Recent vulnerabilities

ID CVSS Description Vendor Product Published Updated
CVE-1999-0531
N/A
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "An SMTP service supports EXPN, VRFY, HELP, ESMTP, and/or EHLO. N/A N/A 2000-02-04T05:00:00 2005-11-02T10:00:00
CVE-1999-0532
N/A
A DNS server allows zone transfers. n/a
 n/a
 2000-02-04T05:00:00.000Z 2025-03-17T15:03:26.630Z
CVE-1999-0533
N/A
A DNS server allows inverse queries. n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.220Z
CVE-1999-0534
N/A
A Windows NT user has inappropriate rights or pri… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.562Z
CVE-1999-0535
N/A
A Windows NT account policy for passwords has ina… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.607Z
CVE-1999-0537
N/A
A configuration in a web browser such as Internet… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.684Z
CVE-1999-0539
N/A
A trust relationship exists between two Unix hosts. n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.533Z
CVE-1999-0541
N/A
A password for accessing a WWW URL is guessable. n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.483Z
CVE-1999-0546
N/A
The Windows NT guest account is enabled. n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.470Z
CVE-1999-0547
N/A
An SSH server allows authentication through the .… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.708Z
CVE-1999-0548
N/A
A superfluous NFS server is running, but it is no… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.685Z
CVE-1999-0549
N/A
Windows NT automatically logs in an administrator… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.554Z
CVE-1999-0550
N/A
A router's routing tables can be obtained from ar… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.663Z
CVE-1999-0554
N/A
NFS exports system-critical data to the world, e.… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.685Z
CVE-1999-0555
N/A
A Unix account with a name other than "root" has … n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.566Z
CVE-1999-0556
N/A
Two or more Unix accounts have the same UID. n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.487Z
CVE-1999-0559
N/A
A system-critical Unix file or directory has inap… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.643Z
CVE-1999-0560
N/A
A system-critical Windows NT file or directory ha… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.462Z
CVE-1999-0561
N/A
IIS has the #exec function enabled for Server Sid… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.516Z
CVE-1999-0562
N/A
The registry in Windows NT can be accessed remote… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.690Z
CVE-1999-0564
N/A
An attacker can force a printer to print arbitrar… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.562Z
CVE-1999-0565
N/A
A Sendmail alias allows input to be piped to a program. n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.585Z
CVE-1999-0568
N/A
rpc.admind in Solaris is not running in a secure mode. n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.611Z
CVE-1999-0569
N/A
A URL for a WWW directory allows auto-indexing, w… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.540Z
CVE-1999-0570
N/A
Windows NT is not using a password filter utility… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.711Z
CVE-1999-0571
N/A
A router's configuration service or management in… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.638Z
CVE-1999-0572
N/A
.reg files are associated with the Windows NT reg… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.516Z
CVE-1999-0575
N/A
A Windows NT system's user audit policy does not … n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.675Z
CVE-1999-0576
N/A
A Windows NT system's file audit policy does not … n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.649Z
CVE-1999-0577
N/A
A Windows NT system's file audit policy does not … n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.676Z
ID CVSS Description Vendor Product Published Updated
CVE-1999-0531
N/A
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "An SMTP service supports EXPN, VRFY, HELP, ESMTP, and/or EHLO. N/A N/A 2000-02-04T05:00:00 2005-11-02T10:00:00
CVE-1999-0532
N/A
A DNS server allows zone transfers. n/a
 n/a
 2000-02-04T05:00:00.000Z 2025-03-17T15:03:26.630Z
CVE-1999-0533
N/A
A DNS server allows inverse queries. n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.220Z
CVE-1999-0534
N/A
A Windows NT user has inappropriate rights or pri… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.562Z
CVE-1999-0535
N/A
A Windows NT account policy for passwords has ina… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.607Z
CVE-1999-0537
N/A
A configuration in a web browser such as Internet… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.684Z
CVE-1999-0539
N/A
A trust relationship exists between two Unix hosts. n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.533Z
CVE-1999-0541
N/A
A password for accessing a WWW URL is guessable. n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.483Z
CVE-1999-0546
N/A
The Windows NT guest account is enabled. n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.470Z
CVE-1999-0547
N/A
An SSH server allows authentication through the .… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.708Z
CVE-1999-0548
N/A
A superfluous NFS server is running, but it is no… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.685Z
CVE-1999-0549
N/A
Windows NT automatically logs in an administrator… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.554Z
CVE-1999-0550
N/A
A router's routing tables can be obtained from ar… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.663Z
CVE-1999-0554
N/A
NFS exports system-critical data to the world, e.… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.685Z
CVE-1999-0555
N/A
A Unix account with a name other than "root" has … n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.566Z
CVE-1999-0556
N/A
Two or more Unix accounts have the same UID. n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.487Z
CVE-1999-0559
N/A
A system-critical Unix file or directory has inap… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.643Z
CVE-1999-0560
N/A
A system-critical Windows NT file or directory ha… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.462Z
CVE-1999-0561
N/A
IIS has the #exec function enabled for Server Sid… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.516Z
CVE-1999-0562
N/A
The registry in Windows NT can be accessed remote… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.690Z
CVE-1999-0564
N/A
An attacker can force a printer to print arbitrar… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.562Z
CVE-1999-0565
N/A
A Sendmail alias allows input to be piped to a program. n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.585Z
CVE-1999-0568
N/A
rpc.admind in Solaris is not running in a secure mode. n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.611Z
CVE-1999-0569
N/A
A URL for a WWW directory allows auto-indexing, w… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.540Z
CVE-1999-0570
N/A
Windows NT is not using a password filter utility… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.711Z
CVE-1999-0571
N/A
A router's configuration service or management in… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.638Z
CVE-1999-0572
N/A
.reg files are associated with the Windows NT reg… n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.516Z
CVE-1999-0575
N/A
A Windows NT system's user audit policy does not … n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.675Z
CVE-1999-0576
N/A
A Windows NT system's file audit policy does not … n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.649Z
CVE-1999-0577
N/A
A Windows NT system's file audit policy does not … n/a
 n/a
 2000-02-04T05:00:00 2024-08-01T16:41:45.676Z
ID Description Published Updated
fkie_cve-1999-0332 Buffer overflow in NetMeeting allows denial of service and remote command execution. 1998-12-01T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0342 Linux PAM modules allow local users to gain root access using temporary files. 1998-12-01T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0385 The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to condu… 1998-12-01T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0463 Remote attackers can perform a denial of service using IRIX fcagent. 1998-12-01T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0478 Denial of service in HP-UX sendmail 8.8.6 related to accepting connections. 1998-12-01T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0869 Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of … 1998-12-01T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0836 UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack. 1998-12-02T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0936 BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters. 1998-12-03T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0937 BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable. 1998-12-03T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1280 Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing,… 1998-12-03T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0798 Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type. 1998-12-04T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1147 Buffer overflow in Platinum Policy Compliance Manager (PCM) 7.0 allows remote attackers to execute … 1998-12-04T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1276 fte-console in the fte package before 0.46b-4.1 does not drop root privileges, which allows local u… 1998-12-07T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1282 RealSystem G2 server stores the administrator password in cleartext in a world-readable configurati… 1998-12-10T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0139 Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access. 1998-12-12T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0188 The passwd command in Solaris can be subjected to a denial of service. 1998-12-17T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1173 Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permission… 1998-12-18T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1277 BackWeb client stores the username and password in cleartext for proxy authentication in the Commun… 1998-12-24T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1278 nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which co… 1998-12-25T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0968 Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges. 1998-12-26T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1281 Development version of Breeze Network Server allows remote attackers to cause the system to reboot … 1998-12-26T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1188 mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to… 1998-12-27T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1285 Linux 2.1.132 and earlier allows local users to cause a denial of service (resource exhaustion) by … 1998-12-27T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1159 SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports withou… 1998-12-29T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0020 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0032. Reason: This candid… 1999-01-01T05:00:00.000 2023-11-07T01:54:53.530
fkie_cve-1999-0110 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0315. Reason: This candid… 1999-01-01T05:00:00.000 2023-11-07T01:54:55.093
fkie_cve-1999-0187 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0022. Reason: This candid… 1999-01-01T05:00:00.000 2023-11-07T01:54:55.743
fkie_cve-1999-0197 finger 0@host on some systems may print information on some user accounts. 1999-01-01T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0198 finger .@host on some systems may print information on some user accounts. 1999-01-01T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0200 Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker t… 1999-01-01T05:00:00.000 2025-04-03T01:03:51.193
ID Severity Description Published Updated
ghsa-84cm-x2q5-8225
9.8 (3.1)
dojox vulnerable to unescaped string injection 2018-10-15T22:03:48Z 2023-09-27T12:57:00Z
ghsa-rpch-cqj9-h65r
7.8 (3.1)
High severity vulnerability that affects YamlDotNet and YamlDotNet.Signed 2018-10-16T17:01:10Z 2021-09-17T19:23:01Z
ghsa-6pcc-3rfx-4gpm
7.5 (3.1)
Dom4j contains a XML Injection vulnerability 2018-10-16T17:01:25Z 2022-04-26T18:43:56Z
ghsa-7378-6268-4278
5.5 (3.1)
DotNetZip Zip-Slip Vulnerability 2018-10-16T17:16:40Z 2025-05-06T17:56:09Z
ghsa-g8j6-m4p7-5rfq
7.5 (3.1)
High severity vulnerability that affects DotNetNuke.Core 2018-10-16T17:18:12Z 2021-09-10T20:29:38Z
ghsa-qxxx-2pp7-5hmx
9.8 (3.1)
jackson-databind is vulnerable to a deserialization flaw 2018-10-16T17:21:35Z 2024-03-01T21:41:47Z
ghsa-hvpr-9cr6-q5v7
9.8 (3.1)
Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization 2018-10-16T17:21:42Z 2022-11-17T18:54:40Z
ghsa-rr3c-f55v-qhv5
7.5 (3.1)
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents 2018-10-16T17:34:00Z 2022-04-27T19:25:26Z
ghsa-xpwp-rq3x-x6v7
Critical severity vulnerability that affects recurly-api-client 2018-10-16T17:35:04Z 2020-06-16T22:03:58Z
ghsa-898j-5cc8-cmf5
5.5 (3.1)
ZipSlip in org.apache.storm:storm-core 2018-10-16T17:35:24Z 2024-03-20T17:34:55Z
ghsa-9gcm-f4x3-8jpw
5.9 (3.1)
Spring Framework Cross Site Tracing (XST) 2018-10-16T17:35:54Z 2024-03-05T17:33:42Z
ghsa-f26x-pr96-vw86
5.9 (3.1)
Moderate severity vulnerability that affects org.springframework:spring-core 2018-10-16T17:43:45Z 2024-05-15T06:25:53Z
ghsa-mwcx-532g-8pq3
8.8 (3.1)
Access and integrity issue within Eclipse Jetty 2018-10-16T17:44:11Z 2022-04-26T18:56:02Z
ghsa-xqj7-j8j5-f2xr
7.5 (3.1)
Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator 2018-10-16T17:44:39Z 2025-09-12T19:26:53Z
ghsa-cggj-fvv3-cqwv
9.8 (3.1)
FasterXML jackson-databind allows unauthenticated remote code execution 2018-10-16T17:45:18Z 2024-03-15T01:08:04Z
ghsa-v76m-f5cx-8rg4
Moderate severity vulnerability that affects DotNetNuke.Core 2018-10-16T19:33:25Z 2020-06-16T21:57:07Z
ghsa-x8f7-h444-97w4
9.8 (3.1)
The installation wizard in DotNetNuke (DNN) allows privilege escalation 2018-10-16T19:33:42Z 2022-04-26T18:57:42Z
ghsa-5c66-x4wm-rjfx
5.4 (3.1)
Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) 2018-10-16T19:34:10Z 2022-04-26T18:58:10Z
ghsa-x2rg-fmcv-crq5
8.8 (3.1)
DNN (aka DotNetNuke) has Remote Code Execution via a cookie 2018-10-16T19:34:22Z 2022-04-26T18:58:37Z
ghsa-38cr-2ph5-frr9
7.5 (3.1)
Apache Struts REST Plugin can potentially allow a DoS attack 2018-10-16T19:35:26Z 2024-01-05T16:06:12Z
ghsa-8fx9-5hx8-crhm
9.8 (3.1)
Apache Struts 2.0.1 uses an unintentional expression in a Freemarker tag instead of string literal 2018-10-16T19:35:40Z 2024-01-04T21:54:05Z
ghsa-xcrm-qpp8-hcw4
6.2 (3.1)
Moderate severity vulnerability that affects org.apache.struts:struts2-rest-plugin 2018-10-16T19:35:55Z 2021-09-21T22:29:46Z
ghsa-9gp7-jvm2-r4mx
5.9 (3.1)
Apache Struts Improper Input Validation vulnerability 2018-10-16T19:36:43Z 2024-01-04T23:08:58Z
ghsa-8mr5-h28g-36qx
7.5 (3.1)
Spring AOP functionality (Struts) vulnerable to DoS attack 2018-10-16T19:37:07Z 2022-04-26T19:00:20Z
ghsa-vwxj-6m5m-rrvh
7.5 (3.1)
The REST Plugin in Apache Struts is using an outdated XStream library 2018-10-16T19:37:22Z 2022-04-26T19:02:10Z
ghsa-x5x7-3v85-wpc4
7.5 (3.1)
Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used 2018-10-16T19:37:33Z 2024-01-04T23:26:47Z
ghsa-gg9m-fj3v-r58c
8.1 (3.1)
REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization… 2018-10-16T19:37:56Z 2025-10-22T17:31:31Z
ghsa-49h4-g8p5-jgq6
6.1 (3.1)
Moderate severity vulnerability that affects org.apache.juddi:juddi-client 2018-10-16T19:49:32Z 2021-09-01T14:10:51Z
ghsa-q66c-h853-gqw2
9.1 (3.1)
AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remo… 2018-10-16T19:49:48Z 2023-01-18T06:20:33Z
ghsa-jj9h-mwhq-8vhm
5.9 (3.1)
Improper Input Validation in org.apache.qpid:qpid-broker 2018-10-16T19:50:13Z 2023-05-22T21:30:04Z
ID Severity Description Package Published Updated
pysec-2018-30
SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to byp… salt 2018-10-24T22:29:00Z 2021-06-10T06:51:17.561337Z
pysec-2018-85
python-kdcproxy before 0.3.2 allows remote attackers to cause a denial of service via a l… kdcproxy 2018-10-30T18:29:00Z 2021-08-27T03:22:05.569463Z
pysec-2018-92
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the … mistral 2018-11-02T21:29:00Z 2021-08-27T03:22:07.552723Z
pysec-2018-140
6.5 (3.1)
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in… exiv2 2018-11-03T04:29:00Z 2024-11-21T14:22:48.914006Z
pysec-2018-74
Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to … superset 2018-11-07T14:29:00Z 2021-08-25T04:30:32.701868Z
pysec-2018-141
6.5 (3.1)
In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD… exiv2 2018-11-08T08:29:00Z 2024-11-21T14:22:48.973676Z
pysec-2018-142
6.5 (3.1)
In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may … exiv2 2018-11-08T08:29:00Z 2024-11-21T14:22:49.03444Z
pysec-2018-96
Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers … py-evm 2018-11-12T02:29:00Z 2021-08-27T03:22:16.474976Z
pysec-2018-17
Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert resp… notebook 2018-11-18T17:29:00Z 2021-06-10T06:51:21.489049Z
pysec-2018-18
Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/st… notebook 2018-11-18T17:29:00Z 2021-06-10T06:52:01.452566Z
pysec-2018-77
The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext … tryton 2018-11-22T19:29:00Z 2021-08-25T04:30:34.252835Z
pysec-2018-143
6.5 (3.1)
Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a d… exiv2 2018-11-27T07:29:00Z 2024-11-21T14:22:49.094932Z
pysec-2018-60
Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging a… ansible 2018-11-29T18:29:00Z 2021-08-25T04:29:51.914778Z
pysec-2018-12
An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean m… lxml 2018-12-02T10:29:00Z 2021-06-16T00:03:23.627691Z
pysec-2018-32
urllib3 before version 1.23 does not remove the Authorization HTTP header when following … urllib3 2018-12-11T17:29:00Z 2021-06-10T06:51:03.467032Z
pysec-2018-117
6.5 (3.1)
There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.c… exiv2 2018-12-12T10:29:00Z 2024-01-02T15:20:59.143416Z
pysec-2018-118
6.5 (3.1)
There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.… exiv2 2018-12-12T10:29:00Z 2024-01-02T15:20:59.201635Z
pysec-2018-119
6.5 (3.1)
There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cp… exiv2 2018-12-12T10:29:00Z 2024-01-02T15:20:59.259575Z
pysec-2018-120
6.5 (3.1)
There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.… exiv2 2018-12-12T10:29:00Z 2024-01-02T15:20:59.318592Z
pysec-2018-9
** DISPUTED ** OpenStack Keystone through 14.0.1 has a user enumeration vulnerability bec… keystone 2018-12-17T07:29:00Z 2021-06-10T06:51:56.696140Z
pysec-2018-103
ymlref allows code injection. ymlref 2018-12-17T19:29:00Z 2021-09-26T23:33:39.795406Z
pysec-2018-11
Luigi version prior to version 2.8.0; after commit 53b52e12745075a8acc016d33945d9d6a7a6aa… luigi 2018-12-20T15:29:00Z 2021-06-10T06:51:41.493009Z
pysec-2018-35
aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability… aiohttp-session 2018-12-20T15:29:00Z 2021-07-02T02:41:32.834524Z
pysec-2018-22
OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management… pykmip 2018-12-20T17:29:00Z 2021-06-10T06:50:52.184344Z
pysec-2018-82
There is a vulnerability in load() method in definitions/parser.py in the Danijar Hafner … definitions 2018-12-21T23:29:00Z 2021-08-27T03:21:57.237018Z
pysec-2019-141
ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure f… ansible 2019-01-03T15:29:00Z 2021-06-10T06:51:54.692225Z
pysec-2019-122
Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixt… sqla-yaml-fixtures 2019-01-03T19:29:00Z 2019-01-31T18:00:00Z
pysec-2019-17
In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper… django 2019-01-09T23:29:00Z 2019-04-23T13:11:00Z
pysec-2019-150
Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection c… bodhi 2019-01-10T21:29:00Z 2021-07-05T00:01:17.244288Z
pysec-2019-153
modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided dat… modulemd 2019-01-10T21:29:00Z 2021-07-05T00:01:22.789825Z
ID Description Updated
ID Description Published Updated
mal-2022-1015 Malicious code in anotherpackagefor101 (npm) 2022-06-09T08:46:50Z 2022-06-09T08:46:50Z
mal-2022-4822 Malicious code in newtestforme1007 (npm) 2022-06-09T08:46:50Z 2022-06-09T08:46:50Z
mal-2022-4823 Malicious code in newtestforme1008 (npm) 2022-06-09T08:46:50Z 2022-06-09T08:46:50Z
mal-2022-5754 Malicious code in reqsender321 (npm) 2022-06-09T08:46:50Z 2022-06-09T08:46:50Z
mal-2022-6559 Malicious code in thisisveryfistpackage11 (npm) 2022-06-09T08:46:50Z 2022-06-09T08:46:50Z
mal-2022-7419 Malicious code in zzzhelloeveryone (npm) 2022-06-09T08:46:50Z 2022-06-09T08:46:56Z
MAL-2022-642 Malicious code in @tide-web-apps/bert2 (npm) 2022-06-09T08:50:13Z 2022-06-09T08:51:18Z
mal-2022-642 Malicious code in @tide-web-apps/bert2 (npm) 2022-06-09T08:50:13Z 2022-06-09T08:51:18Z
MAL-2022-416 Malicious code in @manomano-toolbox/hub (npm) 2022-06-09T08:52:09Z 2022-06-09T08:52:10Z
MAL-2022-417 Malicious code in @manomano-toolbox/pim-management (npm) 2022-06-09T08:52:09Z 2022-06-09T08:52:17Z
MAL-2022-418 Malicious code in @manomano-toolbox/toolkit (npm) 2022-06-09T08:52:09Z 2022-06-09T08:52:09Z
MAL-2022-606 Malicious code in @spinak/iac (npm) 2022-06-09T08:52:09Z 2022-06-09T08:52:09Z
mal-2022-416 Malicious code in @manomano-toolbox/hub (npm) 2022-06-09T08:52:09Z 2022-06-09T08:52:10Z
mal-2022-417 Malicious code in @manomano-toolbox/pim-management (npm) 2022-06-09T08:52:09Z 2022-06-09T08:52:17Z
mal-2022-418 Malicious code in @manomano-toolbox/toolkit (npm) 2022-06-09T08:52:09Z 2022-06-09T08:52:09Z
mal-2022-606 Malicious code in @spinak/iac (npm) 2022-06-09T08:52:09Z 2022-06-09T08:52:09Z
MAL-2022-411 Malicious code in @manomano-toolbox/api-gateway (npm) 2022-06-09T08:52:16Z 2022-06-09T08:52:17Z
MAL-2022-413 Malicious code in @manomano-toolbox/catalog (npm) 2022-06-09T08:52:16Z 2022-06-09T08:52:17Z
MAL-2022-607 Malicious code in @spinak/iac-lib (npm) 2022-06-09T08:52:16Z 2022-06-09T08:52:17Z
mal-2022-411 Malicious code in @manomano-toolbox/api-gateway (npm) 2022-06-09T08:52:16Z 2022-06-09T08:52:17Z
mal-2022-413 Malicious code in @manomano-toolbox/catalog (npm) 2022-06-09T08:52:16Z 2022-06-09T08:52:17Z
mal-2022-607 Malicious code in @spinak/iac-lib (npm) 2022-06-09T08:52:16Z 2022-06-09T08:52:17Z
MAL-2022-415 Malicious code in @manomano-toolbox/components (npm) 2022-06-09T08:52:37Z 2022-06-09T08:52:37Z
mal-2022-415 Malicious code in @manomano-toolbox/components (npm) 2022-06-09T08:52:37Z 2022-06-09T08:52:37Z
MAL-2022-414 Malicious code in @manomano-toolbox/commercial-operations (npm) 2022-06-09T08:52:42Z 2022-06-09T08:52:42Z
mal-2022-414 Malicious code in @manomano-toolbox/commercial-operations (npm) 2022-06-09T08:52:42Z 2022-06-09T08:52:42Z
MAL-2022-412 Malicious code in @manomano-toolbox/async-exports (npm) 2022-06-09T08:54:07Z 2022-06-09T08:54:08Z
mal-2022-412 Malicious code in @manomano-toolbox/async-exports (npm) 2022-06-09T08:54:07Z 2022-06-09T08:54:08Z
MAL-2022-2025 Malicious code in colorss-v11 (npm) 2022-06-10T04:03:29Z 2022-06-10T04:03:29Z
mal-2022-2025 Malicious code in colorss-v11 (npm) 2022-06-10T04:03:29Z 2022-06-10T04:03:29Z
ID Description Published Updated
wid-sec-w-2025-2930 Red Hat Enterprise Linux: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2020-07-21T22:00:00.000+00:00 2025-12-29T23:00:00.000+00:00
wid-sec-w-2022-1091 QEMU: Schwachstelle ermöglicht Denial of Service 2020-07-22T22:00:00.000+00:00 2024-09-02T22:00:00.000+00:00
wid-sec-w-2022-1831 Mozilla NSS: Schwachstelle ermöglicht nicht spezifizierten Angriff 2020-07-27T22:00:00.000+00:00 2025-06-02T22:00:00.000+00:00
wid-sec-w-2022-0553 Grub2: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2020-07-29T22:00:00.000+00:00 2025-04-09T22:00:00.000+00:00
wid-sec-w-2022-2413 OpenSSH: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes 2020-07-29T22:00:00.000+00:00 2025-05-22T22:00:00.000+00:00
wid-sec-w-2024-0438 libssh: Schwachstelle ermöglicht Denial of Service 2020-07-29T22:00:00.000+00:00 2024-05-07T22:00:00.000+00:00
wid-sec-w-2023-1274 Red Hat OpenShift: Schwachstelle ermöglicht Denial of Service 2020-07-30T22:00:00.000+00:00 2023-05-22T22:00:00.000+00:00
wid-sec-w-2022-1995 Google Android: Mehrere Schwachstellen 2020-08-03T22:00:00.000+00:00 2024-05-30T22:00:00.000+00:00
wid-sec-w-2023-2981 Red Hat OpenShift: Mehrere Schwachstellen 2020-08-06T22:00:00.000+00:00 2023-11-21T23:00:00.000+00:00
wid-sec-w-2022-1092 QEMU: Schwachstelle ermöglicht Denial of Service 2020-08-09T22:00:00.000+00:00 2024-09-02T22:00:00.000+00:00
wid-sec-w-2024-3319 Apache HTTP Server: Mehrere Schwachstellen 2020-08-09T22:00:00.000+00:00 2024-10-31T23:00:00.000+00:00
wid-sec-w-2023-1918 Wireshark: Schwachstelle ermöglicht Denial of Service 2020-08-12T22:00:00.000+00:00 2023-07-30T22:00:00.000+00:00
wid-sec-w-2023-2405 Ghostscript: Mehrere Schwachstellen 2020-08-12T22:00:00.000+00:00 2023-11-14T23:00:00.000+00:00
wid-sec-w-2025-0235 Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service 2020-08-12T22:00:00.000+00:00 2025-02-02T23:00:00.000+00:00
wid-sec-w-2023-2045 Net-SNMP: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2020-08-16T22:00:00.000+00:00 2023-08-13T22:00:00.000+00:00
wid-sec-w-2022-1912 Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2020-08-17T22:00:00.000+00:00 2025-02-23T23:00:00.000+00:00
wid-sec-w-2023-1635 libcurl: Schwachstelle ermöglicht Offenlegung von Informationen 2020-08-18T22:00:00.000+00:00 2023-07-04T22:00:00.000+00:00
wid-sec-w-2023-2470 Squid: Mehrere Schwachstellen 2020-08-23T22:00:00.000+00:00 2023-09-27T22:00:00.000+00:00
wid-sec-w-2024-1973 QEMU, Xen und Citrix Hypervisor: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes 2020-08-24T22:00:00.000+00:00 2024-09-02T22:00:00.000+00:00
wid-sec-w-2022-1722 QEMU und libvirt: Mehrere Schwachstellen 2020-08-31T22:00:00.000+00:00 2024-09-02T22:00:00.000+00:00
wid-sec-w-2023-2469 Ansible: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2020-09-01T22:00:00.000+00:00 2024-05-06T22:00:00.000+00:00
wid-sec-w-2025-1087 GitLab: Mehrere Schwachstellen 2020-09-02T22:00:00.000+00:00 2025-05-18T22:00:00.000+00:00
wid-sec-w-2023-1153 libxml2: Schwachstelle ermöglicht nicht spezifizierten Angriff 2020-09-03T22:00:00.000+00:00 2024-07-31T22:00:00.000+00:00
wid-sec-w-2022-1723 TLS: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2020-09-09T22:00:00.000+00:00 2024-09-17T22:00:00.000+00:00
wid-sec-w-2023-0342 Red Hat OpenStack: Schwachstelle ermöglicht Offenlegung von Informationen 2020-09-09T22:00:00.000+00:00 2023-02-12T23:00:00.000+00:00
wid-sec-w-2023-1092 Ruby on Rails: Schwachstelle ermöglicht Cross-Site Scripting 2020-09-09T22:00:00.000+00:00 2023-04-27T22:00:00.000+00:00
wid-sec-w-2023-2970 Apache ActiveMQ: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2020-09-09T22:00:00.000+00:00 2024-07-23T22:00:00.000+00:00
wid-sec-w-2024-3162 OpenLDAP: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2020-09-09T22:00:00.000+00:00 2024-10-14T22:00:00.000+00:00
wid-sec-w-2023-2468 Ansible: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen 2020-09-13T22:00:00.000+00:00 2024-12-03T23:00:00.000+00:00
wid-sec-w-2023-1579 Trustwave ModSecurity: Schwachstelle ermöglicht Denial of Service 2020-09-14T22:00:00.000+00:00 2023-06-27T22:00:00.000+00:00
ID Description Published Updated
ncsc-2025-0377 Kwetsbaarheden verholpen in GitLab 2025-11-27T13:35:09.121804Z 2025-11-27T13:35:09.121804Z
ncsc-2025-0378 Kwetsbaarheden verholpen in Mattermost 2025-11-28T09:53:42.334621Z 2025-11-28T09:53:42.334621Z
ncsc-2025-0379 Kwetsbaarheden verholpen in Google Android en Samsung Mobile 2025-12-02T13:25:17.745981Z 2025-12-02T13:25:17.745981Z
ncsc-2025-0380 Kwetsbaarheden verholpen in React Server Components 2025-12-03T20:11:57.728117Z 2025-12-05T12:13:36.590522Z
ncsc-2025-0381 Kwetsbaarheden verholpen in Splunk Enterprise en Splunk Cloud Platform 2025-12-08T08:23:21.965599Z 2025-12-08T08:23:21.965599Z
ncsc-2025-0382 Kwetsbaarheden verholpen in Siemens producten 2025-12-09T13:15:05.391966Z 2025-12-09T13:15:05.391966Z
ncsc-2025-0383 Kwetsbaarheden verholpen in Microsoft Windows 2025-12-09T18:39:18.152251Z 2025-12-09T18:39:18.152251Z
ncsc-2025-0384 Kwetsbaarheden verholpen in Microsoft Office 2025-12-09T18:40:33.839342Z 2025-12-09T18:40:33.839342Z
ncsc-2025-0385 Kwetsbaarheden verholpen in Microsoft Exchange 2025-12-09T18:42:32.332749Z 2025-12-09T18:42:32.332749Z
ncsc-2025-0386 Kwetsbaarheden verholpen in Fortinet producten 2025-12-10T09:51:34.918202Z 2025-12-16T10:33:05.061241Z
ncsc-2025-0387 Kwetsbaarheden verholpen in Adobe ColdFusion 2025-12-10T13:34:08.908897Z 2025-12-10T13:34:08.908897Z
ncsc-2025-0388 Kwetsbaarheden verholpen in Adobe Acrobat Reader 2025-12-10T13:35:58.314547Z 2025-12-10T13:35:58.314547Z
ncsc-2025-0389 Kwetsbaarheden verholpen in Adobe Experience Manager 2025-12-10T14:59:57.911864Z 2025-12-10T14:59:57.911864Z
ncsc-2025-0390 Kwetsbaarheden verholpen in GitLab CE/EE 2025-12-11T09:22:54.841848Z 2025-12-11T09:22:54.841848Z
ncsc-2025-0391 Kwetsbaarheden verholpen in Ivanti Endpoint Manager 2025-12-11T13:51:55.178462Z 2025-12-11T13:51:55.178462Z
ncsc-2025-0392 Kwetsbaarheid verholpen in Barracuda Service Center 2025-12-11T13:53:23.819008Z 2025-12-11T13:53:23.819008Z
ncsc-2025-0393 Kwetsbaarheid verholpen in GeoServer 2025-12-12T08:12:18.831044Z 2025-12-12T09:02:27.681292Z
ncsc-2025-0394 Kwetsbaarheden verholpen in React Server Components 2025-12-12T09:04:19.324080Z 2025-12-12T10:46:34.688189Z
ncsc-2025-0395 Kwetsbaarheden verholpen in SAP Software 2025-12-12T09:29:08.429888Z 2025-12-12T09:29:08.429888Z
ncsc-2025-0396 Kwetsbaarheden verholpen in Apple macOS 2025-12-15T09:06:36.450655Z 2025-12-15T09:06:36.450655Z
ncsc-2025-0397 Kwetsbaarheden verholpen in Apple iOS en iPadOS 2025-12-15T09:08:39.804149Z 2025-12-15T09:08:39.804149Z
ncsc-2025-0398 Kwetsbaarheid in Cisco AsyncOS 2025-12-17T19:47:00.346651Z 2025-12-17T19:47:00.346651Z
ncsc-2025-0399 Kwetsbaarheid verholpen in HPE OneView Software 2025-12-18T18:38:20.794784Z 2025-12-24T11:29:46.123674Z
ncsc-2025-0400 Kwetsbaarheid verholpen in WatchGuard Firebox 2025-12-19T11:16:01.438518Z 2025-12-19T11:16:01.438518Z
ncsc-2025-0401 Kwetsbaarheden verholpen in Foxit PDF Reader 2025-12-24T09:14:56.590353Z 2025-12-24T09:14:56.590353Z
ncsc-2025-0402 Kwetsbaarheid verholpen in MongoDB 2025-12-27T11:38:11.514349Z 2025-12-27T11:38:11.514349Z
ncsc-2025-0403 Kwetsbaarheden verholpen in QNAP besturingssystemen 2025-12-29T09:17:28.385450Z 2025-12-29T09:17:28.385450Z
ncsc-2025-0404 Kwetsbaarheid verholpen in SmarterMail 2025-12-31T14:19:01.847364Z 2025-12-31T14:19:01.847364Z
ncsc-2025-0405 Kwetsbaarheid verholpen in Roundcube Webmail 2025-12-31T14:29:26.821576Z 2025-12-31T14:29:26.821576Z
ID Description Published Updated
ssa-556937 SSA-556937: Multiple Vulnerabilities in VersiCharge AC Series EV Chargers 2025-05-13T00:00:00Z 2025-05-14T00:00:00Z
ssa-614723 SSA-614723: Denial of Service Vulnerabilities in User Management Component (UMC) 2025-05-13T00:00:00Z 2025-10-14T00:00:00Z
ssa-668154 SSA-668154: Denial of Service Vulnerability in MS/TP Point Pickup Module 2025-05-13T00:00:00Z 2025-05-13T00:00:00Z
ssa-718393 SSA-718393: Partial Denial of Service Vulnerability in APOGEE PXC and TALON TC Series (BACnet) Devices 2025-05-13T00:00:00Z 2025-05-13T00:00:00Z
ssa-726617 SSA-726617: Incorrect Privilege Assignment Vulnerability in Mendix OIDC SSO Module 2025-05-13T00:00:00Z 2025-11-11T00:00:00Z
ssa-794185 SSA-794185: RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SIPROTEC, SICAM and Related Products 2025-05-13T00:00:00Z 2025-11-11T00:00:00Z
ssa-828116 SSA-828116: Denial of Service Vulnerability in BACnet ATEC Devices 2025-05-13T00:00:00Z 2025-05-13T00:00:00Z
ssa-864900 SSA-864900: Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices 2025-05-13T00:00:00Z 2025-11-11T00:00:00Z
ssa-901508 SSA-901508: Multiple Vulnerabilities in INTRALOG WMS Before V5 2025-05-13T00:00:00Z 2025-05-13T00:00:00Z
ssa-552330 SSA-552330: System Configuration Password Reset in Siveillance Video V2024 R1 2025-05-14T00:00:00Z 2025-05-14T00:00:00Z
ssa-041082 SSA-041082: Out of Bounds Read Vulnerability in SiPass Integrated Before V2.95.3.18 2025-05-23T00:00:00Z 2025-05-23T00:00:00Z
ssa-367714 SSA-367714: Improper Integrity Check of Firmware Updates in SiPass integrated AC5102 / ACC-G2 and ACC-AP 2025-05-23T00:00:00Z 2025-10-14T00:00:00Z
ssa-082556 SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 2025-06-10T00:00:00Z 2025-08-12T00:00:00Z
ssa-345750 SSA-345750: Default Credentials in Energy Services Using Elspec G5DFR 2025-06-10T00:00:00Z 2025-06-16T00:00:00Z
ssa-486186 SSA-486186: Out of Bounds Read Vulnerability in Tecnomatix Plant Simulation Before 2404 2025-06-10T00:00:00Z 2025-06-10T00:00:00Z
ssa-513708 SSA-513708: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices 2025-06-10T00:00:00Z 2025-10-14T00:00:00Z
ssa-633269 SSA-633269: Incorrect Authorization Check Vulnerability in Industrial Communication Devices based on SINEC OS before V3.1 2025-06-10T00:00:00Z 2025-06-10T00:00:00Z
ssa-693776 SSA-693776: Multiple Vulnerabilities in Industrial Communication Devices based on SINEC OS before V3.2 2025-06-10T00:00:00Z 2025-06-10T00:00:00Z
ssa-627195 SSA-627195: Zip Path Traversal Vulnerability in Mendix Studio Pro's Module Installation Process 2025-06-12T00:00:00Z 2025-07-08T00:00:00Z
ssa-078892 SSA-078892: Multiple Vulnerabilities in SINEC NMS Before V4.0 2025-07-08T00:00:00Z 2025-07-08T00:00:00Z
ssa-083019 SSA-083019: Multiple Vulnerabilities in RUGGEDCOM ROS Devices 2025-07-08T00:00:00Z 2025-10-14T00:00:00Z
ssa-091753 SSA-091753: Multiple Vulnerabilities in Solid Edge Before SE2025 Update 5 2025-07-08T00:00:00Z 2025-07-08T00:00:00Z
ssa-183963 SSA-183963: Certificate Validation Vulnerabilities in SICAM TOOLBOX II Before V07.11 2025-07-08T00:00:00Z 2025-07-18T00:00:00Z
ssa-460466 SSA-460466: Denial of Service Vulnerability in TIA Project-Server and TIA Portal 2025-07-08T00:00:00Z 2025-08-12T00:00:00Z
ssa-573669 SSA-573669: Multiple Vulnerabilities in TIA Administrator Before V3.0.6 2025-07-08T00:00:00Z 2025-07-08T00:00:00Z
ssa-626991 SSA-626991: Denial of Service Vulnerability in SIMATIC CN 4100 before V4.0 2025-07-08T00:00:00Z 2025-07-08T00:00:00Z
ssa-904646 SSA-904646: Sensitive Data Exposure Vulnerability in SIPROTEC 5 Devices 2025-07-08T00:00:00Z 2025-07-08T00:00:00Z
ssa-938066 SSA-938066: Remote Code Execution Vulnerability in SENTRON Powermanager and Desigo CC 2025-07-08T00:00:00Z 2025-07-08T00:00:00Z
ssa-028723 SSA-028723: Multiple OpenSSL Vulnerabilities in BFCClient Before V2.17 2025-08-12T00:00:00Z 2025-08-13T00:00:00Z
ssa-094954 SSA-094954: Authentication Bypass Vulnerability in BIST mode of RUGGEDCOM ROX II 2025-08-12T00:00:00Z 2025-08-12T00:00:00Z
ID Description Published Updated
rhsa-2003:312 Red Hat Security Advisory: pan security update 2003-12-10T16:52:00+00:00 2025-11-21T17:26:37+00:00
rhsa-2003:360 Red Hat Security Advisory: apache security update 2003-12-10T16:52:00+00:00 2025-11-21T17:26:41+00:00
rhsa-2003_312 Red Hat Security Advisory: pan security update 2003-12-10T16:52:00+00:00 2024-11-21T22:52:54+00:00
rhsa-2003_360 Red Hat Security Advisory: apache security update 2003-12-10T16:52:00+00:00 2024-11-14T10:02:55+00:00
rhsa-2003:386 Red Hat Security Advisory: freeradius security update 2003-12-10T16:59:00+00:00 2025-11-21T17:26:44+00:00
rhsa-2003_386 Red Hat Security Advisory: freeradius security update 2003-12-10T16:59:00+00:00 2024-11-21T22:54:02+00:00
rhsa-2003:395 Red Hat Security Advisory: gnupg security update 2003-12-11T00:21:00+00:00 2025-11-21T17:26:43+00:00
rhsa-2003_395 Red Hat Security Advisory: gnupg security update 2003-12-11T00:21:00+00:00 2024-11-21T22:54:09+00:00
rhsa-2003:390 Red Hat Security Advisory: : Updated gnupg packages disable ElGamal keys 2003-12-11T00:25:00+00:00 2025-11-21T17:26:43+00:00
rhsa-2003_390 Red Hat Security Advisory: : Updated gnupg packages disable ElGamal keys 2003-12-11T00:25:00+00:00 2024-11-21T22:54:04+00:00
rhsa-2003:403 Red Hat Security Advisory: : Updated lftp packages fix security vulnerability 2003-12-16T14:05:00+00:00 2025-11-21T17:26:46+00:00
rhsa-2003_403 Red Hat Security Advisory: : Updated lftp packages fix security vulnerability 2003-12-16T14:05:00+00:00 2024-11-21T22:54:22+00:00
rhsa-2003:404 Red Hat Security Advisory: lftp security update 2003-12-16T14:06:00+00:00 2025-11-21T17:26:46+00:00
rhsa-2003_404 Red Hat Security Advisory: lftp security update 2003-12-16T14:06:00+00:00 2024-11-21T22:54:26+00:00
rhsa-2003:320 Red Hat Security Advisory: : Updated httpd packages fix Apache security vulnerabilities 2003-12-16T21:48:00+00:00 2025-11-21T17:26:39+00:00
rhsa-2003_320 Red Hat Security Advisory: : Updated httpd packages fix Apache security vulnerabilities 2003-12-16T21:48:00+00:00 2024-11-21T22:53:10+00:00
rhsa-2003:405 Red Hat Security Advisory: : Updated apache packages fix minor security vulnerability 2003-12-18T09:27:00+00:00 2025-11-21T17:26:47+00:00
rhsa-2003_405 Red Hat Security Advisory: : Updated apache packages fix minor security vulnerability 2003-12-18T09:27:00+00:00 2024-11-14T10:02:59+00:00
rhsa-2003:368 Red Hat Security Advisory: Updated IA64 kernel packages address security vulnerabilities, bugfixes 2003-12-19T18:10:00+00:00 2025-11-21T17:26:41+00:00
rhsa-2003_368 Red Hat Security Advisory: Updated IA64 kernel packages address security vulnerabilities, bugfixes 2003-12-19T18:10:00+00:00 2024-11-21T22:52:30+00:00
rhsa-2003:417 Red Hat Security Advisory: : Updated kernel resolves security vulnerability 2004-01-05T12:50:00+00:00 2025-11-21T17:26:47+00:00
rhsa-2003_417 Red Hat Security Advisory: : Updated kernel resolves security vulnerability 2004-01-05T12:50:00+00:00 2024-11-21T22:54:34+00:00
rhsa-2003:418 Red Hat Security Advisory: kernel security update 2004-01-05T14:41:00+00:00 2025-11-21T17:26:48+00:00
rhsa-2003_418 Red Hat Security Advisory: kernel security update 2004-01-05T14:41:00+00:00 2024-11-21T22:54:37+00:00
rhsa-2003:419 Red Hat Security Advisory: kernel security update 2004-01-05T14:51:00+00:00 2025-11-21T17:26:49+00:00
rhsa-2003_419 Red Hat Security Advisory: kernel security update 2004-01-05T14:51:00+00:00 2024-11-21T22:54:41+00:00
rhsa-2004:001 Red Hat Security Advisory: : Updated Ethereal packages fix security issues 2004-01-07T18:12:00+00:00 2025-11-21T17:26:49+00:00
rhsa-2004_001 Red Hat Security Advisory: : Updated Ethereal packages fix security issues 2004-01-07T18:12:00+00:00 2024-11-21T22:54:50+00:00
rhsa-2003:416 Red Hat Security Advisory: kernel security update 2004-01-07T18:20:00+00:00 2025-11-21T17:26:47+00:00
rhsa-2003_416 Red Hat Security Advisory: kernel security update 2004-01-07T18:20:00+00:00 2024-11-21T22:54:30+00:00
ID Description Published Updated
icsa-17-187-03f ICSA-17-187-03F Siemens SIPROTEC 4 and SIPROTEC Compact (Update F) 2017-07-04T00:00:00.000000Z 2018-06-12T00:00:00.000000Z
icsa-17-187-01 Siemens OZW672 and OZW772 2017-07-06T00:00:00.000000Z 2017-07-06T00:00:00.000000Z
icsa-17-187-02 Siemens Reyrolle 2017-07-06T00:00:00.000000Z 2017-07-06T00:00:00.000000Z
icsa-17-187-04 Schneider Electric Wonderware ArchestrA Logger 2017-07-06T00:00:00.000000Z 2017-07-06T00:00:00.000000Z
icsa-17-187-05 Schneider Electric Ampla MES 2017-07-06T00:00:00.000000Z 2017-07-06T00:00:00.000000Z
icsa-17-192-01 Siemens SIMATIC Logon 2017-07-11T00:00:00.000000Z 2017-07-11T00:00:00.000000Z
icsa-17-192-02 Fuji Electric V-Server 2017-07-11T00:00:00.000000Z 2017-07-11T00:00:00.000000Z
icsa-17-192-03 ABB VSN300 WiFi Logger Card 2017-07-11T00:00:00.000000Z 2017-07-11T00:00:00.000000Z
icsa-17-192-04 OSIsoft PI Coresight 2017-07-11T00:00:00.000000Z 2017-07-11T00:00:00.000000Z
icsa-17-192-06 Schweitzer Engineering Laboratories, Inc. SEL-3620 and SEL-3622 2017-07-11T00:00:00.000000Z 2017-07-11T00:00:00.000000Z
icsa-17-194-01 Siemens SiPass integrated 2017-07-13T00:00:00.000000Z 2017-07-13T00:00:00.000000Z
icsa-17-194-03 Siemens SIMATIC Sm@rtClient Android App 2017-07-13T00:00:00.000000Z 2017-07-13T00:00:00.000000Z
icsa-17-201-01 Schneider Electric PowerSCADA Anywhere and Citect Anywhere 2017-07-20T00:00:00.000000Z 2017-07-20T00:00:00.000000Z
icsa-17-208-01 Continental AG Infineon S-Gold 2 (PMB 8876) 2017-07-27T00:00:00.000000Z 2017-07-27T00:00:00.000000Z
icsa-17-208-02 Mirion Technologies Telemetry Enabled Devices 2017-07-27T00:00:00.000000Z 2017-07-27T00:00:00.000000Z
icsa-17-208-03 PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch 2017-07-27T00:00:00.000000Z 2017-07-27T00:00:00.000000Z
icsa-17-208-04 Rockwell Automation Allen-Bradley Stratix and ArmorStratix 2017-07-27T00:00:00.000000Z 2017-08-24T00:00:00.000000Z
icsa-17-213-01 Mitsubishi Electric Europe B.V. E-Designer 2017-08-01T00:00:00.000000Z 2017-08-01T00:00:00.000000Z
icsa-17-215-01 Schneider Electric Pro-face GP-Pro EX 2017-08-03T00:00:00.000000Z 2017-08-03T00:00:00.000000Z
icsma-17-215-01 ICSMA-17-215-01_Siemens Molecular Imaging Vulnerabilities 2017-08-03T00:00:00.000000Z 2017-08-03T00:00:00.000000Z
icsma-17-215-02 ICSMA-17-215-02_Siemens Molecular Imaging Vulnerabilities 2017-08-03T00:00:00.000000Z 2017-08-03T00:00:00.000000Z
icsa-17-220-01 OSIsoft PI Integrator 2017-08-08T00:00:00.000000Z 2017-08-08T00:00:00.000000Z
icsa-17-220-02 Moxa SoftNVR-IA Live Viewer 2017-08-08T00:00:00.000000Z 2017-08-08T00:00:00.000000Z
icsa-17-222-01 SIMPlight SCADA Software 2017-08-10T00:00:00.000000Z 2017-08-10T00:00:00.000000Z
icsa-17-222-02 Solar Controls Heating Control Downloader (HCDownloader) 2017-08-10T00:00:00.000000Z 2017-08-10T00:00:00.000000Z
icsa-17-222-03 Solar Controls WATTConfig M Software 2017-08-10T00:00:00.000000Z 2017-08-10T00:00:00.000000Z
icsa-17-222-04 Fuji Electric Monitouch V-SFT 2017-08-10T00:00:00.000000Z 2017-08-10T00:00:00.000000Z
icsa-17-222-05 ABB SREA-01 and SREA-50 2017-08-10T00:00:00.000000Z 2017-08-10T00:00:00.000000Z
icsa-17-227-01 Advantech WebOP 2017-08-15T00:00:00.000000Z 2017-08-15T00:00:00.000000Z
icsma-17-227-01 ICSMA-17-227-01_BMC Medical and 3B Medical Luna CPAP Machine 2017-08-15T00:00:00.000000Z 2017-08-15T00:00:00.000000Z
ID Description Published Updated
cisco-sa-20190501-frpwr-cmd-inj Cisco Firepower Threat Defense Software Command Injection Vulnerability 2019-05-01T16:00:00+00:00 2019-05-01T16:00:00+00:00
cisco-sa-20190501-frpwr-dos Cisco Firepower Threat Defense Software Packet Processing Denial of Service Vulnerability 2019-05-01T16:00:00+00:00 2019-05-02T17:41:24+00:00
cisco-sa-20190501-frpwr-smb-snort Cisco Firepower Threat Defense Software SMB Protocol Preprocessor Detection Engine Denial of Service Vulnerabilities 2019-05-01T16:00:00+00:00 2019-05-02T17:54:49+00:00
cisco-sa-20190501-ftd-cmd-inject Cisco Firepower Threat Defense Software Command Injection Vulnerability 2019-05-01T16:00:00+00:00 2019-05-01T16:00:00+00:00
cisco-sa-20190501-hyperflex-csrf Cisco HyperFlex HX-Series Web-Based Management Interface Cross-Site Request Forgery Vulnerability 2019-05-01T16:00:00+00:00 2019-05-01T16:00:00+00:00
cisco-sa-20190501-nexus9k-rpe Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Root Privilege Escalation Vulnerability 2019-05-01T16:00:00+00:00 2019-05-15T13:28:14+00:00
cisco-sa-20190501-nexus9k-sshkey Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Default SSH Key Vulnerability 2019-05-01T16:00:00+00:00 2019-05-09T12:49:51+00:00
cisco-sa-20190501-pca-xss Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability 2019-05-01T16:00:00+00:00 2019-05-01T16:00:00+00:00
cisco-sa-20190501-phone-sip-xml-dos Cisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service Vulnerability 2019-05-01T16:00:00+00:00 2019-05-01T16:00:00+00:00
cisco-sa-20190501-pnr-xss Cisco Prime Network Registrar Cross-Site Scripting Vulnerability 2019-05-01T16:00:00+00:00 2019-05-01T16:00:00+00:00
cisco-sa-20190501-sbr-hijack Cisco Small Business RV320 and RV325 Routers Session Hijacking Vulnerability 2019-05-01T16:00:00+00:00 2019-05-01T16:00:00+00:00
cisco-sa-20190501-scbv Cisco Small Business Switches Secure Shell Certificate Authentication Bypass Vulnerability 2019-05-01T16:00:00+00:00 2019-05-01T16:00:00+00:00
cisco-sa-20190501-sd-cpu-dos Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service Vulnerability 2019-05-01T16:00:00+00:00 2019-05-02T17:57:14+00:00
cisco-sa-20190501-udb-sm Cisco Umbrella Dashboard Session Management Vulnerability 2019-05-01T16:00:00+00:00 2019-05-01T16:00:00+00:00
cisco-sa-20190501-wsa-dos Cisco Web Security Appliance Malformed Request Denial of Service Vulnerability 2019-05-01T16:00:00+00:00 2019-05-01T16:00:00+00:00
cisco-sa-20190501-wsa-privesc Cisco Web Security Appliance Privilege Escalation Vulnerability 2019-05-01T16:00:00+00:00 2019-05-01T16:00:00+00:00
cisco-sa-20190507-esc-authbypass Cisco Elastic Services Controller REST API Authentication Bypass Vulnerability 2019-05-07T16:00:00+00:00 2019-05-07T16:00:00+00:00
cisco-sa-20190513-secureboot Cisco Secure Boot Hardware Tampering Vulnerability 2019-05-13T17:30:00+00:00 2019-11-20T17:23:18+00:00
cisco-sa-20190513-webui Cisco IOS XE Software Web UI Command Injection Vulnerability 2019-05-13T17:30:00+00:00 2019-05-13T17:30:00+00:00
cisco-sa-20190515-anyconnectclient-oob-read Cisco AnyConnect Secure Mobility Client for Linux Out-of-Bounds Memory Read Vulnerability 2019-05-15T16:00:00+00:00 2019-05-15T16:00:00+00:00
cisco-sa-20190515-cuic-cmdinj Cisco Unified Intelligence Center Remote File Injection Vulnerability 2019-05-15T16:00:00+00:00 2019-06-06T14:42:43+00:00
cisco-sa-20190515-cvsm Cisco Video Surveillance Manager Web-Based Management Interface Information Disclosure Vulnerability 2019-05-15T16:00:00+00:00 2019-05-15T16:00:00+00:00
cisco-sa-20190515-ftd-ssltls-bypass Cisco Firepower Threat Defense Software SSL/TLS Policy Bypass Vulnerability 2019-05-15T16:00:00+00:00 2019-05-15T16:00:00+00:00
cisco-sa-20190515-ftdde-poly-bypass Cisco Firepower Threat Defense Software Detection Engine Policy Bypass Vulnerability 2019-05-15T16:00:00+00:00 2019-05-15T16:00:00+00:00
cisco-sa-20190515-fxos-nxos-cmdinj-1781-1782 Cisco FXOS and NX-OS Software Command Injection Vulnerabilities (CVE-2019-1781, CVE-2019-1782) 2019-05-15T16:00:00+00:00 2019-05-15T16:00:00+00:00
cisco-sa-20190515-iosxr-evpn-dos Cisco IOS XR Software BGP MPLS-Based EVPN Denial of Service Vulnerability 2019-05-15T16:00:00+00:00 2019-07-10T16:56:52+00:00
cisco-sa-20190515-iosxr-mpls-dos Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers MPLS OAM Denial of Service Vulnerability 2019-05-15T16:00:00+00:00 2019-05-15T16:00:00+00:00
cisco-sa-20190515-ise-certcreation Cisco Identity Services Engine Arbitrary Client Certificate Creation Vulnerability 2019-05-15T16:00:00+00:00 2019-05-15T16:00:00+00:00
cisco-sa-20190515-nxos-bash-bypass Cisco NX-OS Software Bash Bypass Guest Shell Vulnerability 2019-05-15T16:00:00+00:00 2019-05-20T14:00:47+00:00
cisco-sa-20190515-nxos-cmd-inject-1784 Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1784) 2019-05-15T16:00:00+00:00 2019-07-18T00:00:26+00:00
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
msrc_cve-2020-15113 Improper Preservation of Permissions in etcd 2020-08-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2020-15114 Denial of Service in etcd 2020-08-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2020-15115 No minimum password length in etcd 2020-08-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2020-15136 Improper authentication in etcd 2020-08-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2020-16092 In QEMU through 5.0.0 an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c. 2020-08-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2020-16845 Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs. 2020-08-02T00:00:00.000Z 2024-09-11T00:00:00.000Z
msrc_cve-2020-17507 An issue was discovered in Qt through 5.12.9 and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmhandler.cpp has a buffer over-read. 2020-08-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2020-24241 In Netwide Assembler (NASM) 2.15rc10, there is heap use-after-free in saa_wbytes in nasmlib/saa.c. 2020-08-02T00:00:00.000Z 2025-09-03T21:30:46.000Z
msrc_cve-2020-24330 An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user it fails to drop the root gid privilege when no longer needed. 2020-08-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2020-24331 An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges the tss user still has read and write access to the /etc/tcsd.conf file (which contains various settings related to this daemon). 2020-08-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2020-24332 An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges the creation of the system.data file is prone to symlink attacks. The tss user can be used to create or corrupt existing files which could possibly lead to a DoS attack. 2020-08-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2020-24342 Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection mechanism wrongly calls luaD_callnoyield twice in a row. 2020-08-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-24347 njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c. 2020-08-02T00:00:00.000Z 2025-09-03T19:57:39.000Z
msrc_cve-2020-24370 ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal as demonstrated by getlocal(32^31). 2020-08-02T00:00:00.000Z 2024-06-30T07:00:00.000Z
msrc_cve-2020-24371 lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage. 2020-08-02T00:00:00.000Z 2025-09-03T22:25:53.000Z
msrc_cve-2020-24394 In the Linux kernel before 5.7.8 fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support aka CID-22cf8419f131. This occurs because the current umask is not considered. 2020-08-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-7019 In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran the scrolling search can leak fields that should be hidden. This could result in an attacker gaining additional permissions against a restricted index. 2020-08-02T00:00:00.000Z 2021-12-01T00:00:00.000Z
msrc_cve-2020-8620 In BIND 9.15.6 -> 9.16.5 9.17.0 -> 9.17.3 An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure causing the server to exit. 2020-08-02T00:00:00.000Z 2020-08-26T00:00:00.000Z
msrc_cve-2020-8621 Attempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c 2020-08-02T00:00:00.000Z 2020-08-26T00:00:00.000Z
msrc_cve-2020-8622 A truncated TSIG response can lead to an assertion failure 2020-08-02T00:00:00.000Z 2020-08-26T00:00:00.000Z
msrc_cve-2020-8623 A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c 2020-08-02T00:00:00.000Z 2020-08-26T00:00:00.000Z
msrc_cve-2020-8624 update-policy rules of type "subdomain" are enforced incorrectly 2020-08-02T00:00:00.000Z 2020-08-26T00:00:00.000Z
msrc_cve-2020-9490 Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability for unpatched servers. 2020-08-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2014-10402 An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401. 2020-09-02T00:00:00.000Z 2025-09-03T21:16:29.000Z
msrc_cve-2019-20916 The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command because a Content-Disposition header can have ../ in a filename as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py. 2020-09-02T00:00:00.000Z 2020-12-21T00:00:00.000Z
msrc_cve-2020-0570 Uncontrolled search path in the QT Library before 5.14.0 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access. 2020-09-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2020-10733 The Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not have fully-qualified paths. Executables in the directory where the installer loads or the current working directory take precedence over the intended executables. An attacker having permission to add files into one of those directories can use this to execute arbitrary code with the installer's administrative rights. 2020-09-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-10766 A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality. 2020-09-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-10767 A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier). The IBPB mitigation will be disabled when STIBP is not available or when the Enhanced Indirect Branch Restricted Speculation (IBRS) is available. This flaw allows a local attacker to perform a Spectre V2 style attack when this configuration is active. The highest threat from this vulnerability is to confidentiality. 2020-09-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-10768 A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being 'force disabled' when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to confidentiality. 2020-09-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
ID Description Published Updated
ID Description Updated
var-201907-0067 A Use After Free: CWE-416 vulnerability exists in Zelio Soft 2, V5.2 and earlier, which c… 2022-05-04T09:10:15.048000Z
var-201905-1432 Xiaomi Xiaoai MINI smart speaker and Xiaomi Xiaoai AI smart speaker are both smart speake… 2022-05-04T09:10:17.197000Z
var-201904-1630 FANUC CNC products are the core components of CNC machine tools. FANUC CNC has a denial … 2022-05-04T09:10:19.075000Z
var-201903-1735 Shenzhen Woshida Technology Co., Ltd. is an enterprise specializing in the development, p… 2022-05-04T09:10:23.919000Z
var-201901-1689 D-LINK Central WifiManager CWM-100 is D-LINK centralized wireless management software. T… 2022-05-04T09:10:26.770000Z
var-201812-1301 UNIFI SDN Controller is an SDN controller produced by Ubiquiti Network. A code execution… 2022-05-04T09:10:28.596000Z
var-201810-1605 DocuPrint C1110 is a laser printer. FUJI XEROX DocuPrint C1110 has a command execution v… 2022-05-04T09:10:35.359000Z
var-201807-2275 Dr.COM APG Anti-Proxy Gateway is a network behavior analysis and management gateway devic… 2022-05-04T09:10:42.903000Z
var-201805-1239 Tplink ER5110G, Tplink ER5120G and Tplink WAR1300L are enterprise VPN routers and enterpr… 2022-05-04T09:10:50.966000Z
var-201803-2351 The Play Library SDK is developed based on Dahua's proprietary stream encapsulation proto… 2022-05-04T09:10:58.163000Z
var-201801-1820 pelco Sarix Professional is a video camera. A command execution vulnerability exists in … 2022-05-04T09:11:02.550000Z
var-201801-1841 The Huawei S7700 and S9700 are Huawei's intelligent routing switches. The HuaweiS7700 and… 2022-05-04T09:11:02.538000Z
var-201709-1234 MoxaSoftCMSLiveViewer is a video surveillance software designed for industrial automation… 2022-05-04T09:11:15.549000Z
var-201709-1255 A vulnerability to denial-of-service attacks was found in JP1 and Hitachi IT Operations D… 2022-05-04T09:11:15.536000Z
var-201707-1354 AppEx is a software and hardware product that provides full-line application delivery, WA… 2022-05-04T09:11:20.549000Z
var-201706-1126 Foscamcamera is a webcam that can push messages to mobile phones and directly implement v… 2022-05-04T09:11:25.233000Z
var-201706-1147 Foscamcamera is a webcam that can push messages to mobile phones and directly implement v… 2022-05-04T09:11:25.222000Z
var-201704-1631 LinksysSmartWi-FiRouters are smart Wi-Fi routers. There are multiple denial of service vu… 2022-05-04T09:11:29.958000Z
var-201703-1383 Apache Struts is an open source framework for creating enterprise Java web applications. … 2022-05-04T09:11:34.956000Z
var-201702-1106 The D-Link DGS-1510 series is the next generation of intelligent managed switches. There … 2022-05-04T09:11:37.551000Z
var-201612-0641 MileSight camera is a network camera produced by Xiamen Pulse Vision Digital Technology C… 2022-05-04T09:11:43.289000Z
var-201611-0409 Beijing Wangkang Technology Co., Ltd. Wangkang Internet Control Gateway is a software and… 2022-05-04T09:11:44.214000Z
var-201610-0712 ZXECS EBG2800 is a converged communications product that integrates data, voice, security… 2022-05-04T09:11:45.713000Z
var-201610-0733 AVTECH, founded in 1996, is one of the world's leading manufacturers of CCTV. The main pr… 2022-05-04T09:11:45.702000Z
var-201609-0692 ASUSRT-N10EWirelessRouter is a wireless router device developed by ASUS. ASUSRT-N10E has … 2022-05-04T09:11:46.604000Z
var-201601-0680 Hikvision camera has weak password, allowing initial password login 2022-05-04T09:11:55.051000Z
var-201507-0714 WAS China Mobile Proxy Server is to meet the high informationization group customers 'mob… 2022-05-04T09:12:01.956000Z
var-201506-0568 Pulian Technology Co., Ltd. is a network equipment research and development and manufactu… 2022-05-04T09:12:02.416000Z
var-201502-0541 A cross-site scripting vulnerability was found in the online help of JP1/IT Desktop Manag… 2022-05-04T09:12:08.707000Z
var-201411-0522 The Hikvision DVR is a hard disk recorder. Hikvision DVR DS-7204 has a remote buffer over… 2022-05-04T09:12:14.607000Z
ID Description Published Updated
jvndb-2011-000056 Plone vulnerable to cross-site scripting 2011-07-27T16:17+09:00 2011-07-27T16:17+09:00
jvndb-2011-000055 Mozilla Firefox vulnerability in processing content-length header 2011-07-28T16:24+09:00 2011-07-28T16:24+09:00
jvndb-2011-000057 Mozilla Firefox vulnerable to denial-of-service (DoS) 2011-07-28T16:27+09:00 2011-07-28T16:27+09:00
jvndb-2011-000058 Mozilla Firefox vulnerable to cross-site scripting 2011-07-28T16:29+09:00 2011-07-28T16:29+09:00
jvndb-2011-000059 Mozilla Firefox vulnerable to cross-site scripting 2011-07-28T16:31+09:00 2011-07-28T16:31+09:00
jvndb-2011-000053 Android vulnerability where an incorrect SSL certificate is displayed 2011-07-29T14:26+09:00 2014-05-19T17:19+09:00
jvndb-2011-001927 Arbitrary Code Execution Vulnerability in HiRDB Control Manager 2011-08-09T10:10+09:00 2011-08-09T10:10+09:00
jvndb-2011-001928 JP1/Performance Management - Web Console Cross-Site Scripting Vulnerability 2011-08-09T10:11+09:00 2011-08-09T10:11+09:00
jvndb-2011-000060 Windows URL Protocol Handler may insecurely load executable files 2011-08-10T17:17+09:00 2011-08-10T17:17+09:00
jvndb-2011-000061 Internet Explorer window display vulnerability 2011-08-12T14:06+09:00 2011-08-12T14:06+09:00
jvndb-2011-000062 Aipo vulnerable to cross-site request forgery 2011-08-16T16:41+09:00 2011-08-16T16:41+09:00
jvndb-2011-000063 Aipo vulnerable to SQL injection 2011-08-16T16:44+09:00 2011-08-16T16:44+09:00
jvndb-2011-000064 Microsoft Windows XP vulnerable to denial-of-service (DoS) 2011-08-19T16:32+09:00 2011-08-19T16:32+09:00
jvndb-2011-000067 WebsiteBaker vulnerable to cross-site scripting 2011-08-26T15:50+09:00 2011-08-26T15:50+09:00
jvndb-2011-002110 Samba Web Administration Tool vulnerable to cross-site request forgery 2011-08-26T17:12+09:00 2012-12-26T11:37+09:00
jvndb-2011-002111 Samba Web Administration Tool vulnerable to cross-site scripting 2011-08-26T17:14+09:00 2012-12-26T11:42+09:00
jvndb-2011-000068 Multiple vulnerabilities in Phorum 2011-09-02T19:11+09:00 2011-09-02T19:11+09:00
jvndb-2011-000069 Sage vulnerable to arbitrary script execution 2011-09-02T19:14+09:00 2011-09-02T19:14+09:00
jvndb-2011-000070 Sage vulnerable to arbitrary script execution 2011-09-02T19:19+09:00 2011-09-02T19:19+09:00
jvndb-2011-000071 Juniper Networks IDP ACM vulnerable to cross-site scripting 2011-09-02T19:22+09:00 2011-09-02T19:22+09:00
jvndb-2011-000072 GTK+ may insecurely load dynamic libraries 2011-09-02T19:26+09:00 2011-09-02T19:26+09:00
jvndb-2011-000073 Megalith vulnerable to authentication bypass 2011-09-12T09:19+09:00 2011-09-12T09:19+09:00
jvndb-2011-000074 SemanticScuttle vulnerable to cross-site scripting 2011-09-16T18:08+09:00 2011-09-16T18:08+09:00
jvndb-2011-000065 BaserCMS vulnerable to cross-site scripting 2011-09-30T18:39+09:00 2011-09-30T18:39+09:00
jvndb-2011-000066 BaserCMS vulnerable to access restriction 2011-09-30T18:45+09:00 2011-09-30T18:45+09:00
jvndb-2011-000077 Enkai-kun vulnerable to cross-site scripting 2011-10-11T09:00+09:00 2011-10-11T09:00+09:00
jvndb-2011-000078 A-Form vulnerable in restricting access 2011-10-11T09:08+09:00 2011-10-11T09:08+09:00
jvndb-2011-000079 Cybozu Office vulnerable in restricting access 2011-10-11T09:11+09:00 2011-11-28T16:48+09:00
jvndb-2011-000080 WEB FORUM vulnerable to cross-site scripting 2011-10-11T19:24+09:00 2011-10-25T13:44+09:00
jvndb-2011-000081 WEB FORUM vulnerable to cross-site scripting 2011-10-11T19:27+09:00 2011-10-25T13:45+09:00
ID Description Updated
ID Description Published Updated
suse-su-2025:3918-1 Security update for ImageMagick 2025-11-03T10:31:34Z 2025-11-03T10:31:34Z
suse-su-2025:3919-1 Security update for nodejs18 2025-11-03T10:32:00Z 2025-11-03T10:32:00Z
suse-su-2025:3926-1 Security update for the Linux Kernel (Live Patch 72 for SLE 12 SP5) 2025-11-03T18:03:58Z 2025-11-03T18:03:58Z
suse-su-2025:3927-1 Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP6) 2025-11-04T07:04:21Z 2025-11-04T07:04:21Z
suse-su-2025:3932-1 Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP6) 2025-11-04T08:04:15Z 2025-11-04T08:04:15Z
suse-su-2025:3935-1 Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6) 2025-11-04T11:34:00Z 2025-11-04T11:34:00Z
suse-su-2025:3936-1 Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP6) 2025-11-04T12:04:17Z 2025-11-04T12:04:17Z
suse-su-2025:20937-1 Security update for libsoup 2025-11-04T12:45:59Z 2025-11-04T12:45:59Z
suse-su-2025:3941-1 Security update for tiff 2025-11-05T07:15:41Z 2025-11-05T07:15:41Z
suse-su-2025:3942-1 Security update for qatengine, qatlib 2025-11-05T08:16:02Z 2025-11-05T08:16:02Z
suse-su-2025:3943-1 Security update for qatengine, qatlib 2025-11-05T08:16:20Z 2025-11-05T08:16:20Z
suse-su-2025:3944-1 Security update for sccache 2025-11-05T08:16:30Z 2025-11-05T08:16:30Z
suse-su-2025:3945-1 Security update for poppler 2025-11-05T08:16:53Z 2025-11-05T08:16:53Z
suse-su-2025:3946-1 Security update for openjpeg 2025-11-05T08:17:14Z 2025-11-05T08:17:14Z
suse-su-2025:3947-1 Security update for jasper 2025-11-05T08:17:44Z 2025-11-05T08:17:44Z
suse-su-2025:2990-1 Security update for ffmpeg 2025-11-05T09:07:00Z 2025-11-05T09:07:00Z
suse-su-2025:3949-1 Security update for colord 2025-11-05T10:04:38Z 2025-11-05T10:04:38Z
suse-su-2025:3950-1 Security update for runc 2025-11-05T10:22:48Z 2025-11-05T10:22:48Z
suse-su-2025:3951-1 Security update for runc 2025-11-05T10:23:31Z 2025-11-05T10:23:31Z
suse-su-2025:3954-1 Security update for aws-efs-utils 2025-11-05T14:06:34Z 2025-11-05T14:06:34Z
suse-su-2025:3956-1 Security update for ImageMagick 2025-11-05T14:51:12Z 2025-11-05T14:51:12Z
suse-su-2025:3957-1 Security update for tiff 2025-11-05T15:45:20Z 2025-11-05T15:45:20Z
suse-su-2025:20939-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 2025-11-05T16:03:00Z 2025-11-05T16:03:00Z
suse-su-2025:20982-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 2025-11-05T16:03:00Z 2025-11-05T16:03:00Z
suse-su-2025:20940-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 2025-11-05T16:09:50Z 2025-11-05T16:09:50Z
suse-su-2025:20983-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 2025-11-05T16:09:50Z 2025-11-05T16:09:50Z
suse-su-2025:20942-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_6 2025-11-05T16:11:42Z 2025-11-05T16:11:42Z
suse-su-2025:20943-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 2025-11-05T16:11:42Z 2025-11-05T16:11:42Z
suse-su-2025:20984-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_6 2025-11-05T16:11:42Z 2025-11-05T16:11:42Z
suse-su-2025:20985-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 2025-11-05T16:11:42Z 2025-11-05T16:11:42Z
ID Description Published Updated
ID Description Published Updated
cnvd-2015-00673 pigz目录遍历漏洞 2015-01-22 2015-01-27
cnvd-2015-00674 IBM AIX和VIOS提升权限漏洞 2015-01-22 2015-01-27
cnvd-2015-00675 Haxx Libcurl中间人攻击漏洞 2015-01-22 2015-01-27
cnvd-2015-00676 Oracle PeopleSoft Enterprise HRMS组件存在未明漏洞 2015-01-22 2015-01-27
cnvd-2015-00677 Oracle PeopleSoft Enterprise PeopleTools组件存在未明漏洞（CNVD-2015-00677） 2015-01-22 2015-01-27
cnvd-2015-00678 Oracle PeopleSoft Enterprise PeopleTools组件存在未明漏洞（CNVD-2015-00678） 2015-01-22 2015-01-27
cnvd-2015-00679 Oracle PeopleSoft Enterprise PeopleTools组件存在未明漏洞（CNVD-2015-00679） 2015-01-22 2015-01-27
cnvd-2015-00680 Oracle PeopleSoft Enterprise PeopleTools组件存在未明漏洞（CNVD-2015-00680） 2015-01-22 2015-01-27
cnvd-2015-00681 Oracle PeopleSoft Enterprise PeopleTools组件存在未明漏洞（CNVD-2015-00681） 2015-01-22 2015-01-27
cnvd-2015-00682 Oracle PeopleSoft Enterprise PeopleTools组件存在未明漏洞（CNVD-2015-00682） 2015-01-22 2015-01-27
cnvd-2015-00683 Oracle Siebel UI Framework组件存在未明漏洞（CNVD-2015-00683） 2015-01-22 2015-01-27
cnvd-2015-00684 Oracle Siebel UI Framework组件存在未明漏洞（CNVD-2015-00684） 2015-01-22 2015-01-27
cnvd-2015-00685 Oracle Siebel UI Framework组件存在未明漏洞（CNVD-2015-00685） 2015-01-22 2015-01-27
cnvd-2015-00686 Oracle Siebel UI Framework组件存在未明漏洞（CNVD-2015-00686） 2015-01-22 2015-01-27
cnvd-2015-00687 Oracle Siebel UI Framework组件存在未明漏洞（CNVD-2015-00687） 2015-01-22 2015-01-27
cnvd-2015-00599 Sympa文件泄露漏洞 2015-01-23 2015-01-26
cnvd-2015-00600 Kiwix跨站脚本漏洞 2015-01-23 2015-01-26
cnvd-2015-00601 Defense4all安全绕过漏洞 2015-01-23 2015-01-26
cnvd-2015-00602 xdg-utils Eval注入漏洞 2015-01-23 2015-01-26
cnvd-2015-00603 pax存在未明漏洞 2015-01-23 2015-01-26
cnvd-2015-00604 FFmpeg及Libav 'libavcodec/xface.h'拒绝服务漏洞 2015-01-23 2015-01-26
cnvd-2015-00605 Exponent CMS 'index.php'跨站脚本漏洞 2015-01-23 2015-01-26
cnvd-2015-00606 X-CART 'xcart/cart.php'存在多个跨站脚本漏洞 2015-01-23 2015-01-26
cnvd-2015-00607 osTicket 'tickets.php'跨站脚本漏洞 2015-01-23 2015-01-26
cnvd-2015-00608 Samba权限提升漏洞 2015-01-23 2015-01-26
cnvd-2015-00609 Cisco Unified Communications Manager文件泄露漏洞 2015-01-23 2015-01-26
cnvd-2015-00610 Linux Kernel 'evdev.c'本地信息泄露漏洞 2015-01-23 2015-01-26
cnvd-2015-00611 PHP Calendar Extension远程整数溢出漏洞 2015-01-23 2015-01-26
cnvd-2015-00612 Zend Framework Session Validators安全绕过漏洞 2015-01-23 2015-01-26
cnvd-2015-00613 Adobe Flash Player内存破坏漏洞（CNVD-2015-00613） 2015-01-23 2015-01-26
ID Description Published Updated
CERTA-2002-AVI-072 Vulnérabilité du service MUP sous Windows 2002-04-05T00:00:00.000000 2002-04-05T00:00:00.000000
certa-2002-avi-070 Vulnérabilités dans Cisco Secure ACS pour Windows 2002-04-05T00:00:00.000000 2002-04-05T00:00:00.000000
certa-2002-avi-071 Vulnérabilité de Windows 2000 2002-04-05T00:00:00.000000 2002-04-05T00:00:00.000000
certa-2002-avi-072 Vulnérabilité du service MUP sous Windows 2002-04-05T00:00:00.000000 2002-04-05T00:00:00.000000
CERTA-2002-AVI-073 Vulnérabilité sur le serveur SMTP Lotus Domino 5.0.8 2002-04-09T00:00:00.000000 2002-04-09T00:00:00.000000
certa-2002-avi-073 Vulnérabilité sur le serveur SMTP Lotus Domino 5.0.8 2002-04-09T00:00:00.000000 2002-04-09T00:00:00.000000
CERTA-2002-AVI-074 Vulnérabilité de Cisco Aironet 2002-04-10T00:00:00.000000 2002-04-10T00:00:00.000000
certa-2002-avi-074 Vulnérabilité de Cisco Aironet 2002-04-10T00:00:00.000000 2002-04-10T00:00:00.000000
CERTA-2002-AVI-075 Multiples vulnérabilités dans Microsoft IIS 2002-04-11T00:00:00.000000 2002-04-17T00:00:00.000000
CERTA-2002-AVI-076 Vulnérabilité des équipements et applications CISCO sous SOLARIS 2002-04-11T00:00:00.000000 2002-06-03T00:00:00.000000
certa-2002-avi-075 Multiples vulnérabilités dans Microsoft IIS 2002-04-11T00:00:00.000000 2002-04-17T00:00:00.000000
certa-2002-avi-076 Vulnérabilité des équipements et applications CISCO sous SOLARIS 2002-04-11T00:00:00.000000 2002-06-03T00:00:00.000000
CERTA-2002-AVI-077 Débordement de tampon dans « Netware Remote Manager » 2002-04-15T00:00:00.000000 2002-04-15T00:00:00.000000
certa-2002-avi-077 Débordement de tampon dans « Netware Remote Manager » 2002-04-15T00:00:00.000000 2002-04-15T00:00:00.000000
CERTA-2002-AVI-078 Vulnérabilité de mail sous OpenBSD 2002-04-16T00:00:00.000000 2002-04-16T00:00:00.000000
CERTA-2002-AVI-079 Déni de service sous IRIX/SGI 2002-04-16T00:00:00.000000 2002-04-16T00:00:00.000000
certa-2002-avi-078 Vulnérabilité de mail sous OpenBSD 2002-04-16T00:00:00.000000 2002-04-16T00:00:00.000000
certa-2002-avi-079 Déni de service sous IRIX/SGI 2002-04-16T00:00:00.000000 2002-04-16T00:00:00.000000
CERTA-2002-AVI-080 Multiples vulnérabilités sous TRUE64 UNIX 2002-04-17T00:00:00.000000 2002-04-17T00:00:00.000000
CERTA-2002-AVI-081 Vunérabilités dans Internet Explorer sous Mac OS 2002-04-17T00:00:00.000000 2002-04-17T00:00:00.000000
certa-2002-avi-080 Multiples vulnérabilités sous TRUE64 UNIX 2002-04-17T00:00:00.000000 2002-04-17T00:00:00.000000
certa-2002-avi-081 Vunérabilités dans Internet Explorer sous Mac OS 2002-04-17T00:00:00.000000 2002-04-17T00:00:00.000000
CERTA-2002-AVI-082 Vulnérabilité dans Microsoft SQL Server 2002-04-18T00:00:00.000000 2002-04-18T00:00:00.000000
certa-2002-avi-082 Vulnérabilité dans Microsoft SQL Server 2002-04-18T00:00:00.000000 2002-04-18T00:00:00.000000
CERTA-2002-AVI-083 Vulnérabilités de la pile TCP/IP de FreeBSD 2002-04-19T00:00:00.000000 2002-04-19T00:00:00.000000
certa-2002-avi-083 Vulnérabilités de la pile TCP/IP de FreeBSD 2002-04-19T00:00:00.000000 2002-04-19T00:00:00.000000
CERTA-2002-AVI-084 Vulnérabilités dans Lotus Domino 2002-04-23T00:00:00.000000 2002-04-23T00:00:00.000000
CERTA-2002-AVI-085 Vulnérabilité dans Oracle9i Database Server 2002-04-23T00:00:00.000000 2002-04-23T00:00:00.000000
CERTA-2002-AVI-086 Vulnérabilité dans Oracle E-Business 2002-04-23T00:00:00.000000 2002-04-23T00:00:00.000000
certa-2002-avi-084 Vulnérabilités dans Lotus Domino 2002-04-23T00:00:00.000000 2002-04-23T00:00:00.000000
ID Description Published Updated
CERTFR-2022-ALE-004 Vulnérabilité dans F5 BIG-IP 2022-05-11T00:00:00.000000 2022-09-16T00:00:00.000000
certfr-2022-ale-004 Vulnérabilité dans F5 BIG-IP 2022-05-11T00:00:00.000000 2022-09-16T00:00:00.000000
CERTFR-2022-ALE-005 [MàJ] Vulnérabilité dans Microsoft Windows 2022-05-31T00:00:00.000000 2022-09-16T00:00:00.000000
certfr-2022-ale-005 [MàJ] Vulnérabilité dans Microsoft Windows 2022-05-31T00:00:00.000000 2022-09-16T00:00:00.000000
CERTFR-2022-ALE-006 [MàJ] Vulnérabilité dans Atlassian Confluence 2022-06-03T00:00:00.000000 2022-10-07T00:00:00.000000
certfr-2022-ale-006 [MàJ] Vulnérabilité dans Atlassian Confluence 2022-06-03T00:00:00.000000 2022-10-07T00:00:00.000000
CERTFR-2022-ALE-007 Multiples vulnérabilités dans Microsoft Windows 2022-09-16T00:00:00.000000 2023-03-14T00:00:00.000000
certfr-2022-ale-007 Multiples vulnérabilités dans Microsoft Windows 2022-09-16T00:00:00.000000 2023-03-14T00:00:00.000000
CERTFR-2022-ALE-008 [MaJ] Multiples vulnérabilités dans Microsoft Exchange 2022-09-30T00:00:00.000000 2023-03-14T00:00:00.000000
certfr-2022-ale-008 [MaJ] Multiples vulnérabilités dans Microsoft Exchange 2022-09-30T00:00:00.000000 2023-03-14T00:00:00.000000
CERTFR-2022-ALE-009 [MaJ] Vulnérabilité dans Zimbra Collaboration 2022-10-07T00:00:00.000000 2023-03-14T00:00:00.000000
CERTFR-2022-ALE-010 Multiples vulnérabilités dans GLPI 2022-10-07T00:00:00.000000 2023-03-14T00:00:00.000000
certfr-2022-ale-009 [MaJ] Vulnérabilité dans Zimbra Collaboration 2022-10-07T00:00:00.000000 2023-03-14T00:00:00.000000
certfr-2022-ale-010 Multiples vulnérabilités dans GLPI 2022-10-07T00:00:00.000000 2023-03-14T00:00:00.000000
CERTFR-2022-ALE-011 Vulnérabilité dans les produits Fortinet 2022-10-14T00:00:00.000000 2022-10-14T00:00:00.000000
certfr-2022-ale-011 Vulnérabilité dans les produits Fortinet 2022-10-14T00:00:00.000000 2022-10-14T00:00:00.000000
CERTFR-2022-ALE-012 [MàJ] Vulnérabilité dans FortiOS SSL-VPN 2022-12-13T00:00:00.000000 2022-12-20T00:00:00.000000
CERTFR-2022-ALE-013 [MàJ] Vulnérabilité dans Citrix ADC et Gateway 2022-12-13T00:00:00.000000 2023-03-14T00:00:00.000000
certfr-2022-ale-012 [MàJ] Vulnérabilité dans FortiOS SSL-VPN 2022-12-13T00:00:00.000000 2022-12-20T00:00:00.000000
certfr-2022-ale-013 [MàJ] Vulnérabilité dans Citrix ADC et Gateway 2022-12-13T00:00:00.000000 2023-03-14T00:00:00.000000
CERTFR-2022-ALE-014 Multiples vulnérabilités dans AMI MegaRAC 2022-12-16T00:00:00.000000 2023-09-11T00:00:00.000000
certfr-2022-ale-014 Multiples vulnérabilités dans AMI MegaRAC 2022-12-16T00:00:00.000000 2023-09-11T00:00:00.000000
CERTFR-2023-ALE-015 [MàJ] Campagne d'exploitation d'une vulnérabilité affectant VMware ESXi 2023-02-03T00:00:00.000000 2023-03-14T00:00:00.000000
certfr-2023-ale-015 [MàJ] Campagne d'exploitation d'une vulnérabilité affectant VMware ESXi 2023-02-03T00:00:00.000000 2023-03-14T00:00:00.000000
CERTFR-2023-ALE-001 Vulnérabilité dans Fortinet FortiOS 2023-03-14T00:00:00.000000 2023-03-14T00:00:00.000000
certfr-2023-ale-001 Vulnérabilité dans Fortinet FortiOS 2023-03-14T00:00:00.000000 2023-03-14T00:00:00.000000
CERTFR-2023-ALE-002 [MàJ] Vulnérabilité dans Microsoft Outlook 2023-03-15T00:00:00.000000 2023-05-11T00:00:00.000000
certfr-2023-ale-002 [MàJ] Vulnérabilité dans Microsoft Outlook 2023-03-15T00:00:00.000000 2023-05-11T00:00:00.000000
CERTFR-2023-ALE-003 [MàJ] Compromission de l'application 3CX Desktop App 2023-03-31T00:00:00.000000 2023-04-12T00:00:00.000000
certfr-2023-ale-003 [MàJ] Compromission de l'application 3CX Desktop App 2023-03-31T00:00:00.000000 2023-04-12T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated