect in dbus/gattlib.c becau… | gattlib-py | 2019-01-21T06:29:00Z | 2024-11-21T14:22:50.820785Z |
| pysec-2014-101 |
|
FreeIPA 4.0.x before 4.0.5 and 4.1.x before 4.1.1, when 2FA is enabled, allows remote att… | freeipa | 2014-11-19T18:59:00Z | 2024-11-21T14:22:50.589801Z |
| pysec-2014-100 |
|
The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNT… | freeipa | 2014-05-29T14:19:00Z | 2024-11-21T14:22:50.537629Z |
| pysec-2013-36 |
|
The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification… | freeipa | 2013-01-27T18:55:00Z | 2024-11-21T14:22:50.474073Z |
| pysec-2021-883 |
6.5 (3.1)
|
An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows att… | exiv2 | 2021-08-23T22:15:00Z | 2024-11-21T14:22:49.973408Z |
| pysec-2021-882 |
8.1 (3.1)
|
Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0… | exiv2 | 2021-08-23T22:15:00Z | 2024-11-21T14:22:49.911764Z |
| pysec-2020-344 |
7.5 (3.1)
|
In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in … | exiv2 | 2020-01-27T05:15:00Z | 2024-11-21T14:22:49.729892Z |
| pysec-2019-249 |
8.8 (3.1)
|
An issue was discovered in Exiv2 0.27. There is infinite recursion at BigTiffImage::print… | exiv2 | 2019-02-25T15:29:00Z | 2024-11-21T14:22:49.85073Z |
| pysec-2019-248 |
8.8 (3.1)
|
An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::print… | exiv2 | 2019-02-25T15:29:00Z | 2024-11-21T14:22:49.79084Z |
| pysec-2019-247 |
6.5 (3.1)
|
Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when cal… | exiv2 | 2019-10-09T19:15:00Z | 2024-11-21T14:22:49.656989Z |
| pysec-2019-246 |
6.5 (3.1)
|
In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata() in … | exiv2 | 2019-07-28T19:15:00Z | 2024-11-21T14:22:49.597801Z |
| pysec-2019-245 |
6.5 (3.1)
|
Exiv2::PngImage::readMetadata() in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to ca… | exiv2 | 2019-07-28T19:15:00Z | 2024-11-21T14:22:49.538663Z |
| pysec-2019-244 |
7.8 (3.1)
|
Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in r… | exiv2 | 2019-07-28T19:15:00Z | 2024-11-21T14:22:49.479201Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-4194 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.413687Z |
| gsd-2024-4193 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.395860Z |
| gsd-2024-4192 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.442382Z |
| gsd-2024-4191 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.350081Z |
| gsd-2024-4190 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.415072Z |
| gsd-2024-4189 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.377780Z |
| gsd-2024-4188 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.437066Z |
| gsd-2024-4187 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.376404Z |
| gsd-2024-4186 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.352617Z |
| gsd-2024-4185 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.387322Z |
| gsd-2024-4184 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.371241Z |
| gsd-2024-4183 | Mattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x be… | 2024-04-26T05:02:17.372323Z |
| gsd-2024-4182 | Mattermost versions 9.6.0, 9.5.x before 9.5.3, 9.4.x before 9.4.5, and 8.1.x before 8.1.1… | 2024-04-26T05:02:17.395657Z |
| gsd-2024-4181 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.398953Z |
| gsd-2024-4180 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.418368Z |
| gsd-2024-4179 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.438004Z |
| gsd-2024-4178 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.377539Z |
| gsd-2024-4177 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.421751Z |
| gsd-2024-4176 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.392184Z |
| gsd-2024-4175 | Unicode transformation vulnerability in Hyperion affecting version 2.0.15. This vulnerabi… | 2024-04-26T05:02:17.424356Z |
| gsd-2024-4174 | Cross-Site Scripting (XSS) vulnerability in Hyperion Web Server affecting version 2.0.15.… | 2024-04-26T05:02:17.389353Z |
| gsd-2024-4173 | A vulnerability in Brocade SANnav exposes Kafka in the wan interface. The vulnerability… | 2024-04-26T05:02:17.396711Z |
| gsd-2024-4172 | A vulnerability classified as problematic was found in idcCMS 1.35. Affected by this vuln… | 2024-04-26T05:02:17.373866Z |
| gsd-2024-4171 | A vulnerability classified as critical has been found in Tenda W30E 1.0/1.0.1.25. Affecte… | 2024-04-26T05:02:17.434975Z |
| gsd-2024-4170 | A vulnerability was found in Tenda 4G300 1.01.42. It has been rated as critical. This iss… | 2024-04-26T05:02:17.362844Z |
| gsd-2024-4169 | A vulnerability was found in Tenda 4G300 1.01.42. It has been declared as critical. This … | 2024-04-26T05:02:17.413039Z |
| gsd-2024-4168 | A vulnerability was found in Tenda 4G300 1.01.42. It has been classified as critical. Thi… | 2024-04-26T05:02:17.398024Z |
| gsd-2024-4167 | A vulnerability was found in Tenda 4G300 1.01.42 and classified as critical. Affected by … | 2024-04-26T05:02:17.405786Z |
| gsd-2024-4166 | A vulnerability has been found in Tenda 4G300 1.01.42 and classified as critical. Affecte… | 2024-04-26T05:02:17.372976Z |
| gsd-2024-4165 | A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.17(9502)… | 2024-04-26T05:02:17.438286Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-2826 | Malicious code in dom-utils-lite (npm) | 2026-04-14T09:21:35Z | 2026-04-14T09:21:35Z |
| mal-2026-2629 | Malicious code in stacks-editor (npm) | 2026-04-14T08:55:57Z | 2026-04-14T08:55:57Z |
| mal-2026-2628 | Malicious code in svchost (PyPI) | 2026-04-14T05:42:26Z | 2026-04-14T05:42:26Z |
| mal-2026-2627 | Malicious code in pckg-sv (PyPI) | 2026-04-14T05:35:20Z | 2026-04-14T05:35:20Z |
| mal-2026-2492 | Malicious code in admin0911 (npm) | 2026-04-05T15:30:57Z | 2026-04-14T01:05:14Z |
| mal-2026-2282 | Malicious code in @adac-fahrzeugplattform/ui (npm) | 2026-03-29T04:43:26Z | 2026-04-14T01:05:13Z |
| mal-2026-2626 | Malicious code in getcardslib (npm) | 2026-04-14T00:07:56Z | 2026-04-14T00:07:56Z |
| mal-2026-2624 | Malicious code in asciitoart (PyPI) | 2026-04-13T21:26:29Z | 2026-04-13T22:22:34Z |
| mal-2026-2623 | Malicious code in hive-setting (PyPI) | 2026-04-13T16:27:32Z | 2026-04-13T16:27:32Z |
| mal-2026-2566 | Malicious code in wm-plugin-visions-recorder (npm) | 2026-04-12T06:09:38Z | 2026-04-13T15:48:08Z |
| mal-2026-2518 | Malicious code in viewer-assets-generator (npm) | 2026-04-09T03:10:01Z | 2026-04-13T15:48:07Z |
| mal-2026-2565 | Malicious code in portal-common-ui (npm) | 2026-04-12T04:15:46Z | 2026-04-13T15:48:06Z |
| mal-2026-2554 | Malicious code in paysafe-venmo (npm) | 2026-04-11T09:20:42Z | 2026-04-13T15:48:06Z |
| mal-2026-2553 | Malicious code in paysafe-payments-sdk-common (npm) | 2026-04-11T09:20:41Z | 2026-04-13T15:48:06Z |
| mal-2026-2552 | Malicious code in paysafe-google-pay (npm) | 2026-04-11T09:20:48Z | 2026-04-13T15:48:06Z |
| mal-2026-2551 | Malicious code in paysafe-card-payments (npm) | 2026-04-11T09:40:44Z | 2026-04-13T15:48:06Z |
| mal-2026-2550 | Malicious code in paysafe-apple-pay (npm) | 2026-04-11T09:33:48Z | 2026-04-13T15:48:06Z |
| mal-2026-2564 | Malicious code in gp-auth-lib (npm) | 2026-04-12T04:25:39Z | 2026-04-13T15:48:04Z |
| mal-2026-2560 | Malicious code in @b2b-portal/uch (npm) | 2026-04-11T17:55:17Z | 2026-04-13T15:48:02Z |
| mal-2026-2545 | Malicious code in @sap-px/pxapi (npm) | 2026-04-11T04:45:40Z | 2026-04-13T15:48:02Z |
| mal-2026-2537 | Malicious code in @b2b-portal/form (npm) | 2026-04-10T16:43:07Z | 2026-04-13T15:48:02Z |
| mal-2026-2621 | Malicious code in walmart-internal (npm) | 2026-04-13T15:33:47Z | 2026-04-13T15:33:47Z |
| mal-2026-2597 | Malicious code in @zgny/onboarding-consumer (npm) | 2026-04-13T15:25:22Z | 2026-04-13T15:25:30Z |
| mal-2026-2596 | Malicious code in @spreadjs/js-calc (npm) | 2026-04-13T15:25:22Z | 2026-04-13T15:25:30Z |
| mal-2026-2594 | Malicious code in @spoonflower/ui (npm) | 2026-04-13T15:25:22Z | 2026-04-13T15:25:30Z |
| mal-2026-2592 | Malicious code in @relxui/react (npm) | 2026-04-13T15:25:22Z | 2026-04-13T15:25:30Z |
| mal-2026-2589 | Malicious code in @mx-shared/utils (npm) | 2026-04-13T15:25:22Z | 2026-04-13T15:25:30Z |
| mal-2026-2587 | Malicious code in @kucoin-gbiz-next/tools (npm) | 2026-04-13T15:25:22Z | 2026-04-13T15:25:30Z |
| mal-2026-2585 | Malicious code in @hrb-web/nuxt (npm) | 2026-04-13T15:25:22Z | 2026-04-13T15:25:29Z |
| mal-2026-2584 | Malicious code in @hpcc/js-api (npm) | 2026-04-13T15:25:21Z | 2026-04-13T15:25:29Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-1251 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2024-05-28T22:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2024-1197 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe | 2024-05-21T22:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2024-1188 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-05-20T22:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2024-1083 | Linux Kernel: Mehrere Schwachstellen | 2024-05-09T22:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2024-1008 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-05-01T22:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2024-0964 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-04-24T22:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2024-0920 | Linux Kernel: Mehrere Schwachstellen | 2024-04-17T22:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2024-0804 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-04-04T22:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2024-0773 | Linux Kernel: Mehrere Schwachstellen | 2024-04-03T22:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2024-0749 | Linux Kernel: Mehrere Schwachstellen | 2024-04-01T22:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2024-0654 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe | 2024-03-17T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2024-0534 | Linux Kernel: Mehrere Schwachstellen | 2024-03-03T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2024-0527 | Linux Kernel: Mehrere Schwachstellen | 2024-02-29T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2024-0475 | Linux-Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe | 2024-02-25T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2024-0473 | Linux Kernel: Mehrere Schwachstellen | 2024-02-22T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2024-0037 | Microsoft SQL Server 2022: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-01-09T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2024-0014 | Linux Kernel (ATA over Ethernet): Schwachstelle ermöglicht Denial of Service und Code-Ausführung | 2024-01-04T23:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2022-1354 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2021-05-04T22:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2022-0879 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2022-08-01T22:00:00.000+00:00 | 2026-02-16T23:00:00.000+00:00 |
| wid-sec-w-2026-0425 | SmarterTools SmarterMail: Mehrere Schwachstellen | 2026-02-15T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2026-0423 | Gogs: Mehrere Schwachstellen | 2026-02-15T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2026-0418 | Google Cloud Platform (Apigee): Schwachstelle ermöglicht Privilegieneskalation | 2026-02-15T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2026-0417 | IBM Sterling Connect:Direct: Schwachstelle ermöglicht Denial of Service | 2026-02-15T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2026-0416 | Keycloak: Schwachstelle ermöglicht Denial of Service | 2026-02-15T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2026-0355 | PowerDNS Recursor: Mehrere Schwachstellen ermöglichen Denial of Service | 2026-02-09T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2026-0335 | vim: Schwachstelle ermöglicht Codeausführung | 2026-02-05T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2026-0258 | Red Hat Enterprise Linux (iperf3): Schwachstelle ermöglicht Codeausführung | 2026-01-29T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2026-0187 | Red Hat Enterprise Linux (glib): Schwachstelle ermöglicht Denial of Service | 2026-01-21T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2026-0148 | ImageMagick: Mehrere Schwachstellen | 2026-01-19T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| wid-sec-w-2026-0118 | GNU libc: Schwachstelle ermöglicht Codeausführung | 2026-01-14T23:00:00.000+00:00 | 2026-02-15T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| va-25-174-01 | OPEXUS FOIAXpress Public Access Link (PAL) multiple vulnerabilities | 2025-07-31T17:01:09Z | 2025-09-09T21:12:34Z |
| va-25-252-01 | OPEXUS FOIAXpress Public Access Link (PAL) SQL injection | 2025-09-09T20:48:26Z | 2025-09-09T20:48:26Z |
| icsa-25-093-01 | Hitachi Energy RTU500 Series (Update B) | 2025-03-25T12:30:00.000000Z | 2025-09-09T12:30:00.000000Z |
| icsa-25-252-09 | Rockwell Automation 1783-NATR | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-07 | Rockwell Automation ControlLogix 5580 | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-06 | Rockwell Automation CompactLogix® 5480 | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-05 | Rockwell Automation FactoryTalk Activation Manager | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-04 | Rockwell Automation FactoryTalk Optix | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-03 | Rockwell Automation Stratix IOS | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-01 | Rockwell Automation ThinManager | 2025-09-09T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-233-01 | Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module (Update A) | 2025-08-21T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-219-07 | EG4 Electronics EG4 Inverters (Update B) | 2025-08-07T06:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-058-01 | Schneider Electric communication modules for Modicon M580 and Quantum controllers (Update B) | 2025-02-27T07:00:00.000000Z | 2025-09-09T06:00:00.000000Z |
| icsa-25-252-02 | ABB Cylon Aspect BMS/BAS | 2025-09-09T05:00:00.000000Z | 2025-09-09T05:00:00.000000Z |
| icsa-25-266-03 | Schneider Electric SESU | 2025-08-12T04:00:00.000000Z | 2025-09-09T04:00:00.000000Z |
| icsa-25-254-08 | Schneider Electric EcoStruxure | 2025-08-12T04:00:00.000000Z | 2025-09-09T04:00:00.000000Z |
| icsa-25-035-07 | Schneider Electric Pro-face GP-Pro EX and Remote HMI (Update A) | 2025-01-14T00:00:00.000000Z | 2025-09-09T04:00:00.000000Z |
| icsa-25-254-06 | Siemens Industrial Edge Management | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-05 | Siemens Apogee PXC and Talon TC Devices | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-04 | Siemens SINEC OS | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-02 | Siemens SIMATIC Virtualization as a Service (SIVaaS) | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-254-01 | Siemens SIMOTION Tools | 2025-09-09T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-226-05 | Siemens WIBU CodeMeter Runtime | 2025-08-12T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-072-03 | Siemens SIMATIC S7-1500 TM MFP | 2025-03-11T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-24-102-08 | Siemens OPC Foundation Local Discovery Server Affecting Siemens Products | 2023-04-11T00:00:00.000000Z | 2025-09-09T00:00:00.000000Z |
| icsa-25-105-07 | Delta Electronics COMMGR (Update A) | 2025-04-15T06:00:00.000000Z | 2025-09-04T06:00:00.000000Z |
| icsa-25-245-03 | SunPower PVS6 | 2025-09-02T06:00:00.000000Z | 2025-09-02T06:00:00.000000Z |
| icsa-25-245-02 | Fuji Electric FRENIC-Loader 4 | 2025-09-02T06:00:00.000000Z | 2025-09-02T06:00:00.000000Z |
| icsa-25-245-01 | Delta Electronics EIP Builder | 2025-09-02T06:00:00.000000Z | 2025-09-02T06:00:00.000000Z |
| icsa-25-240-06 | GE Vernova CIMPLICITY | 2025-08-28T06:00:00.000000Z | 2025-08-28T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-sb-rv04x_rv32x_vulns-yj2osdhv | Cisco Small Business RV042, RV042G, RV320, and RV325 Routers Denial of Service and Remote Code Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-sb-rv04x_rv32x_vulns-yJ2OSDhV | Cisco Small Business RV042, RV042G, RV320, and RV325 Routers Denial of Service and Remote Code Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-rv34x-privesc-rce-qe33tcms | Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation and Remote Command Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-rv34x-privesc-rce-qE33TCms | Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation and Remote Command Execution Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndo-tlsvld-fduf3cpw | Cisco Nexus Dashboard Orchestrator SSL/TLS Certificate Validation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndo-tlsvld-FdUF3cpw | Cisco Nexus Dashboard Orchestrator SSL/TLS Certificate Validation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-uaapi-jh4v6zpn | Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-uaapi-Jh4V6zpN | Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-idv-bk8vqedc | Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndhs-idv-Bk8VqEDc | Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-raci-t46k3jnn | Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-raci-T46k3jnN | Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-ptrce-bushlbp | Cisco Nexus Dashboard Fabric Controller Remote Code Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-ptrce-BUSHLbp | Cisco Nexus Dashboard Fabric Controller Remote Code Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cmdinj-UvYZrKfr | Cisco Nexus Dashboard Fabric Controller Arbitrary Command Execution Vulnerability | 2024-10-02T16:00:00+00:00 | 2026-03-31T18:47:53+00:00 |
| cisco-sa-ndfc-cidv-xvyx2wlj | Cisco Nexus Dashboard Fabric Controller Configuration Backup Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ndfc-cidv-XvyX2wLj | Cisco Nexus Dashboard Fabric Controller Configuration Backup Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-meraki-mx-vpn-dos-by-QWUkqV7X | Cisco Meraki MX and Z Series Teleworker Gateway AnyConnect VPN Session Takeover and Denial of Service Vulnerability | 2024-10-02T16:00:00+00:00 | 2025-06-02T14:22:27+00:00 |
| cisco-sa-meraki-mx-vpn-dos-QTRHzG2 | Cisco Meraki MX and Z Series Teleworker Gateway AnyConnect VPN Denial of Service Vulnerabilities | 2024-10-02T16:00:00+00:00 | 2025-06-02T14:22:28+00:00 |
| cisco-sa-ise-info-disc-zyf2neex | Cisco Identity Services Engine Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-ise-info-disc-ZYF2nEEX | Cisco Identity Services Engine Information Disclosure Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-expw-escalation-3bkz77bd | Cisco Expressway Series Privilege Escalation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-expw-escalation-3bkz77bD | Cisco Expressway Series Privilege Escalation Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-cimc-redfish-cominj-sbkv5zz | Cisco UCS B-Series, Managed C-Series, and X-Series Servers Redfish API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-cimc-redfish-cominj-sbkv5ZZ | Cisco UCS B-Series, Managed C-Series, and X-Series Servers Redfish API Command Injection Vulnerability | 2024-10-02T16:00:00+00:00 | 2024-10-02T16:00:00+00:00 |
| cisco-sa-webui-csrf-ycuyxkko | Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-webui-csrf-ycUYxkKO | Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-utd-snort3-dos-bypas-b4ouewxd | Cisco Unified Threat Defense Snort Intrusion Prevention System Engine for Cisco IOS XE Software Security Policy Bypass and Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-utd-snort3-dos-bypas-b4OUEwxD | Cisco Unified Threat Defense Snort Intrusion Prevention System Engine for Cisco IOS XE Software Security Policy Bypass and Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-sdwan-xss-zQ4KPvYd | Cisco Catalyst SD-WAN Manager Cross-Site Scripting Vulnerability | 2024-09-25T16:00:00+00:00 | 2025-03-28T18:38:53+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-23473 | io_uring/poll: fix multishot recv missing EOF on wakeup race | 2026-04-02T00:00:00.000Z | 2026-04-07T01:41:05.000Z |
| msrc_cve-2026-27447 | OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup | 2026-04-02T00:00:00.000Z | 2026-04-07T01:40:54.000Z |
| msrc_cve-2026-34591 | Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write | 2026-04-02T00:00:00.000Z | 2026-04-07T01:02:30.000Z |
| msrc_cve-2026-35387 | CVE-2026-35387 | 2026-04-02T00:00:00.000Z | 2026-04-07T01:02:00.000Z |
| msrc_cve-2026-31408 | Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold | 2026-04-02T00:00:00.000Z | 2026-04-07T01:01:28.000Z |
| msrc_cve-2026-31407 | netfilter: conntrack: add missing netlink policy validations | 2026-04-02T00:00:00.000Z | 2026-04-07T01:01:22.000Z |
| msrc_cve-2026-31410 | ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION | 2026-04-02T00:00:00.000Z | 2026-04-07T01:01:16.000Z |
| msrc_cve-2026-35549 | CVE-2026-35549 | 2026-04-02T00:00:00.000Z | 2026-04-04T01:02:53.000Z |
| msrc_cve-2026-2100 | P11-kit: p11-kit: null dereference via c_derivekey with specific null parameters | 2026-03-02T00:00:00.000Z | 2026-04-03T01:39:20.000Z |
| msrc_cve-2026-23401 | KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE | 2026-04-02T00:00:00.000Z | 2026-04-03T01:39:03.000Z |
| msrc_cve-2026-34073 | cryptography has incomplete DNS name constraint enforcement on peer names | 2026-03-02T00:00:00.000Z | 2026-04-03T01:01:25.000Z |
| msrc_cve-2026-4732 | Out-of-bounds Read Overflow in tildearrow/furnace | 2026-03-02T00:00:00.000Z | 2026-04-02T14:38:55.000Z |
| msrc_cve-2026-33107 | Azure Databricks Elevation of Privilege Vulnerability | 2026-04-02T07:00:00.000Z | 2026-04-02T07:00:00.000Z |
| msrc_cve-2026-33105 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | 2026-04-02T07:00:00.000Z | 2026-04-02T07:00:00.000Z |
| msrc_cve-2026-32213 | Azure AI Foundry Elevation of Privilege Vulnerability | 2026-04-02T07:00:00.000Z | 2026-04-02T07:00:00.000Z |
| msrc_cve-2026-32211 | Azure MCP Server Information Disclosure Vulnerability | 2026-04-02T07:00:00.000Z | 2026-04-02T07:00:00.000Z |
| msrc_cve-2026-32173 | Azure SRE Agent Information Disclosure Vulnerability | 2026-04-02T07:00:00.000Z | 2026-04-02T07:00:00.000Z |
| msrc_cve-2026-26135 | Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability | 2026-04-02T07:00:00.000Z | 2026-04-02T07:00:00.000Z |
| msrc_cve-2026-34043 | Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects | 2026-03-02T00:00:00.000Z | 2026-04-02T01:40:32.000Z |
| msrc_cve-2026-33542 | Incus does not verify combined fingerprint when downloading images from simplestreams servers | 2026-03-02T00:00:00.000Z | 2026-04-02T01:40:07.000Z |
| msrc_cve-2026-33750 | brace-expansion: Zero-step sequence causes process hang and memory exhaustion | 2026-03-02T00:00:00.000Z | 2026-04-02T01:39:52.000Z |
| msrc_cve-2026-29111 | systemd: Local unprivileged user can trigger an assert | 2026-03-02T00:00:00.000Z | 2026-04-02T01:38:20.000Z |
| msrc_cve-2026-2739 | This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely. | 2026-02-02T00:00:00.000Z | 2026-04-02T01:37:20.000Z |
| msrc_cve-2026-5121 | Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing | 2026-03-02T00:00:00.000Z | 2026-04-02T01:04:42.000Z |
| msrc_cve-2026-4046 | iconv crash due to assertion failure with untrusted input | 2026-03-02T00:00:00.000Z | 2026-04-02T01:01:22.000Z |
| msrc_cve-2026-4105 | Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method | 2026-03-02T00:00:00.000Z | 2026-04-01T14:36:30.000Z |
| msrc_cve-2024-8354 | Qemu-kvm: usb: assertion failure in usb_ep_get() | 2024-09-01T07:00:00.000Z | 2026-04-01T14:36:00.000Z |
| msrc_cve-2026-21518 | GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability | 2026-02-10T08:00:00.000Z | 2026-04-01T07:00:00.000Z |
| msrc_cve-2025-21370 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | 2025-01-14T00:00:00.000Z | 2026-04-01T07:00:00.000Z |
| msrc_cve-2026-33937 | Handlebars.js has JavaScript Injection via AST Type Confusion | 2026-03-02T00:00:00.000Z | 2026-04-01T01:58:16.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0139 | Kwetsbaarheid verholpen in SonicWall SonicOS | 2025-04-25T09:35:24.276801Z | 2025-04-25T09:35:24.276801Z |
| ncsc-2025-0137 | Kwetsbaarheid verholpen in Erlang/OTP SSH-server | 2025-04-18T05:33:40.823978Z | 2025-04-18T05:33:40.823978Z |
| ncsc-2025-0136 | Kwetsbaarheden verholpen in Apple macOS, iOS en iPadOS | 2025-04-17T07:19:14.228835Z | 2025-04-17T07:19:14.228835Z |
| ncsc-2025-0135 | Kwetsbaarheden verholpen in Siemens TeleControl Server | 2025-04-17T07:14:24.584624Z | 2025-04-17T07:14:24.584624Z |
| ncsc-2025-0134 | Kwetsbaarheid verholpen in Cisco Webex App | 2025-04-17T07:11:41.369333Z | 2025-04-17T07:11:41.369333Z |
| ncsc-2025-0133 | Kwetsbaarheden verholpen in Oracle PeopleSoft | 2025-04-16T15:13:33.586832Z | 2025-04-16T15:13:33.586832Z |
| ncsc-2025-0132 | Kwetsbaarheden verholpen in Oracle MySQL | 2025-04-16T15:11:43.357092Z | 2025-04-16T15:11:43.357092Z |
| ncsc-2025-0131 | Kwetsbaarheden verholpen in Oracle JD Edwards | 2025-04-16T15:10:06.149204Z | 2025-04-16T15:10:06.149204Z |
| ncsc-2025-0130 | Kwetsbaarheden verholpen in Oracle Java | 2025-04-16T15:04:40.041941Z | 2025-04-16T15:04:40.041941Z |
| ncsc-2025-0129 | Kwetsbaarheden verholpen in Oracle Analytics | 2025-04-16T15:02:22.596981Z | 2025-04-16T15:02:22.596981Z |
| ncsc-2025-0128 | Kwetsbaarheden verholpen in Oracle Fusion Middleware | 2025-04-16T15:01:24.587426Z | 2025-04-16T15:01:24.587426Z |
| ncsc-2025-0127 | Kwetsbaarheden verholpen in Oracle Financial Services | 2025-04-16T15:00:12.952979Z | 2025-04-16T15:00:12.952979Z |
| ncsc-2025-0126 | Kwetsbaarheden verholpen in Oracle Enterprise Manager | 2025-04-16T14:59:13.973935Z | 2025-04-16T14:59:13.973935Z |
| ncsc-2025-0125 | Kwetsbaarheden verholpen in Oracle E-Business Suite | 2025-04-16T14:58:05.867499Z | 2025-04-16T14:58:05.867499Z |
| ncsc-2025-0124 | Kwetsbaarheden verholpen in Oracle Communications | 2025-04-16T08:39:55.217751Z | 2025-04-16T08:39:55.217751Z |
| ncsc-2025-0123 | Kwetsbaarheden verholpen in Oracle Database Producten | 2025-04-16T08:37:39.412900Z | 2025-04-16T08:37:39.412900Z |
| ncsc-2025-0122 | Kwetsbaarheden verholpen in Rockwell Automation Arena | 2025-04-14T11:29:22.815190Z | 2025-04-14T11:29:22.815190Z |
| ncsc-2025-0121 | Kwetsbaarheid verholpen in Gladinet CentreStack | 2025-04-10T11:53:42.018541Z | 2025-04-10T11:53:42.018541Z |
| ncsc-2025-0120 | Kwetsbaarheden verholpen in Ivanti Endpoint Manager | 2025-04-09T14:41:41.327208Z | 2025-04-09T14:41:41.327208Z |
| ncsc-2025-0118 | Kwetsbaarheden verholpen in Adobe Framemaker | 2025-04-09T08:14:16.645915Z | 2025-04-09T08:14:16.645915Z |
| ncsc-2025-0117 | Kwetsbaarheden verholpen in Adobe Animate | 2025-04-09T08:12:45.041685Z | 2025-04-09T08:12:45.041685Z |
| ncsc-2025-0116 | Kwetsbaarheid verholpen in Adobe Photoshop | 2025-04-09T08:09:40.474635Z | 2025-04-09T08:09:40.474635Z |
| ncsc-2025-0115 | Kwetsbaarheden verholpen in Adobe ColdFusion | 2025-04-09T08:08:15.866613Z | 2025-04-09T08:08:15.866613Z |
| ncsc-2025-0114 | Kwetsbaarheden verholpen in Adobe After Effects | 2025-04-09T08:05:51.653949Z | 2025-04-09T08:05:51.653949Z |
| ncsc-2025-0113 | Kwetsbaarheid verholpen in FortiSwitch | 2025-04-09T06:49:51.895137Z | 2025-04-09T06:49:51.895137Z |
| ncsc-2025-0112 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-04-08T18:57:53.660384Z | 2025-04-08T18:57:53.660384Z |
| ncsc-2025-0111 | Kwetsbaarheid verholpen in Microsoft Dynamics | 2025-04-08T18:56:16.386532Z | 2025-04-08T18:56:16.386532Z |
| ncsc-2025-0110 | Kwetsbaarheden verholpen in Microsoft Developer Tools | 2025-04-08T18:54:30.631706Z | 2025-04-08T18:54:30.631706Z |
| ncsc-2025-0109 | Kwetsbaarheden verholpen in Microsoft Azure | 2025-04-08T18:53:20.624247Z | 2025-04-08T18:53:20.624247Z |
| ncsc-2025-0108 | Kwetsbaarheid verholpen in Microsoft System Center | 2025-04-08T18:52:22.999321Z | 2025-04-08T18:52:22.999321Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:20281-1 | Security update for kubevirt | 2026-02-27T08:51:11Z | 2026-02-27T08:51:11Z |
| opensuse-su-2026:10274-1 | libwireshark19-4.6.4-1.1 on GA media | 2026-02-27T00:00:00Z | 2026-02-27T00:00:00Z |
| opensuse-su-2026:10273-1 | libudisks2-0-2.11.0-2.1 on GA media | 2026-02-27T00:00:00Z | 2026-02-27T00:00:00Z |
| opensuse-su-2026:10272-1 | libIex-3_4-33-3.4.5-1.1 on GA media | 2026-02-27T00:00:00Z | 2026-02-27T00:00:00Z |
| opensuse-su-2026:10271-1 | libjxl-devel-0.11.2-1.1 on GA media | 2026-02-27T00:00:00Z | 2026-02-27T00:00:00Z |
| opensuse-su-2026:10270-1 | gosec-2.24.0-1.1 on GA media | 2026-02-27T00:00:00Z | 2026-02-27T00:00:00Z |
| opensuse-su-2026:10269-1 | cockpit-podman-120-2.1 on GA media | 2026-02-27T00:00:00Z | 2026-02-27T00:00:00Z |
| opensuse-su-2026:10268-1 | cockpit-356-2.1 on GA media | 2026-02-27T00:00:00Z | 2026-02-27T00:00:00Z |
| opensuse-su-2026:10267-1 | ImageMagick-7.1.2.15-1.1 on GA media | 2026-02-27T00:00:00Z | 2026-02-27T00:00:00Z |
| opensuse-su-2026:20279-1 | Security update for containerized-data-importer | 2026-02-26T16:03:48Z | 2026-02-26T16:03:48Z |
| opensuse-su-2026:20273-1 | Security update for 7zip | 2026-02-26T11:53:30Z | 2026-02-26T11:53:30Z |
| opensuse-su-2026:20277-1 | Security update for chromium | 2026-02-26T11:50:46Z | 2026-02-26T11:50:46Z |
| opensuse-su-2026:20271-1 | Security update for python-urllib3_1 | 2026-02-26T09:45:23Z | 2026-02-26T09:45:23Z |
| opensuse-su-2026:20270-1 | Security update for autogen | 2026-02-26T09:10:10Z | 2026-02-26T09:10:10Z |
| opensuse-su-2026:10266-1 | valkey-9.0.3-1.1 on GA media | 2026-02-26T00:00:00Z | 2026-02-26T00:00:00Z |
| opensuse-su-2026:10265-1 | qemu-10.2.1-1.1 on GA media | 2026-02-26T00:00:00Z | 2026-02-26T00:00:00Z |
| opensuse-su-2026:10264-1 | python311-Flask-3.1.3-1.1 on GA media | 2026-02-26T00:00:00Z | 2026-02-26T00:00:00Z |
| opensuse-su-2026:10263-1 | heroic-games-launcher-2.20.0-2.1 on GA media | 2026-02-26T00:00:00Z | 2026-02-26T00:00:00Z |
| opensuse-su-2026:10262-1 | evolution-data-server-3.58.3-2.1 on GA media | 2026-02-26T00:00:00Z | 2026-02-26T00:00:00Z |
| opensuse-su-2026:10261-1 | docker-29.2.1_ce-37.1 on GA media | 2026-02-26T00:00:00Z | 2026-02-26T00:00:00Z |
| opensuse-su-2026:10260-1 | digger-cli-0.6.143-1.1 on GA media | 2026-02-26T00:00:00Z | 2026-02-26T00:00:00Z |
| opensuse-su-2026:10259-1 | chromedriver-145.0.7632.116-1.1 on GA media | 2026-02-26T00:00:00Z | 2026-02-26T00:00:00Z |
| opensuse-su-2026:10258-1 | busybox-1.37.0-10.1 on GA media | 2026-02-26T00:00:00Z | 2026-02-26T00:00:00Z |
| opensuse-su-2026:10257-1 | MozillaFirefox-148.0-1.1 on GA media | 2026-02-26T00:00:00Z | 2026-02-26T00:00:00Z |
| opensuse-su-2026:20275-1 | Security update for gimp | 2026-02-25T10:52:32Z | 2026-02-25T10:52:32Z |
| opensuse-su-2026:10256-1 | regclient-0.11.2-1.1 on GA media | 2026-02-25T00:00:00Z | 2026-02-25T00:00:00Z |
| opensuse-su-2026:10255-1 | docker-stable-24.0.9_ce-17.1 on GA media | 2026-02-25T00:00:00Z | 2026-02-25T00:00:00Z |
| opensuse-su-2026:10254-1 | cockpit-tukit-0.1.7~git0.61e54f1-3.1 on GA media | 2026-02-25T00:00:00Z | 2026-02-25T00:00:00Z |
| opensuse-su-2026:10253-1 | cockpit-subscriptions-14.4-4.1 on GA media | 2026-02-25T00:00:00Z | 2026-02-25T00:00:00Z |
| opensuse-su-2026:10252-1 | cockpit-repos-4.7-4.1 on GA media | 2026-02-25T00:00:00Z | 2026-02-25T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:1497 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update | 2026-01-28T15:32:13+00:00 | 2026-04-17T17:25:58+00:00 |
| rhsa-2026:1431 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.8.2 release | 2026-01-27T20:01:40+00:00 | 2026-04-17T17:25:57+00:00 |
| rhsa-2026:1416 | Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.8.2 release | 2026-01-27T16:53:57+00:00 | 2026-04-17T17:25:56+00:00 |
| rhsa-2026:1344 | Red Hat Security Advisory: grafana security update | 2026-01-27T11:37:52+00:00 | 2026-04-17T17:25:56+00:00 |
| rhsa-2026:1249 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update | 2026-01-26T19:58:10+00:00 | 2026-04-17T17:25:55+00:00 |
| rhsa-2026:1168 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 | 2026-01-26T09:54:57+00:00 | 2026-04-17T17:25:54+00:00 |
| rhsa-2026:1166 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 | 2026-01-26T09:50:40+00:00 | 2026-04-17T17:25:53+00:00 |
| rhsa-2026:1042 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 | 2026-01-22T18:14:00+00:00 | 2026-04-17T17:25:53+00:00 |
| rhsa-2026:1038 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 | 2026-01-22T18:00:37+00:00 | 2026-04-17T17:25:52+00:00 |
| rhsa-2026:0990 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 | 2026-01-22T11:34:41+00:00 | 2026-04-17T17:25:51+00:00 |
| rhsa-2026:0981 | Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1 | 2026-01-22T10:00:40+00:00 | 2026-04-17T17:25:49+00:00 |
| rhsa-2026:0923 | Red Hat Security Advisory: golang security update | 2026-01-21T12:11:33+00:00 | 2026-04-17T17:25:48+00:00 |
| rhsa-2026:0922 | Red Hat Security Advisory: golang security update | 2026-01-21T09:50:39+00:00 | 2026-04-17T17:25:48+00:00 |
| rhsa-2026:0921 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2026-01-21T10:01:30+00:00 | 2026-04-17T17:25:48+00:00 |
| rhsa-2026:8493 | Red Hat Security Advisory: Kiali 2.22.2 for Red Hat OpenShift Service Mesh 3.3 | 2026-04-16T14:41:31+00:00 | 2026-04-17T14:23:08+00:00 |
| rhsa-2026:8491 | Red Hat Security Advisory: Kiali 2.17.6 for Red Hat OpenShift Service Mesh 3.2 | 2026-04-16T14:30:52+00:00 | 2026-04-17T14:23:08+00:00 |
| rhsa-2026:8490 | Red Hat Security Advisory: Kiali 2.11.9 for Red Hat OpenShift Service Mesh 3.1 | 2026-04-16T14:03:40+00:00 | 2026-04-17T14:23:07+00:00 |
| rhsa-2026:8484 | Red Hat Security Advisory: Kiali 2.4.15 for Red Hat OpenShift Service Mesh 3.0 | 2026-04-16T13:49:55+00:00 | 2026-04-17T14:23:06+00:00 |
| rhsa-2026:8748 | Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.3.1 (CUDA) | 2026-04-17T11:11:06+00:00 | 2026-04-17T14:09:21+00:00 |
| rhsa-2026:8747 | Red Hat Security Advisory: Red Hat AI Inference Server 3.3.1 (ROCm) | 2026-04-17T11:10:50+00:00 | 2026-04-17T14:09:19+00:00 |
| rhsa-2026:8746 | Red Hat Security Advisory: Red Hat AI Inference Server 3.3.1 (CUDA) | 2026-04-17T11:10:51+00:00 | 2026-04-17T14:09:19+00:00 |
| rhsa-2026:8437 | Red Hat Security Advisory: RHTAS 1.4 - GA Release of Model Transparency | 2026-04-16T10:43:56+00:00 | 2026-04-17T14:09:17+00:00 |
| rhsa-2026:7245 | Red Hat Security Advisory: OpenShift Container Platform 4.21.10 bug fix and security update | 2026-04-15T19:57:18+00:00 | 2026-04-17T14:09:10+00:00 |
| rhsa-2026:7128 | Red Hat Security Advisory: RHACS 4.9.5 security and bug fix update | 2026-04-08T17:43:53+00:00 | 2026-04-17T14:09:10+00:00 |
| rhsa-2026:7110 | Red Hat Security Advisory: RHACS 4.8.10 security and bug fix update | 2026-04-08T16:37:57+00:00 | 2026-04-17T14:09:10+00:00 |
| rhsa-2026:6926 | Red Hat Security Advisory: Red Hat Quay 3.9.20 | 2026-04-07T21:36:48+00:00 | 2026-04-17T14:09:08+00:00 |
| rhsa-2026:6912 | Red Hat Security Advisory: Red Hat Quay 3.10.20 | 2026-04-07T17:36:52+00:00 | 2026-04-17T14:09:08+00:00 |
| rhsa-2026:6802 | Red Hat Security Advisory: Red Hat Developer Hub 1.9.3 release. | 2026-04-07T13:22:11+00:00 | 2026-04-17T14:09:08+00:00 |
| rhsa-2026:6720 | Red Hat Security Advisory: Red Hat Quay 3.12.16 | 2026-04-06T22:57:46+00:00 | 2026-04-17T14:09:05+00:00 |
| rhsa-2026:6503 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.9 security, enhancement & bug fix update | 2026-04-02T16:38:29+00:00 | 2026-04-17T14:09:04+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-382651 | SSA-382651: File Parsing Vulnerability in Solid Edge | 2024-03-12T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-292063 | SSA-292063: Multiple Vulnerabilities in Nozomi Guardian/CMC before 22.6.3 and 23.1.0 on RUGGEDCOM APE1808 devices | 2023-11-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-292022 | SSA-292022: Vulnerability in Nozomi Guardian/CMC before 23.4.1 on RUGGEDCOM APE1808 devices | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-273900 | SSA-273900: Multiple Vulnerabilities in SIMATIC CN 4100 before V3.0 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-258494 | SSA-258494: Stack Overflow Vulnerability in Simcenter Nastran before 2406.90 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-240541 | SSA-240541: WIBU Systems CodeMeter Heap Buffer Overflow Vulnerability in Industrial Products | 2023-09-12T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-225840 | SSA-225840: Vulnerabilities in the Network Communication Stack in Sinteso EN and Cerberus PRO EN Fire Protection Systems | 2024-03-12T00:00:00Z | 2024-05-14T00:00:00Z |
| ssa-046364 | SSA-046364: X_T File Parsing Vulnerabilities in Parasolid | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| SSA-999588 | SSA-999588: Multiple Vulnerabilities in User Management Component (UMC) Before V2.11.2 | 2023-12-12T00:00:00Z | 2025-01-14T00:00:00Z |
| SSA-976324 | SSA-976324: Multiple IGS File Parsing Vulnerabilities in PS/IGES Parasolid Translator Component before V27.1.215 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| SSA-968170 | SSA-968170: Remote Code Execution Vulnerability in SIMATIC STEP 7 V5.x and Derived Products | 2023-06-13T00:00:00Z | 2024-05-14T00:00:00Z |
| SSA-962515 | SSA-962515: Out of Bounds Read Vulnerability in Industrial Products | 2024-05-14T00:00:00Z | 2024-12-10T00:00:00Z |
| SSA-953710 | SSA-953710: Vulnerabilities in the Network Communication Stack in Desigo Fire Safety UL and Cerberus PRO UL Fire Protection Systems | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| SSA-935500 | SSA-935500: Denial of Service Vulnerability in FTP Server of Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Products | 2022-10-11T00:00:00Z | 2025-05-13T00:00:00Z |
| SSA-925850 | SSA-925850: Improper Access Control in Polarion ALM | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| SSA-923361 | SSA-923361: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0011 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| SSA-916916 | SSA-916916: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.5 | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| SSA-871717 | SSA-871717: Multiple Vulnerabilities in Polarion ALM | 2024-02-13T00:00:00Z | 2024-05-14T00:00:00Z |
| SSA-712929 | SSA-712929: Denial of Service Vulnerability in OpenSSL (CVE-2022-0778) Affecting Industrial Products | 2022-06-14T00:00:00.000Z | 2026-04-14T00:00:00.000Z |
| SSA-691715 | SSA-691715: Vulnerability in OPC Foundation Local Discovery Server Affecting Siemens Products | 2023-04-11T00:00:00Z | 2025-09-09T00:00:00Z |
| SSA-665034 | SSA-665034: Vulnerability in Nozomi Guardian/CMC before 23.3.0 on RUGGEDCOM APE1808 devices | 2024-02-13T00:00:00Z | 2024-05-14T00:00:00Z |
| SSA-661579 | SSA-661579: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| SSA-647455 | SSA-647455: Multiple Vulnerabilities in Nozomi Guardian/CMC before 22.6.2 on RUGGEDCOM APE1808 devices | 2023-10-10T00:00:00Z | 2024-05-14T00:00:00Z |
| SSA-593272 | SSA-593272: SegmentSmack in Interniche IP-Stack based Industrial Devices | 2020-04-14T00:00:00Z | 2025-07-08T00:00:00Z |
| SSA-592380 | SSA-592380: Denial of Service Vulnerability in SIMATIC S7-1500 CPUs and related products | 2023-12-12T00:00:00Z | 2024-05-14T00:00:00Z |
| SSA-589937 | SSA-589937: Multiple Memory Corruption Vulnerabilities in Solid Edge | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| SSA-552874 | SSA-552874: Denial of Service Vulnerability in SIPROTEC 5 Devices | 2022-12-13T00:00:00Z | 2025-11-11T00:00:00Z |
| SSA-489698 | SSA-489698: X_T File Parsing Vulnerability in Parasolid | 2024-05-14T00:00:00Z | 2024-05-14T00:00:00Z |
| SSA-455250 | SSA-455250: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.2-h3 | 2024-04-09T00:00:00Z | 2025-05-13T00:00:00Z |
| SSA-382651 | SSA-382651: File Parsing Vulnerability in Solid Edge | 2024-03-12T00:00:00Z | 2024-05-14T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:20932-1 | Security update for ffmpeg-7 | 2026-03-25T09:58:50Z | 2026-03-25T09:58:50Z |
| suse-su-2026:20878-1 | Security update for python-pyasn1 | 2026-03-25T09:44:19Z | 2026-03-25T09:44:19Z |
| suse-su-2026:20868-1 | Security update for capstone | 2026-03-25T09:40:00Z | 2026-03-25T09:40:00Z |
| suse-su-2026:1002-1 | Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5) | 2026-03-25T09:34:30Z | 2026-03-25T09:34:30Z |
| suse-su-2026:1005-1 | Security update for giflib | 2026-03-25T09:32:48Z | 2026-03-25T09:32:48Z |
| suse-su-2026:1004-1 | Security update for libsoup | 2026-03-25T09:32:40Z | 2026-03-25T09:32:40Z |
| suse-su-2026:20869-1 | Security update for python-PyJWT | 2026-03-25T09:31:26Z | 2026-03-25T09:31:26Z |
| suse-su-2026:1003-1 | Security update for the Linux Kernel | 2026-03-25T09:25:47Z | 2026-03-25T09:25:47Z |
| suse-su-2026:20931-1 | Security update for the Linux Kernel | 2026-03-25T08:48:43Z | 2026-03-25T08:48:43Z |
| suse-su-2026:20838-1 | Security update for the Linux Kernel | 2026-03-25T08:48:43Z | 2026-03-25T08:48:43Z |
| suse-ru-2026:1001-1 | Recommended update for rust1.94 | 2026-03-25T08:36:36Z | 2026-03-25T08:36:36Z |
| suse-su-2026:1000-1 | Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5) | 2026-03-25T07:08:02Z | 2026-03-25T07:08:02Z |
| suse-su-2026:20944-1 | Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) | 2026-03-25T06:46:04Z | 2026-03-25T06:46:04Z |
| suse-su-2026:20837-1 | Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) | 2026-03-25T06:46:04Z | 2026-03-25T06:46:04Z |
| suse-su-2026:20943-1 | Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) | 2026-03-25T05:44:30Z | 2026-03-25T05:44:30Z |
| suse-su-2026:20836-1 | Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) | 2026-03-25T05:44:30Z | 2026-03-25T05:44:30Z |
| suse-su-2026:20930-1 | Security update for python-pyOpenSSL | 2026-03-25T03:41:42Z | 2026-03-25T03:41:42Z |
| suse-su-2026:20929-1 | Security update for python-pyasn1 | 2026-03-25T03:09:46Z | 2026-03-25T03:09:46Z |
| suse-su-2026:20835-1 | Security update for python-pyasn1 | 2026-03-25T03:09:46Z | 2026-03-25T03:09:46Z |
| suse-su-2026:20942-1 | Security update for the initial kernel livepatch | 2026-03-24T20:36:24Z | 2026-03-24T20:36:24Z |
| suse-su-2026:20834-1 | Security update for the initial kernel livepatch | 2026-03-24T20:36:24Z | 2026-03-24T20:36:24Z |
| suse-su-2026:20928-1 | Security update for python-black | 2026-03-24T19:40:56Z | 2026-03-24T19:40:56Z |
| suse-su-2026:20927-1 | Security update for 389-ds | 2026-03-24T17:50:31Z | 2026-03-24T17:50:31Z |
| suse-su-2026:20889-1 | Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) | 2026-03-24T16:49:44Z | 2026-03-24T16:49:44Z |
| suse-su-2026:20888-1 | Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) | 2026-03-24T16:49:44Z | 2026-03-24T16:49:44Z |
| suse-su-2026:20866-1 | Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) | 2026-03-24T16:49:44Z | 2026-03-24T16:49:44Z |
| suse-su-2026:20865-1 | Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) | 2026-03-24T16:49:44Z | 2026-03-24T16:49:44Z |
| suse-su-2026:20887-1 | Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) | 2026-03-24T16:49:34Z | 2026-03-24T16:49:34Z |
| suse-su-2026:20886-1 | Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0) | 2026-03-24T16:49:34Z | 2026-03-24T16:49:34Z |
| suse-su-2026:20864-1 | Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) | 2026-03-24T16:49:34Z | 2026-03-24T16:49:34Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2026:0337 | Moderate: openssl security update | 2026-01-08T00:00:00Z | 2026-01-16T15:42:22Z |
| alsa-2026:0312 | Moderate: cups security update | 2026-01-08T00:00:00Z | 2026-01-16T15:40:37Z |
| alsa-2026:0437 | Important: buildah security update | 2026-01-12T00:00:00Z | 2026-01-16T15:38:30Z |
| alsa-2026:0443 | Important: kernel-rt security update | 2026-01-12T00:00:00Z | 2026-01-16T15:37:02Z |
| alsa-2026:0444 | Important: kernel security update | 2026-01-12T00:00:00Z | 2026-01-16T15:34:47Z |
| alsa-2026:0445 | Moderate: kernel security update | 2026-01-12T00:00:00Z | 2026-01-16T15:31:40Z |
| alsa-2026:0453 | Important: kernel security update | 2026-01-12T00:00:00Z | 2026-01-16T15:27:10Z |
| alsa-2026:0458 | Moderate: libpq security update | 2026-01-12T00:00:00Z | 2026-01-16T15:21:50Z |
| alsa-2026:0464 | Moderate: cups security update | 2026-01-12T00:00:00Z | 2026-01-16T15:20:45Z |
| alsa-2026:0470 | Important: podman security update | 2026-01-12T00:00:00Z | 2026-01-16T15:18:30Z |
| alsa-2026:0491 | Moderate: postgresql security update | 2026-01-13T00:00:00Z | 2026-01-16T15:16:39Z |
| alsa-2026:0519 | Moderate: postgresql:16 security update | 2026-01-13T00:00:00Z | 2026-01-16T15:14:12Z |
| alsa-2026:0523 | Moderate: postgresql:13 security update | 2026-01-13T00:00:00Z | 2026-01-16T15:11:39Z |
| alsa-2026:0524 | Moderate: postgresql:15 security update | 2026-01-13T00:00:00Z | 2026-01-16T15:09:07Z |
| alsa-2026:0525 | Moderate: postgresql16 security update | 2026-01-13T00:00:00Z | 2026-01-16T15:06:52Z |
| alsa-2026:0545 | Important: podman security update | 2026-01-14T00:00:00Z | 2026-01-16T15:04:20Z |
| alsa-2026:0594 | Moderate: libpq security update | 2026-01-14T00:00:00Z | 2026-01-16T15:02:50Z |
| alsa-2026:0596 | Moderate: cups security update | 2026-01-14T00:00:00Z | 2026-01-16T14:59:53Z |
| alsa-2026:0605 | Moderate: vsftpd security update | 2026-01-14T00:00:00Z | 2026-01-16T14:57:43Z |
| alsa-2026:0606 | Moderate: vsftpd security update | 2026-01-14T00:00:00Z | 2026-01-16T14:56:39Z |
| alsa-2026:0608 | Moderate: vsftpd security update | 2026-01-14T00:00:00Z | 2026-01-16T14:54:25Z |
| alsa-2026:0668 | Important: net-snmp security update | 2026-01-15T00:00:00Z | 2026-01-16T14:53:15Z |
| alsa-2026:0694 | Important: firefox security update | 2026-01-15T00:00:00Z | 2026-01-16T14:51:10Z |
| alsa-2026:0695 | Moderate: libpq security update | 2026-01-15T00:00:00Z | 2026-01-16T14:48:26Z |
| alsa-2026:0700 | Moderate: transfig security update | 2026-01-15T00:00:00Z | 2026-01-16T14:46:41Z |
| alsa-2026:0697 | Important: gnupg2 security update | 2026-01-15T00:00:00Z | 2026-01-16T08:52:59Z |
| alsa-2026:0728 | Important: gnupg2 security update | 2026-01-15T00:00:00Z | 2026-01-16T08:41:48Z |
| alsa-2026:0719 | Important: gnupg2 security update | 2026-01-15T00:00:00Z | 2026-01-16T08:23:06Z |
| alsa-2025:21020 | Important: sssd security update | 2025-11-11T00:00:00Z | 2026-01-14T12:41:29Z |
| alsa-2026:0067 | Moderate: tar security update | 2026-01-05T00:00:00Z | 2026-01-13T08:42:22Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2025-484 | Heap-buffer-overflow in load_protocols_file_fd | 2025-06-23T00:14:46.656195Z | 2025-06-23T00:14:46.656704Z |
| osv-2025-207 | Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone | 2025-03-16T00:02:33.765869Z | 2025-06-20T17:14:14.229009Z |
| osv-2024-1191 | Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII | 2024-10-09T00:04:49.628226Z | 2025-06-20T16:39:29.501730Z |
| osv-2025-481 | Stack-buffer-overflow in void glz::from<10000u, int>::op<glz::opts_csv{10000u, | 2025-06-20T00:15:46.185029Z | 2025-06-20T00:15:46.185445Z |
| osv-2025-480 | Stack-buffer-overflow in void glz::from<10000u, std::__1::__bit_reference<std::__1::vector<bool, std::__1 | 2025-06-20T00:14:17.007847Z | 2025-06-20T00:14:17.008310Z |
| osv-2024-714 | Segv on unknown address in lwan_request_get_cookie | 2024-08-04T00:01:49.853424Z | 2025-06-17T14:38:11.268036Z |
| osv-2025-469 | Use-of-uninitialized-value in ndpi_strdup | 2025-06-16T00:17:21.776120Z | 2025-06-16T00:17:21.776520Z |
| osv-2025-465 | Heap-buffer-overflow in xmlParsePubidLiteral | 2025-06-15T00:09:20.387117Z | 2025-06-15T00:09:20.387490Z |
| osv-2025-461 | Heap-buffer-overflow in xmlParsePubidLiteral | 2025-06-14T00:10:49.391511Z | 2025-06-14T00:10:49.391787Z |
| osv-2025-457 | Heap-buffer-overflow in xmlParsePubidLiteral | 2025-06-14T00:04:11.416575Z | 2025-06-14T00:04:11.417116Z |
| osv-2025-456 | Use-of-uninitialized-value in ppd_hash_option | 2025-06-12T00:10:52.355312Z | 2025-06-12T00:10:52.355684Z |
| osv-2025-454 | Use-of-uninitialized-value in _cups_strcasecmp | 2025-06-11T00:12:12.952969Z | 2025-06-11T00:12:12.953357Z |
| osv-2025-449 | Heap-buffer-overflow in check_content_type_and_change_protocol | 2025-06-10T00:16:50.624468Z | 2025-06-10T00:16:50.624907Z |
| osv-2024-1446 | Segv on unknown address in glslang::TIntermediate::addSymbol | 2025-06-06T00:12:59.981959Z | 2025-06-06T00:12:59.982286Z |
| osv-2025-442 | Security exception in org.jsoup.parser.HtmlTreeBuilder.process | 2025-06-06T00:12:40.427852Z | 2025-06-06T00:12:40.428189Z |
| osv-2022-494 | Heap-buffer-overflow in ucl_hash_search | 2022-06-22T00:01:16.539035Z | 2025-06-05T14:39:06.351080Z |
| osv-2025-437 | Heap-buffer-overflow in mmcall | 2025-06-05T00:18:59.402795Z | 2025-06-05T00:18:59.403189Z |
| osv-2025-436 | Security exception in graphql.parser.GraphqlAntlrToLanguage.createNonNullType | 2025-06-05T00:11:24.382209Z | 2025-06-05T00:11:24.382444Z |
| osv-2025-433 | Null-dereference READ in _libssh2_packet_add | 2025-06-05T00:02:57.199903Z | 2025-06-05T00:02:57.200566Z |
| osv-2024-1274 | Segv on unknown address in yara_yyparse | 2024-11-05T00:04:03.220856Z | 2025-06-03T14:42:15.782999Z |
| osv-2024-1205 | Memcpy-param-overlap in repeat | 2024-10-11T00:12:59.211479Z | 2025-06-02T14:22:48.890155Z |
| osv-2025-412 | UNKNOWN WRITE in luaL_newstate | 2025-05-28T00:06:09.320289Z | 2025-05-28T00:06:09.320970Z |
| osv-2025-408 | Heap-buffer-overflow in sav_parse_long_variable_names_record | 2025-05-27T00:12:59.401698Z | 2025-05-27T00:12:59.402180Z |
| osv-2025-406 | Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst | 2025-05-27T00:01:44.628210Z | 2025-05-27T00:01:44.628747Z |
| osv-2024-655 | Stack-buffer-overflow in UnrollChunkyBytes | 2024-07-17T00:06:15.877340Z | 2025-05-23T07:44:18.608203Z |
| osv-2025-404 | Use-of-uninitialized-value in JS_FreeRuntime | 2025-05-23T00:14:00.218149Z | 2025-05-23T00:14:00.218494Z |
| osv-2025-401 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2025-05-23T00:07:37.622395Z | 2025-05-23T00:07:37.622817Z |
| osv-2025-396 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2025-05-22T00:16:08.210127Z | 2025-05-22T00:16:08.210510Z |
| osv-2025-384 | Segv on unknown address in rtpp_refcnt_decref | 2025-05-20T00:04:47.616424Z | 2025-05-20T00:04:47.617104Z |
| osv-2024-371 | UNKNOWN READ in jv_array_set | 2024-04-30T00:08:27.982063Z | 2025-05-18T14:24:27.459047Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2024-0427 | get-size-derive is unmaintained | 2024-09-15T12:00:00Z | 2024-12-22T09:01:06Z |
| rustsec-2024-0425 | get-size is unmaintained | 2024-09-15T12:00:00Z | 2024-12-22T09:01:06Z |
| rustsec-2024-0423 | gtk-layer-shell-sys GTK3 bindings - no longer maintained | 2024-12-09T12:00:00Z | 2024-12-09T13:12:34Z |
| rustsec-2024-0422 | gtk-layer-shell GTK3 bindings - no longer maintained | 2024-12-09T12:00:00Z | 2024-12-09T13:12:34Z |
| rustsec-2024-0420 | gtk-rs GTK3 bindings - no longer maintained | 2024-03-04T12:00:00Z | 2024-12-09T12:29:00Z |
| rustsec-2024-0419 | gtk-rs GTK3 bindings - no longer maintained | 2024-03-04T12:00:00Z | 2024-12-09T12:29:00Z |
| rustsec-2024-0418 | gtk-rs GTK3 bindings - no longer maintained | 2024-03-04T12:00:00Z | 2024-12-09T12:29:00Z |
| rustsec-2024-0417 | gtk-rs GTK3 bindings - no longer maintained | 2024-03-04T12:00:00Z | 2024-12-09T12:29:00Z |
| rustsec-2024-0416 | gtk-rs GTK3 bindings - no longer maintained | 2024-03-04T12:00:00Z | 2024-12-09T12:29:00Z |
| rustsec-2024-0415 | gtk-rs GTK3 bindings - no longer maintained | 2024-03-04T12:00:00Z | 2024-12-09T12:29:00Z |
| rustsec-2024-0414 | gtk-rs GTK3 bindings - no longer maintained | 2024-03-04T12:00:00Z | 2024-12-09T12:29:00Z |
| rustsec-2024-0413 | gtk-rs GTK3 bindings - no longer maintained | 2024-03-04T12:00:00Z | 2024-12-09T12:29:00Z |
| rustsec-2024-0412 | gtk-rs GTK3 bindings - no longer maintained | 2024-03-04T12:00:00Z | 2024-12-09T12:29:00Z |
| rustsec-2024-0411 | gtk-rs GTK3 bindings - no longer maintained | 2024-03-04T12:00:00Z | 2024-12-09T12:29:00Z |
| rustsec-2024-0410 | gtk-rs GTK3 bindings - no longer maintained | 2024-03-04T12:00:00Z | 2024-12-09T12:29:00Z |
| rustsec-2017-0008 | `serial` crate is unmaintained | 2017-07-02T12:00:00Z | 2024-12-04T13:14:28Z |
| rustsec-2020-0169 | multi_mut is Unmaintained | 2020-02-07T12:00:00Z | 2024-12-04T12:55:45Z |
| rustsec-2024-0406 | BTreeMap memory leak when deallocating nodes with overflows | 2024-05-17T12:00:00Z | 2024-12-04T12:44:24Z |
| rustsec-2024-0401 | Denial of service because of stack overflow with malicious decompression input | 2024-11-14T12:00:00Z | 2024-12-04T12:13:35Z |
| rustsec-2024-0395 | The maintainer of chrono-english is unresponsive | 2024-06-24T12:00:00Z | 2024-11-10T20:38:56Z |
| rustsec-2023-0088 | `loopdev` crate is unmaintained; use 'loopdev-3` instead. | 2023-11-13T12:00:00Z | 2024-11-10T16:18:40Z |
| rustsec-2024-0397 | `conrod` is unmaintained | 2024-01-26T12:00:00Z | 2024-11-10T14:25:35Z |
| rustsec-2024-0396 | `conrod_core` is unmaintained | 2024-01-26T12:00:00Z | 2024-11-10T14:25:35Z |
| rustsec-2024-0394 | mmap unmaintained | 2024-06-10T12:00:00Z | 2024-11-10T14:06:58Z |
| rustsec-2024-0390 | minitrace is Unmaintained | 2024-08-14T12:00:00Z | 2024-11-10T13:54:21Z |
| rustsec-2024-0389 | `openslide` is unmaintained | 2024-07-03T12:00:00Z | 2024-11-10T13:42:14Z |
| rustsec-2024-0388 | `derivative` is unmaintained; consider using an alternative | 2024-06-26T12:00:00Z | 2024-11-10T13:34:40Z |
| rustsec-2024-0387 | `opentelemetry_api` has been merged into the `opentelemetry` crate | 2024-07-03T12:00:00Z | 2024-11-10T13:29:25Z |
| rustsec-2024-0386 | strason is unmaintained | 2024-09-04T12:00:00Z | 2024-11-10T13:16:48Z |
| rustsec-2024-0385 | `cw0` is unmaintained | 2024-08-26T12:00:00Z | 2024-11-10T13:12:32Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-magento-2021-28567 | Magento Commerce improper authorization allows an authenticated user to perform certain functions without permission | 2024-03-06T10:58:36.807Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-28566 | Magento Commerce information disclosure during upload action leveraging a specially crafted file | 2024-03-06T10:58:48.484Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-28563 | Magento Commerce improper Authorization via the 'Create Customer' endpoint | 2024-03-06T10:58:59.368Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-28556 | Magento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript execution | 2024-03-06T10:59:08.920Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-21032 | Magento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access | 2024-03-06T10:59:18.181Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-21031 | Magento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access | 2024-03-06T10:59:28.314Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-21030 | Magento Commerce Stored Cross-site Scripting Could Lead To Arbitrary Javascript Execution | 2024-03-06T10:59:40.719Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-21029 | Magento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution | 2024-03-06T10:59:50.197Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-21027 | Magento Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Data Modification | 2024-03-06T10:59:59.381Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-21026 | Magento Commerce Incorrect permissions Could Lead To Unauthorized Access | 2024-03-06T11:00:10.163Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-21025 | Magento Commerce XML Injection Could Lead To Arbitrary Code Execution | 2024-03-06T11:00:20.403Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-21024 | Magento Commerce Blind SQL Injection Could Lead To Unauthorized Access | 2024-03-06T11:00:31.565Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-21023 | Magento Commerce Stored Cross Site Scripting Vulnerability Could Lead To Arbitrary Code Execution | 2024-03-06T11:00:48.108Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-21022 | Magento Commerce Incorrect permissions Could Lead To Unauthorized Access | 2024-03-06T11:00:59.160Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-21020 | Magento Commerce Improper Access Control Vulnerability | 2024-03-06T11:01:10.083Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-21019 | Magento Commerce XML Injection Could Lead To Remote Code Execution | 2024-03-06T11:01:20.594Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-21018 | Magnto Commerce Unauthorized Data Modification Could Lead To Arbitrary Code Execution | 2024-03-06T11:01:30.875Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-21016 | Magento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution | 2024-03-06T11:01:43.913Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-21015 | Magento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution | 2024-03-06T11:01:57.081Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2021-21014 | Magento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code Execution | 2024-03-06T11:02:08.390Z | 2026-03-20T09:47:33.381Z |
| bit-magento-2020-9692 | 2024-03-06T11:02:18.569Z | 2026-03-20T09:47:33.381Z | |
| bit-magento-2020-9691 | 2024-03-06T11:02:27.491Z | 2026-03-20T09:47:33.381Z | |
| bit-magento-2020-9690 | 2024-03-06T11:02:37.502Z | 2026-03-20T09:47:33.381Z | |
| bit-magento-2020-9689 | 2024-03-06T11:02:48.883Z | 2026-03-20T09:47:33.381Z | |
| bit-libpython-2026-3479 | pkgutil.get_data() does not enforce documented restrictions | 2026-03-20T09:14:06.576Z | 2026-03-20T09:47:33.381Z |
| bit-libpython-2025-13462 | tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling | 2026-03-14T08:42:41.133Z | 2026-03-20T09:47:33.381Z |
| bit-keydb-2023-45145 | Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window. | 2024-08-22T19:22:46.458Z | 2026-03-20T09:47:33.381Z |
| bit-jenkins-2026-33001 | 2026-03-20T09:15:10.344Z | 2026-03-20T09:47:33.381Z | |
| bit-harbor-2025-32019 | Harbor's repository description page allows for XSS | 2025-07-29T05:40:29.320Z | 2026-03-20T09:47:33.381Z |
| bit-grafana-2022-39201 | Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins | 2024-03-06T10:55:22.080Z | 2026-03-20T09:47:33.381Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cleanstart-2026-ig94553 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-02-25T00:49:42.735675Z | 2026-02-24T09:23:19Z |
| cleanstart-2026-ia56615 | go-git is a highly extensible git implementation library written in pure Go | 2026-02-25T00:44:12.047442Z | 2026-02-24T09:23:19Z |
| cleanstart-2026-ha44046 | Within HostnameError | 2026-02-25T00:49:42.693487Z | 2026-02-24T09:23:19Z |
| cleanstart-2026-fm65506 | html | 2026-02-25T00:49:12.988018Z | 2026-02-24T09:23:19Z |
| cleanstart-2026-dv04077 | go-git is a highly extensible git implementation library written in pure Go | 2026-02-25T00:42:42.369607Z | 2026-02-24T09:23:19Z |
| cleanstart-2026-ds30740 | go-git is a highly extensible git implementation library written in pure Go | 2026-02-25T00:46:12.495329Z | 2026-02-24T09:23:19Z |
| cleanstart-2026-dn18334 | During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ... | 2026-02-25T00:39:41.622120Z | 2026-02-24T09:23:19Z |
| cleanstart-2026-dc27717 | OpenVPN version 2 | 2026-02-25T00:39:42.192253Z | 2026-02-24T09:23:19Z |
| cleanstart-2026-cy44461 | Within HostnameError | 2026-02-25T00:53:13.101959Z | 2026-02-24T09:23:19Z |
| cleanstart-2026-yq79300 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-02-24T00:45:20.890998Z | 2026-02-23T12:58:32Z |
| cleanstart-2026-uo76615 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-02-24T00:45:21.009333Z | 2026-02-23T12:58:32Z |
| cleanstart-2026-sp64433 | Security fixes for GHSA-6rw7-vpxm-498p, GHSA-73rr-hh4g-fpgx, GHSA-8qq5-rm4j-mr97 applied in versions: 4.2.1.1-r1 | 2026-02-24T00:44:51.180009Z | 2026-02-23T12:58:32Z |
| cleanstart-2026-pn58989 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-02-24T00:45:20.977848Z | 2026-02-23T12:58:32Z |
| cleanstart-2026-lm41397 | node-tar is a full-featured Tar for Node | 2026-02-24T00:40:50.950958Z | 2026-02-23T12:58:32Z |
| cleanstart-2026-io04548 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate | 2026-02-24T00:44:50.498217Z | 2026-02-23T12:58:32Z |
| cleanstart-2026-hw19594 | Within HostnameError | 2026-02-24T00:45:50.891263Z | 2026-02-23T12:58:32Z |
| cleanstart-2026-cl79805 | Security fixes for GHSA-F6X5-JH6R-WRFV, GHSA-J5W8-Q4QC-RX2X applied in versions: 0.8.4-r0 | 2026-02-24T00:38:50.220255Z | 2026-02-23T12:58:32Z |
| cleanstart-2026-yn08405 | Security fixes for GHSA-f6x5-jh6r-wrfv, GHSA-j5w8-q4qc-rx2x applied in versions: 7.1.1-r7 | 2026-02-19T00:39:05.944714Z | 2026-02-18T09:40:19Z |
| cleanstart-2026-oj16660 | Security fixes for GHSA-2GH3-RMM4-6RQ5, GHSA-434X-W66G-QW3R, GHSA-R6V5-FH4H-64XC, GHSA-XWFJ-JGWM-7WP5 applied in versions: 1.28.2-r0, 1.28.4-r0 | 2026-02-19T00:39:07.225007Z | 2026-02-18T09:40:19Z |
| cleanstart-2026-nn87556 | Security fixes for GHSA-2GH3-RMM4-6RQ5, GHSA-434X-W66G-QW3R, GHSA-R6V5-FH4H-64XC, GHSA-XWFJ-JGWM-7WP5 applied in versions: 1.28.2-r0, 1.29.0-r0 | 2026-02-19T00:39:07.788394Z | 2026-02-18T09:40:19Z |
| cleanstart-2026-ln12820 | vulnerability has been identified in Node | 2026-02-19T00:58:49.154512Z | 2026-02-18T09:40:19Z |
| cleanstart-2026-kn34553 | vulnerability has been identified in Node | 2026-02-19T00:58:48.926519Z | 2026-02-18T09:40:19Z |
| cleanstart-2026-kn30288 | Security fixes for GHSA-2GH3-RMM4-6RQ5, GHSA-434X-W66G-QW3R, GHSA-R6V5-FH4H-64XC, GHSA-RHFX-M35P-FF5J, GHSA-XWFJ-JGWM-7WP5 applied in versions: 1.27.5-r1, 1.27.6-r0 | 2026-02-19T00:39:07.163109Z | 2026-02-18T09:40:19Z |
| cleanstart-2026-zt77083 | When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers | 2026-02-18T00:40:43.959662Z | 2026-02-17T14:16:07Z |
| cleanstart-2026-rs39538 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-02-18T00:37:41.553514Z | 2026-02-17T14:16:07Z |
| cleanstart-2026-lr19699 | Within HostnameError | 2026-02-18T00:37:41.636616Z | 2026-02-17T14:16:07Z |
| cleanstart-2026-dt95939 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-02-18T00:37:41.674179Z | 2026-02-17T14:16:07Z |
| cleanstart-2026-at88149 | excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate | 2026-02-18T00:37:41.548996Z | 2026-02-17T14:16:07Z |
| cleanstart-2026-xv54160 | Within HostnameError | 2026-02-17T00:41:15.330012Z | 2026-02-16T09:23:22Z |
| cleanstart-2026-vg57433 | Within HostnameError | 2026-02-17T00:39:45.599344Z | 2026-02-16T09:23:22Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTA-2005-ALE-013 | Vulnérabilité dans Citrix Metaframe Presentation | 2005-10-07T00:00:00.000000 | 2013-06-06T00:00:00.000000 |
| certa-2013-ale-005 | Vulnérabilité dans le noyau Linux | 2013-05-14T00:00:00.000000 | 2013-05-24T00:00:00.000000 |
| CERTA-2013-ALE-005 | Vulnérabilité dans le noyau Linux | 2013-05-14T00:00:00.000000 | 2013-05-24T00:00:00.000000 |
| certa-2013-ale-004 | Vulnérabilité dans Adobe ColdFusion | 2013-05-10T00:00:00.000000 | 2013-05-15T00:00:00.000000 |
| certa-2013-ale-003 | Vulnérabilité dans Microsoft Internet Explorer 8 | 2013-05-06T00:00:00.000000 | 2013-05-15T00:00:00.000000 |
| CERTA-2013-ALE-004 | Vulnérabilité dans Adobe ColdFusion | 2013-05-10T00:00:00.000000 | 2013-05-15T00:00:00.000000 |
| CERTA-2013-ALE-003 | Vulnérabilité dans Microsoft Internet Explorer 8 | 2013-05-06T00:00:00.000000 | 2013-05-15T00:00:00.000000 |
| certa-2013-ale-002 | Vulnérabilités dans Adobe Reader et Acrobat | 2013-02-14T00:00:00.000000 | 2013-02-21T00:00:00.000000 |
| certa-2008-ale-013 | Vulnérabilité du service sadmind de Sun Solaris | 2008-10-17T00:00:00.000000 | 2013-02-21T00:00:00.000000 |
| CERTA-2013-ALE-002 | Vulnérabilités dans Adobe Reader et Acrobat | 2013-02-14T00:00:00.000000 | 2013-02-21T00:00:00.000000 |
| CERTA-2008-ALE-013 | Vulnérabilité du service sadmind de Sun Solaris | 2008-10-17T00:00:00.000000 | 2013-02-21T00:00:00.000000 |
| certa-2009-ale-017 | Vulnérabilités dans l'implémentation TCP/IP de divers produits | 2009-09-09T00:00:00.000000 | 2013-02-19T00:00:00.000000 |
| certa-2007-ale-011 | Vulnérabilité du composant d'indexation des serveurs Microsoft IIS | 2007-06-06T00:00:00.000000 | 2013-02-19T00:00:00.000000 |
| CERTA-2009-ALE-017 | Vulnérabilités dans l'implémentation TCP/IP de divers produits | 2009-09-09T00:00:00.000000 | 2013-02-19T00:00:00.000000 |
| CERTA-2007-ALE-011 | Vulnérabilité du composant d'indexation des serveurs Microsoft IIS | 2007-06-06T00:00:00.000000 | 2013-02-19T00:00:00.000000 |
| certa-2012-ale-001 | Vulnérabilité dans Cisco IronPort | 2012-02-01T00:00:00.000000 | 2013-02-05T00:00:00.000000 |
| certa-2009-ale-014 | Multiples vulnérabilités du client de messagerie Mozilla Thunderbird | 2009-08-07T00:00:00.000000 | 2013-02-05T00:00:00.000000 |
| CERTA-2012-ALE-001 | Vulnérabilité dans Cisco IronPort | 2012-02-01T00:00:00.000000 | 2013-02-05T00:00:00.000000 |
| CERTA-2009-ALE-014 | Multiples vulnérabilités du client de messagerie Mozilla Thunderbird | 2009-08-07T00:00:00.000000 | 2013-02-05T00:00:00.000000 |
| certa-2013-ale-001 | Vulnérabilités dans Oracle Java | 2013-01-10T00:00:00.000000 | 2013-01-15T00:00:00.000000 |
| certa-2012-ale-010 | Vulnérabilité dans Internet Explorer | 2012-12-31T00:00:00.000000 | 2013-01-15T00:00:00.000000 |
| CERTA-2013-ALE-001 | Vulnérabilités dans Oracle Java | 2013-01-10T00:00:00.000000 | 2013-01-15T00:00:00.000000 |
| CERTA-2012-ALE-010 | Vulnérabilité dans Internet Explorer | 2012-12-31T00:00:00.000000 | 2013-01-15T00:00:00.000000 |
| certa-2012-ale-009 | Vulnérabilité dans les pilotes NVidia | 2012-12-26T00:00:00.000000 | 2013-01-07T00:00:00.000000 |
| certa-2012-ale-007 | Vulnérabilité dans MySQL | 2012-12-06T00:00:00.000000 | 2013-01-07T00:00:00.000000 |
| CERTA-2012-ALE-009 | Vulnérabilité dans les pilotes NVidia | 2012-12-26T00:00:00.000000 | 2013-01-07T00:00:00.000000 |
| CERTA-2012-ALE-007 | Vulnérabilité dans MySQL | 2012-12-06T00:00:00.000000 | 2013-01-07T00:00:00.000000 |
| certa-2012-ale-008 | Vulnérabilité dans certains terminaux Samsung | 2012-12-18T00:00:00.000000 | 2012-12-18T00:00:00.000000 |
| CERTA-2012-ALE-008 | Vulnérabilité dans certains terminaux Samsung | 2012-12-18T00:00:00.000000 | 2012-12-18T00:00:00.000000 |
| certa-2012-ale-006 | Vulnérabilité dans Internet Explorer | 2012-09-18T00:00:00.000000 | 2012-09-21T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2026-AVI-0123 | Multiples vulnérabilités dans Asterisk | 2026-02-06T00:00:00.000000 | 2026-02-06T00:00:00.000000 |
| CERTFR-2026-AVI-0122 | Multiples vulnérabilités dans Tenable Nessus | 2026-02-06T00:00:00.000000 | 2026-02-06T00:00:00.000000 |
| CERTFR-2026-AVI-0121 | Vulnérabilité dans les produits Juniper Networks | 2026-02-06T00:00:00.000000 | 2026-02-06T00:00:00.000000 |
| certfr-2026-avi-0120 | Multiples vulnérabilités dans les produits F5 | 2026-02-05T00:00:00.000000 | 2026-02-05T00:00:00.000000 |
| certfr-2026-avi-0119 | Multiples vulnérabilités dans les produits Cisco | 2026-02-05T00:00:00.000000 | 2026-02-05T00:00:00.000000 |
| certfr-2026-avi-0118 | Multiples vulnérabilités dans les produits Splunk | 2026-02-05T00:00:00.000000 | 2026-02-05T00:00:00.000000 |
| CERTFR-2026-AVI-0120 | Multiples vulnérabilités dans les produits F5 | 2026-02-05T00:00:00.000000 | 2026-02-05T00:00:00.000000 |
| CERTFR-2026-AVI-0119 | Multiples vulnérabilités dans les produits Cisco | 2026-02-05T00:00:00.000000 | 2026-02-05T00:00:00.000000 |
| CERTFR-2026-AVI-0118 | Multiples vulnérabilités dans les produits Splunk | 2026-02-05T00:00:00.000000 | 2026-02-05T00:00:00.000000 |
| certfr-2026-avi-0117 | Multiples vulnérabilités dans GLPI | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| certfr-2026-avi-0116 | Vulnérabilité dans les produits Moxa | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| certfr-2026-avi-0115 | Multiples vulnérabilités dans Tenable Identity Exposure | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| certfr-2026-avi-0114 | Multiples vulnérabilités dans Google Chrome | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| certfr-2026-avi-0113 | Vulnérabilité dans Google Pixel | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| CERTFR-2026-AVI-0117 | Multiples vulnérabilités dans GLPI | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| CERTFR-2026-AVI-0116 | Vulnérabilité dans les produits Moxa | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| CERTFR-2026-AVI-0115 | Multiples vulnérabilités dans Tenable Identity Exposure | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| CERTFR-2026-AVI-0114 | Multiples vulnérabilités dans Google Chrome | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| CERTFR-2026-AVI-0113 | Vulnérabilité dans Google Pixel | 2026-02-04T00:00:00.000000 | 2026-02-04T00:00:00.000000 |
| certfr-2026-avi-0112 | Multiples vulnérabilités dans les produits VMware | 2026-02-02T00:00:00.000000 | 2026-02-02T00:00:00.000000 |
| certfr-2026-avi-0111 | Vulnérabilité dans ESET Inspect Connector | 2026-02-02T00:00:00.000000 | 2026-02-02T00:00:00.000000 |
| CERTFR-2026-AVI-0112 | Multiples vulnérabilités dans les produits VMware | 2026-02-02T00:00:00.000000 | 2026-02-02T00:00:00.000000 |
| CERTFR-2026-AVI-0111 | Vulnérabilité dans ESET Inspect Connector | 2026-02-02T00:00:00.000000 | 2026-02-02T00:00:00.000000 |
| certfr-2026-avi-0110 | Multiples vulnérabilités Ivanti Endpoint Manager Mobile (EPMM) | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0109 | Multiples vulnérabilités dans les produits IBM | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0108 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0107 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0106 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0105 | Vulnérabilité dans Microsoft Edge | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| certfr-2026-avi-0104 | Vulnérabilité dans Qnap QTS | 2026-01-30T00:00:00.000000 | 2026-01-30T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-000059 | Multiple vulnerabilities in multiple Webmin products | 2024-07-09T14:27+09:00 | 2024-07-09T14:27+09:00 |
| jvndb-2024-000069 | Cleartext transmission issue in TONE store App to TONE store | 2024-07-08T13:43+09:00 | 2024-07-08T13:43+09:00 |
| jvndb-2024-000068 | JP1/Extensible SNMP Agent fails to restrict access permissions | 2024-07-03T14:57+09:00 | 2024-07-03T14:57+09:00 |
| jvndb-2017-000194 | WSR-300HP vulnerable to arbitrary code execution | 2017-08-08T18:07+09:00 | 2024-07-02T17:55+09:00 |
| jvndb-2024-003831 | Multiple TP-Link products vulnerable to OS command injection | 2024-06-28T17:38+09:00 | 2024-06-28T17:38+09:00 |
| jvndb-2024-000067 | "Piccoma" App uses a hard-coded API key for an external service | 2024-06-28T13:18+09:00 | 2024-06-28T13:18+09:00 |
| jvndb-2016-002299 | SaAT Netizen fails to properly verify downloaded installation and update files | 2016-12-05T13:52+09:00 | 2024-06-27T13:59+09:00 |
| jvndb-2022-000080 | Android App "IIJ SmartKey" vulnerable to information disclosure | 2022-10-14T13:57+09:00 | 2024-06-27T13:40+09:00 |
| jvndb-2023-001774 | Multiple vulnerabilities in SolarView Compact | 2023-05-09T16:09+09:00 | 2024-06-27T13:30+09:00 |
| jvndb-2024-000017 | Cybozu KUNAI for Android vulnerable to denial-of-service (DoS) | 2024-02-06T13:25+09:00 | 2024-06-27T13:28+09:00 |
| jvndb-2024-000066 | WordPress plugins "WP Tweet Walls" and "Sola Testimonials" vulnerable to cross-site request forgery | 2024-06-26T14:25+09:00 | 2024-06-26T14:25+09:00 |
| jvndb-2022-000026 | WordPress Plugin "MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership" vulnerable to cross-site request forgery | 2022-04-15T13:15+09:00 | 2024-06-25T18:04+09:00 |
| jvndb-2024-003699 | LINE client for iOS vulnerable to universal cross-site scripting | 2024-06-24T11:05+09:00 | 2024-06-24T11:05+09:00 |
| jvndb-2022-001372 | Trend Micro Antivirus for MAC vulnerable to privilege escalation | 2022-02-18T14:55+09:00 | 2024-06-21T18:04+09:00 |
| jvndb-2022-001381 | Multiple vulnerabilities in Trend Micro ServerProtect | 2022-03-03T14:42+09:00 | 2024-06-21T17:58+09:00 |
| jvndb-2022-000015 | EC-CUBE improperly handles HTTP Host header values | 2022-02-22T14:22+09:00 | 2024-06-21T17:39+09:00 |
| jvndb-2022-000013 | EC-CUBE plugin "Mail Magazine Management Plugin" vulnerable to cross-site request forgery | 2022-02-22T14:09+09:00 | 2024-06-21T14:05+09:00 |
| jvndb-2022-000023 | WordPress Plugin "Advanced Custom Fields" vulnerable to missing authorization | 2022-03-30T15:23+09:00 | 2024-06-21T12:25+09:00 |
| jvndb-2022-000020 | Multiple vulnerabilities in pfSense | 2022-03-15T14:58+09:00 | 2024-06-21T11:59+09:00 |
| jvndb-2022-000022 | AttacheCase may insecurely load Dynamic Link Libraries | 2022-03-30T14:00+09:00 | 2024-06-21T11:42+09:00 |
| jvndb-2022-001387 | Installer of WPS Office for Windows misconfigures the ACL for the installation directory | 2022-03-09T12:30+09:00 | 2024-06-21T11:37+09:00 |
| jvndb-2022-001384 | Multiple vulnerabilities in OMRON CX-Programmer | 2022-03-08T15:56+09:00 | 2024-06-21T11:32+09:00 |
| jvndb-2023-000008 | Pgpool-II vulnerable to information disclosure | 2023-01-23T16:35+09:00 | 2024-06-20T17:54+09:00 |
| jvndb-2022-000024 | Zero-channel BBS Plus vulnerable to cross-site scripting | 2022-03-30T15:36+09:00 | 2024-06-20T17:34+09:00 |
| jvndb-2022-000019 | pfSense-pkg-WireGuard vulnerable to directory traversal | 2022-03-03T15:08+09:00 | 2024-06-20T16:51+09:00 |
| jvndb-2022-000018 | MarkText vulnerable to cross-site scripting | 2022-03-03T14:40+09:00 | 2024-06-20T16:46+09:00 |
| jvndb-2022-000046 | Gitlab vulnerable to server-side request forgery | 2022-06-17T12:26+09:00 | 2024-06-20T15:39+09:00 |
| jvndb-2024-003645 | Multiple vulnerabilities in multiple Trend Micro products | 2024-06-20T14:59+09:00 | 2024-06-20T14:59+09:00 |
| jvndb-2022-000027 | Hammock AssetView missing authentication for critical functions | 2022-04-22T13:53+09:00 | 2024-06-20T12:15+09:00 |
| jvndb-2022-000037 | Spring Security OAuth (spring-security-oauth2) vulnerable to denial-of-service (DoS) | 2022-05-20T17:04+09:00 | 2024-06-20T12:09+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-13964 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13964) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13963 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13963) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13962 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13962) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13961 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13961) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13960 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13960) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13959 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13959) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13958 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13958) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13957 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13957) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13956 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13956) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13955 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13955) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13954 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13954) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13953 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13953) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13952 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13952) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13951 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13951) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13950 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13950) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13949 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13949) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13948 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13948) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13947 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13947) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13946 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13946) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13945 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13945) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13944 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13944) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13943 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-13943) | 2026-03-16 | 2026-03-17 |
| cnvd-2026-13831 | Siemens SINEC Security Monitor信息泄露漏洞 | 2026-03-10 | 2026-03-17 |
| cnvd-2026-13802 | Siemens COMOS存在多个漏洞 | 2026-03-10 | 2026-03-17 |
| cnvd-2026-13781 | Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP附加GNU/Linux子系统存在多个漏洞 | 2026-03-10 | 2026-03-17 |
| cnvd-2026-13780 | Siemens SINAMICS G220、SINAMICS S210和SINAMICS S200权限提升漏洞 | 2025-09-11 | 2026-03-17 |
| cnvd-2026-13776 | Siemens SICAM SIAPP SDK存在多个漏洞 | 2026-03-10 | 2026-03-17 |
| cnvd-2026-13775 | Siemens RUGGEDCOM APE1808设备Fortigate NGFW存在多个漏洞 | 2026-03-10 | 2026-03-17 |
| cnvd-2026-13836 | NocoDB访问控制错误漏洞 | 2026-03-10 | 2026-03-16 |
| cnvd-2026-13835 | SonicWALL SonicOS缓冲区溢出漏洞 | 2026-03-11 | 2026-03-16 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-12241 | Уязвимость компонента drivers/md/dm-cache-target.c ядра операционной системы Linux, позво… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12237 | Уязвимость компонента mac.c ядра операционной системы Linux, позволяющая нарушителю вызва… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12236 | Уязвимость компонента net/sched/sch_skbprio.c ядра операционной системы Linux, позволяюща… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12233 | Уязвимость компонента net/mlx5 ядра операционной системы Linux, позволяющая нарушителю вы… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12232 | Уязвимость компонента vcodec ядра операционной системы Linux, позволяющая нарушителю вызв… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12231 | Уязвимость компонента vcodec ядра операционной системы Linux, позволяющая нарушителю вызв… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12230 | Уязвимость компонента net/mlx5 ядра операционной системы Linux, позволяющая нарушителю вы… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12228 | Уязвимость компонента displayport.c ядра операционной системы Linux, позволяющая нарушите… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12227 | Уязвимость функции find_format_by_pix() компонента drivers/usb/gadget/function/uvc_v4l2.c… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12226 | Уязвимость функции bnxt_set_rx_skb_mode() компонента bnxt_en ядра операционной системы Li… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12192 | Уязвимость компонента smb ядра операционной системы Linux, позволяющая нарушителю вызвать… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12191 | Уязвимость компонента acct ядра операционной системы Linux, позволяющая нарушителю вызват… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12189 | Уязвимость компонента bpf ядра операционной системы Linux, позволяющая нарушителю вызвать… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12185 | Уязвимость компонента tcp ядра операционной системы Linux, позволяющая нарушителю вызвать… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12184 | Уязвимость компонента qla1280.c ядра операционной системы Linux, позволяющая нарушителю в… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12182 | Уязвимость компонента sched ядра операционной системы Linux, позволяющая нарушителю вызва… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12180 | Уязвимость компонента mpc.c ядра операционной системы Linux, позволяющая нарушителю вызва… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12178 | Уязвимость компонента compat_alignment.c ядра операционной системы Linux, позволяющая нар… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12177 | Уязвимость компонента usbnet ядра операционной системы Linux, позволяющая нарушителю вызв… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12176 | Уязвимость компонента sysctl.c ядра операционной системы Linux, позволяющая нарушителю вы… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12175 | Уязвимость компонента calipso.c ядра операционной системы Linux, позволяющая нарушителю в… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12173 | Уязвимость компонента imx-card.c ядра операционной системы Linux, позволяющая нарушителю … | 28.09.2025 | 16.02.2026 |
| bdu:2025-12170 | Уязвимость компонента RDMA/mlx5 ядра операционной системы Linux, позволяющая нарушителю в… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12169 | Уязвимость компонента RDMA/core ядра операционной системы Linux, позволяющая нарушителю п… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12168 | Уязвимость компонента drm/amd/display ядра операционной системы Linux, позволяющая наруши… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12167 | Уязвимость компонента int3402_thermal.c ядра операционной системы Linux, позволяющая нару… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12166 | Уязвимость компонента mptcp ядра операционной системы Linux, позволяющая нарушителю вызва… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12165 | Уязвимость компонента ene-kb3930 ядра операционной системы Linux, позволяющая нарушителю … | 28.09.2025 | 16.02.2026 |
| bdu:2025-12164 | Уязвимость компонента i3c ядра операционной системы Linux, позволяющая нарушителю вызвать… | 28.09.2025 | 16.02.2026 |
| bdu:2025-12163 | Уязвимость ядра операционной системы Linux, связанная с ошибками разыменования нулеового … | 28.09.2025 | 16.02.2026 |
| ID | Description | Updated |
|---|---|---|
| var-201605-0467 | Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4… | 2024-07-23T21:36:25.410000Z |
| var-201306-0147 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:36:25.133000Z |
| var-202310-0175 | The HTTP/2 protocol allows a denial of service (server resource consumption) because requ… | 2024-07-23T21:36:24.758000Z |
| var-201110-0479 | Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows user-assisted re… | 2024-07-23T21:36:24.394000Z |
| var-201804-1181 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2024-07-23T21:36:20.913000Z |
| var-202210-1070 | An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions … | 2024-07-23T21:36:19.928000Z |
| var-200501-0287 | Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a… | 2024-07-23T21:36:19.004000Z |
| var-202105-1311 | A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in … | 2024-07-23T21:35:12.003000Z |
| var-201804-1180 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2024-07-23T21:35:11.789000Z |
| var-201304-0300 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T21:35:11.273000Z |
| var-201006-1169 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 throug… | 2024-07-23T21:35:11.733000Z |
| var-202105-0131 | A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packe… | 2024-07-23T21:35:10.562000Z |
| var-201710-1404 | An issue was discovered in certain Apple products. iOS before 11 is affected. Safari befo… | 2024-07-23T21:35:10.631000Z |
| var-201711-0455 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2024-07-23T21:35:06.798000Z |
| var-201504-0478 | The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement… | 2024-07-23T21:35:06.207000Z |
| var-200704-0215 | Use-after-free vulnerability in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows re… | 2024-07-23T21:35:06.142000Z |
| var-201912-0584 | A memory corruption issue was addressed with improved input validation. This issue is fix… | 2024-07-23T21:35:05.474000Z |
| var-201512-0007 | Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 al… | 2024-07-23T21:35:01.063000Z |
| var-202005-0397 | json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file… | 2024-07-23T21:34:58.765000Z |
| var-200909-0801 | The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp modul… | 2024-07-23T21:34:26.443000Z |
| var-201105-0094 | The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library … | 2024-07-23T21:34:14.063000Z |
| var-201805-0950 | A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Softw… | 2024-07-23T21:34:13.151000Z |
| var-201707-1188 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari … | 2024-07-23T21:34:09.280000Z |
| var-201007-0318 | WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before… | 2024-07-23T21:34:09.881000Z |
| var-202010-1327 | A logic issue was addressed with improved validation. This issue is fixed in iCloud for W… | 2024-07-23T21:34:07.225000Z |
| var-201711-0448 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… | 2024-07-23T21:34:05.466000Z |
| var-201710-1402 | An issue was discovered in certain Apple products. iOS before 11 is affected. Safari befo… | 2024-07-23T21:34:05.823000Z |
| var-202106-0345 | Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allo… | 2024-07-23T21:34:00.818000Z |
| var-201004-1006 | Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder be… | 2024-07-23T21:33:58.659000Z |
| var-201404-0377 | Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51,… | 2024-07-23T21:33:23.504000Z |