Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2025-54502
7.1 (4.0)
Incorrect use of boot service in the AMD Platform… AMD
AMD EPYC™ 9004 Series Processors
2026-04-16T18:46:13.377Z 2026-04-17T03:55:16.268Z
CVE-2026-5785
8.1 (3.1)
SQL Injection Zohocorp
ManageEngine PAM360
2026-04-16T13:46:28.313Z 2026-04-17T03:55:15.059Z
CVE-2026-23772
7.3 (3.1)
Dell Storage Manager - Replay Manager for Microso… Dell
Storage Manager
2026-04-16T08:30:56.774Z 2026-04-17T03:55:13.852Z
CVE-2026-34197
N/A
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache Ac… Apache Software Foundation
Apache ActiveMQ Broker
2026-04-07T07:50:10.958Z 2026-04-17T03:55:12.349Z
CVE-2026-6080
6.5 (3.1)
Tutor LMS <= 3.9.8 - Authenticated (Admin+) SQL Inject… themeum
Tutor LMS – eLearning and online course solution
2026-04-17T03:36:44.234Z 2026-04-17T03:36:44.234Z
CVE-2026-4666
6.5 (3.1)
wpForo Forum <= 2.4.16 - Missing Authorization to Auth… tomdever
wpForo Forum
2026-04-17T02:25:04.892Z 2026-04-17T02:25:04.892Z
CVE-2024-11831
5.4 (3.1)
Npm-serialize-javascript: cross-site scripting (xss) i…

2025-02-10T15:27:46.732Z 2026-04-17T01:39:58.613Z
CVE-2026-40922
5.3 (4.0)
SiYuan: Incomplete sanitization of bazaar README allow… siyuan-note
siyuan
2026-04-16T23:14:00.592Z 2026-04-16T23:14:00.592Z
CVE-2026-5363
5.4 (4.0)
Use of weak cryptographic key in TP-Link Archer C7 TP-Link Systems Inc.
Archer C7 v5 and v5.8
2026-04-15T23:45:54.271Z 2026-04-16T23:10:46.170Z
CVE-2026-41082
7.3 (3.1)
In OCaml opam before 2.5.1, a .install field cont… OCaml
opam
2026-04-16T17:32:40.068Z 2026-04-16T23:00:36.235Z
CVE-2026-40259
8.1 (3.1)
SiYuan: Publish Reader Can Arbitrarily Delete Attribut… siyuan-note
siyuan
2026-04-16T22:49:36.992Z 2026-04-16T22:50:20.441Z
CVE-2025-22870
4.4 (3.1)
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net Go standard library
net/http
2025-03-12T18:27:59.376Z 2026-04-16T22:39:33.619Z
CVE-2026-40248
8.7 (4.0)
free5gc UDR improper path validation allows unauthenti… free5gc
free5gc
2026-04-16T21:57:13.101Z 2026-04-16T21:57:13.101Z
CVE-2025-7195
6.4 (3.1)
Operator-sdk: privilege escalation due to incorrect pe… operator-framework
operator-sdk
2025-08-07T19:05:08.756Z 2026-04-16T21:54:06.831Z
CVE-2026-33032
9.8 (3.1)
Nginx UI: Unauthenticated MCP Endpoint Allows Remote N… 0xJacky
nginx-ui
2026-03-30T17:58:42.159Z 2026-04-16T21:42:59.787Z
CVE-2026-33472
4.8 (3.1)
Cryptomator Hub OAuth token exchange HTTP downgrade vi… cryptomator
cryptomator
2026-04-16T21:12:37.076Z 2026-04-16T21:12:37.076Z
CVE-2026-41035
7.4 (3.1)
In rsync 3.0.1 through 3.4.1, receive_xattr relie… Samba
rsync
2026-04-16T06:53:05.237Z 2026-04-16T20:16:00.985Z
CVE-2026-33083
8.7 (4.0)
DataEase has SQL Injection in Order By Clause dataease
dataease
2026-04-16T17:52:37.255Z 2026-04-16T19:39:25.443Z
CVE-2025-43935
4.4 (3.1)
Dell PowerScale OneFS, versions prior to 9.12.0.0… Dell
PowerScale OneFS
2026-04-16T17:59:04.315Z 2026-04-16T19:38:28.840Z
CVE-2026-33207
8.6 (4.0)
DataEase SQL Injection Vulnerability dataease
dataease
2026-04-16T19:37:36.197Z 2026-04-16T19:37:36.197Z
CVE-2026-5121
7.5 (3.1)
Libarchive: libarchive: arbitrary code execution via i… Red Hat
Red Hat Enterprise Linux 7 Extended Lifecycle Support
2026-03-30T07:47:28.562Z 2026-04-16T19:34:08.607Z
CVE-2026-31843
10 (4.0)
9.8 (3.1)
The goodoneuz/pay-uz Laravel package (<= 2.2.24) … goodoneuz
pay-uz
2026-04-16T13:02:55.701Z 2026-04-16T19:30:21.203Z
CVE-2026-4424
7.5 (3.1)
Libarchive: libarchive: information disclosure via hea… Red Hat
Red Hat Enterprise Linux 10
2026-03-19T13:50:27.294Z 2026-04-16T19:28:16.800Z
CVE-2023-20585
5.6 (4.0)
Insufficient checks of the RMP on host buffer acc… AMD
AMD EPYC™ 7003 Series Processors
2026-04-16T18:42:28.281Z 2026-04-16T19:12:06.991Z
CVE-2025-54510
5.9 (4.0)
A missing lock verification in AMD Secure Process… AMD
AMD EPYC™ 9004 Series Processors
2026-04-16T18:44:10.182Z 2026-04-16T19:10:19.002Z
CVE-2026-20184
9.8 (3.1)
Cisco Webex Meetings Certificate Validation Vulnerability Cisco
Cisco Webex Meetings
2026-04-15T16:03:59.646Z 2026-04-16T19:07:14.461Z
CVE-2026-20152
5.3 (3.1)
Cisco Secure Web Appliance Authentication Service Traf… Cisco
Cisco Secure Web Appliance
2026-04-15T16:03:43.828Z 2026-04-16T19:05:18.524Z
CVE-2024-10106
3.7 (3.1)
Ember ZNet buffer overflow in 'packet handoff' plugin silabs.com
Ember ZNet SDK
2025-01-09T14:56:47.355Z 2026-04-16T19:03:01.041Z
CVE-2026-6442
8.3 (3.1)
Improper Command Detection Logic Allows RCE in Cortex … Snowflake
Cortex Code CLI
2026-04-16T18:43:21.181Z 2026-04-16T18:54:58.366Z
CVE-2025-43937
6.6 (3.1)
Dell PowerScale OneFS, versions prior to 9.12.0.0… Dell
PowerScale OneFS
2026-04-16T18:03:08.750Z 2026-04-16T18:51:41.562Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-34393
8.8 (3.1)
Weblate: Privilege escalation in the user API endpoint WeblateOrg
weblate
2026-04-15T18:24:30.813Z 2026-04-15T18:38:53.920Z
CVE-2026-34370
6.5 (3.1)
Chamilo LMS: IDOR in the Notebook Module allows an att… chamilo
chamilo-lms
2026-04-14T21:25:28.960Z 2026-04-15T20:03:07.959Z
CVE-2026-34244
5 (3.1)
Weblate: SSRF via Project-Level Machinery Configuration WeblateOrg
weblate
2026-04-15T18:22:42.551Z 2026-04-15T18:50:10.569Z
CVE-2026-34242
7.7 (3.1)
Weblate: Arbitrary File Read via Symlink WeblateOrg
weblate
2026-04-15T18:19:59.552Z 2026-04-15T20:02:06.899Z
CVE-2026-34213
5.4 (3.1)
Docmost has cross-page attachment overwrite via flawed… docmost
docmost
2026-04-14T21:49:55.380Z 2026-04-15T13:31:17.467Z
CVE-2026-34212
5.4 (3.1)
Docmost page content has stored XSS via unsanitized at… docmost
docmost
2026-04-14T21:42:44.202Z 2026-04-15T20:02:55.239Z
CVE-2026-34188
7.5 (4.0)
OS Command Injection in Event Response Execution Pandora FMS
Pandora FMS
2026-04-13T15:50:41.574Z 2026-04-13T17:25:33.664Z
CVE-2026-34186
8.7 (4.0)
SQL Injection in Custom Fields leads to Database Compromise Pandora FMS
Pandora FMS
2026-04-13T15:49:55.780Z 2026-04-13T17:30:29.986Z
CVE-2026-34164
4.9 (3.1)
Valtimo: Sensitive data exposure through inbox message… valtimo-platform
valtimo
2026-04-16T21:17:35.472Z 2026-04-18T02:44:44.369Z
CVE-2026-34161
5.1 (4.0)
Chamilo LMS: Stored XSS via Malicious File Upload in S… chamilo
chamilo-lms
2026-04-14T21:12:48.128Z 2026-04-16T13:49:26.172Z
CVE-2026-34160
8.6 (3.1)
Chamilo LMS: Unauthenticated SSRF via PENS Plugin allo… chamilo
chamilo-lms
2026-04-14T21:09:36.832Z 2026-04-15T14:26:33.592Z
CVE-2026-33808
9.1 (4.0)
@fastify/express vulnerable to middleware authenticati… fastify
@fastify/express
2026-04-15T09:29:46.091Z 2026-04-15T13:10:24.054Z
CVE-2026-33807
9.1 (3.1)
@fastify/express vulnerable to middleware path doublin… fastify
@fastify/express
2026-04-15T09:52:26.838Z 2026-04-15T13:09:45.259Z
CVE-2026-33715
7.2 (3.1)
Chamilo LMS has Unauthenticated SSRF and Open Email Re… chamilo
chamilo-lms
2026-04-14T21:05:35.043Z 2026-04-15T13:37:16.615Z
CVE-2026-33714
7.1 (4.0)
Chamilo LMS has Authenticated SQL Injection in statist… chamilo
chamilo-lms
2026-04-14T21:00:19.259Z 2026-04-15T20:03:16.195Z
CVE-2026-33667
7.4 (3.1)
OpenProject: 2FA OTP Verification Missing Rate Limiting opf
openproject
2026-04-15T18:43:14.130Z 2026-04-15T20:00:14.503Z
CVE-2026-33657
4.6 (3.1)
EspoCRM: Stored HTML injection in email notifications … espocrm
espocrm
2026-04-13T19:41:47.131Z 2026-04-13T20:48:47.307Z
CVE-2026-33555
4 (3.1)
An issue was discovered in HAProxy before 3.3.6. … HAProxy
HAProxy
2026-04-13T00:00:00.000Z 2026-04-14T13:22:39.253Z
CVE-2026-33534
4.3 (3.1)
EspoCRM has authenticated SSRF via internal-host valid… espocrm
espocrm
2026-04-13T19:20:04.414Z 2026-04-14T16:28:58.299Z
CVE-2026-33472
4.8 (3.1)
Cryptomator Hub OAuth token exchange HTTP downgrade vi… cryptomator
cryptomator
2026-04-16T21:12:37.076Z 2026-04-16T21:12:37.076Z
CVE-2026-33440
5 (3.1)
Weblate: Authenticated SSRF via redirect bypass of ALL… WeblateOrg
weblate
2026-04-15T18:15:12.560Z 2026-04-15T18:49:25.077Z
CVE-2026-33435
8.1 (3.1)
Weblate: Remote code execution during backup restoration WeblateOrg
weblate
2026-04-15T18:13:07.568Z 2026-04-15T18:40:27.204Z
CVE-2026-33414
4 (4.0)
PowerShell Command Injection in Podman HyperV Machine containers
podman
2026-04-14T22:42:19.822Z 2026-04-16T13:57:28.317Z
CVE-2026-33220
6.8 (3.1)
Weblate: JavaScript localization CDN add-on allows arb… WeblateOrg
weblate
2026-04-15T18:03:40.728Z 2026-04-16T14:10:15.340Z
CVE-2026-33214
4.3 (3.1)
Weblate has improper access control for the translatio… WeblateOrg
weblate
2026-04-15T17:51:46.812Z 2026-04-15T20:02:14.057Z
CVE-2026-33212
3.1 (3.1)
Weblate: Improper access control for pending tasks in API WeblateOrg
weblate
2026-04-15T17:48:17.842Z 2026-04-15T18:09:01.991Z
CVE-2026-33207
8.6 (4.0)
DataEase SQL Injection Vulnerability dataease
dataease
2026-04-16T19:37:36.197Z 2026-04-16T19:37:36.197Z
CVE-2026-33193
4.6 (3.1)
Docmost vulnerable to stored XSS via MIME type spoofing docmost
docmost
2026-04-14T21:39:45.500Z 2026-04-16T13:51:42.724Z
CVE-2026-33146
4.3 (3.1)
Docmost's Public Share Search Exposes Metadata of Rest… docmost
docmost
2026-04-14T21:36:53.562Z 2026-04-15T14:28:08.044Z
CVE-2026-33122
8.6 (4.0)
DataEase has SQL Injection via Datasource Management dataease
dataease
2026-04-16T19:24:03.195Z 2026-04-17T18:47:44.791Z
ID Description Published Updated
fkie_cve-2026-34370 Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, the note… 2026-04-14T22:16:31.340 2026-04-17T15:38:09.243
fkie_cve-2026-34244 Weblate is a web based localization tool. In versions prior to 5.17, a user with the project.edit p… 2026-04-15T19:16:35.903 2026-04-17T15:38:09.243
fkie_cve-2026-34242 Weblate is a web based localization tool. In versions prior to 5.17, the ZIP download feature didn'… 2026-04-15T19:16:35.753 2026-04-17T15:38:09.243
fkie_cve-2026-34213 Docmost is open-source collaborative wiki and documentation software. Starting in version 0.3.0 and… 2026-04-14T22:16:31.193 2026-04-17T15:38:09.243
fkie_cve-2026-34212 Docmost is open-source collaborative wiki and documentation software. In versions prior to 0.71.0, … 2026-04-14T22:16:31.020 2026-04-17T15:38:09.243
fkie_cve-2026-34188 Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command I… 2026-04-13T16:16:27.487 2026-04-17T15:38:09.243
fkie_cve-2026-34186 Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injecti… 2026-04-13T16:16:27.343 2026-04-17T15:38:09.243
fkie_cve-2026-34164 Valtimo is an open-source business process automation platform. In versions 13.0.0 through 13.21.0,… 2026-04-16T22:16:37.757 2026-04-17T15:38:09.243
fkie_cve-2026-34161 Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, a Stored… 2026-04-14T21:16:26.400 2026-04-17T15:38:09.243
fkie_cve-2026-34160 Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, the PENS… 2026-04-14T21:16:26.227 2026-04-17T15:38:09.243
fkie_cve-2026-33808 Impact@fastify/express v4.0.4 and earlier fails to normalize URLs before passing them to Express mi… 2026-04-15T10:16:48.453 2026-04-17T15:38:09.243
fkie_cve-2026-33807 @fastify/express v4.0.4 and earlier contains a path handling bug in the onRegister function that ca… 2026-04-15T10:16:48.310 2026-04-17T15:38:09.243
fkie_cve-2026-33715 Chamilo LMS is an open-source learning management system. In version 2.0-RC.2, the file public/main… 2026-04-14T21:16:26.060 2026-04-17T15:38:09.243
fkie_cve-2026-33714 Chamilo is an open-source learning management system (LMS). Version 2.0.0-RC.2 contains a SQL Injec… 2026-04-14T21:16:25.893 2026-04-17T15:38:09.243
fkie_cve-2026-33667 OpenProject is an open-source project management application. In versions prior to 17.3.0, 2FA OTP … 2026-04-15T19:16:35.603 2026-04-17T15:38:09.243
fkie_cve-2026-33657 EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below ha… 2026-04-13T20:16:34.143 2026-04-17T15:38:09.243
fkie_cve-2026-33555 An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received… 2026-04-13T17:16:28.237 2026-04-17T15:38:09.243
fkie_cve-2026-33534 EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below ha… 2026-04-13T20:16:33.970 2026-04-17T15:38:09.243
fkie_cve-2026-33472 Cryptomator is an open-source client-side encryption application for cloud storage. Version 1.19.1 … 2026-04-16T22:16:37.583 2026-04-17T15:38:09.243
fkie_cve-2026-33440 Weblate is a web based localization tool. In versions prior to 5.17, the ALLOWED_ASSET_DOMAINS sett… 2026-04-15T19:16:35.447 2026-04-17T15:38:09.243
fkie_cve-2026-33435 Weblate is a web based localization tool. In versions prior to 5.17, the project backup didn't filt… 2026-04-15T19:16:35.277 2026-04-17T15:38:09.243
fkie_cve-2026-33414 Podman is a tool for managing OCI containers and pods. Versions 4.8.0 through 5.8.1 contain a comma… 2026-04-14T23:16:27.987 2026-04-17T15:38:09.243
fkie_cve-2026-33220 Weblate is a web based localization tool. In versions prior to 5.17, the translation memory API exp… 2026-04-15T19:16:35.130 2026-04-17T15:38:09.243
fkie_cve-2026-33214 Weblate is a web based localization tool. In versions prior to 5.17, the translation memory API exp… 2026-04-15T18:17:20.053 2026-04-17T15:38:09.243
fkie_cve-2026-33212 Weblate is a web based localization tool. In versions prior to 5.17, the tasks API didn't verify us… 2026-04-15T18:17:19.897 2026-04-17T15:38:09.243
fkie_cve-2026-33207 DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below co… 2026-04-16T20:16:38.797 2026-04-17T15:38:09.243
fkie_cve-2026-33193 Docmost is open-source collaborative wiki and documentation software. Versions prior to 0.70.0 are … 2026-04-14T22:16:30.867 2026-04-17T15:38:09.243
fkie_cve-2026-33146 Docmost is open-source collaborative wiki and documentation software. An authorization bypass vulne… 2026-04-14T22:16:30.713 2026-04-17T15:38:09.243
fkie_cve-2026-33122 DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below co… 2026-04-16T20:16:38.640 2026-04-17T15:38:09.243
fkie_cve-2026-33121 DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below co… 2026-04-16T19:16:33.657 2026-04-17T15:38:09.243
ID Severity Description Published Updated
ghsa-3j9x-gmp6-9x73
7.3 (3.1)
SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file … 2026-04-16T15:31:32Z 2026-04-16T18:31:21Z
ghsa-2fw9-cxch-qx5h
5.3 (3.1)
Race in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain poten… 2026-04-09T00:32:00Z 2026-04-16T18:31:21Z
ghsa-cwpc-gq4p-xxwh
8.8 (3.1)
HCL BigFix Platform is affected by insecure permissions on private cryptographic keys.  The private… 2026-04-02T00:31:04Z 2026-04-16T18:31:16Z
ghsa-69rx-rvq8-835f
4.0 (3.1)
HCL BigFix Platform is affected by insufficient authentication.  The application might allow users … 2026-04-02T00:31:04Z 2026-04-16T18:31:16Z
ghsa-h5vx-6jh5-qhq7
5.8 (4.0)
A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use (TOCTOU) Race Condition vulnerabil… 2026-03-30T09:31:28Z 2026-04-16T18:31:15Z
ghsa-wwcp-26wc-3fxm
5.3 (3.1)
6.9 (4.0)
JSON-lib mishandles an unbalanced comment string 2024-10-04T06:30:45Z 2026-04-16T18:11:17Z
ghsa-jwwr-fjgh-cv2x
Improper Restriction of XML External Entity Reference in Castor 2022-05-13T01:05:37Z 2026-04-16T18:07:55Z
ghsa-vrh8-27q8-fr8f
7.5 (3.1)
Server-Side Request Forgery (SSRF) in org.apache.solr:solr-core 2019-03-14T15:39:56Z 2026-04-16T16:55:49Z
ghsa-pmpg-6pww-fg6q
3.3 (3.1)
ImageMagick has out-of-bounds access in ConnectedComponentsImage() via CLI-controlled connected-com… 2026-04-14T23:32:35Z 2026-04-16T15:54:56Z
ghsa-x928-4434-crqj
3.7 (3.1)
ImageMagick has a memory leak in PNG encoder when writing a MNG image 2026-04-14T23:32:44Z 2026-04-16T15:49:58Z
ghsa-w54j-7wpm-crhj
3.3 (3.1)
ImageMagick has a heap-buffer-overflow in FTXT encoder 2026-04-14T23:31:31Z 2026-04-16T15:48:06Z
ghsa-8vfj-q2cp-5m5j
3.3 (3.1)
ImageMagick has a heap buffer overflow read in magnify operation via unrecognized magnify:method value 2026-04-14T23:32:22Z 2026-04-16T15:33:26Z
ghsa-q8h3-jv9v-57qx
3.3 (3.1)
ImageMagick has has an off-by-one origin validation in allows out-of-bounds read in morphology processing 2026-04-14T23:31:38Z 2026-04-16T15:32:16Z
ghsa-6q34-632f-jr72
8.2 (3.1)
Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass o… 2026-04-16T15:31:33Z 2026-04-16T15:31:33Z
ghsa-xm65-r32w-c46p
6.5 (3.1)
Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to ob… 2026-04-15T21:30:19Z 2026-04-16T15:31:32Z
ghsa-wrhr-37c7-3326
7.5 (3.1)
Nordic Semiconductor IronSide SE for nRF54H20 before 23.0.2+17 has an Algorithmic complexity issue. 2026-04-15T18:31:56Z 2026-04-16T15:31:32Z
ghsa-wg7c-97pm-qp3w
8.1 (3.1)
Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions fr… 2026-04-16T15:31:32Z 2026-04-16T15:31:32Z
ghsa-w3cg-4gfc-vw5x
7.8 (3.1)
Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, … 2026-04-16T06:31:23Z 2026-04-16T15:31:32Z
ghsa-q6p9-89h2-c9h9
8.3 (3.1)
Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RC… 2026-04-15T18:31:57Z 2026-04-16T15:31:32Z
ghsa-j6vj-j7q6-95qq
4.3 (3.1)
Missing Authorization vulnerability in Long Watch Studio MyRewards woorewards allows Exploiting Inc… 2026-04-16T15:31:32Z 2026-04-16T15:31:32Z
ghsa-g8rx-2jmm-3847
5.7 (4.0)
Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client d… 2026-04-16T15:31:32Z 2026-04-16T15:31:32Z
ghsa-g4ww-j67q-3j45
9.8 (3.1)
Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in … 2026-04-15T18:31:58Z 2026-04-16T15:31:32Z
ghsa-f4mv-qxg4-7wq3
6.3 (3.1)
Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to pote… 2026-04-15T21:30:19Z 2026-04-16T15:31:32Z
ghsa-6f47-h5cp-7cwm
6.4 (3.1)
The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to… 2026-04-16T15:31:32Z 2026-04-16T15:31:32Z
ghsa-3969-mh7w-g5vp
5.3 (3.1)
Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support allows Ex… 2026-04-16T15:31:31Z 2026-04-16T15:31:32Z
ghsa-23m2-3g75-jvc8
5.3 (3.1)
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin f… 2026-04-16T15:31:32Z 2026-04-16T15:31:32Z
ghsa-v2jv-4wf4-cwj4
9.8 (3.1)
A SQL injection vulnerability exists in the School Management System (version 1.0) by manikandan580… 2026-04-14T18:30:34Z 2026-04-16T15:31:31Z
ghsa-rpp7-9x22-6v9f
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-04-16T15:31:31Z 2026-04-16T15:31:31Z
ghsa-r9hg-f94w-656h
6.5 (3.1)
An improper authorization vulnerability in the /api/v1/users/{id} endpoint of Snipe-IT v8.4.0 allow… 2026-04-14T18:30:35Z 2026-04-16T15:31:31Z
ghsa-r6g6-6h6f-xcmj
7.5 (3.1)
Apache::API::Password versions through v0.5.2 for Perl can generate insecure random values for salt… 2026-04-15T18:31:54Z 2026-04-16T15:31:31Z
ID Severity Description Package Published Updated
pysec-2018-148
6.5 (3.1)
In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26, an issue exists in the con… exiv2 2018-03-30T08:29:00Z 2024-11-21T14:22:49.400819Z
pysec-2018-147
6.5 (3.1)
In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp allows re… exiv2 2018-03-25T03:29:00Z 2024-11-21T14:22:49.341312Z
pysec-2018-146
6.5 (3.1)
In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.c… exiv2 2018-03-25T03:29:00Z 2024-11-21T14:22:49.282911Z
pysec-2018-145
5.5 (3.1)
In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv… exiv2 2018-01-18T07:29:00Z 2024-11-21T14:22:49.222538Z
pysec-2018-144
5.5 (3.1)
The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote at… exiv2 2018-01-03T09:29:00Z 2024-11-21T14:22:49.165596Z
pysec-2018-143
6.5 (3.1)
Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a d… exiv2 2018-11-27T07:29:00Z 2024-11-21T14:22:49.094932Z
pysec-2018-142
6.5 (3.1)
In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may … exiv2 2018-11-08T08:29:00Z 2024-11-21T14:22:49.03444Z
pysec-2018-141
6.5 (3.1)
In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD… exiv2 2018-11-08T08:29:00Z 2024-11-21T14:22:48.973676Z
pysec-2018-140
6.5 (3.1)
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in… exiv2 2018-11-03T04:29:00Z 2024-11-21T14:22:48.914006Z
pysec-2018-139
6.5 (3.1)
CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack cons… exiv2 2018-09-28T09:29:00Z 2024-11-21T14:22:48.850406Z
pysec-2018-138
6.5 (3.1)
An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp … exiv2 2018-09-20T20:29:00Z 2024-11-21T14:22:48.791028Z
pysec-2018-137
6.5 (3.1)
Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of s… exiv2 2018-09-19T22:29:00Z 2024-11-21T14:22:48.732242Z
pysec-2018-136
6.5 (3.1)
Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of se… exiv2 2018-09-19T22:29:00Z 2024-11-21T14:22:48.67141Z
pysec-2018-135
6.5 (3.1)
Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause … exiv2 2018-09-02T03:29:00Z 2024-11-21T14:22:48.611777Z
pysec-2018-134
8.1 (3.1)
samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POS… exiv2 2018-07-17T12:29:00Z 2024-11-21T14:22:48.55081Z
pysec-2018-133
8.8 (3.1)
Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp. exiv2 2018-07-13T15:29:00Z 2024-11-21T14:22:48.493339Z
pysec-2018-132
8.8 (3.1)
Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to… exiv2 2018-06-13T11:29:00Z 2024-11-21T14:22:48.43262Z
pysec-2018-131
8.8 (3.1)
Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an o… exiv2 2018-06-13T11:29:00Z 2024-11-21T14:22:48.369854Z
pysec-2018-130
9.8 (3.1)
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp. exiv2 2018-05-29T07:29:00Z 2024-11-21T14:22:48.306556Z
pysec-2018-129
6.5 (3.1)
In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote… exiv2 2018-05-14T03:29:00Z 2024-11-21T14:22:48.247062Z
pysec-2018-128
6.5 (3.1)
An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk funct… exiv2 2018-05-12T04:29:00Z 2024-11-21T14:22:48.18647Z
pysec-2018-127
6.5 (3.1)
An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attacke… exiv2 2018-05-12T04:29:00Z 2024-11-21T14:22:48.062891Z
pysec-2018-126
6.5 (3.1)
In types.cpp in Exiv2 0.26, a large size value may lead to a SIGABRT during an attempt at… exiv2 2018-05-10T02:29:00Z 2024-11-21T14:22:47.998655Z
pysec-2018-125
6.5 (3.1)
Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read. exiv2 2018-05-07T07:29:00Z 2024-11-21T14:22:47.938221Z
pysec-2018-124
6.5 (3.1)
In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in t… exiv2 2018-02-12T22:29:00Z 2024-11-21T14:22:47.758262Z
pysec-2018-123
6.5 (3.1)
In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStruct… exiv2 2018-02-12T22:29:00Z 2024-11-21T14:22:47.697229Z
pysec-2018-122
8.1 (3.1)
In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 func… exiv2 2018-02-12T22:29:00Z 2024-11-21T14:22:47.638668Z
pysec-2018-121
6.5 (3.1)
In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.… exiv2 2018-02-12T22:29:00Z 2024-11-21T14:22:47.579327Z
pysec-2017-142
7.5 (3.1)
There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault i… exiv2 2017-06-26T23:29:00Z 2024-11-21T14:22:47.877232Z
pysec-2017-141
5.5 (3.1)
Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in val… exiv2 2017-12-31T19:29:00Z 2024-11-21T14:22:47.817537Z
ID Description Updated
gsd-2024-4164 A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.17(… 2024-04-26T05:02:17.419490Z
gsd-2022-48683 The format of the source doesn't require a description, click on the link for more details. 2024-04-26T05:00:39.331180Z
gsd-2022-48682 In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file dele… 2024-04-26T05:00:39.114509Z
gsd-2024-29078 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:15.597934Z
gsd-2024-27202 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:15.043072Z
gsd-2024-26026 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:14.001780Z
gsd-2024-28889 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:12.636165Z
gsd-2024-28883 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:12.389367Z
gsd-2024-28880 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:12.392410Z
gsd-2024-28132 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:12.156611Z
gsd-2024-33612 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.623768Z
gsd-2024-33608 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.687145Z
gsd-2024-33604 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.630048Z
gsd-2024-33602 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.534164Z
gsd-2024-33601 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.596048Z
gsd-2024-33600 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.660889Z
gsd-2024-33599 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.689695Z
gsd-2024-33598 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-25T05:02:10.601312Z
gsd-2024-33597 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.675513Z
gsd-2024-33596 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.590091Z
gsd-2024-33595 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.589303Z
gsd-2024-33594 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.522993Z
gsd-2024-33593 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.673021Z
gsd-2024-33592 Server-Side Request Forgery (SSRF) vulnerability in SoftLab Radio Player.This issue affec… 2024-04-25T05:02:10.687617Z
gsd-2024-33591 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.580436Z
gsd-2024-33590 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.649565Z
gsd-2024-33589 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.659095Z
gsd-2024-33588 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.676199Z
gsd-2024-33587 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.664914Z
gsd-2024-33586 The format of the source doesn't require a description, click on the link for more details. 2024-04-25T05:02:10.611646Z
ID Description Published Updated
mal-2026-2584 Malicious code in @hpcc/js-api (npm) 2026-04-13T15:25:21Z 2026-04-13T15:25:29Z
mal-2026-2583 Malicious code in @hmm-app/api (npm) 2026-04-13T15:25:21Z 2026-04-13T15:25:29Z
mal-2026-2580 Malicious code in @cash-web/no-hardcoded-font-styles (npm) 2026-04-13T15:25:21Z 2026-04-13T15:25:29Z
mal-2026-2579 Malicious code in @bookiply/core (npm) 2026-04-13T15:25:21Z 2026-04-13T15:25:29Z
mal-2026-2609 Malicious code in trade-in-lib (npm) 2026-04-13T15:25:20Z 2026-04-13T15:25:24Z
mal-2026-2605 Malicious code in kaltura-ngx-client (npm) 2026-04-13T15:25:19Z 2026-04-13T15:25:24Z
mal-2026-2622 Malicious code in wm-plugin-wm-smart-tip-dont-embed-tooltip (npm) 2026-04-13T15:25:21Z 2026-04-13T15:25:22Z
mal-2026-2586 Malicious code in @ids-alpha/theme (npm) 2026-04-13T15:25:22Z 2026-04-13T15:25:22Z
mal-2026-2581 Malicious code in @dtc-campaign-wizard/campaign-wizard (npm) 2026-04-13T15:25:22Z 2026-04-13T15:25:22Z
mal-2026-2578 Malicious code in @bokehjs/core (npm) 2026-04-13T15:25:21Z 2026-04-13T15:25:22Z
mal-2026-2573 Malicious code in @aircall-ecosystem/integrations-msteams-frontend (npm) 2026-04-13T15:25:21Z 2026-04-13T15:25:22Z
mal-2026-2607 Malicious code in stats-api-js-client (npm) 2026-04-13T15:25:20Z 2026-04-13T15:25:21Z
mal-2026-2602 Malicious code in etsy-advocacy (npm) 2026-04-13T15:25:20Z 2026-04-13T15:25:21Z
mal-2026-2600 Malicious code in cms-site-api-js-client (npm) 2026-04-13T15:25:20Z 2026-04-13T15:25:21Z
mal-2026-2598 Malicious code in babel-plugin-fbtee (npm) 2026-04-13T15:25:20Z 2026-04-13T15:25:21Z
mal-2026-2610 Malicious code in twilio-video.js (npm) 2026-04-13T15:25:20Z 2026-04-13T15:25:20Z
mal-2026-2608 Malicious code in symphony-core (npm) 2026-04-13T15:25:19Z 2026-04-13T15:25:20Z
mal-2026-2604 Malicious code in ih-icon (npm) 2026-04-13T15:25:20Z 2026-04-13T15:25:20Z
mal-2026-2603 Malicious code in experian-design-system-themes (npm) 2026-04-13T15:25:19Z 2026-04-13T15:25:20Z
mal-2026-2601 Malicious code in dwaiter-company-web (npm) 2026-04-13T15:25:19Z 2026-04-13T15:25:20Z
mal-2026-2599 Malicious code in ccn-common-react-library (npm) 2026-04-13T15:25:20Z 2026-04-13T15:25:20Z
mal-2026-2577 Malicious code in @b2b-portal/kit (npm) 2026-04-13T15:14:10Z 2026-04-13T15:14:18Z
mal-2026-2576 Malicious code in @b2b-portal/core (npm) 2026-04-13T15:14:10Z 2026-04-13T15:14:11Z
mal-2026-2572 Malicious code in hiveos-setting (PyPI) 2026-04-13T15:08:19Z 2026-04-13T15:08:19Z
mal-2026-2571 Malicious code in hiveos-settings (PyPI) 2026-04-13T13:00:48Z 2026-04-13T13:00:48Z
mal-2026-2824 Malicious code in unisys-uka (npm) 2026-04-12T06:44:09Z 2026-04-12T06:44:09Z
mal-2026-2549 Malicious code in python-aickerso (PyPI) 2026-04-11T08:20:30Z 2026-04-11T08:49:58Z
mal-2026-2548 Malicious code in ks-hex2pcap (PyPI) 2026-04-11T08:22:32Z 2026-04-11T08:49:58Z
mal-2026-2547 Malicious code in ixosmonitoring (PyPI) 2026-04-11T08:30:32Z 2026-04-11T08:49:58Z
mal-2026-2546 Malicious code in hex2pcap (PyPI) 2026-04-11T08:16:27Z 2026-04-11T08:49:58Z
ID Description Published Updated
wid-sec-w-2026-0030 cURL: Mehrere Schwachstellen 2026-01-06T23:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2025-2928 GnuPG: Mehrere Schwachstellen 2025-12-28T23:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2025-2897 Apache log4j: Schwachstelle ermöglicht Offenlegung von Informationen 2025-12-18T23:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2025-2717 Django: Mehrere Schwachstellen 2025-12-02T23:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2025-2645 Golang Go: Mehrere Schwachstellen ermöglichen Denial of Service 2025-11-19T23:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2025-2394 Linux Kernel: Mehrere Schwachstellen 2025-10-22T22:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2025-2186 Django: Mehrere Schwachstellen ermöglichen Manipulation von Dateien 2025-10-01T22:00:00.000+00:00 2026-02-15T23:00:00.000+00:00
wid-sec-w-2026-0383 AMD Radeon: Mehrere Schwachstellen 2026-02-10T23:00:00.000+00:00 2026-02-12T23:00:00.000+00:00
wid-sec-w-2025-2737 libpng: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen 2025-12-03T23:00:00.000+00:00 2026-02-12T23:00:00.000+00:00
wid-sec-w-2024-0444 Linux Kernel: Mehrere Schwachstellen 2024-02-20T23:00:00.000+00:00 2026-02-12T23:00:00.000+00:00
wid-sec-w-2025-2836 Apple iOS und iPadOS: Mehrere Schwachstellen 2025-12-14T23:00:00.000+00:00 2026-02-11T23:00:00.000+00:00
wid-sec-w-2026-0364 Microsoft Defender für Endpoint Linux Extension: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten 2026-02-10T23:00:00.000+00:00 2026-02-10T23:00:00.000+00:00
wid-sec-w-2026-0363 Microsoft Power BI: Schwachstelle ermöglicht Erlangen von Benutzerrechten und Codeausführung 2026-02-10T23:00:00.000+00:00 2026-02-10T23:00:00.000+00:00
wid-sec-w-2024-3250 Red Hat OpenShift: Mehrere Schwachstellen 2024-10-21T22:00:00.000+00:00 2026-02-08T23:00:00.000+00:00
wid-sec-w-2026-0310 Cisco TelePresence Collaboration Endpoint Software: Schwachstelle ermöglicht Denial of Service 2026-02-04T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2026-0308 Cisco Evolved Programmable Network Manager und Prime Infrastructure: Schwachstelle ermöglicht Darstellen falscher Informationen 2026-02-04T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2026-0307 Cisco Prime Infrastructure: Schwachstelle ermöglicht Cross-Site Scripting 2026-02-04T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2026-0303 OpenClaw: Schwachstelle ermöglicht Offenlegung von Informationen 2026-02-03T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2026-0291 OpenClaw/Clawdbot: Mehrere Schwachstellen ermöglichen Codeausführung 2026-02-02T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2026-0290 Samsung Android: Mehrere Schwachstellen 2026-02-02T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2026-0289 Kubernetes (ingress-nginx): Mehrere Schwachstellen 2026-02-02T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2026-0250 Drupal Canvas und CAS: Mehrere Schwachstellen 2026-01-28T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2026-0246 Lexmark Laser Printers: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Benutzerrechten 2026-01-28T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2026-0210 IBM DB2 Big SQL: Mehrere Schwachstellen 2026-01-25T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2026-0121 Drupal Module: Mehrere Schwachstellen 2026-01-14T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2026-0090 Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-01-13T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2026-0019 Red Hat Enterprise Linux (Quarkus): Mehrere Schwachstellen 2026-01-06T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2025-2812 Mozilla Firefox: Mehrere Schwachstellen 2025-12-09T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2025-2706 Python: Mehrere Schwachstellen ermöglichen Denial of Service 2025-12-01T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
wid-sec-w-2025-2672 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-11-24T23:00:00.000+00:00 2026-02-04T23:00:00.000+00:00
ID Description Published Updated
icsa-25-240-05 Delta Electronics COMMGR 2025-08-28T06:00:00.000000Z 2025-08-28T06:00:00.000000Z
icsa-25-240-04 Delta Electronics CNCSoft-G2 2025-08-28T06:00:00.000000Z 2025-08-28T06:00:00.000000Z
icsa-25-240-02 Mitsubishi Electric MELSEC iQ-F Series CPU Module 2025-08-28T06:00:00.000000Z 2025-08-28T06:00:00.000000Z
icsa-25-240-01 Mitsubishi Electric MELSEC iQ-F Series CPU Module 2025-08-28T06:00:00.000000Z 2025-08-28T06:00:00.000000Z
icsa-25-273-02 Festo SBRD-Q/SBOC-Q/SBOI-Q 2021-09-22T11:13:00.000000Z 2025-08-26T10:00:00.000000Z
icsa-25-182-06 Hitachi Energy Relion 670/650 and SAM600-IO Series (Update A) 2025-06-24T12:30:00.000000Z 2025-08-26T10:00:00.000000Z
icsa-25-261-05 Remote Code Execution Vulnerability in Hitachi Energy Service Suite Product 2025-08-26T09:52:01.000000Z 2025-08-26T09:52:01.000000Z
icsa-25-261-04 Multiple Open-Source Software Vulnerabilities in Hitachi Energy Asset Suite Product 2025-08-26T09:22:47.000000Z 2025-08-26T09:22:00.000000Z
icsa-25-238-01 INVT VT-Designer and HMITool 2025-08-26T06:00:00.000000Z 2025-08-26T06:00:00.000000Z
icsa-25-140-03 Danfoss AK-SM 8xxA Series (Update A) 2025-05-20T06:00:00.000000Z 2025-08-26T06:00:00.000000Z
va-25-239-01 Agiloft multiple vulnerabilities 2025-08-26T00:00:00Z 2025-08-26T00:00:00Z
icsma-25-233-01 FUJIFILM Healthcare Americas Synapse Mobility 2025-08-21T06:00:00.000000Z 2025-08-21T06:00:00.000000Z
icsa-25-217-02 Tigo Energy Cloud Connect Advanced (Update A) 2025-08-05T06:00:00.000000Z 2025-08-19T06:00:00.000000Z
icsa-25-226-30 Rockwell Automation FactoryTalk Action Manager 2025-08-14T06:00:00.000000Z 2025-08-15T06:00:00.000000Z
icsa-25-226-29 Rockwell Automation Studio 5000 Logix Designer 2025-08-14T06:00:00.000000Z 2025-08-14T06:00:00.000000Z
icsa-25-226-28 Rockwell Automation ControlLogix Ethernet Modules 2025-08-14T06:00:00.000000Z 2025-08-14T06:00:00.000000Z
icsa-25-226-27 Rockwell Automation ArmorBlock 5000 I/O - Webserver 2025-08-14T06:00:00.000000Z 2025-08-14T06:00:00.000000Z
icsa-25-226-25 Rockwell Automation Micro800 2025-08-14T06:00:00.000000Z 2025-08-14T06:00:00.000000Z
icsa-25-226-24 Rockwell FactoryTalk Linx 2025-08-14T06:00:00.000000Z 2025-08-14T06:00:00.000000Z
icsa-25-226-23 Rockwell Automation FactoryTalk Viewpoint 2025-08-14T06:00:00.000000Z 2025-08-14T06:00:00.000000Z
icsa-25-231-01 Siemens Desigo CC Product Family and SENTRON Powermanager 2025-08-14T00:00:00.000000Z 2025-08-14T00:00:00.000000Z
icsma-25-224-01 Santesoft Sante PACS Server 2025-08-12T06:00:00.000000Z 2025-08-12T06:00:00.000000Z
icsa-25-224-04 AVEVA PI Integrator 2025-08-12T06:00:00.000000Z 2025-08-12T06:00:00.000000Z
icsa-25-224-01 Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share 2025-08-12T06:00:00.000000Z 2025-08-12T06:00:00.000000Z
icsa-24-263-04 MegaSys Computer Technologies Telenium Online Web Application (Update A) 2024-09-19T06:00:00.000000Z 2025-08-12T06:00:00.000000Z
icsa-25-254-09 Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110 2024-06-11T00:00:00.000000Z 2025-08-12T04:00:00.000000Z
icsa-25-240-03 Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit 2025-08-12T04:00:00.000000Z 2025-08-12T04:00:00.000000Z
icsa-25-238-03 Schneider Electric Modicon M340 Controller and Communication Modules 2025-08-12T04:00:00.000000Z 2025-08-12T04:00:00.000000Z
icsa-25-035-06 Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H 2025-01-14T00:00:00.000000Z 2025-08-12T04:00:00.000000Z
icsa-25-266-17 Siemens SINEC Traffic Analyzer 2025-08-12T00:00:00.000000Z 2025-08-12T00:00:00.000000Z
ID Description Published Updated
cisco-sa-sdwan-utd-dos-hdatqxs Cisco Catalyst SD-WAN Routers Denial of Service Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-sdwan-utd-dos-hDATqxs Cisco Catalyst SD-WAN Routers Denial of Service Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-sdw-vedos-kqffhps3 Cisco SD-WAN vEdge Software UDP Packet Validation Denial of Service Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-sdw-vedos-KqFfhps3 Cisco SD-WAN vEdge Software UDP Packet Validation Denial of Service Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-rsvp-dos-oypvgvzf Cisco IOS and IOS XE Software Resource Reservation Protocol Denial of Service Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-rsvp-dos-OypvgVZf Cisco IOS and IOS XE Software Resource Reservation Protocol Denial of Service Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-repacl-9exgnbpd Cisco IOS Software on Cisco Industrial Ethernet Series Switches Access Control List Bypass Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-repacl-9eXgnBpD Cisco IOS Software on Cisco Industrial Ethernet Series Switches Access Control List Bypass Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-pim-apbvfysj Cisco IOS XE Software Protocol Independent Multicast Denial of Service Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-pim-APbVfySJ Cisco IOS XE Software Protocol Independent Multicast Denial of Service Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-ios-xe-sda-edge-dos-mbcbg9k Cisco IOS XE Software SD-Access Fabric Edge Node Denial of Service Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-ios-xe-sda-edge-dos-MBcbG9k Cisco IOS XE Software SD-Access Fabric Edge Node Denial of Service Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-ios-webui-hfwnrgk Cisco IOS and IOS XE Software Web UI Cross-Site Request Forgery Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-ios-webui-HfwnRgk Cisco IOS and IOS XE Software Web UI Cross-Site Request Forgery Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-httpsrvr-dos-yozthut Cisco IOS XE Software HTTP Server Telephony Services Denial of Service Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-httpsrvr-dos-yOZThut Cisco IOS XE Software HTTP Server Telephony Services Denial of Service Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-dnac-ssh-e4uodasj Cisco Catalyst Center Static SSH Host Key Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-dnac-ssh-e4uOdASj Cisco Catalyst Center Static SSH Host Key Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-cpp-vfr-dos-nhhkggo Cisco IOS XE Software IPv4 Fragmentation Reassembly Denial of Service Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-cpp-vfr-dos-nhHKGgO Cisco IOS XE Software IPv4 Fragmentation Reassembly Denial of Service Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-c9800-cwa-acl-npsbhsna Cisco IOS XE Software for Wireless Controllers CWA Pre-Authentication ACL Bypass Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-c9800-cwa-acl-nPSbHSnA Cisco IOS XE Software for Wireless Controllers CWA Pre-Authentication ACL Bypass Vulnerability 2024-09-25T16:00:00+00:00 2024-09-25T16:00:00+00:00
cisco-sa-nso-auth-bypass-qnteesp Multiple Cisco Products Web-Based Management Interface Privilege Escalation Vulnerability 2024-09-11T16:00:00+00:00 2024-09-25T13:05:54+00:00
cisco-sa-nso-auth-bypass-QnTEesp Multiple Cisco Products Web-Based Management Interface Privilege Escalation Vulnerability 2024-09-11T16:00:00+00:00 2024-09-25T13:05:54+00:00
cisco-sa-cucm-xss-9zmfhyz Cisco Unified Communications Manager Cross-Site Scripting Vulnerability 2024-08-21T16:00:00+00:00 2024-09-20T15:48:56+00:00
cisco-sa-cucm-xss-9zmfHyZ Cisco Unified Communications Manager Cross-Site Scripting Vulnerability 2024-08-21T16:00:00+00:00 2024-09-20T15:48:56+00:00
cisco-sa-nxos-cmd-injection-xd9ohyop Cisco NX-OS Software CLI Command Injection Vulnerability 2024-07-01T16:00:00+00:00 2024-09-17T18:05:20+00:00
cisco-sa-nxos-cmd-injection-xD9OhyOP Cisco NX-OS Software CLI Command Injection Vulnerability 2024-07-01T16:00:00+00:00 2024-09-17T18:05:20+00:00
cisco-sa-openssh-rce-2024 Remote Unauthenticated Code Execution Vulnerability in OpenSSH Server (regreSSHion): July 2024 2024-07-02T16:00:00+00:00 2024-09-13T14:43:44+00:00
cisco-sa-pak-mem-exhst-3ke9fefy Cisco IOS XR Software UDP Packet Memory Exhaustion Vulnerability 2024-09-11T16:00:00+00:00 2024-09-11T16:00:00+00:00
ID Description Published Updated
msrc_cve-2026-34353 CVE-2026-34353 2026-03-02T00:00:00.000Z 2026-04-01T01:57:48.000Z
msrc_cve-2025-67030 CVE-2025-67030 2026-03-02T00:00:00.000Z 2026-04-01T01:57:06.000Z
msrc_cve-2026-4746 Heap Buffer Over-Write Vulenrabilty in timeplus-io/proton 2026-03-02T00:00:00.000Z 2026-04-01T01:56:21.000Z
msrc_cve-2024-41013 xfs: don't walk off the end of a directory data block 2024-07-01T07:00:00.000Z 2026-04-01T01:52:41.000Z
msrc_cve-2024-35839 netfilter: bridge: replace physindev with physinif in nf_bridge_info 2024-05-02T07:00:00.000Z 2026-04-01T01:51:56.000Z
msrc_cve-2023-52676 bpf: Guard stack limits against 32bit overflow 2024-05-02T07:00:00.000Z 2026-04-01T01:51:22.000Z
msrc_cve-2025-68822 Input: alps - fix use-after-free bugs caused by dev3_register_work 2026-01-02T00:00:00.000Z 2026-04-01T01:49:12.000Z
msrc_cve-2025-38029 kasan: avoid sleepable page allocation from atomic context 2025-06-02T00:00:00.000Z 2026-03-31T15:19:26.000Z
msrc_cve-2025-38064 virtio: break and reset virtio devices on device_shutdown() 2025-06-02T00:00:00.000Z 2026-03-31T15:19:18.000Z
msrc_cve-2025-38041 clk: sunxi-ng: h616: Reparent GPU clock during frequency changes 2025-06-02T00:00:00.000Z 2026-03-31T15:19:10.000Z
msrc_cve-2025-37801 spi: spi-imx: Add check for spi_imx_setupxfer() 2025-05-02T00:00:00.000Z 2026-03-31T15:19:02.000Z
msrc_cve-2024-40989 KVM: arm64: Disassociate vcpus from redistributor region on teardown 2024-07-01T07:00:00.000Z 2026-03-31T15:18:59.000Z
msrc_cve-2025-37800 driver core: fix potential NULL pointer dereference in dev_uevent() 2025-05-02T00:00:00.000Z 2026-03-31T15:18:56.000Z
msrc_cve-2024-40966 tty: add the option to have a tty reject a new ldisc 2024-07-01T07:00:00.000Z 2026-03-31T15:18:54.000Z
msrc_cve-2025-5791 Users: `root` appended to group listings 2025-06-02T00:00:00.000Z 2026-03-31T15:18:51.000Z
msrc_cve-2022-48816 SUNRPC: lock against ->sock changing during sysfs read 2024-07-01T07:00:00.000Z 2026-03-31T15:18:48.000Z
msrc_cve-2024-41008 drm/amdgpu: change vm->task_info handling 2024-07-01T07:00:00.000Z 2026-03-31T15:18:45.000Z
msrc_cve-2025-39940 dm-stripe: fix a possible integer overflow 2025-10-02T00:00:00.000Z 2026-03-31T15:18:42.000Z
msrc_cve-2025-39932 smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) 2025-10-02T00:00:00.000Z 2026-03-31T15:18:35.000Z
msrc_cve-2025-21870 ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers 2025-03-02T00:00:00.000Z 2026-03-31T15:18:35.000Z
msrc_cve-2025-21888 RDMA/mlx5: Fix a WARN during dereg_mr for DM type 2025-03-02T00:00:00.000Z 2026-03-31T15:18:28.000Z
msrc_cve-2025-13462 tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling 2026-03-02T00:00:00.000Z 2026-03-31T15:18:28.000Z
msrc_cve-2025-55554 pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long(). 2025-09-02T00:00:00.000Z 2026-03-31T15:18:27.000Z
msrc_cve-2026-4519 webbrowser.open() allows leading dashes in URLs 2026-03-02T00:00:00.000Z 2026-03-31T15:18:21.000Z
msrc_cve-2025-55551 An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation. 2025-09-02T00:00:00.000Z 2026-03-31T15:18:19.000Z
msrc_cve-2024-49937 wifi: cfg80211: Set correct chandef when starting CAC 2024-10-01T07:00:00.000Z 2026-03-31T15:18:17.000Z
msrc_cve-2024-35808 md/dm-raid: don't call md_reap_sync_thread() directly 2024-05-02T07:00:00.000Z 2026-03-31T15:18:17.000Z
msrc_cve-2025-69720 CVE-2025-69720 2026-03-02T00:00:00.000Z 2026-03-31T15:18:12.000Z
msrc_cve-2024-39508 io_uring/io-wq: Use set_bit() and test_bit() at worker->flags 2024-07-01T07:00:00.000Z 2026-03-31T15:18:10.000Z
msrc_cve-2024-49939 wifi: rtw89: avoid to add interface to list twice when SER 2024-10-01T07:00:00.000Z 2026-03-31T15:18:09.000Z
ID Description Published Updated
ncsc-2025-0107 Kwetsbaarheden verholpen in Microsoft Office 2025-04-08T18:50:53.931519Z 2025-04-08T18:50:53.931519Z
ncsc-2025-0106 Kwetsbaarheden verholpen in Siemens producten 2025-04-08T13:57:11.959816Z 2025-04-08T13:57:11.959816Z
ncsc-2025-0101 Kwetsbaarheid verholpen in CrushFTP 2025-04-01T07:47:50.425419Z 2025-04-07T14:03:59.372671Z
ncsc-2025-0105 Kwetsbaarheid verholpen in Ivanti Connect Secure, Policy Secure en ZTA Gateways 2025-04-03T14:19:37.560619Z 2025-04-03T14:19:37.560619Z
ncsc-2025-0104 Kwetsbaarheid verholpen in Cisco Enterprise Chat and Email 2025-04-03T08:04:22.928655Z 2025-04-03T08:04:22.928655Z
ncsc-2025-0103 Kwetsbaarheden verholpen in Apple iOS en iPadOS 2025-04-01T08:42:27.059536Z 2025-04-01T08:42:27.059536Z
ncsc-2025-0102 Kwetsbaarheden verholpen in Apple macOS 2025-04-01T08:41:09.934597Z 2025-04-01T08:41:09.934597Z
ncsc-2025-0100 Kwetsbaarheden verholpen in GitLab EE/CE 2025-03-27T14:49:34.316050Z 2025-03-27T14:49:34.316050Z
ncsc-2025-0095 Kwetsbaarheden verholpen in Kubernetes Ingress NGINX Controller 2025-03-25T07:13:08.093318Z 2025-03-27T14:41:30.387171Z
ncsc-2025-0099 Kwetsbaarheden verholpen in Splunk Enterprise en Splunk Cloud Platform 2025-03-27T09:18:30.331072Z 2025-03-27T09:18:30.331072Z
ncsc-2025-0098 Kwetsbaarheid verholpen in Google Chrome 2025-03-26T12:45:59.434386Z 2025-03-26T12:45:59.434386Z
ncsc-2025-0097 Kwetsbaarheid verholpen in NetApp SnapCenter 2025-03-25T08:41:39.996819Z 2025-03-25T08:41:39.996819Z
ncsc-2025-0096 Kwetsbaarheid verholpen in Next.js 2025-03-25T08:38:53.524904Z 2025-03-25T08:38:53.524904Z
ncsc-2025-0094 Kwetsbaarheid verholpen in Veeam Backup & Replication 2025-03-20T14:10:16.806777Z 2025-03-20T14:10:16.806777Z
ncsc-2025-0093 Kwetsbaarheid verholpen in IBM InfoSphere Information Server 2025-03-20T13:17:45.897480Z 2025-03-20T13:17:45.897480Z
ncsc-2025-0092 Kwetsbaarheden verholpen in IBM AIX 2025-03-20T13:13:43.163579Z 2025-03-20T13:13:43.163579Z
ncsc-2025-0091 Kwetsbaarheid verholpen in Synology DiskStation Manager 2025-03-19T15:03:23.414509Z 2025-03-19T15:03:23.414509Z
ncsc-2025-0090 Kwetsbaarheid verholpen in Synology Replication Service en Synology Unified Controller 2025-03-19T15:02:46.122619Z 2025-03-19T15:02:46.122619Z
ncsc-2025-0089 Kwetsbaarheid verholpen in Apache Tomcat 2025-03-17T18:36:12.978021Z 2025-03-17T18:36:12.978021Z
ncsc-2025-0088 Kwetsbaarheden verholpen in Autodesk AutoCAD 2025-03-14T10:10:13.263645Z 2025-03-14T10:10:13.263645Z
ncsc-2025-0087 Kwetsbaarheden verholpen in GitLab 2025-03-14T09:14:59.775984Z 2025-03-14T09:14:59.775984Z
ncsc-2025-0086 Kwetsbaarheid verholpen in Apple iOS, iPadOS, macOS Sequoia, visionOS en Safari 2025-03-12T13:48:59.223945Z 2025-03-12T13:48:59.223945Z
ncsc-2025-0085 Kwetsbaarheid verholpen in Ivanti Secure Access Client 2025-03-12T11:00:45.614633Z 2025-03-12T11:00:45.614633Z
ncsc-2025-0084 Kwetsbaarheden verholpen in Adobe Acrobat Reader 2025-03-12T10:56:00.883114Z 2025-03-12T10:56:00.883114Z
ncsc-2025-0083 Kwetsbaarheden verholpen in Fortinet FortiSandbox 2025-03-12T10:51:18.487649Z 2025-03-12T10:51:18.487649Z
ncsc-2025-0082 Kwetsbaarheden verholpen in FortiOS, FortiProxy, FortiPAM, FortiSRA en FortiWeb. 2025-03-12T10:46:38.451715Z 2025-03-12T10:46:38.451715Z
ncsc-2025-0081 Kwetsbaarheden verholpen in Microsoft Azure 2025-03-11T18:45:19.628300Z 2025-03-11T18:45:19.628300Z
ncsc-2025-0080 Kwetsbaarheden verholpen in Microsoft Office 2025-03-11T18:44:43.336447Z 2025-03-11T18:44:43.336447Z
ncsc-2025-0079 Kwetsbaarheden verholpen in Microsoft Developer Tools 2025-03-11T18:44:07.766518Z 2025-03-11T18:44:07.766518Z
ncsc-2025-0078 Kwetsbaarheden verholpen in Microsoft Windows 2025-03-11T18:43:14.505624Z 2025-03-11T18:43:14.505624Z
ID Description Published Updated
opensuse-su-2026:10251-1 cockpit-packages-4.1-4.1 on GA media 2026-02-25T00:00:00Z 2026-02-25T00:00:00Z
opensuse-su-2026:10250-1 cockpit-machines-348-1.1 on GA media 2026-02-25T00:00:00Z 2026-02-25T00:00:00Z
opensuse-su-2026:10249-1 cmctl-2.4.1-1.1 on GA media 2026-02-25T00:00:00Z 2026-02-25T00:00:00Z
opensuse-su-2026:10248-1 MozillaThunderbird-140.8.0-1.1 on GA media 2026-02-25T00:00:00Z 2026-02-25T00:00:00Z
opensuse-su-2026:10247-1 python311-Django4-4.2.28-1.1 on GA media 2026-02-24T00:00:00Z 2026-02-24T00:00:00Z
opensuse-su-2026:10246-1 libsoup-2_4-1-2.74.3-17.1 on GA media 2026-02-24T00:00:00Z 2026-02-24T00:00:00Z
opensuse-su-2026:10245-1 libsoup-3_0-0-3.6.6-1.1 on GA media 2026-02-24T00:00:00Z 2026-02-24T00:00:00Z
opensuse-su-2026:10244-1 libsignal-protocol-c-devel-2.3.3-2.1 on GA media 2026-02-24T00:00:00Z 2026-02-24T00:00:00Z
opensuse-su-2026:10243-1 freerdp2-2.11.7-5.1 on GA media 2026-02-24T00:00:00Z 2026-02-24T00:00:00Z
opensuse-su-2026:10242-1 firefox-esr-140.8.0-1.1 on GA media 2026-02-24T00:00:00Z 2026-02-24T00:00:00Z
opensuse-su-2026:10241-1 cacti-1.2.30+git231.bca15e70c-1.1 on GA media 2026-02-24T00:00:00Z 2026-02-24T00:00:00Z
opensuse-su-2026:20261-1 Security update for openQA, os-autoinst, openQA-devel-container 2026-02-23T19:35:27Z 2026-02-23T19:35:27Z
opensuse-su-2026:20260-1 Security update for mosquitto 2026-02-23T18:17:43Z 2026-02-23T18:17:43Z
opensuse-su-2026:10240-1 weblate-5.16-1.1 on GA media 2026-02-23T00:00:00Z 2026-02-23T00:00:00Z
opensuse-su-2026:10239-1 warewulf4-4.6.5-2.1 on GA media 2026-02-23T00:00:00Z 2026-02-23T00:00:00Z
opensuse-su-2026:10238-1 python311-PyPDF2-2.11.1-4.1 on GA media 2026-02-23T00:00:00Z 2026-02-23T00:00:00Z
opensuse-su-2026:10237-1 libopenssl-3-devel-3.5.3-2.1 on GA media 2026-02-23T00:00:00Z 2026-02-23T00:00:00Z
opensuse-su-2026:10236-1 heroic-games-launcher-2.20.0-1.1 on GA media 2026-02-23T00:00:00Z 2026-02-23T00:00:00Z
opensuse-su-2026:10235-1 cosign-3.0.5-1.1 on GA media 2026-02-23T00:00:00Z 2026-02-23T00:00:00Z
opensuse-su-2026:20258-1 Security update for chromium 2026-02-21T02:15:40Z 2026-02-21T02:15:40Z
opensuse-su-2026:10234-1 chromedriver-145.0.7632.109-1.1 on GA media 2026-02-21T00:00:00Z 2026-02-21T00:00:00Z
opensuse-su-2026:20266-1 Security update for postgresql15 2026-02-20T16:18:08Z 2026-02-20T16:18:08Z
opensuse-su-2026:20265-1 Security update for postgresql14 2026-02-20T16:14:27Z 2026-02-20T16:14:27Z
opensuse-su-2026:20262-1 Security update for docker-stable 2026-02-20T15:40:19Z 2026-02-20T15:40:19Z
opensuse-su-2026:10233-1 kyverno-1.17.1-1.1 on GA media 2026-02-20T00:00:00Z 2026-02-20T00:00:00Z
opensuse-su-2026:10232-1 cosign-3.0.4-2.1 on GA media 2026-02-20T00:00:00Z 2026-02-20T00:00:00Z
opensuse-su-2026:10231-1 busybox-1.37.0-9.1 on GA media 2026-02-20T00:00:00Z 2026-02-20T00:00:00Z
opensuse-su-2026:20257-1 Security update for python-Authlib 2026-02-19T13:21:50Z 2026-02-19T13:21:50Z
opensuse-su-2026:20253-1 Security update for MozillaFirefox 2026-02-19T11:09:58Z 2026-02-19T11:09:58Z
opensuse-su-2026:20254-1 Security update for python313 2026-02-19T10:31:04Z 2026-02-19T10:31:04Z
ID Description Published Updated
rhsa-2025:23746 Red Hat Security Advisory: grafana security update 2025-12-22T01:42:33+00:00 2026-04-18T02:05:50+00:00
rhsa-2025:23741 Red Hat Security Advisory: go-toolset:rhel8 security update 2025-12-22T01:35:17+00:00 2026-04-18T02:05:50+00:00
rhsa-2025:23740 Red Hat Security Advisory: go-toolset:rhel8 security update 2025-12-22T01:19:27+00:00 2026-04-18T02:05:50+00:00
rhsa-2025:23737 Red Hat Security Advisory: go-toolset:rhel8 security update 2025-12-22T01:43:37+00:00 2026-04-18T02:05:49+00:00
rhsa-2025:23736 Red Hat Security Advisory: grafana security update 2025-12-22T01:28:57+00:00 2026-04-18T02:05:49+00:00
rhsa-2025:23733 Red Hat Security Advisory: go-toolset:rhel8 security update 2025-12-22T01:38:52+00:00 2026-04-18T02:05:48+00:00
rhsa-2025:23546 Red Hat Security Advisory: Red Hat Quay 3.16.0 2025-12-17T18:13:48+00:00 2026-04-18T02:05:47+00:00
rhsa-2025:23535 Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.12 2025-12-17T15:38:59+00:00 2026-04-18T02:05:47+00:00
rhsa-2025:23534 Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.7 2025-12-17T15:37:08+00:00 2026-04-18T02:05:46+00:00
rhsa-2025:23531 Red Hat Security Advisory: RHOAI 2.25.1 - Red Hat OpenShift AI 2025-12-17T15:17:16+00:00 2026-04-18T02:05:45+00:00
rhsa-2025:23449 Red Hat Security Advisory: Red Hat AI Inference Server 3.2.5 (ROCm) 2025-12-17T08:22:31+00:00 2026-04-18T02:05:44+00:00
rhsa-2025:23421 Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.8.1 release 2025-12-16T22:09:50+00:00 2026-04-18T02:05:44+00:00
rhsa-2025:23394 Red Hat Security Advisory: skopeo security update 2025-12-18T13:16:28+00:00 2026-04-18T02:05:43+00:00
rhsa-2025:23374 Red Hat Security Advisory: container-tools:rhel8 security update 2025-12-18T13:15:55+00:00 2026-04-18T02:05:42+00:00
rhsa-2025:23348 Red Hat Security Advisory: skopeo security update 2025-12-18T10:08:06+00:00 2026-04-18T02:05:42+00:00
rhsa-2025:23347 Red Hat Security Advisory: podman security update 2025-12-18T10:09:41+00:00 2026-04-18T02:05:42+00:00
rhsa-2025:23326 Red Hat Security Advisory: skopeo security update 2025-12-18T13:18:48+00:00 2026-04-18T02:05:41+00:00
rhsa-2025:23325 Red Hat Security Advisory: podman security update 2025-12-18T13:20:27+00:00 2026-04-18T02:05:40+00:00
rhsa-2025:23295 Red Hat Security Advisory: podman security update 2025-12-18T10:17:02+00:00 2026-04-18T02:05:40+00:00
rhsa-2025:23294 Red Hat Security Advisory: skopeo security update 2025-12-18T10:13:42+00:00 2026-04-18T02:05:39+00:00
rhsa-2025:23209 Red Hat Security Advisory: Red Hat AI Inference Server 3.2.5 (TPU) 2025-12-15T15:50:15+00:00 2026-04-18T02:05:39+00:00
rhsa-2025:23080 Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA) 2025-12-10T18:26:32+00:00 2026-04-18T02:05:39+00:00
rhsa-2025:23205 Red Hat Security Advisory: Red Hat AI Inference Server 3.2.5 (ROCm) 2025-12-15T15:38:07+00:00 2026-04-18T02:05:38+00:00
rhsa-2025:23204 Red Hat Security Advisory: Red Hat AI Inference Server 3.2.5 (CUDA) 2025-12-15T15:38:04+00:00 2026-04-18T02:05:37+00:00
rhsa-2025:23202 Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.5 (CUDA) 2025-12-15T15:29:01+00:00 2026-04-18T02:05:37+00:00
rhsa-2025:23088 Red Hat Security Advisory: grafana security update 2025-12-11T00:30:04+00:00 2026-04-18T02:05:36+00:00
rhsa-2025:23087 Red Hat Security Advisory: grafana security update 2025-12-11T01:00:04+00:00 2026-04-18T02:05:36+00:00
rhsa-2025:23078 Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (CUDA) 2025-12-10T18:24:36+00:00 2026-04-18T02:05:35+00:00
rhsa-2025:23079 Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (ROCm) 2025-12-10T18:25:33+00:00 2026-04-18T02:05:34+00:00
rhsa-2025:23057 Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.3.2 2025-12-10T15:00:17+00:00 2026-04-18T02:05:33+00:00
ID Description Published Updated
SSA-322980 SSA-322980: Denial of Service Vulnerability in SIPROTEC 5 Devices 2023-04-11T00:00:00Z 2025-11-11T00:00:00Z
SSA-292063 SSA-292063: Multiple Vulnerabilities in Nozomi Guardian/CMC before 22.6.3 and 23.1.0 on RUGGEDCOM APE1808 devices 2023-11-14T00:00:00Z 2024-05-14T00:00:00Z
SSA-292022 SSA-292022: Vulnerability in Nozomi Guardian/CMC before 23.4.1 on RUGGEDCOM APE1808 devices 2024-05-14T00:00:00Z 2024-05-14T00:00:00Z
SSA-273900 SSA-273900: Multiple Vulnerabilities in SIMATIC CN 4100 before V3.0 2024-05-14T00:00:00Z 2024-05-14T00:00:00Z
SSA-265688 SSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1 2024-04-09T00:00:00Z 2026-02-10T00:00:00Z
SSA-258494 SSA-258494: Stack Overflow Vulnerability in Simcenter Nastran before 2406.90 2024-05-14T00:00:00Z 2024-05-14T00:00:00Z
SSA-240541 SSA-240541: WIBU Systems CodeMeter Heap Buffer Overflow Vulnerability in Industrial Products 2023-09-12T00:00:00Z 2024-05-14T00:00:00Z
SSA-225840 SSA-225840: Vulnerabilities in the Network Communication Stack in Sinteso EN and Cerberus PRO EN Fire Protection Systems 2024-03-12T00:00:00Z 2024-05-14T00:00:00Z
SSA-148641 SSA-148641: XPath Constraint Vulnerability in Mendix Runtime 2022-03-08T00:00:00Z 2024-10-08T00:00:00Z
SSA-046364 SSA-046364: X_T File Parsing Vulnerabilities in Parasolid 2024-05-14T00:00:00Z 2024-05-14T00:00:00Z
SSA-750274 SSA-750274: Impact of CVE-2024-3400 on RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW 2024-04-19T00:00:00Z 2024-07-09T00:00:00Z
ssa-885980 SSA-885980: Multiple Vulnerabilities in Scalance W1750D 2024-04-09T00:00:00Z 2024-04-09T00:00:00Z
ssa-831302 SSA-831302: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0 2023-06-13T00:00:00Z 2024-04-09T00:00:00Z
ssa-794697 SSA-794697: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP before V1.1 2023-06-13T00:00:00Z 2024-04-09T00:00:00Z
ssa-716164 SSA-716164: Multiple Vulnerabilities in Scalance W1750D 2024-02-13T00:00:00Z 2024-04-09T00:00:00Z
ssa-556635 SSA-556635: Multiple Vulnerabilities in Telecontrol Server Basic before V3.1.2.0 2024-04-09T00:00:00Z 2024-04-09T00:00:00Z
ssa-457702 SSA-457702: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W700 Product Family 2023-11-14T00:00:00Z 2024-04-09T00:00:00Z
ssa-222019 SSA-222019: X_T File Parsing Vulnerabilities in Parasolid 2024-04-09T00:00:00Z 2024-04-09T00:00:00Z
ssa-203374 SSA-203374: Multiple OpenSSL Vulnerabilities in SCALANCE W1750D Devices 2023-03-14T00:00:00Z 2024-04-09T00:00:00Z
ssa-128433 SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP2 2024-04-09T00:00:00Z 2024-04-09T00:00:00Z
SSA-885980 SSA-885980: Multiple Vulnerabilities in Scalance W1750D 2024-04-09T00:00:00Z 2024-04-09T00:00:00Z
SSA-831302 SSA-831302: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0 2023-06-13T00:00:00Z 2024-04-09T00:00:00Z
SSA-822518 SSA-822518: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW Before V11.0.1 on RUGGEDCOM APE1808 Devices 2024-04-09T00:00:00Z 2024-12-10T00:00:00Z
SSA-794697 SSA-794697: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP before V1.1 2023-06-13T00:00:00Z 2024-04-09T00:00:00Z
SSA-730482 SSA-730482: Denial of Service Vulnerability in SIMATIC WinCC 2024-04-09T00:00:00Z 2025-01-14T00:00:00Z
SSA-716164 SSA-716164: Multiple Vulnerabilities in Scalance W1750D 2024-02-13T00:00:00Z 2024-04-09T00:00:00Z
SSA-556635 SSA-556635: Multiple Vulnerabilities in Telecontrol Server Basic before V3.1.2.0 2024-04-09T00:00:00Z 2024-04-09T00:00:00Z
SSA-457702 SSA-457702: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W700 Product Family 2023-11-14T00:00:00Z 2024-04-09T00:00:00Z
SSA-222019 SSA-222019: X_T File Parsing Vulnerabilities in Parasolid 2024-04-09T00:00:00Z 2024-04-09T00:00:00Z
SSA-203374 SSA-203374: Multiple OpenSSL Vulnerabilities in SCALANCE W1750D Devices 2023-03-14T00:00:00Z 2024-04-09T00:00:00Z
ID Description Published Updated
suse-su-2026:20863-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:49:34Z 2026-03-24T16:49:34Z
suse-su-2026:20885-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:49:25Z 2026-03-24T16:49:25Z
suse-su-2026:20884-1 Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:49:25Z 2026-03-24T16:49:25Z
suse-su-2026:20862-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:49:25Z 2026-03-24T16:49:25Z
suse-su-2026:20861-1 Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:49:25Z 2026-03-24T16:49:25Z
suse-su-2026:20883-1 Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:49:13Z 2026-03-24T16:49:13Z
suse-su-2026:20882-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:49:13Z 2026-03-24T16:49:13Z
suse-su-2026:20860-1 Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:49:13Z 2026-03-24T16:49:13Z
suse-su-2026:20859-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:49:13Z 2026-03-24T16:49:13Z
suse-su-2026:20881-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:49:03Z 2026-03-24T16:49:03Z
suse-su-2026:20880-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:49:03Z 2026-03-24T16:49:03Z
suse-su-2026:20858-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:49:03Z 2026-03-24T16:49:03Z
suse-su-2026:20857-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:49:03Z 2026-03-24T16:49:03Z
suse-su-2026:20900-1 Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:48:56Z 2026-03-24T16:48:56Z
suse-su-2026:20899-1 Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:48:56Z 2026-03-24T16:48:56Z
suse-su-2026:20856-1 Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:48:56Z 2026-03-24T16:48:56Z
suse-su-2026:20855-1 Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:48:56Z 2026-03-24T16:48:56Z
suse-su-2026:20898-1 Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:48:44Z 2026-03-24T16:48:44Z
suse-su-2026:20897-1 Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:48:44Z 2026-03-24T16:48:44Z
suse-su-2026:20854-1 Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:48:44Z 2026-03-24T16:48:44Z
suse-su-2026:20853-1 Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:48:44Z 2026-03-24T16:48:44Z
suse-su-2026:20845-1 Security update for the Linux Kernel 2026-03-24T16:48:38Z 2026-03-24T16:48:38Z
suse-su-2026:20896-1 Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:48:35Z 2026-03-24T16:48:35Z
suse-su-2026:20895-1 Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:48:35Z 2026-03-24T16:48:35Z
suse-su-2026:20852-1 Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:48:35Z 2026-03-24T16:48:35Z
suse-su-2026:20851-1 Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:48:35Z 2026-03-24T16:48:35Z
suse-su-2026:20876-1 Security update for the Linux Kernel 2026-03-24T16:48:29Z 2026-03-24T16:48:29Z
suse-su-2026:20894-1 Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:48:26Z 2026-03-24T16:48:26Z
suse-su-2026:20893-1 Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:48:26Z 2026-03-24T16:48:26Z
suse-su-2026:20892-1 Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise Micro 6.0) 2026-03-24T16:48:26Z 2026-03-24T16:48:26Z
ID Description Published Updated
alsa-2026:0247 Important: mariadb:10.11 security update 2026-01-07T00:00:00Z 2026-01-12T10:57:59Z
alsa-2026:0136 Important: mariadb10.11 security update 2026-01-06T00:00:00Z 2026-01-12T10:55:58Z
alsa-2026:0225 Important: mariadb:10.3 security update 2026-01-07T00:00:00Z 2026-01-12T10:51:12Z
alsa-2026:0232 Important: mariadb:10.11 security update 2026-01-07T00:00:00Z 2026-01-12T10:48:54Z
alsa-2026:0233 Important: mariadb:10.5 security update 2026-01-07T00:00:00Z 2026-01-12T10:45:28Z
alsa-2026:0237 Important: libpng security update 2026-01-07T00:00:00Z 2026-01-07T21:38:33Z
alsa-2026:0238 Important: libpng security update 2026-01-07T00:00:00Z 2026-01-07T21:36:21Z
alsa-2026:0241 Important: libpng security update 2026-01-07T00:00:00Z 2026-01-07T21:34:12Z
alsa-2026:0125 Important: mingw-libpng security update 2026-01-06T00:00:00Z 2026-01-07T21:32:21Z
alsa-2026:0128 Moderate: poppler security update 2026-01-06T00:00:00Z 2026-01-07T14:29:22Z
alsa-2026:0130 Moderate: poppler security update 2026-01-06T00:00:00Z 2026-01-07T14:26:34Z
alsa-2026:0137 Important: mariadb security update 2026-01-06T00:00:00Z 2026-01-07T14:24:03Z
alsa-2026:0126 Moderate: poppler security update 2026-01-06T00:00:00Z 2026-01-07T14:21:37Z
alsa-2026:0123 Moderate: python3.12 security update 2026-01-06T00:00:00Z 2026-01-07T14:18:43Z
alsa-2026:0108 Moderate: gcc-toolset-15-binutils security update 2026-01-06T00:00:00Z 2026-01-07T14:17:02Z
alsa-2025:14999 Moderate: resource-agents security update 2025-09-02T00:00:00Z 2026-01-05T21:07:54Z
alsa-2025:19434 Moderate: xorg-x11-server security update 2025-11-03T00:00:00Z 2026-01-05T21:05:53Z
alsa-2025:23062 Moderate: ruby:3.3 security update 2025-12-10T00:00:00Z 2026-01-05T20:45:40Z
alsa-2025:23063 Moderate: ruby:3.3 security update 2025-12-10T00:00:00Z 2026-01-05T20:38:49Z
alsa-2025:23141 Moderate: ruby security update 2025-12-11T00:00:00Z 2026-01-05T20:34:29Z
alsa-2025:23241 Important: kernel security update 2025-12-16T00:00:00Z 2026-01-05T20:29:24Z
alsa-2025:23279 Important: kernel security update 2025-12-16T00:00:00Z 2026-01-05T20:25:38Z
alsa-2025:23919 Important: httpd security update 2025-12-22T00:00:00Z 2026-01-05T20:20:59Z
alsa-2026:0052 Moderate: gcc-toolset-14-binutils security update 2026-01-05T00:00:00Z 2026-01-05T20:18:34Z
alsa-2026:0026 Important: thunderbird security update 2026-01-05T00:00:00Z 2026-01-05T10:18:14Z
alsa-2026:0025 Important: thunderbird security update 2026-01-05T00:00:00Z 2026-01-05T10:10:00Z
alsa-2026:0002 Moderate: tar security update 2026-01-05T00:00:00Z 2026-01-05T09:20:37Z
alsa-2025:23543 Important: container-tools:rhel8 security update 2025-12-17T00:00:00Z 2025-12-24T09:25:49Z
alsa-2025:23856 Important: thunderbird security update 2025-12-22T00:00:00Z 2025-12-23T16:45:01Z
alsa-2025:23948 Moderate: grafana security update 2025-12-22T00:00:00Z 2025-12-23T13:42:03Z
ID Description Published Updated
osv-2025-31 Heap-buffer-overflow in Assimp::FBXExporter::WriteObjects 2025-01-15T00:14:05.357161Z 2025-05-17T14:21:13.704657Z
osv-2025-374 Use-of-uninitialized-value in pcpp::SomeIpSdEntry::SomeIpSdEntry 2025-05-17T00:16:26.661924Z 2025-05-17T00:16:26.662355Z
osv-2025-371 Index-out-of-bounds in tcp_analyze_sequence_number 2025-05-16T00:16:16.300219Z 2025-05-16T00:16:16.300689Z
osv-2022-360 Invalid-free in igl::MshLoader::~MshLoader 2022-04-20T00:01:28.065887Z 2025-05-15T14:37:25.846667Z
osv-2020-1807 UNKNOWN READ in __libcpp_memchr 2020-09-18T00:00:38.027965Z 2025-05-15T14:34:05.077689Z
osv-2025-369 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr 2025-05-15T00:19:04.752117Z 2025-05-15T00:19:04.752522Z
osv-2025-368 Heap-buffer-overflow in __parse_options 2025-05-15T00:03:04.543640Z 2025-05-15T00:03:04.544159Z
osv-2024-341 UNKNOWN READ in PointerVector.h 2024-04-30T00:02:07.034555Z 2025-05-14T14:20:00.536472Z
osv-2024-382 UNKNOWN READ in pcpp::Packet::destructPacketData 2024-04-30T00:12:20.588223Z 2025-05-14T14:16:53.222952Z
osv-2023-1259 Use-of-uninitialized-value in std::__1::__stdoutbuf<char>::xsputn 2023-12-06T04:45:58.561174Z 2025-05-14T14:15:48.653022Z
osv-2023-1147 Heap-buffer-overflow in parse_by_block_type 2023-11-13T13:00:50.800524Z 2025-05-14T14:15:31.789989Z
osv-2020-2285 Bad-cast to pcpp::Layer from invalid vptr 2020-12-25T00:01:03.941509Z 2025-05-14T14:08:11.306127Z
osv-2025-363 Heap-buffer-overflow in jv_string_vfmt 2025-05-14T00:03:23.388719Z 2025-05-14T00:03:23.389224Z
osv-2024-1186 UNKNOWN READ in cfl_sds_len 2024-10-08T00:15:47.433219Z 2025-05-13T14:48:36.393777Z
osv-2025-354 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement 2025-05-11T00:17:30.348393Z 2025-05-11T00:17:30.348809Z
osv-2025-352 Use-of-uninitialized-value in JS_FreeRuntime 2025-05-10T00:17:01.243609Z 2025-05-10T00:17:01.243981Z
osv-2025-346 Heap-buffer-overflow in JS_CallInternal 2025-05-09T00:16:48.213077Z 2025-05-09T00:16:48.213425Z
osv-2025-326 Heap-use-after-free in __JS_FreeValueRT 2025-05-05T00:17:02.285374Z 2025-05-05T00:17:02.285666Z
osv-2025-324 Index-out-of-bounds in dwg_decode_eed 2025-05-05T00:11:42.580777Z 2025-05-05T00:11:42.581345Z
osv-2025-323 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr 2025-05-04T00:19:17.568436Z 2025-05-04T00:19:17.568755Z
osv-2025-321 Use-of-uninitialized-value in JS_DefineProperty 2025-05-04T00:16:03.249115Z 2025-05-04T00:16:03.249427Z
osv-2024-1375 Index-out-of-bounds in dwg_decode_eed 2024-12-15T00:01:20.442440Z 2025-05-03T14:23:13.369570Z
osv-2024-1251 UNKNOWN WRITE in s_DCTD_process 2024-11-01T00:02:31.749497Z 2025-04-29T14:29:01.935923Z
osv-2025-300 Negative-size-param in recurse_update_offsets 2025-04-26T00:15:04.274172Z 2025-04-26T00:15:04.274471Z
osv-2023-1135 Segv on unknown address in flb_sds_cat_safe 2023-11-11T13:00:21.019255Z 2025-04-24T14:23:15.311238Z
osv-2025-291 Use-of-uninitialized-value in Poco::Net::NTLMCredentials::parseChallengeMessage 2025-04-20T00:07:34.286645Z 2025-04-20T00:07:34.287298Z
osv-2025-289 Stack-buffer-overflow in ot::Cli::Utils::OutputLine 2025-04-19T00:05:17.593162Z 2025-04-19T00:05:17.593788Z
osv-2025-275 UNKNOWN READ in void std::__1::vector<unsigned char, std::__1::allocator<unsigned char>>::__cons 2025-04-14T00:02:37.519708Z 2025-04-17T14:43:50.559313Z
osv-2024-1272 Segv on unknown address in std::__1::ios_base::~ios_base 2024-11-05T00:03:30.787980Z 2025-04-17T14:38:30.981292Z
osv-2024-987 Heap-buffer-overflow in pcpp::NDPNeighborAdvertisementLayer::toString 2024-08-16T00:15:31.057826Z 2025-04-16T14:29:47.716122Z
ID Description Published Updated
rustsec-2024-0384 `instant` is unmaintained 2024-09-01T12:00:00Z 2024-11-10T13:10:28Z
rustsec-2024-0383 bcc is unmaintained 2024-09-04T12:00:00Z 2024-11-10T12:53:21Z
rustsec-2024-0382 hwloc is unmaintained 2024-09-04T12:00:00Z 2024-11-10T12:52:40Z
rustsec-2024-0381 Replaced by `pqcrypto-mlkem` 2024-10-24T12:00:00Z 2024-11-10T12:05:32Z
rustsec-2024-0380 Replaced by `pqcrypto-mldsa` 2024-10-24T12:00:00Z 2024-11-10T12:05:32Z
rustsec-2024-0320 yaml-rust is unmaintained. 2024-03-20T12:00:00Z 2024-11-01T12:31:51Z
rustsec-2020-0111 may_queue's Queue lacks Send/Sync bound for its Send/Sync trait. 2020-11-10T12:00:00Z 2024-10-25T18:45:36Z
rustsec-2024-0375 `atty` is unmaintained 2024-09-25T12:00:00Z 2024-09-26T12:26:22Z
rustsec-2023-0033 Parsing borsh messages with ZST which are not-copy/clone is unsound 2023-04-12T12:00:00Z 2024-09-23T15:02:17Z
rustsec-2023-0055 Multiple soundness issues 2023-09-03T12:00:00Z 2024-09-16T14:15:37Z
rustsec-2024-0370 proc-macro-error is unmaintained 2024-09-01T12:00:00Z 2024-09-09T12:08:37Z
rustsec-2024-0373 `Endpoint::retry()` calls can lead to panicking 2024-09-02T12:00:00Z 2024-09-08T01:47:13Z
rustsec-2024-0372 Memory leak when calling a canister method via `ic_cdk::call` 2024-09-05T12:00:00Z 2024-09-07T18:23:36Z
rustsec-2024-0371 gix-path improperly resolves configuration path reported by Git 2024-09-06T12:00:00Z 2024-09-07T01:48:33Z
rustsec-2024-0369 phonenumber: panic on parsing crafted phonenumber inputs 2024-07-07T12:00:00Z 2024-09-05T13:40:37Z
rustsec-2024-0367 gix-path uses local config across repos when it is the highest scope 2024-08-31T12:00:00Z 2024-09-03T22:23:51Z
rustsec-2024-0364 gitoxide-core does not neutralize special characters for terminals 2024-08-22T12:00:00Z 2024-08-22T23:15:02Z
rustsec-2024-0361 CWA-2024-004: Gas mispricing in cosmwasm-vm 2024-08-08T12:00:00Z 2024-08-08T17:11:37Z
rustsec-2024-0356 `UserIdentity::is_verified` not checking verification status of own user identity while performing the check 2024-07-18T12:00:00Z 2024-07-19T10:11:38Z
rustsec-2024-0355 gix-path can use a fake program files location 2024-07-18T12:00:00Z 2024-07-18T16:46:06Z
rustsec-2024-0354 Usage of non-constant time base64 decoder could lead to leakage of secret key material 2024-07-17T12:00:00Z 2024-07-18T11:24:58Z
rustsec-2024-0353 Refs and paths with reserved Windows device names access the devices 2024-05-22T12:00:00Z 2024-07-08T15:14:36Z
rustsec-2024-0352 Refs and paths with reserved Windows device names access the devices 2024-05-22T12:00:00Z 2024-07-08T15:14:36Z
rustsec-2024-0351 Refs and paths with reserved Windows device names access the devices 2024-05-22T12:00:00Z 2024-07-08T15:14:36Z
rustsec-2024-0350 Traversal outside working tree enables arbitrary code execution 2024-05-22T12:00:00Z 2024-07-08T15:12:43Z
rustsec-2024-0349 Traversal outside working tree enables arbitrary code execution 2024-05-22T12:00:00Z 2024-07-08T15:12:43Z
rustsec-2024-0348 Traversal outside working tree enables arbitrary code execution 2024-05-22T12:00:00Z 2024-07-08T15:12:43Z
rustsec-2024-0335 gix-transport indirect code execution via malicious username 2024-04-13T12:00:00Z 2024-07-02T23:39:37Z
rustsec-2024-0343 Reduced entropy due to inadequate character set usage 2024-06-03T12:00:00Z 2024-06-15T13:11:33Z
rustsec-2020-0071 Potential segfault in the time crate 2020-11-18T12:00:00Z 2024-06-05T14:00:17Z
ID Description Published Updated
bit-grafana-2022-29170 Grafana Enterprise datasource network restrictions bypass via HTTP redirects 2024-03-06T10:56:56.871Z 2026-03-20T09:47:33.381Z
bit-grafana-2022-24812 FGAC API Key privilege escalation in Grafana 2024-03-06T10:57:31.076Z 2026-03-20T09:47:33.381Z
bit-grafana-2021-43798 Grafana path traversal 2024-03-06T10:59:06.588Z 2026-03-20T09:47:33.381Z
bit-grafana-2020-24303 2024-03-06T11:00:38.605Z 2026-03-20T09:47:33.381Z
bit-gitlab-2024-10383 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab VSCode Fork 2025-02-11T07:26:57.802Z 2026-03-20T09:47:33.381Z
bit-ghost-2024-43409 Ghost's improper authentication allows access to member information and actions 2024-08-23T07:18:19.005Z 2026-03-20T09:47:33.381Z
bit-ceph-2025-52555 CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS 2026-03-20T09:05:53.515Z 2026-03-20T09:47:33.381Z
bit-ceph-2022-0670 2026-03-20T09:05:45.618Z 2026-03-20T09:47:33.381Z
bit-ceph-2021-20288 2026-03-20T09:05:43.098Z 2026-03-20T09:47:33.381Z
bit-ceph-2020-1760 2026-03-20T09:05:40.784Z 2026-03-20T09:47:33.381Z
bit-ceph-2020-1759 2026-03-20T09:05:38.136Z 2026-03-20T09:47:33.381Z
bit-ceph-2020-1699 2026-03-20T09:05:35.402Z 2026-03-20T09:47:33.381Z
bit-ceph-2020-12059 2026-03-20T09:05:32.882Z 2026-03-20T09:47:33.381Z
bit-ceph-2020-10753 2026-03-20T09:05:30.474Z 2026-03-20T09:47:33.381Z
bit-ceph-2020-10736 2026-03-20T09:05:27.834Z 2026-03-20T09:47:33.381Z
bit-python-2026-4224 Stack overflow parsing XML with deeply nested DTD content models 2026-03-18T08:54:58.205Z 2026-03-18T09:23:06.258Z
bit-python-2026-3644 Incomplete control character validation in http.cookies 2026-03-18T08:54:55.802Z 2026-03-18T09:23:06.258Z
bit-libpython-2026-4224 Stack overflow parsing XML with deeply nested DTD content models 2026-03-18T08:45:42.290Z 2026-03-18T09:23:06.258Z
bit-libpython-2026-3644 Incomplete control character validation in http.cookies 2026-03-18T08:45:39.878Z 2026-03-18T09:23:06.258Z
bit-gitlab-2026-1230 Use of Incorrectly-Resolved Name or Reference in GitLab 2026-03-13T09:35:23.537Z 2026-03-18T09:23:06.258Z
bit-gitlab-2025-12704 Missing Authorization in GitLab 2026-03-13T09:30:55.187Z 2026-03-18T09:23:06.258Z
bit-gitlab-2025-12697 Improper Encoding or Escaping of Output in GitLab 2026-03-13T09:30:53.383Z 2026-03-18T09:23:06.258Z
bit-airflow-2026-30911 Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization 2026-03-18T08:39:32.817Z 2026-03-18T09:23:06.258Z
bit-airflow-2026-28779 Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications 2026-03-18T08:39:31.052Z 2026-03-18T09:23:06.258Z
bit-airflow-2026-28563 Apache Airflow: DAG authorization bypass 2026-03-18T08:39:29.066Z 2026-03-18T09:23:06.258Z
bit-airflow-2026-26929 Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata 2026-03-18T08:39:27.056Z 2026-03-18T09:23:06.258Z
bit-mariadb-2026-3494 MariaDB Server Audit Plugin Comment Handling Bypass 2026-03-10T08:46:18.025Z 2026-03-17T09:18:01.284Z
bit-golang-2026-27142 URLs in meta content attribute actions are not escaped in html/template 2026-03-10T08:44:16.859Z 2026-03-17T09:18:01.284Z
bit-gitlab-2026-1182 Improper Removal of Sensitive Information Before Storage or Transfer in GitLab 2026-03-14T09:09:00.605Z 2026-03-14T09:10:54.038Z
bit-gitlab-2026-1090 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2026-03-13T09:35:17.166Z 2026-03-14T09:10:54.038Z
ID Description Published Updated
cleanstart-2026-uh39784 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process 2026-02-17T00:40:45.017480Z 2026-02-16T09:23:22Z
cleanstart-2026-jr03360 Within HostnameError 2026-02-17T00:39:45.300172Z 2026-02-16T09:23:22Z
cleanstart-2026-gg58376 Within HostnameError 2026-02-17T00:41:15.939977Z 2026-02-16T09:23:22Z
cleanstart-2026-bs57244 Within HostnameError 2026-02-17T00:39:44.907078Z 2026-02-16T09:23:22Z
cleanstart-2026-pr84319 Security fixes for GHSA-2GH3-RMM4-6RQ5, GHSA-R6V5-FH4H-64XC, GHSA-RHFX-M35P-FF5J, GHSA-XWFJ-JGWM-7WP5 applied in versions: 1.27.5-r1, 1.27.6-r0 2026-02-14T00:37:23.085740Z 2026-02-13T12:28:27Z
cleanstart-2026-kk07808 issue has been found in third-party PNM decoding associated with libpng 1 2026-02-14T00:37:45.311656Z 2026-02-13T12:28:27Z
cleanstart-2026-wv76464 libexpat in Expat before 2 2026-02-13T00:43:45.311968Z 2026-02-12T13:07:54Z
cleanstart-2026-tr92727 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ... 2026-02-13T00:41:14.875956Z 2026-02-12T13:07:54Z
cleanstart-2026-qi35149 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process 2026-02-13T00:39:44.259950Z 2026-02-12T13:07:54Z
cleanstart-2026-mh09144 issue was discovered in libexpat before 2 2026-02-13T00:45:17.459930Z 2026-02-12T13:07:54Z
cleanstart-2026-jb30245 Security fixes for GHSA-F6X5-JH6R-WRFV, GHSA-J5W8-Q4QC-RX2X applied in versions: 0.47.2-r0 2026-02-13T00:39:45.274258Z 2026-02-12T13:07:54Z
cleanstart-2026-gv85693 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process 2026-02-13T00:40:14.240914Z 2026-02-12T13:07:54Z
cleanstart-2026-fi29887 During the TLS 1 2026-02-13T00:39:44.225771Z 2026-02-12T13:07:54Z
cleanstart-2026-ca79883 Security fixes for GHSA-6V2P-P943-PHR9, GHSA-C6GW-W398-HV78, GHSA-F6X5-JH6R-WRFV, GHSA-HCG3-P754-CR77, GHSA-J5W8-Q4QC-RX2X, GHSA-QXP5-GW88-XV66, GHSA-V778-237X-GJRC, GHSA-VVGC-356P-C3XW applied in versions: 1.15.0-r1 2026-02-13T00:40:14.901695Z 2026-02-12T13:07:54Z
cleanstart-2026-xb34574 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-02-11T00:40:59.223419Z 2026-02-10T22:11:02Z
cleanstart-2026-ls08172 Within HostnameError 2026-02-11T00:41:59.030674Z 2026-02-10T22:11:02Z
cleanstart-2026-im73098 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate 2026-02-11T00:40:59.052841Z 2026-02-10T22:11:02Z
cleanstart-2026-cv28298 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption 2026-02-11T00:41:59.034081Z 2026-02-10T22:11:02Z
cleanstart-2026-by71381 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption 2026-02-11T00:41:59.117560Z 2026-02-10T22:11:02Z
cleanstart-2026-tj33788 Within HostnameError 2026-02-10T00:39:24.476012Z 2026-02-09T12:51:17Z
cleanstart-2026-gp14462 Security fixes for GHSA-VVGC-356P-C3XW applied in versions: 0.18.0-r0 2026-02-10T00:39:23.397354Z 2026-02-09T12:51:17Z
cleanstart-2026-wk88787 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption 2026-02-06T00:41:29.451524Z 2026-02-05T12:20:16Z
cleanstart-2026-rr78450 Within HostnameError 2026-02-06T00:39:29.463576Z 2026-02-05T12:20:16Z
cleanstart-2026-jq02410 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption 2026-02-06T00:41:59.411604Z 2026-02-05T12:20:16Z
cleanstart-2026-jn44153 Security fixes for GHSA-F6X5-JH6R-WRFV, GHSA-GX3X-VQ4P-MHHV, GHSA-J5W8-Q4QC-RX2X applied in versions: 1.18.0-r0, 1.19.0-r1 2026-02-06T00:39:29.662228Z 2026-02-05T12:20:16Z
cleanstart-2026-bz58799 Within HostnameError 2026-02-06T00:39:29.590361Z 2026-02-05T12:20:16Z
cleanstart-2026-zm20570 Moby is an open-source project created by Docker for software containerization 2026-02-06T00:54:29.621254Z 2026-02-03T13:35:45Z
cleanstart-2026-xe32069 Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a ... 2026-02-06T01:10:32.733224Z 2026-02-03T13:35:45Z
cleanstart-2026-wx01708 vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device 2026-02-06T01:10:02.024980Z 2026-02-03T13:35:45Z
cleanstart-2026-td34476 Moby is an open-source project created by Docker for software containerization 2026-02-06T00:51:29.459800Z 2026-02-03T13:35:45Z
ID Description Updated
ID Description Published Updated
CERTA-2012-ALE-006 Vulnérabilité dans Internet Explorer 2012-09-18T00:00:00.000000 2012-09-21T00:00:00.000000
certa-2012-ale-005 Vulnérabilité dans Oracle Java 2012-08-27T00:00:00.000000 2012-08-31T00:00:00.000000
CERTA-2012-ALE-005 Vulnérabilité dans Oracle Java 2012-08-27T00:00:00.000000 2012-08-31T00:00:00.000000
certa-2012-ale-003 Vulnérabilité dans Microsoft XML Core Services 2012-06-14T00:00:00.000000 2012-08-17T00:00:00.000000
CERTA-2012-ALE-003 Vulnérabilité dans Microsoft XML Core Services 2012-06-14T00:00:00.000000 2012-08-17T00:00:00.000000
certa-2012-ale-004 Vulnérabilité dans Microsoft Exchange et Fast Search Server 2010 2012-07-25T00:00:00.000000 2012-08-16T00:00:00.000000
CERTA-2012-ALE-004 Vulnérabilité dans Microsoft Exchange et Fast Search Server 2010 2012-07-25T00:00:00.000000 2012-08-16T00:00:00.000000
certa-2012-ale-002 Vulnérabilité dans Windows RDP 2012-03-14T00:00:00.000000 2012-04-13T00:00:00.000000
CERTA-2012-ALE-002 Vulnérabilité dans Windows RDP 2012-03-14T00:00:00.000000 2012-04-13T00:00:00.000000
certa-2011-ale-008 Vulnérabilité dans Adobe Reader et Acrobat 2011-12-07T00:00:00.000000 2012-01-10T00:00:00.000000
CERTA-2011-ALE-008 Vulnérabilité dans Adobe Reader et Acrobat 2011-12-07T00:00:00.000000 2012-01-10T00:00:00.000000
certa-2011-ale-007 Vulnérabilité dans ftpd et ProFTPD sur FreeBSD 2011-12-02T00:00:00.000000 2011-12-26T00:00:00.000000
CERTA-2011-ALE-007 Vulnérabilité dans ftpd et ProFTPD sur FreeBSD 2011-12-02T00:00:00.000000 2011-12-26T00:00:00.000000
certa-2011-ale-006 Exploitation d'une vulnérabilité dans la gestion des polices TrueType sur Windows 2011-11-04T00:00:00.000000 2011-12-14T00:00:00.000000
CERTA-2011-ALE-006 Exploitation d'une vulnérabilité dans la gestion des polices TrueType sur Windows 2011-11-04T00:00:00.000000 2011-12-14T00:00:00.000000
certa-2011-ale-005 Exploitation malveillante d'une fonctionnalité du protocole SSL afin de provoquer un déni de service 2011-10-27T00:00:00.000000 2011-10-27T00:00:00.000000
CERTA-2011-ALE-005 Exploitation malveillante d'une fonctionnalité du protocole SSL afin de provoquer un déni de service 2011-10-27T00:00:00.000000 2011-10-27T00:00:00.000000
certa-2011-ale-004 Vulnérabilités dans Apple iOS 2011-07-05T00:00:00.000000 2011-07-18T00:00:00.000000
CERTA-2011-ALE-004 Vulnérabilités dans Apple iOS 2011-07-05T00:00:00.000000 2011-07-18T00:00:00.000000
certa-2011-ale-003 Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat 2011-04-12T00:00:00.000000 2011-06-20T00:00:00.000000
CERTA-2011-ALE-003 Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat 2011-04-12T00:00:00.000000 2011-06-20T00:00:00.000000
certa-2011-ale-002 Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat 2011-03-15T00:00:00.000000 2011-03-22T00:00:00.000000
CERTA-2011-ALE-002 Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat 2011-03-15T00:00:00.000000 2011-03-22T00:00:00.000000
certa-2011-ale-001 Vulnérabilité dans le moteur de rendu graphique de Windows 2011-01-05T00:00:00.000000 2011-02-10T00:00:00.000000
CERTA-2011-ALE-001 Vulnérabilité dans le moteur de rendu graphique de Windows 2011-01-05T00:00:00.000000 2011-02-10T00:00:00.000000
certa-2010-ale-021 Vulnérabilité dans Microsoft Internet Explorer 2010-12-22T00:00:00.000000 2011-02-09T00:00:00.000000
CERTA-2010-ALE-021 Vulnérabilité dans Microsoft Internet Explorer 2010-12-22T00:00:00.000000 2011-02-09T00:00:00.000000
certa-2010-ale-019 Vulnérabilité dans Microsoft Internet Explorer 2010-11-03T00:00:00.000000 2010-12-17T00:00:00.000000
CERTA-2010-ALE-019 Vulnérabilité dans Microsoft Internet Explorer 2010-11-03T00:00:00.000000 2010-12-17T00:00:00.000000
certa-2010-ale-018 Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat 2010-10-28T00:00:00.000000 2010-11-18T00:00:00.000000
ID Description Published Updated
certfr-2026-avi-0103 Multiples vulnérabilités dans Node.js 2026-01-30T00:00:00.000000 2026-01-30T00:00:00.000000
certfr-2026-avi-0102 Vulnérabilité dans Splunk Enterprise 2026-01-30T00:00:00.000000 2026-01-30T00:00:00.000000
CERTFR-2026-AVI-0110 Multiples vulnérabilités Ivanti Endpoint Manager Mobile (EPMM) 2026-01-30T00:00:00.000000 2026-01-30T00:00:00.000000
CERTFR-2026-AVI-0109 Multiples vulnérabilités dans les produits IBM 2026-01-30T00:00:00.000000 2026-01-30T00:00:00.000000
CERTFR-2026-AVI-0108 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-01-30T00:00:00.000000 2026-01-30T00:00:00.000000
CERTFR-2026-AVI-0107 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-01-30T00:00:00.000000 2026-01-30T00:00:00.000000
CERTFR-2026-AVI-0106 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2026-01-30T00:00:00.000000 2026-01-30T00:00:00.000000
CERTFR-2026-AVI-0105 Vulnérabilité dans Microsoft Edge 2026-01-30T00:00:00.000000 2026-01-30T00:00:00.000000
CERTFR-2026-AVI-0104 Vulnérabilité dans Qnap QTS 2026-01-30T00:00:00.000000 2026-01-30T00:00:00.000000
CERTFR-2026-AVI-0103 Multiples vulnérabilités dans Node.js 2026-01-30T00:00:00.000000 2026-01-30T00:00:00.000000
CERTFR-2026-AVI-0102 Vulnérabilité dans Splunk Enterprise 2026-01-30T00:00:00.000000 2026-01-30T00:00:00.000000
certfr-2026-avi-0101 Multiples vulnérabilités dans les produits Siemens 2026-01-29T00:00:00.000000 2026-01-29T00:00:00.000000
certfr-2026-avi-0100 Multiples vulnérabilités dans les produits WithSecure 2026-01-29T00:00:00.000000 2026-01-29T00:00:00.000000
certfr-2026-avi-0099 Multiples vulnérabilités dans SolarWinds Web Help Desk 2026-01-28T00:00:00.000000 2026-01-29T00:00:00.000000
CERTFR-2026-AVI-0101 Multiples vulnérabilités dans les produits Siemens 2026-01-29T00:00:00.000000 2026-01-29T00:00:00.000000
CERTFR-2026-AVI-0100 Multiples vulnérabilités dans les produits WithSecure 2026-01-29T00:00:00.000000 2026-01-29T00:00:00.000000
CERTFR-2026-AVI-0099 Multiples vulnérabilités dans SolarWinds Web Help Desk 2026-01-28T00:00:00.000000 2026-01-29T00:00:00.000000
certfr-2026-avi-0098 Vulnérabilité dans les produits Symfony 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
certfr-2026-avi-0097 Vulnérabilité dans les produits Fortinet 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
certfr-2026-avi-0096 Multiples vulnérabilités dans OpenSSL 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
certfr-2026-avi-0095 Multiples vulnérabilités dans les produits Mozilla 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
certfr-2026-avi-0094 Multiples vulnérabilités dans HPE Aruba Networking Fabric Composer 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
certfr-2026-avi-0093 Multiples vulnérabilités dans Tenable Network Monitor 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
certfr-2026-avi-0092 Vulnérabilité dans Google Chrome 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
certfr-2025-avi-0618 Multiples vulnérabilités dans les produits Mitel 2025-07-24T00:00:00.000000 2026-01-28T00:00:00.000000
CERTFR-2026-AVI-0098 Vulnérabilité dans les produits Symfony 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
CERTFR-2026-AVI-0097 Vulnérabilité dans les produits Fortinet 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
CERTFR-2026-AVI-0096 Multiples vulnérabilités dans OpenSSL 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
CERTFR-2026-AVI-0095 Multiples vulnérabilités dans les produits Mozilla 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
CERTFR-2026-AVI-0094 Multiples vulnérabilités dans HPE Aruba Networking Fabric Composer 2026-01-28T00:00:00.000000 2026-01-28T00:00:00.000000
ID Description Published Updated
jvndb-2022-001923 Multiple vulnerabilities in CONTEC SolarView Compact 2022-05-27T15:28+09:00 2024-06-20T11:34+09:00
jvndb-2022-001795 Command injection vulnerability in QNAP VioStar series NVR 2022-05-12T18:07+09:00 2024-06-20T11:31+09:00
jvndb-2024-000065 "ZOZOTOWN" App for Android fails to restrict custom URL schemes properly 2024-06-19T16:04+09:00 2024-06-19T16:04+09:00
jvndb-2022-000029 KOYO Electronics Screen Creator Advance2 vulnerable to authentication bypass 2022-05-09T14:43+09:00 2024-06-19T16:03+09:00
jvndb-2022-000028 Multiple vulnerabilities in multiple MEIKYO ELECTRIC products 2022-05-09T14:31+09:00 2024-06-19T15:55+09:00
jvndb-2024-000064 WordPress plugin "SiteGuard WP Plugin" may leak the customized path to the login page 2024-06-19T14:25+09:00 2024-06-19T14:25+09:00
jvndb-2022-001809 Trend Micro Password Manager vulnerable to privilege escalation 2022-05-24T15:27+09:00 2024-06-18T17:52+09:00
jvndb-2022-000032 Installer of Trend Micro Password Manager may insecurely load Dynamic Link Libraries 2022-05-11T15:21+09:00 2024-06-18T17:46+09:00
jvndb-2022-000039 RevoWorks incomplete filtering of MS Office v4 macros 2022-05-27T16:09+09:00 2024-06-18T16:31+09:00
jvndb-2022-001948 Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service 2022-06-03T12:17+09:00 2024-06-18T16:30+09:00
jvndb-2022-001931 Multiple vulnerabilities in Fuji Electric V-SFT, V-Server and V-Server Lite 2022-05-27T15:37+09:00 2024-06-18T16:28+09:00
jvndb-2022-000038 WordPress plugin "WP Statistics" vulnerable to cross-site scripting 2022-05-24T15:00+09:00 2024-06-18T15:41+09:00
jvndb-2022-000031 GENEREX RCCMD vulnerable to directory traversal 2022-05-10T15:47+09:00 2024-06-18T15:35+09:00
jvndb-2024-000061 Multiple vulnerabilities in Ricoh Streamline NX PC Client 2024-06-18T14:56+09:00 2024-06-18T14:56+09:00
jvndb-2022-001929 Multiple vulnerabilities in Fuji Electric V-SFT 2022-05-27T15:39+09:00 2024-06-18T13:44+09:00
jvndb-2024-000063 Multiple vulnerabilities in ID Link Manager and FUJITSU Software TIME CREATOR 2024-06-18T13:43+09:00 2024-06-18T13:43+09:00
jvndb-2022-000034 EC-CUBE plugin "Easy Blog for EC-CUBE4" vulnerable to cross-site request forgery 2022-05-13T16:31+09:00 2024-06-18T12:13+09:00
jvndb-2022-000036 Multiple vulnerabilities in Rakuten Casa 2022-05-19T15:13+09:00 2024-06-18T12:09+09:00
jvndb-2022-000053 Django Extract and Trunc functions vulnerable to SQL injection 2022-07-12T13:47+09:00 2024-06-18T11:57+09:00
jvndb-2022-000057 WordPress Plugin "Newsletter" vulnerable to cross-site scripting 2022-07-25T14:30+09:00 2024-06-18T11:21+09:00
jvndb-2022-000033 Strapi vulnerable to cross-site scripting 2022-05-13T16:45+09:00 2024-06-18T11:17+09:00
jvndb-2022-000043 SHIRASAGI vulnerable to cross-site scripting 2022-06-09T13:31+09:00 2024-06-18T11:13+09:00
jvndb-2022-000040 Mobaoku-Auction & Flea Market App for iOS vulnerable to improper server certificate verification 2022-05-27T15:48+09:00 2024-06-18T11:06+09:00
jvndb-2022-000044 Cisco Catalyst 2940 Series Switches vulnerable to cross-site scripting 2022-06-14T13:46+09:00 2024-06-18T10:51+09:00
jvndb-2022-000047 web2py vulnerable to open redirect 2022-06-23T14:21+09:00 2024-06-18T10:48+09:00
jvndb-2022-000048 L2Blocker Sensor setup screen vulnerable to authentication bypass 2022-06-24T14:21+09:00 2024-06-18T10:45+09:00
jvndb-2022-000041 WordPress Plugin "Modern Events Calendar Lite" vulnerable to cross-site scripting 2022-06-01T13:39+09:00 2024-06-18T10:42+09:00
jvndb-2022-000042 T&D Data Server and THERMO RECORDER DATA SERVER contain a directory traversal vulnerability. 2022-06-01T16:12+09:00 2024-06-18T10:34+09:00
jvndb-2022-000051 Multiple vulnerabilities in Cybozu Garoon 2022-07-04T14:17+09:00 2024-06-17T16:49+09:00
jvndb-2022-000035 Multiple vulnerabilities in Cybozu Garoon 2022-05-16T14:25+09:00 2024-06-17T16:34+09:00
ID Description Published Updated
cnvd-2026-14492 多款Apple产品安全绕过漏洞(CNVD-2026-14492) 2026-03-02 2026-03-23
cnvd-2026-14491 多款Apple产品安全绕过漏洞(CNVD-2026-14491) 2026-03-02 2026-03-23
cnvd-2026-14490 多款Apple产品信息泄露漏洞(CNVD-2026-14490) 2026-03-02 2026-03-23
cnvd-2026-14489 多款Apple产品拒绝服务漏洞(CNVD-2026-14489) 2026-03-02 2026-03-23
cnvd-2026-14488 多款Apple产品信息泄露漏洞(CNVD-2026-14488) 2026-03-02 2026-03-23
cnvd-2026-14487 多款Apple产品拒绝服务漏洞(CNVD-2026-14487) 2026-03-02 2026-03-23
cnvd-2026-14486 多款Apple产品拒绝服务漏洞(CNVD-2026-14486) 2026-03-02 2026-03-23
cnvd-2026-14485 多款Apple产品信息泄露漏洞(CNVD-2026-14485) 2026-03-02 2026-03-23
cnvd-2026-14484 多款Apple产品拒绝服务漏洞(CNVD-2026-14484) 2026-03-02 2026-03-23
cnvd-2026-14483 多款Apple产品存在未明漏洞(CNVD-2026-14483) 2026-03-02 2026-03-23
cnvd-2026-14482 多款Apple产品拒绝服务漏洞(CNVD-2026-14482) 2026-03-02 2026-03-23
cnvd-2026-14481 多款Apple产品拒绝服务漏洞(CNVD-2026-14481) 2026-03-02 2026-03-23
cnvd-2026-14480 多款Apple产品信息泄露漏洞(CNVD-2026-14480) 2026-03-02 2026-03-23
cnvd-2026-14479 多款Apple产品安全绕过漏洞(CNVD-2026-14479) 2026-03-02 2026-03-23
cnvd-2026-14478 多款Apple产品信息泄露漏洞(CNVD-2026-14478) 2026-03-02 2026-03-23
cnvd-2026-14477 多款Apple产品存在未明漏洞(CNVD-2026-14477) 2026-03-02 2026-03-23
cnvd-2026-14476 多款Apple产品权限提升漏洞(CNVD-2026-14476) 2026-03-02 2026-03-23
cnvd-2026-14475 多款Apple产品权限提升漏洞(CNVD-2026-14475) 2026-03-02 2026-03-23
cnvd-2026-11369 厦门熵基科技有限公司人证魔方身份认证管理系统存在SQL注入漏洞 2026-02-05 2026-03-22
cnvd-2026-11389 用友网络科技股份有限公司U8 Cloud存在SQL注入漏洞(CNVD-C-2026-72551) 2026-02-04 2026-03-21
cnvd-2026-14410 Microsoft Exchange Server欺骗漏洞(CNVD-2026-14410) 2025-12-12 2026-03-20
cnvd-2026-14409 UTT 520W goform/formIpGroupConfig文件缓冲区溢出漏洞 2026-02-11 2026-03-20
cnvd-2026-14408 Microsoft Excel代码执行漏洞(CNVD-2026-14408) 2026-03-17 2026-03-20
cnvd-2026-14407 TeamViewer DEX Client权限提升漏洞 2025-12-18 2026-03-20
cnvd-2026-14406 MailEnable不安全DLL加载漏洞(CNVD-2026-14406) 2025-12-18 2026-03-20
cnvd-2026-14405 MailEnableMailEnableMailEnable不安全DLL加载漏洞(CNVD-2026-14405) 2025-12-18 2026-03-20
cnvd-2026-14404 MailEnableMailEnable不安全DLL加载漏洞(CNVD-2026-14404) 2025-12-18 2026-03-20
cnvd-2026-14403 MailEnableMailEnable不安全DLL加载漏洞(CNVD-2026-14403) 2025-12-18 2026-03-20
cnvd-2026-14402 MailEnable不安全DLL加载漏洞(CNVD-2026-14402) 2025-12-18 2026-03-20
cnvd-2026-14401 MailEnable不安全DLL加载漏洞(CNVD-2026-14401) 2025-12-18 2026-03-20
ID Description Published Updated
bdu:2025-12162 Уязвимость компонента iommu/mediatek ядра операционной системы Linux, позволяющая нарушит… 28.09.2025 16.02.2026
bdu:2025-12160 Уязвимость функции pxa_ata_probe() ядра операционной системы Linux, позволяющая нарушител… 28.09.2025 16.02.2026
bdu:2025-12158 Уязвимость компонента RDMA/cma ядра операционной системы Linux, позволяющая нарушителю вы… 28.09.2025 16.02.2026
bdu:2025-12156 Уязвимость модуля i2c-cros-ec-tunnel ядра операционной системы Linux, позволяющая нарушит… 28.09.2025 16.02.2026
bdu:2025-12154 Уязвимость ядра операционной системы Linux, связанная с ошибками разыменования нулевого у… 28.09.2025 16.02.2026
bdu:2025-12153 Уязвимость компонента btrtl.c ядра операционной системы Linux, позволяющая нарушителю выз… 28.09.2025 16.02.2026
bdu:2025-12151 Уязвимость компонента mac80211 ядра операционной системы Linux, позволяющая нарушителю вы… 28.09.2025 16.02.2026
bdu:2025-12150 Уязвимость компонента xen-netfront.c ядра операционной системы Linux, позволяющая нарушит… 28.09.2025 16.02.2026
bdu:2025-12149 Уязвимость компонента monitor.c ядра операционной системы Linux, позволяющая нарушителю в… 28.09.2025 16.02.2026
bdu:2025-12145 Уязвимость компонента scpi-cpufreq.c ядра операционной системы Linux, позволяющая нарушит… 28.09.2025 16.02.2026
bdu:2025-12144 Уязвимость функций scmi_cpufreq_get_rate() и cpufreq_cpu_get_raw() ядра операционной сист… 28.09.2025 16.02.2026
bdu:2025-12142 Уязвимость компонента parse.c ядра операционной системы Linux, позволяющая нарушителю выз… 28.09.2025 16.02.2026
bdu:2025-12141 Уязвимость компонента smb2misc.c ядра операционной системы Linux, позволяющая нарушителю … 28.09.2025 16.02.2026
bdu:2025-12140 Уязвимость компонента amd_powerplay.c ядра операционной системы Linux, позволяющая наруши… 28.09.2025 16.02.2026
bdu:2025-12139 Уязвимость компонента hid-pidff.c ядра операционной системы Linux, позволяющая нарушителю… 28.09.2025 16.02.2026
bdu:2025-12138 Уязвимость компонентов igc ядра операционной системы Linux, позволяющая нарушителю вызват… 28.09.2025 16.02.2026
bdu:2025-12137 Уязвимость функции p9_client_write() компонента 9p/net ядра операционной системы Linux, п… 28.09.2025 16.02.2026
bdu:2025-12136 Уязвимость компонента dev.c ядра операционной системы Linux, позволяющая нарушителю вызва… 28.09.2025 16.02.2026
bdu:2025-12134 Уязвимость функции ice_vc_add_fdir_fltr() ядра операционной системы Linux, позволяющая на… 28.09.2025 16.02.2026
bdu:2025-12130 Уязвимость компонента core.c ядра операционной системы Linux, позволяющая нарушителю вызв… 28.09.2025 16.02.2026
bdu:2025-12129 Уязвимость ядра операционной системы Linux, связанная с неправильным разыменованем нулеов… 28.09.2025 16.02.2026
bdu:2025-12128 Уязвимость компонента sch_htb.c ядра операционной системы Linux, позволяющая нарушителю в… 28.09.2025 16.02.2026
bdu:2025-12126 Уязвимость функции mtk_pmic_keys_lp_reset_setup() компонента mtk-pmic-keys.c ядра операци… 28.09.2025 16.02.2026
bdu:2025-12124 Уязвимость компонентов net/sched/ ядра операционной системы Linux, позволяющая нарушителю… 28.09.2025 16.02.2026
bdu:2025-12123 Уязвимость компонента ucsi/displayport.c ядра операционной системы Linux, позволяющая нар… 28.09.2025 16.02.2026
bdu:2025-12119 Уязвимость компонента iscsi ядра операционной системы Linux, позволяющая нарушителю вызва… 28.09.2025 16.02.2026
bdu:2025-12114 Уязвимость компонента com20020-pci.c ядра операционной системы Linux, позволяющая нарушит… 28.09.2025 16.02.2026
bdu:2025-12113 Уязвимость компонента remoteproc ядра операционной системы Linux, позволяющая нарушителю … 28.09.2025 16.02.2026
bdu:2025-12111 Уязвимость компонента net/sched/sch_hfsc.c ядра операционной системы Linux, позволяющая н… 28.09.2025 16.02.2026
bdu:2025-12110 Уязвимость ядра операционной системы Linux, связанная с использованием памяти после её ос… 28.09.2025 16.02.2026
ID Description Updated
var-200704-0220 Buffer overflow in natd in network_cmds in Apple Mac OS X 10.3.9 through 10.4.9, when Int… 2024-07-23T21:33:23.970000Z
var-200810-0141 Heap-based buffer overflow in the local IPC component in the EAPOLController plugin for c… 2024-07-23T21:33:22.791000Z
var-201203-0199 Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers … 2024-07-23T21:32:49.621000Z
var-201210-0179 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-07-23T21:32:41.649000Z
var-200603-0274 FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when cr… 2024-07-23T21:32:41.957000Z
var-202105-1428 An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi… 2024-07-23T21:32:40.302000Z
var-202004-0530 In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean e… 2024-07-23T21:32:40.951000Z
var-201507-0303 Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlie… 2024-07-23T21:32:40.217000Z
var-201208-0141 Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in … 2024-07-23T21:32:40.141000Z
var-200904-0813 The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.1… 2024-07-23T21:32:40.678000Z
var-201203-0181 Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows … 2024-07-23T21:32:39.897000Z
var-202102-1092 An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_a… 2024-07-23T21:32:38.477000Z
var-201605-0491 The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, … 2024-07-23T21:31:34.358000Z
var-201207-0279 ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x bef… 2024-07-23T21:31:34.437000Z
var-201006-1149 Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 throug… 2024-07-23T21:31:33.583000Z
var-201711-0474 An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… 2024-07-23T21:31:29.650000Z
var-201408-0081 The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows m… 2024-07-23T21:31:18.574000Z
var-200106-0149 Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows rem… 2024-07-23T21:31:18.052000Z
var-202101-0218 A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered i… 2024-07-23T21:31:17.324000Z
var-200609-1341 The VPN service in Apple Mac OS X 10.3.x through 10.3.9 and 10.4.x through 10.4.8 does no… 2024-07-23T21:31:15.642000Z
var-202109-1900 An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be explo… 2024-07-23T21:31:14.809000Z
var-201906-1176 Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragme… 2024-07-23T21:31:12.688000Z
var-201304-0062 Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, T… 2024-07-23T21:31:12.868000Z
var-201111-0207 The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64… 2024-07-23T21:30:39.002000Z
var-200107-0175 GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP re… 2024-07-23T21:30:38.108000Z
var-200703-0027 Unspecified vulnerability in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 creates files … 2024-07-23T21:30:34.312000Z
var-201912-0624 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T21:30:33.534000Z
var-200609-1325 Unspecified vulnerability in CFNetwork in Mac OS 10.4.8 and earlier allows user-assisted … 2024-07-23T21:30:33.425000Z
var-201806-1444 An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… 2024-07-23T21:30:32.366000Z
var-201408-0089 Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.… 2024-07-23T21:30:26.317000Z
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated