Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-1999-0712
N/A
A vulnerability in Caldera Open Administration Sy… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.560Z
CVE-1999-0736
N/A
The showcode.asp sample file in IIS and Site Serv… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.805Z
CVE-1999-0737
N/A
The viewcode.asp sample file in IIS and Site Serv… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.942Z
CVE-1999-0738
N/A
The code.asp sample file in IIS and Site Server a… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.945Z
CVE-1999-0739
N/A
The codebrws.asp sample file in IIS and Site Serv… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.968Z
CVE-1999-0741
N/A
QMS CrownNet Unix Utilities for 2060 allows root … n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.812Z
CVE-1999-0748
N/A
Buffer overflows in Red Hat net-tools package. n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.981Z
CVE-1999-0750
N/A
Hotmail allows Javascript to be executed via the … n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.595Z
CVE-1999-0767
N/A
Buffer overflow in Solaris libc, ufsrestore, and … n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.850Z
CVE-1999-0776
N/A
Alibaba HTTP server allows remote attackers to re… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.983Z
CVE-1999-0792
N/A
ROUTERmate has a default SNMP community name whic… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.087Z
CVE-1999-0795
N/A
The NIS+ rpc.nisd server allows remote attackers … n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.983Z
CVE-1999-0798
N/A
Buffer overflow in bootpd on OpenBSD, FreeBSD, an… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.129Z
CVE-1999-0816
N/A
The Motorola CableRouter allows any remote user t… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.130Z
CVE-1999-0818
N/A
Buffer overflow in Solaris kcms_configure via a l… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.206Z
CVE-1999-0821
N/A
FreeBSD seyon allows local users to gain privileg… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.326Z
CVE-1999-0822
N/A
Buffer overflow in Qpopper (qpop) 3.0 allows remo… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.127Z
CVE-1999-0825
N/A
The default permissions for UnixWare /var/mail al… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.105Z
CVE-1999-0827
N/A
By default, Internet Explorer 5.0 and other versi… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.083Z
CVE-1999-0828
N/A
UnixWare pkg commands such as pkginfo, pkgcat, an… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.080Z
CVE-1999-0829
N/A
HP Secure Web Console uses weak encryption. n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.109Z
CVE-1999-0830
N/A
Buffer overflow in SCO UnixWare Xsco command via … n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.239Z
CVE-1999-0840
N/A
Buffer overflow in CDE dtmail and dtmailpr progra… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.121Z
CVE-1999-0841
N/A
Buffer overflow in CDE mailtool allows local user… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.125Z
CVE-1999-0843
N/A
Denial of service in Cisco routers running NAT vi… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.146Z
CVE-1999-0844
N/A
Denial of service in MDaemon WorldClient and WebC… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.124Z
CVE-1999-0845
N/A
Buffer overflow in SCO su program allows local us… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.063Z
CVE-1999-0846
N/A
Denial of service in MDaemon 2.7 via a large numb… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.021Z
CVE-1999-0850
N/A
The default permissions for Endymion MailMan allo… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.086Z
CVE-1999-0852
N/A
IBM WebSphere sets permissions that allow a local… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:38.295Z
ID CVSS Description Vendor Product Published Updated
CVE-1999-0656
N/A
The ugidd RPC interface, by design, allows remote… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.159Z
CVE-1999-0657
N/A
WinGate is being used. n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:36.982Z
CVE-1999-0661
N/A
A system is running a version of software that wa… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.297Z
CVE-1999-0662
N/A
A system-critical program or library does not hav… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.804Z
CVE-1999-0663
N/A
A system-critical program, library, or file has a… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.505Z
CVE-1999-0664
N/A
An application-critical Windows NT registry key h… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.583Z
CVE-1999-0665
N/A
An application-critical Windows NT registry key h… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.576Z
CVE-1999-0698
N/A
Denial of service in IP protocol logger (ippl) on… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:48:37.337Z
CVE-1999-1430
N/A
PIM software for Royal daVinci does not properly … n/a
n/a
2001-09-12T04:00:00.000Z 2024-08-01T17:11:03.233Z
CVE-1999-1440
N/A
Win32 ICQ 98a 1.30, and possibly other versions, … n/a
n/a
2001-09-12T04:00:00.000Z 2024-08-01T17:11:03.241Z
CVE-1999-1568
7.5 (3.1)
Off-by-one error in NcFTPd FTP server before 2.4.… n/a
n/a
2004-09-01T04:00:00.000Z 2025-01-16T17:40:42.694Z
CVE-1999-0402
N/A
wget 1.5.3 follows symlinks to change permissions… n/a
n/a
1999-09-29T04:00:00.000Z 2024-08-01T16:34:52.088Z
CVE-1999-1170
N/A
IPswitch IMail allows local users to gain additio… n/a
n/a
2001-09-12T04:00:00.000Z 2024-08-01T17:02:53.755Z
CVE-1999-1422
N/A
The default configuration of Slackware 3.4, and p… n/a
n/a
2001-09-12T04:00:00.000Z 2024-08-01T17:11:03.263Z
CVE-2000-0005
N/A
HP-UX aserver program allows local users to gain … n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-08T04:58:11.797Z
CVE-1999-0389
N/A
Buffer overflow in the bootp server in the Debian… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-01T16:34:51.901Z
CVE-1999-0914
N/A
Buffer overflow in the FTP client in the Debian G… n/a
n/a
2000-01-04T05:00:00.000Z 2024-08-01T16:55:28.965Z
CVE-2000-0054
N/A
search.cgi in the SolutionScripts Home Free packa… n/a
n/a
2000-02-04T05:00:00.000Z 2024-08-08T05:05:53.914Z
CVE-1999-0390
N/A
Buffer overflow in Dosemu Slang library in Linux. n/a
n/a
2000-03-22T05:00:00.000Z 2024-08-01T16:34:51.941Z
CVE-1999-0464
N/A
Local users can perform a denial of service in Tr… n/a
n/a
2000-06-02T04:00:00.000Z 2024-08-01T16:41:44.918Z
CVE-1999-0391
N/A
The cryptographic challenge of SMB authentication… n/a
n/a
1999-09-29T04:00:00.000Z 2024-08-01T16:34:51.955Z
CVE-1999-0458
N/A
L0phtcrack 2.5 used temporary files in the system… n/a
n/a
1999-09-29T04:00:00.000Z 2024-08-01T16:41:44.986Z
CVE-1999-1268
N/A
Vulnerability in KDE konsole allows local users t… n/a
n/a
2001-09-12T04:00:00.000Z 2024-08-01T17:11:01.695Z
CVE-1999-0442
N/A
Solaris ff.core allows local users to modify files. n/a
n/a
1999-09-29T04:00:00.000Z 2024-08-01T16:41:44.889Z
CVE-1999-0392
N/A
Buffer overflow in Thomas Boutell's cgic library … n/a
n/a
1999-09-29T04:00:00.000Z 2024-08-01T16:34:52.030Z
CVE-1999-0063
N/A
Cisco IOS 12.0 and other versions can be crashed … n/a
n/a
1999-09-29T04:00:00.000Z 2024-08-01T16:27:57.325Z
CVE-1999-1172
N/A
By design, Maximizer Enterprise 4 calendar and ad… n/a
n/a
2001-09-12T04:00:00.000Z 2024-08-01T17:02:53.799Z
CVE-1999-1376
N/A
Buffer overflow in fpcount.exe in IIS 4.0 with Fr… n/a
n/a
2001-09-12T04:00:00.000Z 2024-08-01T17:11:02.907Z
CVE-1999-1538
N/A
When IIS 2 or 3 is upgraded to IIS 4, ism.dll is … n/a
n/a
2001-09-12T04:00:00.000Z 2024-08-01T17:18:07.511Z
CVE-1999-0457
N/A
Linux ftpwatch program allows local users to gain… n/a
n/a
1999-09-29T04:00:00.000Z 2024-08-01T16:41:44.847Z
ID Description Published Updated
fkie_cve-1999-0622 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is so… 1999-01-01T05:00:00.000 2023-11-07T01:54:59.607
fkie_cve-1999-0623 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is so… 1999-01-01T05:00:00.000 2023-11-07T01:54:59.640
fkie_cve-1999-0624 The rstat/rstatd service is running. 1999-01-01T05:00:00.000 2026-04-16T00:27:16.627
fkie_cve-1999-0625 The rpc.rquotad service is running. 1999-01-01T05:00:00.000 2026-04-16T00:27:16.627
fkie_cve-1999-0629 The ident/identd service is running. 1999-01-01T05:00:00.000 2026-04-16T00:27:16.627
fkie_cve-1999-0630 The NT Alerter and Messenger services are running. 1999-01-01T05:00:00.000 2026-04-16T00:27:16.627
fkie_cve-1999-0631 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is so… 1999-01-01T05:00:00.000 2023-11-07T01:54:59.713
fkie_cve-1999-0632 The RPC portmapper service is running. 1999-01-01T05:00:00.000 2026-04-16T00:27:16.627
fkie_cve-1999-0633 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is so… 1999-01-01T05:00:00.000 2023-11-07T01:54:59.750
fkie_cve-1999-0634 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is so… 1999-01-01T05:00:00.000 2023-11-07T01:54:59.870
fkie_cve-1999-0635 The echo service is running. 1999-01-01T05:00:00.000 2026-04-16T00:27:16.627
fkie_cve-1999-0636 The discard service is running. 1999-01-01T05:00:00.000 2026-04-16T00:27:16.627
fkie_cve-1999-0637 The systat service is running. 1999-01-01T05:00:00.000 2026-04-16T00:27:16.627
fkie_cve-1999-0638 The daytime service is running. 1999-01-01T05:00:00.000 2026-04-16T00:27:16.627
fkie_cve-1999-0639 The chargen service is running. 1999-01-01T05:00:00.000 2026-04-16T00:27:16.627
fkie_cve-1999-0640 The Gopher service is running. 1999-01-01T05:00:00.000 2026-04-16T00:27:16.627
fkie_cve-1999-0641 The UUCP service is running. 1999-01-01T05:00:00.000 2026-04-16T00:27:16.627
fkie_cve-1999-0642 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is so… 1999-01-01T05:00:00.000 2023-11-07T01:54:59.973
fkie_cve-1999-0643 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is so… 1999-01-01T05:00:00.000 2023-11-07T01:55:00.010
fkie_cve-1999-0644 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is so… 1999-01-01T05:00:00.000 2023-11-07T01:55:00.043
fkie_cve-1999-0645 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is so… 1999-01-01T05:00:00.000 2023-11-07T01:55:00.070
fkie_cve-1999-0646 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is so… 1999-01-01T05:00:00.000 2023-11-07T01:55:00.103
fkie_cve-1999-0647 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is so… 1999-01-01T05:00:00.000 2023-11-07T01:55:00.137
fkie_cve-1999-0648 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is so… 1999-01-01T05:00:00.000 2023-11-07T01:55:00.170
fkie_cve-1999-0649 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is so… 1999-01-01T05:00:00.000 2023-11-07T01:55:00.207
fkie_cve-1999-0650 The netstat service is running, which provides sensitive information to remote attackers. 1999-01-01T05:00:00.000 2026-04-16T00:27:16.627
fkie_cve-1999-0651 The rsh/rlogin service is running. 1999-01-01T05:00:00.000 2026-04-16T00:27:16.627
fkie_cve-1999-0652 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is so… 1999-01-01T05:00:00.000 2023-11-07T01:55:00.253
fkie_cve-1999-0653 A component service related to NIS+ is running. 1999-01-01T05:00:00.000 2026-04-16T00:27:16.627
fkie_cve-1999-0654 The OS/2 or POSIX subsystem in NT is enabled. 1999-01-01T05:00:00.000 2026-04-16T00:27:16.627
ID Severity Description Published Updated
ghsa-p8jx-x2vw-wm33
8.8 (3.1)
Code execution in org.apache.storm:storm-core 2018-10-17T19:48:06Z 2024-04-19T19:46:39Z
ghsa-q35p-chc6-7x57
6.5 (3.1)
Moderate severity vulnerability that affects org.apache.storm:storm-core 2018-10-17T19:48:18Z 2021-09-16T19:20:04Z
ghsa-4r64-wf76-c53p
7.5 (3.1)
In blynk-server a Directory Traversal exists 2018-10-17T19:52:52Z 2022-04-27T14:26:22Z
ghsa-c8cc-p3j7-4c7f
5.9 (3.1)
Moderate severity vulnerability that affects org.apache.mesos:mesos 2018-10-17T19:54:14Z 2021-09-08T21:43:33Z
ghsa-rhq2-2574-78mc
7.5 (3.1)
Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via d… 2018-10-17T19:54:53Z 2022-04-27T14:42:53Z
ghsa-7px3-6f6g-hxcj
5.5 (3.1)
XML external entity expansion in org.apache.solr:solr-core 2018-10-17T19:55:34Z 2024-03-04T23:38:56Z
ghsa-3pph-2595-cgfh
7.5 (3.1)
There is a XML external entity expansion (XXE) vulnerability in Apache Solr 2018-10-17T19:55:46Z 2024-03-04T20:32:45Z
ghsa-rc9v-h28f-jcmf
5.5 (3.1)
There is a XML external entity expansion (XXE) vulnerability in Apache Solr config files 2018-10-17T19:56:04Z 2024-03-04T22:58:14Z
ghsa-mh7g-99w9-xpjm
9.8 (3.1)
Remote code execution occurs in Apache Solr 2018-10-17T19:56:17Z 2024-04-12T21:09:29Z
ghsa-v596-fwhq-8x48
5.3 (3.1)
Improper Input Validation in org.springframework.security:spring-security-core, org.springframework… 2018-10-17T20:01:54Z 2024-03-15T15:51:03Z
ghsa-rcpf-vj53-7h2m
6.5 (3.1)
Denial of Service in org.springframework:spring-core 2018-10-17T20:02:20Z 2024-03-06T20:59:14Z
ghsa-cxrj-66c5-9fmh
8.8 (3.1)
Spring Framework when used in combination with any versions of Spring Security contains an authoriz… 2018-10-17T20:05:49Z 2024-03-14T21:08:21Z
ghsa-p5hg-3xm3-gcjg
9.8 (3.1)
Spring Framework allows applications to expose STOMP over WebSocket endpoints 2018-10-17T20:05:59Z 2025-01-31T18:51:12Z
ghsa-g8hw-794c-4j9g
5.9 (3.1)
Path Traversal in org.springframework:spring-core 2018-10-17T20:07:03Z 2024-03-07T21:32:20Z
ghsa-4487-x383-qpph
7.5 (3.1)
Possible privilege escalation in org.springframework:spring-core 2018-10-17T20:27:47Z 2024-03-08T20:42:23Z
ghsa-3rmv-2pg5-xvqj
9.8 (3.1)
Spring Framework has Improperly Implemented Security Check for Standard 2018-10-17T20:28:00Z 2025-01-31T19:35:35Z
ghsa-45vg-2v73-vm62
Moderate severity vulnerability that affects org.springframework:spring-core 2018-10-17T20:28:20Z 2024-03-05T18:20:18Z
ghsa-6v7w-535j-rq5m
5.5 (3.1)
Pivotal Spring Framework DoS Attack with XML Input 2018-10-17T20:29:12Z 2024-03-05T18:17:31Z
ghsa-pgf9-h69p-pcgf
8.6 (3.1)
Files or Directories Accessible to External Parties in org.springframework:spring-core 2018-10-17T20:29:33Z 2024-03-05T18:07:02Z
ghsa-8crv-49fr-2h6j
7.5 (3.1)
Spring Security and Spring Framework may not recognize certain paths that should be protected 2018-10-17T20:30:12Z 2024-03-05T17:55:31Z
ghsa-387v-84cv-9qmc
7.5 (3.1)
Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core 2018-10-18T16:40:43Z 2022-09-17T00:06:46Z
ghsa-w6gv-3r3v-gwgj
5.9 (3.1)
keycloak-core vulnerable to timing attacks against JWS token verification 2018-10-18T16:47:41Z 2023-09-07T20:31:12Z
ghsa-778x-2mqv-w6xw
Moderate severity vulnerability that affects org.keycloak:keycloak-core 2018-10-18T16:48:01Z 2020-06-16T21:21:49Z
ghsa-qgm9-232x-hwpx
Moderate severity vulnerability that affects org.keycloak:keycloak-core 2018-10-18T16:48:15Z 2021-01-29T17:10:10Z
ghsa-95m6-mjh3-58gm
8.1 (3.1)
Improper Authentication in org.keycloak:keycloak-core 2018-10-18T16:48:41Z 2022-09-17T00:55:51Z
ghsa-jc6q-27mw-p55w
7.5 (3.1)
Keycloak vulnerable to infinite loop based Denial of Service 2018-10-18T16:49:29Z 2022-09-13T23:31:40Z
ghsa-c77r-6f64-478q
6.5 (3.1)
keycloak-core discloses system properties 2018-10-18T16:49:40Z 2023-09-07T20:32:14Z
ghsa-h7j7-pw3v-3v3x
4.9 (3.1)
Moderate severity vulnerability that affects org.keycloak:keycloak-core 2018-10-18T16:49:54Z 2021-09-14T15:43:06Z
ghsa-959q-32g8-vvp7
Moderate severity vulnerability that affects org.keycloak:keycloak-core 2018-10-18T16:50:05Z 2020-06-16T21:27:40Z
ghsa-r32r-3977-cgc3
7.5 (3.1)
Keycloak vulnerable to uncontrolled resource consumption 2018-10-18T16:50:20Z 2022-09-13T23:34:44Z
ID Severity Description Package Published Updated
pysec-2019-26
invenio-previewer before 1.0.0a12 allows XSS. invenio-previewer 2019-07-29T14:15:00Z 2019-07-31T19:44:00Z
pysec-2019-24
invenio-app before 1.1.1 allows host header injection. invenio-app 2019-07-29T15:15:00Z 2019-08-01T16:12:00Z
pysec-2019-25
invenio-communities before 1.0.0a20 allows XSS. invenio-communities 2019-07-29T15:15:00Z 2019-08-01T16:59:00Z
pysec-2019-27
invenio-records before 1.2.2 allows XSS. invenio-records 2019-07-29T15:15:00Z 2019-08-01T16:29:00Z
pysec-2019-152
A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0… ironic-inspector 2019-07-30T17:15:00Z 2021-07-05T00:01:21.998814Z
pysec-2019-192
A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1,… novajoin 2019-07-30T17:15:00Z 2021-08-27T03:22:09.442632Z
pysec-2019-2
A flaw was discovered in the way Ansible templating was implemented in versions before 2.… ansible 2019-07-30T23:15:00Z 2021-01-28T16:39:00Z
pysec-2019-11
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x b… django 2019-08-02T15:15:00Z 2020-08-24T17:37:00Z
pysec-2019-12
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x b… django 2019-08-02T15:15:00Z 2020-08-24T17:37:00Z
pysec-2019-14
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x b… django 2019-08-02T15:15:00Z 2020-08-24T17:37:00Z
pysec-2019-114
Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk une… pyspark 2019-08-07T17:15:00Z 2020-06-23T00:15:00Z
pysec-2019-13
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x b… django 2019-08-09T13:15:00Z 2019-08-28T13:15:00Z
pysec-2019-140
Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN rand… werkzeug 2019-08-09T15:15:00Z 2019-09-11T00:15:00Z
pysec-2019-219
Recommender before 2018-07-18 allows XSS. recommender-xblock 2019-08-09T16:15:00Z 2019-08-15T16:48:00Z
pysec-2019-191
An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x be… nova 2019-08-09T19:15:00Z 2021-08-27T03:22:09.327110Z
pysec-2019-104
** DISPUTED ** core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-r… mitogen 2019-08-18T20:15:00Z 2019-08-30T11:38:00Z
pysec-2019-106
NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers t… nltk 2019-08-22T16:15:00Z 2020-03-27T10:15:00Z
pysec-2019-178
When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there… elastic-apm 2019-08-22T17:15:00Z 2021-08-27T03:22:03.550445Z
pysec-2019-19
django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js_reverse_inline. django-js-reverse 2019-08-23T13:15:00Z 2019-08-26T17:39:00Z
pysec-2019-23
All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect… httpie 2019-08-23T17:15:00Z 2019-09-02T18:15:00Z
pysec-2019-144
An issue was discovered in the arrayfire crate before 3.6.0 for Rust. Addition of the rep… arrayfire 2019-08-26T18:15:00Z 2021-06-10T06:51:33.535067Z
pysec-2019-174
Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin… django-crm 2019-08-27T15:15:00Z 2021-08-27T03:21:57.382280Z
pysec-2019-126
** DISPUTED ** In Supervisor through 4.0.2, an unauthenticated user can read log files or… supervisor 2019-09-10T17:15:00Z 2019-09-17T22:15:00Z
pysec-2019-236
An issue was discovered in py-lmdb 0.97. For certain values of md_flags, mdb_node_add doe… lmdb 2019-09-11T15:15:00Z 2021-12-14T08:17:08.199974Z
pysec-2019-237
An issue was discovered in py-lmdb 0.97. For certain values of mp_flags, mdb_page_touch d… lmdb 2019-09-11T15:15:00Z 2021-12-14T08:17:08.271573Z
pysec-2019-238
An issue was discovered in py-lmdb 0.97. mdb_node_del does not validate a memmove in the … lmdb 2019-09-11T15:15:00Z 2021-12-14T08:17:08.339672Z
pysec-2019-239
An issue was discovered in py-lmdb 0.97. For certain values of mn_flags, mdb_cursor_set t… lmdb 2019-09-11T15:15:00Z 2021-12-14T08:17:08.407956Z
pysec-2019-240
An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function … lmdb 2019-09-11T15:15:00Z 2021-12-14T08:17:08.476513Z
pysec-2019-221
Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an … homeassistant 2019-09-23T16:15:00Z 2021-11-24T22:47:02.221265Z
pysec-2019-118
In RPyC 4.1.x through 4.1.1, a remote attacker can dynamically modify object attributes t… rpyc 2019-10-03T20:15:00Z 2020-08-24T17:37:00Z
ID Description Updated
ID Description Published Updated
mal-2022-1671 Malicious code in brave-extension (npm) 2022-06-13T06:01:30Z 2022-06-13T06:01:31Z
mal-2022-1672 Malicious code in brave-eyeshade (npm) 2022-06-13T06:01:30Z 2022-06-13T06:01:31Z
mal-2022-1673 Malicious code in brave-ios (npm) 2022-06-13T06:01:30Z 2022-06-13T06:01:30Z
mal-2022-1674 Malicious code in brave-ledger (npm) 2022-06-13T06:01:30Z 2022-06-13T06:01:30Z
mal-2022-1675 Malicious code in brave-research-participation-tool (npm) 2022-06-13T06:01:30Z 2022-06-13T06:01:30Z
mal-2022-4310 Malicious code in link-bubble (npm) 2022-06-13T06:01:30Z 2022-06-13T06:01:30Z
mal-2022-4314 Malicious code in linkbubble-website (npm) 2022-06-13T06:01:30Z 2022-06-13T06:01:30Z
mal-2022-6891 Malicious code in vault-updater (npm) 2022-06-13T06:01:30Z 2022-06-13T06:01:30Z
MAL-2022-6223 Malicious code in sp-bootstrap (npm) 2022-06-13T16:51:27Z 2022-06-13T16:51:28Z
mal-2022-6223 Malicious code in sp-bootstrap (npm) 2022-06-13T16:51:27Z 2022-06-13T16:51:28Z
MAL-2022-1580 Malicious code in bindingx-weex-plugin (npm) 2022-06-14T07:20:10Z 2022-06-14T07:20:10Z
MAL-2022-5193 Malicious code in pagetour-sdk.http (npm) 2022-06-14T07:20:10Z 2022-06-14T07:20:10Z
MAL-2022-6313 Malicious code in storage-image-processing-api-functions (npm) 2022-06-14T07:20:10Z 2022-06-14T07:20:10Z
mal-2022-1580 Malicious code in bindingx-weex-plugin (npm) 2022-06-14T07:20:10Z 2022-06-14T07:20:10Z
mal-2022-5193 Malicious code in pagetour-sdk.http (npm) 2022-06-14T07:20:10Z 2022-06-14T07:20:10Z
mal-2022-6313 Malicious code in storage-image-processing-api-functions (npm) 2022-06-14T07:20:10Z 2022-06-14T07:20:10Z
MAL-2022-5523 Malicious code in purple_team_midway (npm) 2022-06-14T07:22:08Z 2022-06-14T07:22:09Z
MAL-2022-5524 Malicious code in purple_team_midway_2 (npm) 2022-06-14T07:22:08Z 2022-06-14T07:22:08Z
MAL-2022-5525 Malicious code in purple_team_midway_3 (npm) 2022-06-14T07:22:08Z 2022-06-14T07:22:08Z
mal-2022-5523 Malicious code in purple_team_midway (npm) 2022-06-14T07:22:08Z 2022-06-14T07:22:09Z
mal-2022-5524 Malicious code in purple_team_midway_2 (npm) 2022-06-14T07:22:08Z 2022-06-14T07:22:08Z
mal-2022-5525 Malicious code in purple_team_midway_3 (npm) 2022-06-14T07:22:08Z 2022-06-14T07:22:08Z
MAL-2022-2602 Malicious code in du_npm_inte (npm) 2022-06-14T07:24:24Z 2022-06-14T07:24:25Z
MAL-2022-2603 Malicious code in du_npm_integ (npm) 2022-06-14T07:24:24Z 2022-06-14T07:24:24Z
mal-2022-2602 Malicious code in du_npm_inte (npm) 2022-06-14T07:24:24Z 2022-06-14T07:24:25Z
mal-2022-2603 Malicious code in du_npm_integ (npm) 2022-06-14T07:24:24Z 2022-06-14T07:24:24Z
MAL-2022-643 Malicious code in @tide-web-apps/global-environments (npm) 2022-06-14T07:30:39Z 2022-06-14T07:30:39Z
mal-2022-643 Malicious code in @tide-web-apps/global-environments (npm) 2022-06-14T07:30:39Z 2022-06-14T07:30:39Z
MAL-2022-990 Malicious code in analytika-analytika-utils (npm) 2022-06-14T07:35:45Z 2022-06-14T07:35:46Z
mal-2022-990 Malicious code in analytika-analytika-utils (npm) 2022-06-14T07:35:45Z 2022-06-14T07:35:46Z
ID Description Published Updated
wid-sec-w-2022-0495 Python: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten 2021-01-18T23:00:00.000+00:00 2025-06-19T22:00:00.000+00:00
wid-sec-w-2022-1275 QEMU: Schwachstelle ermöglicht Denial of Service 2021-01-18T23:00:00.000+00:00 2024-09-02T22:00:00.000+00:00
wid-sec-w-2023-0630 GNU tar: Schwachstelle ermöglicht Offenlegung von Informationen 2021-01-18T23:00:00.000+00:00 2023-08-13T22:00:00.000+00:00
wid-sec-w-2023-2836 dnsmasq: Mehrere Schwachstellen 2021-01-18T23:00:00.000+00:00 2023-11-06T23:00:00.000+00:00
wid-sec-w-2022-2240 mutt: Schwachstelle ermöglicht Denial of Service 2021-01-19T23:00:00.000+00:00 2022-12-06T23:00:00.000+00:00
wid-sec-w-2023-0067 Oracle MySQL: Mehrere Schwachstellen 2021-01-19T23:00:00.000+00:00 2023-01-11T23:00:00.000+00:00
wid-sec-w-2022-0496 Red Hat OpenShift: Mehrere Schwachstellen 2021-01-20T23:00:00.000+00:00 2023-05-30T22:00:00.000+00:00
wid-sec-w-2023-1273 Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2021-01-25T23:00:00.000+00:00 2023-05-22T22:00:00.000+00:00
wid-sec-w-2023-0066 sudo: Schwachstelle ermöglicht Privilegieneskalation 2021-01-26T23:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2023-1127 OpenLDAP: Mehrere Schwachstellen ermöglichen Denial of Service 2021-01-26T23:00:00.000+00:00 2025-08-18T22:00:00.000+00:00
wid-sec-w-2022-1170 GNU libc: Schwachstelle ermöglicht Denial of Service 2021-01-27T23:00:00.000+00:00 2024-12-11T23:00:00.000+00:00
wid-sec-w-2022-1276 QEMU: Schwachstelle ermöglicht Denial of Service 2021-01-27T23:00:00.000+00:00 2024-09-02T22:00:00.000+00:00
wid-sec-w-2023-1047 JasPer: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes 2021-01-27T23:00:00.000+00:00 2023-04-20T22:00:00.000+00:00
wid-sec-w-2023-2969 Apache ActiveMQ: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2021-01-27T23:00:00.000+00:00 2024-07-23T22:00:00.000+00:00
wid-sec-w-2023-1823 IBM MQ: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes 2021-01-28T23:00:00.000+00:00 2023-07-19T22:00:00.000+00:00
wid-sec-w-2022-1749 QEMU: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes 2021-01-31T23:00:00.000+00:00 2023-03-16T23:00:00.000+00:00
wid-sec-w-2023-0360 Google Android: Mehrere Schwachstellen 2021-02-01T23:00:00.000+00:00 2023-05-10T22:00:00.000+00:00
wid-sec-w-2022-1277 QEMU: Schwachstelle ermöglicht nicht spezifizierten Angriff 2021-02-02T23:00:00.000+00:00 2024-09-02T22:00:00.000+00:00
wid-sec-w-2023-2716 docker: Mehrere Schwachstellen 2021-02-02T23:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2022-1171 GNU libc: Schwachstelle ermöglicht Denial of Service 2021-02-04T23:00:00.000+00:00 2024-03-05T23:00:00.000+00:00
wid-sec-w-2022-1278 QEMU: Schwachstelle ermöglicht Denial of Service 2021-02-04T23:00:00.000+00:00 2024-09-02T22:00:00.000+00:00
wid-sec-w-2022-1351 Ansible: Schwachstelle ermöglicht Offenlegung von Informationen 2021-02-04T23:00:00.000+00:00 2024-12-03T23:00:00.000+00:00
wid-sec-w-2022-1572 ImageMagick: Schwachstelle ermöglicht Denial of Service 2021-02-07T23:00:00.000+00:00 2024-12-16T23:00:00.000+00:00
wid-sec-w-2023-0820 Intel Graphics Driver: Mehrere Schwachstellen 2021-02-09T23:00:00.000+00:00 2023-04-02T22:00:00.000+00:00
wid-sec-w-2024-0315 Intel Ethernet Controller: Mehrere Schwachstellen ermöglichen Denial of Service 2021-02-09T23:00:00.000+00:00 2024-02-07T23:00:00.000+00:00
wid-sec-w-2022-1279 QEMU: Schwachstelle ermöglicht Privilegieneskalation 2021-02-10T23:00:00.000+00:00 2024-09-02T22:00:00.000+00:00
wid-sec-w-2023-0916 Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Denial of Service 2021-02-11T23:00:00.000+00:00 2024-11-11T23:00:00.000+00:00
wid-sec-w-2023-1987 TCP/IP Stack: Mehrere Schwachstellen 2021-02-11T23:00:00.000+00:00 2023-08-07T22:00:00.000+00:00
wid-sec-w-2023-2464 PostgreSQL: Mehrere Schwachstellen 2021-02-11T23:00:00.000+00:00 2024-09-23T22:00:00.000+00:00
wid-sec-w-2023-1126 OpenLDAP: Schwachstelle ermöglicht Denial of Service 2021-02-14T23:00:00.000+00:00 2024-10-14T22:00:00.000+00:00
ID Description Published Updated
icsa-18-046-01 Nortek Linear eMerge E3 Series 2018-02-15T00:00:00.000000Z 2018-02-15T00:00:00.000000Z
icsa-18-046-02 GE D60 Line Distance Relay 2018-02-15T00:00:00.000000Z 2018-02-15T00:00:00.000000Z
icsa-18-046-03 Schneider Electric IGSS Mobile 2018-02-15T00:00:00.000000Z 2018-02-15T00:00:00.000000Z
icsa-18-046-04 Schneider Electric StruxureOn Gateway 2018-02-15T00:00:00.000000Z 2018-02-15T00:00:00.000000Z
icsa-18-051-01 ABB netCADOPS Web Application 2018-02-20T00:00:00.000000Z 2018-02-20T00:00:00.000000Z
icsa-18-058-01a Siemens SIMATIC Industrial PCs (Update A) 2018-02-22T00:00:00.000000Z 2020-02-10T00:00:00.000000Z
icsa-18-058-02 Delta Electronics WPLSoft 2018-02-27T00:00:00.000000Z 2018-02-27T00:00:00.000000Z
icsa-18-058-03 Emerson ControlWave Micro Process Automation Controller 2018-02-27T00:00:00.000000Z 2018-02-27T00:00:00.000000Z
icsma-18-058-01 Medtronic 2090 Carelink Programmer Vulnerabilities (Update C) 2018-02-27T00:00:00.000000Z 2020-01-30T00:00:00.000000Z
icsma-18-058-02 Philips Intellispace Portal ISP Vulnerabilities 2018-02-27T00:00:00.000000Z 2018-02-27T00:00:00.000000Z
icsa-18-060-01 ICSA-18-060-01_Siemens SIMATIC, SIMOTION, and SINUMERIK (Update A) 2018-03-01T00:00:00.000000Z 2018-04-19T00:00:00.000000Z
icsa-18-060-02 Moxa OnCell G3100-HSPA Series 2018-03-01T00:00:00.000000Z 2018-03-01T00:00:00.000000Z
icsa-18-060-03 Delta Electronics Delta Industrial Automation DOPSoft 2018-03-01T00:00:00.000000Z 2018-03-01T00:00:00.000000Z
icsa-18-065-01 Hirschmann Automation and Control GmbH Classic Platform Switches 2018-03-06T00:00:00.000000Z 2018-03-06T00:00:00.000000Z
icsa-18-065-02 Schneider Electric SoMove Software and DTM Software Components 2018-03-06T00:00:00.000000Z 2018-03-06T00:00:00.000000Z
icsa-18-065-03 Eaton ELCSoft 2018-03-06T00:00:00.000000Z 2018-03-06T00:00:00.000000Z
icsa-18-067-01 Siemens SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet Module (Update D) 2018-03-08T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-18-067-02 ICSA-18-067-02_Siemens SIPROTEC 4, SIPROTEC Compact, and Reyrolle Devices using the EN100 Ethernet Communication Module Extension (Update B) 2018-03-08T00:00:00.000000Z 2019-02-12T00:00:00.000000Z
icsa-18-072-01 Omron CX-Supervisor (Update A) 2018-03-13T00:00:00.000000Z 2018-12-20T00:00:00.000000Z
icsa-18-072-02 OSIsoft PI Data Archive 2018-03-13T00:00:00.000000Z 2018-03-13T00:00:00.000000Z
icsa-18-072-03 OSIsoft PI Vision 2018-03-13T00:00:00.000000Z 2018-03-13T00:00:00.000000Z
icsa-18-072-04 OSIsoft PI Web API 2018-03-13T00:00:00.000000Z 2018-03-13T00:00:00.000000Z
icsa-18-079-01 Geutebruck IP Cameras 2018-03-20T00:00:00.000000Z 2018-03-20T00:00:00.000000Z
icsa-18-079-02 Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update D) 2018-03-20T00:00:00.000000Z 2023-05-09T00:00:00.000000Z
icsa-18-081-01 ICSA-18-081-01 Siemens SIMATIC WinCC OA UI Mobile App 2018-03-20T00:00:00.000000Z 2018-03-20T00:00:00.000000Z
icsa-18-081-02 Beckhoff TwinCAT 2018-03-22T00:00:00.000000Z 2018-03-22T00:00:00.000000Z
icsa-18-086-01 Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200 2018-03-27T00:00:00.000000Z 2018-03-27T00:00:00.000000Z
icsa-18-088-02 Siemens TIM 1531 IRC 2018-03-27T00:00:00.000000Z 2020-02-10T00:00:00.000000Z
icsa-18-088-03 Siemens SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional, and SIMATIC NET PC Software (Update G) 2018-03-27T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsma-18-086-01 Philips Alice 6 Vulnerabilities (Update B) 2018-03-27T00:00:00.000000Z 2018-12-13T00:00:00.000000Z
ID Description Published Updated
cisco-sa-20190717-aironet-dos Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability 2019-07-17T16:00:00+00:00 2019-07-17T16:00:00+00:00
cisco-sa-20190717-cfnm-statcred Cisco FindIT Network Management Software Static Credentials Vulnerability 2019-07-17T16:00:00+00:00 2019-07-17T16:00:00+00:00
cisco-sa-20190717-cvdsd-wmauth Cisco Vision Dynamic Signage Director REST API Authentication Bypass Vulnerability 2019-07-17T16:00:00+00:00 2019-07-17T16:00:00+00:00
cisco-sa-20190717-ise-sql-inject Cisco Identity Services Engine Blind SQL Injection Vulnerability 2019-07-17T16:00:00+00:00 2019-07-17T16:00:00+00:00
cisco-sa-20190717-ise-xss Cisco Identity Services Engine Cross-Site Scripting Vulnerability 2019-07-17T16:00:00+00:00 2019-08-06T17:39:12+00:00
cisco-sa-20190717-sbss-redirect Cisco Small Business Series Switches Open Redirect Vulnerability 2019-07-17T16:00:00+00:00 2019-07-17T16:00:00+00:00
cisco-sa-20190717-spa500-command Cisco Small Business SPA500 Series IP Phones Local Command Execution Vulnerability 2019-07-17T16:00:00+00:00 2019-07-17T16:00:00+00:00
cisco-sa-20190717-wsma-info Cisco Industrial Network Director Web Services Management Agent Unauthorized Information Disclosure Vulnerability 2019-07-17T16:00:00+00:00 2019-07-17T16:00:00+00:00
cisco-sa-20190731-nxos-bo Cisco Nexus 9000 Series ACI Mode Switch Software Link Layer Discovery Protocol Buffer Overflow Vulnerability 2019-07-31T16:00:00+00:00 2019-09-26T17:35:34+00:00
cisco-sa-20190806-sb220-auth_bypass Cisco Small Business 220 Series Smart Switches Authentication Bypass Vulnerability 2019-08-06T14:00:00+00:00 2019-08-21T14:24:09+00:00
cisco-sa-20190806-sb220-inject Cisco Small Business 220 Series Smart Switches Command Injection Vulnerability 2019-08-06T14:00:00+00:00 2019-08-21T14:20:46+00:00
cisco-sa-20190806-sb220-rce Cisco Small Business 220 Series Smart Switches Remote Code Execution Vulnerabilities 2019-08-06T14:00:00+00:00 2019-08-21T14:27:53+00:00
cisco-sa-20190807-asa-multi Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities 2019-08-07T16:00:00+00:00 2019-08-29T13:00:21+00:00
cisco-sa-20190807-asa-privescala Cisco Adaptive Security Appliance Software Web-Based Management Interface Privilege Escalation Vulnerability 2019-08-07T16:00:00+00:00 2019-08-07T16:00:00+00:00
cisco-sa-20190807-esm-inject Cisco Email Security Appliance Header Injection Vulnerability 2019-08-07T16:00:00+00:00 2019-09-26T20:01:12+00:00
cisco-sa-20190807-fmc-xss Cisco Firepower Management Center Persistent Cross-Site Scripting Vulnerability 2019-08-07T16:00:00+00:00 2019-08-21T14:36:50+00:00
cisco-sa-20190807-fnd-dos Cisco IoT Field Network Director TLS Renegotiation Denial of Service Vulnerability 2019-08-07T16:00:00+00:00 2019-08-07T16:00:00+00:00
cisco-sa-20190807-ftd-bypass Cisco Firepower Threat Defense Software File Policy Bypass Vulnerability 2019-08-07T16:00:00+00:00 2019-08-20T13:28:20+00:00
cisco-sa-20190807-hypflex-csrf Cisco HyperFlex Software Cross-Site Request Forgery Vulnerability 2019-08-07T16:00:00+00:00 2019-08-07T16:00:00+00:00
cisco-sa-20190807-iosxr-isis-dos-1910 Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability 2019-08-07T16:00:00+00:00 2019-08-20T15:38:21+00:00
cisco-sa-20190807-iosxr-isis-dos-1918 Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability 2019-08-07T16:00:00+00:00 2019-08-20T15:38:21+00:00
cisco-sa-20190807-nfv-cli-path Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability 2019-08-07T16:00:00+00:00 2019-08-07T16:00:00+00:00
cisco-sa-20190807-nfv-commandinj Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability 2019-08-07T16:00:00+00:00 2019-08-07T16:00:00+00:00
cisco-sa-20190807-nfv-fileread Cisco Enterprise NFV Infrastructure Software Web Portal Arbitrary File Read Vulnerability 2019-08-07T16:00:00+00:00 2019-08-07T16:00:00+00:00
cisco-sa-20190807-nfv-privescal Cisco Enterprise NFV Infrastructure Software Privilege Escalation Vulnerability 2019-08-07T16:00:00+00:00 2019-08-07T16:00:00+00:00
cisco-sa-20190807-nfv-pwrecov Cisco Enterprise NFV Infrastructure Software Password Recovery Vulnerability 2019-08-07T16:00:00+00:00 2019-08-07T16:00:00+00:00
cisco-sa-20190807-nfv-read Cisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities 2019-08-07T16:00:00+00:00 2019-08-07T16:00:00+00:00
cisco-sa-20190807-nfv-xss Cisco Enterprise NFV Infrastructure Software Cross-site Scripting Vulnerability 2019-08-07T16:00:00+00:00 2019-08-07T16:00:00+00:00
cisco-sa-20190807-nfvis-authbypass Cisco Enterprise NFV Infrastructure Software Web-Based Management Interface Authentication Bypass Vulnerability 2019-08-07T16:00:00+00:00 2019-08-07T16:00:00+00:00
cisco-sa-20190807-nfvis-vnc-authbypass Cisco Enterprise NFV Infrastructure Software VNC Authentication Bypass Vulnerability 2019-08-07T16:00:00+00:00 2019-08-07T16:00:00+00:00
ID Description Published Updated
msrc_cve-2020-26570 The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file. 2020-10-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2020-26571 The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init. 2020-10-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2020-26572 The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher. 2020-10-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2020-27194 An issue was discovered in the Linux kernel before 5.8.15. scalar32_min_max_or in kernel/bpf/verifier.c mishandles bounds tracking during use of 64-bit values aka CID-5b9fbeb75b6a. 2020-10-02T00:00:00.000Z 2020-11-02T00:00:00.000Z
msrc_cve-2020-27619 In Python 3 through 3.9.0 the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP. 2020-10-02T00:00:00.000Z 2020-11-10T00:00:00.000Z
msrc_cve-2020-27675 An issue was discovered in the Linux kernel through 5.9.1 as used with Xen through 4.14.x. drivers/xen/events/events_base.c allows event-channel removal during the event-handling loop (a race condition). This can cause a use-after-free or NULL pointer dereference as demonstrated by a dom0 crash via events for an in-reconfiguration paravirtualized device aka CID-073d0552ead5. 2020-10-02T00:00:00.000Z 2020-11-04T00:00:00.000Z
msrc_cve-2020-7020 Elasticsearch versions before 6.8.13 and 7.9.2 contain a document disclosure flaw when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain complex queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices. 2020-10-02T00:00:00.000Z 2021-12-01T00:00:00.000Z
msrc_cve-2020-0569 Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access. 2020-11-02T00:00:00.000Z 2026-02-18T14:24:26.000Z
msrc_cve-2020-15436 Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field. 2020-11-02T00:00:00.000Z 2020-12-03T00:00:00.000Z
msrc_cve-2020-15437 The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:serial8250_isa_init_ports() that allows local users to cause a denial of service by using the p->serial_in pointer which uninitialized. 2020-11-02T00:00:00.000Z 2020-12-03T00:00:00.000Z
msrc_cve-2020-15999 Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. 2020-11-02T00:00:00.000Z 2025-02-08T00:00:00.000Z
msrc_cve-2020-25013 JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler. 2020-11-02T00:00:00.000Z 2025-10-01T23:11:04.000Z
msrc_cve-2020-25207 JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler. 2020-11-02T00:00:00.000Z 2025-10-01T23:11:05.000Z
msrc_cve-2020-25650 A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine. Any unprivileged local guest user with access to the UNIX domain socket path `/run/spice-vdagentd/spice-vdagent-sock` could use this flaw to perform a memory denial of service for spice-vdagentd or even other processes in the VM system. The highest threat from this vulnerability is to system availability. This flaw affects spice-vdagent versions 0.20 and previous versions. 2020-11-02T00:00:00.000Z 2022-01-19T00:00:00.000Z
msrc_cve-2020-25651 A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in the client connection of an illegitimate local user in the VM system. Active file transfers from other users could also be interrupted resulting in a denial of service. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior. 2020-11-02T00:00:00.000Z 2022-01-19T00:00:00.000Z
msrc_cve-2020-25652 A flaw was found in the spice-vdagentd daemon where it did not properly handle client connections that can be established via the UNIX domain socket in `/run/spice-vdagentd/spice-vdagent-sock`. Any unprivileged local guest user could use this flaw to prevent legitimate agents from connecting to the spice-vdagentd daemon resulting in a denial of service. The highest threat from this vulnerability is to system availability. This flaw affects spice-vdagent versions 0.20 and prior. 2020-11-02T00:00:00.000Z 2022-01-19T00:00:00.000Z
msrc_cve-2020-25653 A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest user to become the active agent for spice-vdagentd possibly resulting in a denial of service or information leakage from the host. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior. 2020-11-02T00:00:00.000Z 2022-01-19T00:00:00.000Z
msrc_cve-2020-25694 A flaw was found in PostgreSQL versions before 13.1 before 12.5 before 11.10 before 10.15 before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters an opportunity for a man-in-the-middle attack or the ability to observe clear-text transmissions could exist. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. 2020-11-02T00:00:00.000Z 2020-11-20T00:00:00.000Z
msrc_cve-2020-25695 A flaw was found in PostgreSQL versions before 13.1 before 12.5 before 11.10 before 10.15 before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. 2020-11-02T00:00:00.000Z 2020-11-20T00:00:00.000Z
msrc_cve-2020-25696 A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1 before 12.5 before 11.10 before 10.15 before 9.6.20 and before 9.5.24. If an interactive psql session uses \gset when querying a compromised server the attacker can execute arbitrary code as the operating system account running psql. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. 2020-11-02T00:00:00.000Z 2020-12-08T00:00:00.000Z
msrc_cve-2020-25705 A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well on the Linux Based Products (RUGGEDCOM RM1224: All versions between v5.0 and v6.4 SCALANCE M-800: All versions between v5.0 and v6.4 SCALANCE S615: All versions between v5.0 and v6.4 SCALANCE SC-600: All versions prior to v2.1.3 SCALANCE W1750D: v8.3.0.1 v8.6.0 and v8.7.0 SIMATIC Cloud Connect 7: All versions SIMATIC MV500 Family: All versions SIMATIC NET CP 1243-1 (incl. SIPLUS variants): Versions 3.1.39 and later SIMATIC NET CP 1243-7 LTE EU: Version 2020-11-02T00:00:00.000Z 2020-12-03T00:00:00.000Z
msrc_cve-2020-27152 An issue was discovered in ioapic_lazy_update_eoi in arch/x86/kvm/ioapic.c in the Linux kernel before 5.9.2. It has an infinite loop related to improper interaction between a resampler and edge triggering aka CID-77377064c3a9. 2020-11-02T00:00:00.000Z 2020-11-17T00:00:00.000Z
msrc_cve-2020-28196 MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit. 2020-11-02T00:00:00.000Z 2021-10-15T00:00:00.000Z
msrc_cve-2020-28362 Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. 2020-11-02T00:00:00.000Z 2026-02-18T01:11:30.000Z
msrc_cve-2020-28366 Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo 2020-11-02T00:00:00.000Z 2024-06-30T07:00:00.000Z
msrc_cve-2020-28367 Arbitrary code execution via the go command with cgo in cmd/go 2020-11-02T00:00:00.000Z 2026-02-18T02:13:20.000Z
msrc_cve-2020-28915 A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory aka CID-6735b4632def. 2020-11-02T00:00:00.000Z 2020-12-03T00:00:00.000Z
msrc_cve-2020-28941 An issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the speakup driver could cause a local denial of service attack aka CID-d41227544427. This occurs because of an invalid free when the line discipline is used more than once. 2020-11-02T00:00:00.000Z 2020-12-03T00:00:00.000Z
msrc_cve-2020-28974 A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height. 2020-11-02T00:00:00.000Z 2020-12-02T00:00:00.000Z
msrc_cve-2020-29368 An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check aka CID-c444eb564fb1. 2020-11-02T00:00:00.000Z 2020-12-03T00:00:00.000Z
ID Description Published Updated
ncsc-2026-0092 Kwetsbaarheden verholpen in Fortinet FortiWeb 2026-03-12T07:46:15.529522Z 2026-03-12T07:46:15.529522Z
ncsc-2026-0093 Kwetsbaarheden verholpen in GitLab 2026-03-12T14:42:46.936248Z 2026-03-12T14:42:46.936248Z
ncsc-2026-0094 Kwetsbaarheden verholpen in Cisco IOS XR 2026-03-12T14:44:08.106602Z 2026-03-12T14:44:08.106602Z
ncsc-2026-0095 Kwetsbaarheid verholpen in pac4j-jwt 2026-03-12T14:45:51.156512Z 2026-03-12T14:45:51.156512Z
ncsc-2026-0096 Kwetsbaarheden verholpen in Veeam Backup & Replication 2026-03-12T14:54:08.200676Z 2026-03-12T14:54:08.200676Z
ncsc-2026-0097 Kwetsbaarheden verholpen in Google Chrome 2026-03-13T08:33:43.877125Z 2026-03-13T08:33:43.877125Z
ncsc-2026-0098 Kwetsbaarheden verholpen in Apple iOS en iPadOS 2026-03-13T08:41:19.155490Z 2026-03-13T08:41:19.155490Z
ncsc-2026-0099 Kwetsbaarheid verholpen in Oracle Identity Manager en Oracle Web Services Manager 2026-03-20T15:56:12.716324Z 2026-03-20T15:56:12.716324Z
ncsc-2026-0100 Kwetsbaarheden verholpen in Citrix Netscaler ADC en Netscaler Gateway 2026-03-23T13:43:30.957806Z 2026-03-23T13:43:30.957806Z
ncsc-2026-0101 Kwetsbaarheden verholpen in Apple iOS en iPadOS 2026-03-25T14:02:07.392994Z 2026-03-25T14:02:07.392994Z
ncsc-2026-0102 Kwetsbaarheden verholpen in Apple macOS 2026-03-25T14:15:56.073353Z 2026-03-25T14:15:56.073353Z
ncsc-2026-0103 Kwetsbaarheden verholpen in GitLab 2026-03-26T09:48:10.874427Z 2026-03-26T09:48:10.874427Z
ncsc-2026-0104 Kwetsbaarheden verholpen in Cisco IOS XE Software 2026-03-26T09:50:03.269095Z 2026-03-26T09:50:03.269095Z
ncsc-2026-0105 Kwetsbaarheden verholpen in Cisco Nexus Dashboard en Nexus Dashboard Insights 2026-04-03T08:20:48.187725Z 2026-04-03T08:20:48.187725Z
ncsc-2026-0106 Kwetsbaarheden verholpen in Cisco Integrated Management Controller 2026-04-03T10:34:46.145536Z 2026-04-03T10:34:46.145536Z
ncsc-2026-0107 Kwetsbaarheid verholpen in FortiClient EMS van Fortinet 2026-04-04T13:49:19.002116Z 2026-04-04T13:49:19.002116Z
ncsc-2026-0108 Kwetsbaarheid verholpen in Juniper Networks Junos OS Evolved 2026-04-10T12:06:13.479822Z 2026-04-10T12:06:13.479822Z
ncsc-2026-0109 Kwetsbaarheden verholpen in Synology SSL VPN Client 2026-04-10T12:11:00.859799Z 2026-04-10T12:11:00.859799Z
ncsc-2026-0110 Kwetsbaarheid verholpen in Cisco Smart Software Manager On-Prem 2026-04-10T14:28:58.703642Z 2026-04-10T14:28:58.703642Z
ncsc-2026-0111 Kwetsbaarheid verholpen in Adobe Acrobat 2026-04-12T08:42:18.844193Z 2026-04-13T09:38:04.129352Z
ncsc-2026-0112 Kwetsbaarheden verholpen in Siemens producten 2026-04-14T11:37:21.682429Z 2026-04-14T11:37:21.682429Z
ncsc-2026-0113 Kwetsbaarheden verholpen in SAP-producten 2026-04-14T12:55:40.388960Z 2026-04-14T12:55:40.388960Z
ncsc-2026-0114 Kwetsbaarheden verholpen in Microsoft Developer tools 2026-04-14T19:18:58.666745Z 2026-04-14T19:18:58.666745Z
ncsc-2026-0115 Kwetsbaarheid verholpen in Microsoft Defender 2026-04-14T19:19:48.691858Z 2026-04-15T08:54:16.881135Z
ncsc-2026-0116 Kwetsbaarheden verholpen in Microsoft Office 2026-04-14T19:20:56.343558Z 2026-04-14T19:20:56.343558Z
ncsc-2026-0117 Kwetsbaarheden verholpen in Microsoft Azure 2026-04-14T19:23:30.733725Z 2026-04-14T19:23:30.733725Z
ncsc-2026-0118 Kwetsbaarheden verholpen in Microsoft SQL Server 2026-04-14T19:24:22.610160Z 2026-04-14T19:24:22.610160Z
ncsc-2026-0119 Kwetsbaarheden verholpen in Microsoft Windows 2026-04-15T08:53:38.926894Z 2026-04-15T08:53:38.926894Z
ncsc-2026-0120 Kwetsbaarheden verholpen in Fortinet FortiAnalyzer en FortiManager 2026-04-15T12:20:38.675602Z 2026-04-15T12:20:38.675602Z
ncsc-2026-0121 Kwetsbaarheden verholpen in Fortinet FortiSandbox 2026-04-15T12:23:16.801183Z 2026-04-15T12:23:16.801183Z
ID Description Published Updated
opensuse-su-2026:10146-1 libpainter0-0.9.27-1.1 on GA media 2026-02-04T00:00:00Z 2026-02-04T00:00:00Z
opensuse-su-2026:20172-1 Security update for cups 2026-02-04T11:37:13Z 2026-02-04T11:37:13Z
opensuse-su-2026:10147-1 cockpit-machines-346-2.1 on GA media 2026-02-05T00:00:00Z 2026-02-05T00:00:00Z
opensuse-su-2026:10148-1 cockpit-packages-4.1-2.1 on GA media 2026-02-05T00:00:00Z 2026-02-05T00:00:00Z
opensuse-su-2026:10149-1 cockpit-repos-4.7-2.1 on GA media 2026-02-05T00:00:00Z 2026-02-05T00:00:00Z
opensuse-su-2026:10150-1 cockpit-subscriptions-14.4-2.1 on GA media 2026-02-05T00:00:00Z 2026-02-05T00:00:00Z
opensuse-su-2026:10151-1 python311-wheel-0.46.3-1.1 on GA media 2026-02-05T00:00:00Z 2026-02-05T00:00:00Z
opensuse-su-2026:10152-1 python315-3.15.0~a3-4.1 on GA media 2026-02-05T00:00:00Z 2026-02-05T00:00:00Z
opensuse-su-2026:20177-1 Security update for golang-github-prometheus-prometheus 2026-02-05T10:44:24Z 2026-02-05T10:44:24Z
opensuse-su-2026:20178-1 Security update for libxml2 2026-02-05T11:26:20Z 2026-02-05T11:26:20Z
opensuse-su-2026:20180-1 Security update for python-maturin 2026-02-05T20:51:59Z 2026-02-05T20:51:59Z
opensuse-su-2026:10153-1 chromedriver-144.0.7559.132-1.1 on GA media 2026-02-06T00:00:00Z 2026-02-06T00:00:00Z
opensuse-su-2026:10154-1 cockpit-354-3.1 on GA media 2026-02-06T00:00:00Z 2026-02-06T00:00:00Z
opensuse-su-2026:10155-1 cockpit-podman-119.1-2.1 on GA media 2026-02-06T00:00:00Z 2026-02-06T00:00:00Z
opensuse-su-2026:10156-1 micropython-1.26.1-2.1 on GA media 2026-02-06T00:00:00Z 2026-02-06T00:00:00Z
opensuse-su-2026:10157-1 libsnmp45-32bit-5.9.5.2-1.1 on GA media 2026-02-06T00:00:00Z 2026-02-06T00:00:00Z
opensuse-su-2026:10158-1 nginx-1.29.5-1.1 on GA media 2026-02-06T00:00:00Z 2026-02-06T00:00:00Z
opensuse-su-2026:10159-1 opencloud-server-5.0.2-1.1 on GA media 2026-02-06T00:00:00Z 2026-02-06T00:00:00Z
opensuse-su-2026:10160-1 python311-Django-5.2.11-1.1 on GA media 2026-02-06T00:00:00Z 2026-02-06T00:00:00Z
opensuse-su-2026:10161-1 python311-azure-core-1.38.0-2.1 on GA media 2026-02-06T00:00:00Z 2026-02-06T00:00:00Z
opensuse-su-2026:20181-1 Security update for cockpit-subscriptions 2026-02-06T02:48:38Z 2026-02-06T02:48:38Z
opensuse-su-2026:20182-1 Security update for cockpit 2026-02-06T03:08:03Z 2026-02-06T03:08:03Z
opensuse-su-2026:20185-1 Security update for cockpit-packages 2026-02-06T09:31:50Z 2026-02-06T09:31:50Z
opensuse-su-2026:20186-1 Security update for libsoup 2026-02-06T11:13:48Z 2026-02-06T11:13:48Z
opensuse-su-2026:10162-1 localsearch-3.10.2-2.1 on GA media 2026-02-07T00:00:00Z 2026-02-07T00:00:00Z
opensuse-su-2026:20184-1 Security update for python-Django 2026-02-07T13:45:17Z 2026-02-07T13:45:17Z
opensuse-su-2026:20183-1 Security update for chromium 2026-02-07T14:42:36Z 2026-02-07T14:42:36Z
opensuse-su-2026:10163-1 go1.24-1.24.13-1.1 on GA media 2026-02-10T00:00:00Z 2026-02-10T00:00:00Z
opensuse-su-2026:10164-1 go1.25-1.25.7-1.1 on GA media 2026-02-10T00:00:00Z 2026-02-10T00:00:00Z
opensuse-su-2026:10165-1 keylime-config-7.14.0+0-1.1 on GA media 2026-02-10T00:00:00Z 2026-02-10T00:00:00Z
ID Description Published Updated
rhsa-2004:103 Red Hat Security Advisory: gdk-pixbuf security update 2004-03-10T16:19:00+00:00 2025-11-21T17:27:08+00:00
rhsa-2004_103 Red Hat Security Advisory: gdk-pixbuf security update 2004-03-10T16:19:00+00:00 2024-11-21T22:59:42+00:00
rhsa-2004:053 Red Hat Security Advisory: sysstat security update 2004-03-10T20:02:00+00:00 2025-11-21T17:27:00+00:00
rhsa-2004_053 Red Hat Security Advisory: sysstat security update 2004-03-10T20:02:00+00:00 2024-11-21T22:57:18+00:00
rhsa-2004:072 Red Hat Security Advisory: nfs-utils security update 2004-03-11T09:01:00+00:00 2025-11-21T17:27:04+00:00
rhsa-2004_072 Red Hat Security Advisory: nfs-utils security update 2004-03-11T09:01:00+00:00 2024-11-21T22:58:36+00:00
rhsa-2004:119 Red Hat Security Advisory: openssl security update 2004-03-17T12:31:00+00:00 2025-11-21T17:27:10+00:00
rhsa-2004_119 Red Hat Security Advisory: openssl security update 2004-03-17T12:31:00+00:00 2024-11-21T23:00:23+00:00
rhsa-2004:120 Red Hat Security Advisory: openssl security update 2004-03-17T13:58:00+00:00 2025-11-21T17:27:13+00:00
rhsa-2004_120 Red Hat Security Advisory: openssl security update 2004-03-17T13:58:00+00:00 2024-11-21T23:00:26+00:00
rhsa-2004:139 Red Hat Security Advisory: apache, openssl security update for Stronghold 2004-03-17T17:20:00+00:00 2025-11-21T17:27:13+00:00
rhsa-2004_139 Red Hat Security Advisory: apache, openssl security update for Stronghold 2004-03-17T17:20:00+00:00 2024-11-21T23:00:35+00:00
rhsa-2004:121 Red Hat Security Advisory: : Updated OpenSSL packages fix vulnerabilities 2004-03-17T22:23:00+00:00 2025-11-21T17:27:11+00:00
rhsa-2004_121 Red Hat Security Advisory: : Updated OpenSSL packages fix vulnerabilities 2004-03-17T22:23:00+00:00 2024-11-21T23:00:31+00:00
rhsa-2004:112 Red Hat Security Advisory: : Updated Mozilla packages fix security issues 2004-03-17T22:53:00+00:00 2026-02-16T19:43:33+00:00
rhsa-2004_112 Red Hat Security Advisory: : Updated Mozilla packages fix security issues 2004-03-17T22:53:00+00:00 2024-11-21T23:00:00+00:00
rhsa-2004:084 Red Hat Security Advisory: httpd security update 2004-03-23T09:54:00+00:00 2025-11-21T17:27:06+00:00
rhsa-2004_084 Red Hat Security Advisory: httpd security update 2004-03-23T09:54:00+00:00 2024-11-21T22:59:07+00:00
rhsa-2004:134 Red Hat Security Advisory: : Updated squid package fixes security vulnerability 2004-03-29T07:10:00+00:00 2025-11-21T17:27:16+00:00
rhsa-2004_134 Red Hat Security Advisory: : Updated squid package fixes security vulnerability 2004-03-29T07:10:00+00:00 2024-11-21T23:00:36+00:00
rhsa-2004:110 Red Hat Security Advisory: mozilla security update 2004-03-29T18:14:00Z 2004-04-02T00:00:00Z
rhsa-2004_110 Red Hat Security Advisory: mozilla security update 2004-03-29T18:14:00Z 2004-04-02T00:00:00Z
rhsa-2004:136 Red Hat Security Advisory: ethereal security update 2004-03-30T17:06:00+00:00 2025-11-21T17:27:11+00:00
rhsa-2004_136 Red Hat Security Advisory: ethereal security update 2004-03-30T17:06:00+00:00 2024-11-21T23:00:51+00:00
rhsa-2004:137 Red Hat Security Advisory: : Updated Ethereal packages fix security issues 2004-03-31T08:37:00+00:00 2025-11-21T17:27:12+00:00
rhsa-2004_137 Red Hat Security Advisory: : Updated Ethereal packages fix security issues 2004-03-31T08:37:00+00:00 2024-11-21T23:00:54+00:00
rhsa-2004:133 Red Hat Security Advisory: squid security update 2004-04-14T13:58:00+00:00 2025-11-21T17:27:11+00:00
rhsa-2004_133 Red Hat Security Advisory: squid security update 2004-04-14T13:58:00+00:00 2024-11-21T23:00:33+00:00
rhsa-2004:153 Red Hat Security Advisory: cvs security update 2004-04-14T13:59:00+00:00 2025-11-21T17:27:13+00:00
rhsa-2004_153 Red Hat Security Advisory: cvs security update 2004-04-14T13:59:00+00:00 2024-11-21T23:01:15+00:00
ID Description Published Updated
suse-su-2025:4073-1 Security update for runc 2025-11-12T10:34:42Z 2025-11-12T10:34:42Z
suse-su-2025:4074-1 Security update for buildah 2025-11-12T10:35:09Z 2025-11-12T10:35:09Z
suse-su-2025:4075-1 Security update for buildah 2025-11-12T10:35:24Z 2025-11-12T10:35:24Z
suse-su-2025:4076-1 Security update for buildah 2025-11-12T10:35:40Z 2025-11-12T10:35:40Z
suse-su-2025:4077-1 Security update for runc 2025-11-12T10:36:08Z 2025-11-12T10:36:08Z
suse-su-2025:4078-1 Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP5) 2025-11-12T11:09:52Z 2025-11-12T11:09:52Z
suse-su-2025:4079-1 Security update for podman 2025-11-12T12:48:51Z 2025-11-12T12:48:51Z
suse-su-2025:4080-1 Security update for podman 2025-11-12T12:49:06Z 2025-11-12T12:49:06Z
suse-su-2025:4081-1 Security update for podman 2025-11-12T12:49:35Z 2025-11-12T12:49:35Z
suse-su-2025:4086-1 Security update for tomcat11 2025-11-12T15:02:26Z 2025-11-12T15:02:26Z
suse-su-2025:4087-1 Security update for netty, netty-tcnative 2025-11-12T19:35:11Z 2025-11-12T19:35:11Z
suse-su-2025:4090-1 Security update for lasso 2025-11-13T13:02:47Z 2025-11-13T13:02:47Z
suse-su-2025:21056-1 Security update for the Linux Kernel 2025-11-13T14:22:56Z 2025-11-13T14:22:56Z
suse-su-2025:21040-1 Security update for the Linux Kernel 2025-11-13T15:32:12Z 2025-11-13T15:32:12Z
suse-su-2025:4091-1 Security update for cargo-packaging, rust-bindgen 2025-11-13T16:30:39Z 2025-11-13T16:30:39Z
suse-su-2025:4094-1 Security update for lasso 2025-11-13T23:34:47Z 2025-11-13T23:34:47Z
suse-su-2025:4096-1 Security update for binutils 2025-11-14T08:07:40Z 2025-11-14T08:07:40Z
suse-su-2025:4097-1 Security update for openssh 2025-11-14T08:22:38Z 2025-11-14T08:22:38Z
suse-su-2025:4098-1 Security update for openssh8.4 2025-11-14T08:22:50Z 2025-11-14T08:22:50Z
suse-su-2025:4099-1 Security update for squid 2025-11-14T08:23:10Z 2025-11-14T08:23:10Z
suse-su-2025:21042-1 Security update for containerd 2025-11-14T08:36:43Z 2025-11-14T08:36:43Z
suse-su-2025:21043-1 Security update for helm 2025-11-14T08:40:12Z 2025-11-14T08:40:12Z
suse-su-2025:4100-1 Security update for python-Django 2025-11-14T09:03:32Z 2025-11-14T09:03:32Z
suse-su-2025:21044-1 Security update for openssh 2025-11-14T09:46:19Z 2025-11-14T09:46:19Z
suse-su-2025:4103-1 Security update for tomcat10 2025-11-14T09:56:37Z 2025-11-14T09:56:37Z
suse-su-2025:4104-1 Security update for libxml2 2025-11-14T10:04:07Z 2025-11-14T10:04:07Z
suse-su-2025:21057-1 Security update for containerd 2025-11-14T10:08:48Z 2025-11-14T10:08:48Z
suse-su-2025:4107-1 Security update for bind 2025-11-14T15:54:30Z 2025-11-14T15:54:30Z
suse-su-2025:4108-1 Security update for bind 2025-11-14T15:55:13Z 2025-11-14T15:55:13Z
suse-su-2025:4109-1 Security update for bind 2025-11-14T15:56:05Z 2025-11-14T15:56:05Z
ID Description Published Updated
alsa-2023:0808 Important: firefox security update 2023-02-20T00:00:00Z 2023-02-21T17:34:13Z
alsa-2023:0810 Important: firefox security update 2023-02-20T00:00:00Z 2023-02-21T17:40:39Z
alsa-2023:0821 Important: thunderbird security update 2023-02-20T00:00:00Z 2023-02-21T17:44:48Z
alsa-2023:0824 Important: thunderbird security update 2023-02-20T00:00:00Z 2023-02-21T17:50:38Z
alsa-2023:0832 Important: kernel security and bug fix update 2023-02-21T00:00:00Z 2023-09-15T13:41:48Z
alsa-2023:0833 Moderate: python3 security update 2023-02-21T00:00:00Z 2023-03-13T16:37:05Z
alsa-2023:0835 Moderate: python-setuptools security update 2023-02-21T00:00:00Z 2023-02-21T18:08:50Z
alsa-2023:0837 Moderate: systemd security and bug fix update 2023-02-21T00:00:00Z 2023-03-13T16:36:50Z
alsa-2023:0838 Important: samba security update 2023-02-21T00:00:00Z 2023-03-13T16:37:01Z
alsa-2023:0842 Moderate: tar security update 2023-02-21T00:00:00Z 2023-02-21T18:34:26Z
alsa-2023:0848 Moderate: php:8.0 security update 2023-02-21T00:00:00Z 2023-02-21T18:44:47Z
alsa-2023:0852 Moderate: httpd:2.4 security and bug fix update 2023-02-21T00:00:00Z 2023-02-21T18:53:08Z
alsa-2023:0854 Important: kernel-rt security and bug fix update 2023-02-21T00:00:00Z 2023-02-21T21:49:05Z
alsa-2023:0855 Moderate: pcs security update 2023-02-21T00:00:00Z 2023-02-21T18:58:55Z
alsa-2023:0902 Important: webkit2gtk3 security update 2023-02-22T00:00:00Z 2023-02-23T10:40:06Z
alsa-2023:0903 Important: webkit2gtk3 security update 2023-02-22T00:00:00Z 2023-02-23T10:43:07Z
alsa-2023:0946 Moderate: openssl security and bug fix update 2023-02-28T00:00:00Z 2023-02-28T19:45:58Z
alsa-2023:0951 Important: kernel security and bug fix update 2023-02-28T00:00:00Z 2023-09-15T13:41:48Z
alsa-2023:0952 Moderate: python-setuptools security update 2023-02-28T00:00:00Z 2023-02-28T17:39:56Z
alsa-2023:0953 Moderate: python3.9 security update 2023-02-28T00:00:00Z 2023-02-28T19:58:01Z
alsa-2023:0954 Moderate: systemd security update 2023-02-28T00:00:00Z 2023-02-28T20:03:26Z
alsa-2023:0957 Moderate: lua security update 2023-02-28T00:00:00Z 2023-02-28T20:06:58Z
alsa-2023:0958 Moderate: vim security update 2023-02-28T00:00:00Z 2023-02-28T18:13:21Z
alsa-2023:0959 Moderate: tar security update 2023-02-28T00:00:00Z 2023-02-28T18:20:34Z
alsa-2023:0965 Moderate: php security update 2023-02-28T00:00:00Z 2023-02-28T18:26:14Z
alsa-2023:0970 Moderate: httpd security and bug fix update 2023-02-28T00:00:00Z 2023-02-28T18:31:17Z
alsa-2023:0974 Moderate: pcs security update 2023-02-28T00:00:00Z 2023-02-28T18:35:52Z
alsa-2023:0979 Important: kernel-rt security and bug fix update 2023-02-28T00:00:00Z 2023-02-28T18:38:31Z
alsa-2023:1067 Important: pesign security update 2023-03-06T00:00:00Z 2023-03-06T21:02:20Z
alsa-2023:1068 Moderate: libjpeg-turbo security update 2023-03-06T00:00:00Z 2023-03-06T21:26:40Z
ID Description Published Updated
osv-2020-1555 Global-buffer-overflow in OT::VarData::get_scalars 2020-07-31T00:01:23.638346Z 2022-04-13T03:04:33.071761Z
osv-2020-1558 Stack-buffer-overflow in dst_print_s2k 2020-08-01T00:00:10.494492Z 2022-04-13T03:04:35.162017Z
osv-2020-1559 UNKNOWN WRITE in hb_vector_t<CFF::parsed_cs_op_t>::resize 2020-08-01T00:00:38.407395Z 2022-04-13T03:04:33.197301Z
osv-2020-1563 UNKNOWN READ in OT::VariationSelectorRecord::operator= 2020-08-01T00:00:59.284106Z 2022-04-13T03:04:32.902373Z
osv-2020-1564 Use-of-uninitialized-value in pb_encode_varint 2020-08-02T00:00:28.082567Z 2022-04-13T03:04:32.622428Z
osv-2020-1565 Heap-buffer-overflow in allocate_field 2020-08-02T00:00:39.707050Z 2022-04-13T03:04:32.612067Z
osv-2020-1566 Heap-buffer-overflow in ndpi_workflow_process_packet 2020-08-02T00:01:17.893681Z 2022-04-13T03:04:36.216084Z
osv-2020-1567 Heap-buffer-overflow in allocate_field 2020-08-02T00:01:18.300186Z 2022-04-13T03:04:32.617326Z
osv-2020-1570 Heap-buffer-overflow in x265::PicYuv::copyFromPicture 2020-08-03T00:00:09.880989Z 2022-04-13T03:04:32.407749Z
osv-2020-1573 Use-of-uninitialized-value in void ArduinoJsonNUMBER_71::Utf8::encodeCodepoint<ArduinoJsonNUMBER_71::StringCop 2020-08-04T00:00:11.334079Z 2022-04-13T03:04:39.357700Z
osv-2020-1577 Heap-buffer-overflow in QPointF::x 2020-08-04T00:00:33.938651Z 2023-02-24T02:29:58.691557Z
osv-2020-1587 UNKNOWN WRITE in count_blocks 2020-08-07T00:01:06.228767Z 2022-04-13T03:04:38.708481Z
osv-2020-1591 UNKNOWN READ in ft_smooth_overlap_spans 2020-08-08T00:00:13.898741Z 2022-04-13T03:04:34.883018Z
osv-2020-1595 Use-of-uninitialized-value in cryptofuzz::module::Nettle::OpSymmetricDecrypt 2020-08-11T00:00:35.680707Z 2022-04-13T03:04:35.088457Z
osv-2020-1597 UNKNOWN WRITE in avifDecoderDataFillImageGrid 2020-08-12T00:00:12.469996Z 2022-04-13T03:29:21.202851Z
osv-2020-1598 Use-of-uninitialized-value in longest_match 2020-08-12T00:00:12.956208Z 2022-04-13T03:04:41.014335Z
osv-2020-1599 Use-of-uninitialized-value in slide_hash 2020-08-12T00:00:13.402621Z 2022-04-13T03:04:40.986860Z
osv-2020-1600 Use-of-uninitialized-value in fuzzing::memory::memory_test_msan 2020-08-12T00:00:30.834222Z 2022-04-13T03:04:35.016255Z
osv-2020-1606 UNKNOWN READ in hb_set_digest_lowest_bits_t<unsigned long, 4u>::may_have 2020-08-14T00:01:09.886475Z 2022-04-13T03:04:33.225527Z
osv-2020-1609 Heap-buffer-overflow in fdisk_partname 2020-08-14T00:01:33.935815Z 2022-04-13T03:04:34.136019Z
osv-2020-1610 Segv on unknown address in Imf_2_5::hufUncompress 2020-08-14T00:01:49.720909Z 2022-04-13T03:37:36.826015Z
osv-2020-1611 Heap-buffer-overflow in yaml_emitter_emit_flow_mapping_key 2020-08-14T00:01:51.615528Z 2022-04-13T03:04:41.717390Z
osv-2020-1623 Heap-use-after-free in xmlXIncludeIncludeNode 2020-08-16T00:01:16.093615Z 2022-04-13T03:04:39.927181Z
osv-2020-1629 Segv on unknown address in wabt::BinaryReader::PrintError 2020-08-19T00:00:06.787048Z 2023-02-24T01:54:39.392108Z
osv-2020-1641 Use-of-uninitialized-value in us_internal_dispatch_ready_poll 2020-08-21T00:01:21.212570Z 2022-04-13T03:04:41.019439Z
osv-2020-1643 Heap-use-after-free in UA_NodeMap_delete 2020-08-22T00:00:17.203907Z 2022-04-13T03:04:41.375264Z
osv-2020-1655 Heap-buffer-overflow in zmq_z85_decode 2020-08-24T00:01:20.386536Z 2022-04-13T03:04:32.792589Z
osv-2020-1656 Heap-buffer-overflow in macho_is_32 2020-08-24T00:01:51.084869Z 2022-04-13T03:04:42.172036Z
osv-2020-1661 Use-of-uninitialized-value in fuzzing::memory::memory_test_msan 2020-08-25T00:00:58.570983Z 2022-04-13T03:04:35.027684Z
osv-2020-1664 Negative-size-param in BaseMemStream<char const>::getChars 2020-08-27T00:00:08.371618Z 2022-04-13T03:04:37.336851Z
ID Description Published Updated
rustsec-2025-0155 `rands` was removed from crates.io for malicious code 2025-02-10T12:00:00Z 2026-03-26T06:26:31Z
rustsec-2025-0159 `sophosfirewall-python` was removed from crates.io for malicious code 2025-02-15T12:00:00Z 2026-03-30T21:40:18Z
rustsec-2025-0015 Denial of Service via malicious Web Push endpoint 2025-02-16T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0007 *ring* is unmaintained 2025-02-20T12:00:00Z 2025-03-06T21:16:59Z
rustsec-2025-0013 resolve is unmaintained 2025-02-21T12:00:00Z 2025-03-07T15:52:15Z
rustsec-2025-0008 Openh264 Decoding Functions Heap Overflow Vulnerability 2025-02-24T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0011 `openpgp-card-sequoia` is unmaintained. 2025-03-04T12:00:00Z 2025-03-07T15:47:21Z
rustsec-2025-0012 `backoff` is unmaintained. 2025-03-04T12:00:00Z 2025-08-06T09:33:04Z
rustsec-2025-0010 Versions of *ring* prior to 0.17 are unmaintained. 2025-03-05T12:00:00Z 2025-03-07T15:46:47Z
rustsec-2025-0009 Some AES functions may panic when overflow checking is enabled. 2025-03-06T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0014 humantime is unmaintained 2025-03-08T12:00:00Z 2025-03-13T00:41:50Z
rustsec-2025-0156 `tree-sitter-pkl` was removed from crates.io for malicious code 2025-03-10T12:00:00Z 2026-03-30T21:40:18Z
rustsec-2025-0149 World Writable Directory in /var/log/below Allows Local Privilege Escalation 2025-03-12T12:00:00Z 2026-02-08T07:26:28Z
rustsec-2025-0016 Use after free in `Parc` and `Prc` due to missing lifetime constraints 2025-03-13T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0017 The `trust-dns` project has been rebranded to `hickory-dns` 2025-03-23T12:00:00Z 2025-03-23T07:00:21Z
rustsec-2025-0018 Potential out-of-bounds read with a malformed ELF file and the HashTable API. 2025-03-26T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0019 `array-init-cursor` in version 0.2.0 and below is unsound when used with types that implement `Drop` 2025-03-27T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0032 Safe API can cause heap-buffer-overflow 2025-03-27T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0033 Public API without sufficient bounds checking 2025-03-27T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0020 Risk of buffer overflow in `PyString::from_object` 2025-04-01T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0021 SHA-1 collision attacks are not detected 2025-04-03T12:00:00Z 2025-04-08T07:10:04Z
rustsec-2025-0022 Use-After-Free in `Md::fetch` and `Cipher::fetch` 2025-04-04T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0023 Broadcast channel calls clone in parallel, but does not require `Sync` 2025-04-07T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0024 crossbeam-channel: double free on Drop 2025-04-08T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0035 Multiple soundness issues in `macroquad` 2025-04-23T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0031 Unsound public API in unmaintained crate 2025-04-24T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0038 Out of bounds access in public safe API 2025-04-24T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0063 Possible unsound public API 2025-04-25T12:00:00Z 2025-10-28T06:02:18Z
rustsec-2025-0025 rustc-serialize is unmaintained 2025-04-28T12:00:00Z 2025-04-28T13:38:14Z
rustsec-2025-0027 Panic in mp3-metadata due to the lack of bounds checking 2025-04-28T12:00:00Z 2025-10-28T06:02:18Z
ID Description Published Updated
bit-node-2023-44487 2024-03-06T10:58:56.877Z 2026-02-11T09:09:18.507Z
bit-grafana-2021-43813 Directory Traversal in Grafana 2024-03-06T10:58:57.080Z 2025-05-20T10:02:07.006Z
bit-moodle-2023-35133 Moodle: ssrf risk due to insufficient check on the curl blocked hosts 2024-03-06T10:58:57.190Z 2025-05-20T10:02:07.006Z
bit-dotnet-2022-21986 .NET Denial of Service Vulnerability 2024-03-06T10:58:58.279Z 2025-05-20T10:02:07.006Z
bit-magento-2021-28563 Magento Commerce improper Authorization via the 'Create Customer' endpoint 2024-03-06T10:58:59.368Z 2026-03-20T09:47:33.381Z
bit-nginx-2022-41742 NGINX ngx_http_mp4_module vulnerability CVE-2022-41742 2024-03-06T10:58:59.003Z 2025-05-20T10:02:07.006Z
bit-golang-2022-32189 Panic when decoding Float and Rat types in math/big 2024-03-06T10:59:01.492Z 2025-05-20T10:02:07.006Z
bit-jenkins-2021-21697 2024-03-06T10:59:02.688Z 2025-04-03T14:40:37.652Z
bit-discourse-2023-25819 Discourse tags with no visibility are leaking into og:article:tag 2024-03-06T10:59:03.903Z 2025-05-20T10:02:07.006Z
bit-envoy-2021-28683 2024-03-06T10:59:03.268Z 2025-04-03T14:40:37.652Z
bit-mongodb-2020-7923 Specific GeoQuery can cause DoS against MongoDB Server 2024-03-06T10:59:03.972Z 2026-03-20T09:47:33.381Z
bit-gitlab-2023-4647 Allocation of Resources Without Limits or Throttling in GitLab 2024-03-06T10:59:04.306Z 2025-05-20T10:02:07.006Z
bit-mariadb-2022-27451 2024-03-06T10:59:05.281Z 2025-04-03T14:40:37.652Z
bit-drupal-2020-11023 Potential XSS vulnerability in jQuery 2024-03-06T10:59:06.711Z 2025-10-22T09:08:25.162Z
bit-grafana-2021-43798 Grafana path traversal 2024-03-06T10:59:06.588Z 2026-03-20T09:47:33.381Z
bit-mlflow-2023-2356 Relative Path Traversal in mlflow/mlflow 2024-03-06T10:59:06.605Z 2025-05-20T10:02:07.006Z
bit-airflow-2021-35936 No Authentication on Logging Server 2024-03-06T10:59:07.153Z 2025-05-20T10:02:07.006Z
bit-dotnet-2021-41355 .NET Core and Visual Studio Information Disclosure Vulnerability 2024-03-06T10:59:07.911Z 2025-05-20T10:02:07.006Z
bit-node-2023-39332 2024-03-06T10:59:07.902Z 2025-11-06T13:25:46.476Z
bit-magento-2021-28556 Magento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript execution 2024-03-06T10:59:08.920Z 2026-03-20T09:47:33.381Z
bit-moodle-2023-35132 Moodle: minor sql injection risk on mnet sso access control page 2024-03-06T10:59:08.929Z 2025-05-20T10:02:07.006Z
bit-openblas-2021-4048 2024-03-06T10:59:09.580Z 2025-04-03T14:40:37.652Z
bit-nginx-2022-41741 NGINX ngx_http_mp4_module vulnerability CVE-2022-41741 2024-03-06T10:59:11.025Z 2025-05-20T10:02:07.006Z
bit-gitlab-2023-4630 Missing Authorization in GitLab 2024-03-06T10:59:13.676Z 2025-05-20T10:02:07.006Z
bit-jenkins-2021-21696 2024-03-06T10:59:13.605Z 2025-04-03T14:40:37.652Z
bit-envoy-2021-28682 2024-03-06T10:59:14.669Z 2025-04-03T14:40:37.652Z
bit-golang-2022-32148 Exposure of client IP addresses in net/http 2024-03-06T10:59:14.057Z 2025-05-20T10:02:07.006Z
bit-mariadb-2022-27449 2024-03-06T10:59:14.825Z 2025-04-03T14:40:37.652Z
bit-mongodb-2020-7921 Administrative action may disable enforcement of per-user IP whitelisting 2024-03-06T10:59:14.555Z 2025-05-20T10:02:07.006Z
bit-odoo-2021-45111 2024-03-06T10:59:14.505Z 2025-04-03T14:40:37.652Z
ID Description Published Updated
cleanstart-2026-dk70097 In libexpat before 2 2026-04-21T00:38:59.570153Z 2026-04-20T05:52:44Z
cleanstart-2026-af45008 When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers 2026-04-21T00:40:00.550928Z 2026-04-20T07:28:24Z
cleanstart-2026-fo49462 Security fixes for ghsa-3xc5-wrhm-f963 applied in versions: 1.31.1-r0 2026-04-22T00:36:28.593230Z 2026-04-21T09:53:20Z
cleanstart-2026-al68245 filippo 2026-04-22T00:37:28.755649Z 2026-04-21T09:29:42Z
cleanstart-2026-lt06489 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4 2026-04-22T00:37:51.095485Z 2026-04-21T07:42:07Z
cleanstart-2026-kb76878 When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written 2026-04-22T00:39:59.241183Z 2026-04-21T09:47:18Z
cleanstart-2026-lf33811 In libexpat before 2 2026-04-22T00:40:28.653558Z 2026-04-21T09:26:32Z
cleanstart-2026-bb70412 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions 2026-04-22T00:41:59.291167Z 2026-04-21T09:28:36Z
cleanstart-2026-kx82113 In libexpat before 2 2026-04-23T00:37:25.300123Z 2026-04-22T09:49:02Z
cleanstart-2026-hm96194 In libexpat before 2 2026-04-23T00:37:25.660354Z 2026-04-22T09:49:02Z
cleanstart-2026-is05941 CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native 2026-04-23T00:39:55.461024Z 2026-04-22T06:13:27Z
ID Description Updated
ID Description Published Updated
CERTA-2002-AVI-131 Vulnérabilité du client VPN de Cisco 2002-06-20T00:00:00.000000 2002-06-20T00:00:00.000000
certa-2002-avi-131 Vulnérabilité du client VPN de Cisco 2002-06-20T00:00:00.000000 2002-06-20T00:00:00.000000
CERTA-2002-AVI-132 Multiples vulnérabilités dans Excel et Word pour Windows 2002-06-21T00:00:00.000000 2002-06-21T00:00:00.000000
CERTA-2002-AVI-133 Vulnérabilité sur ColdFusion MX de Macromedia 2002-06-21T00:00:00.000000 2002-06-21T00:00:00.000000
certa-2002-avi-132 Multiples vulnérabilités dans Excel et Word pour Windows 2002-06-21T00:00:00.000000 2002-06-21T00:00:00.000000
certa-2002-avi-133 Vulnérabilité sur ColdFusion MX de Macromedia 2002-06-21T00:00:00.000000 2002-06-21T00:00:00.000000
CERTA-2002-AVI-134 Multiples vulnérabilités dans Windows Media Player 2002-06-27T00:00:00.000000 2002-07-26T00:00:00.000000
CERTA-2002-AVI-135 Débordement de mémoire dans Microsoft Commerce Server 2000 et 2002 2002-06-27T00:00:00.000000 2002-06-27T00:00:00.000000
CERTA-2002-AVI-136 Vulnérabilités dans OpenSSH v2 et v3 2002-06-27T00:00:00.000000 2002-07-08T00:00:00.000000
CERTA-2002-AVI-137 Vulnérabilité sur Oracle9iAS 2002-06-27T00:00:00.000000 2002-06-27T00:00:00.000000
certa-2002-avi-134 Multiples vulnérabilités dans Windows Media Player 2002-06-27T00:00:00.000000 2002-07-26T00:00:00.000000
certa-2002-avi-135 Débordement de mémoire dans Microsoft Commerce Server 2000 et 2002 2002-06-27T00:00:00.000000 2002-06-27T00:00:00.000000
certa-2002-avi-136 Vulnérabilités dans OpenSSH v2 et v3 2002-06-27T00:00:00.000000 2002-07-08T00:00:00.000000
certa-2002-avi-137 Vulnérabilité sur Oracle9iAS 2002-06-27T00:00:00.000000 2002-06-27T00:00:00.000000
CERTA-2002-AVI-138 Vulnérabilité CISCO aux scans SSH 2002-06-28T00:00:00.000000 2002-06-28T00:00:00.000000
CERTA-2002-AVI-139 Vulnérabilité de souches client DNS 2002-06-28T00:00:00.000000 2002-08-19T00:00:00.000000
CERTA-2002-AVI-140 Vulnérabilité dans Sendmail 2002-06-28T00:00:00.000000 2002-06-28T00:00:00.000000
certa-2002-avi-138 Vulnérabilité CISCO aux scans SSH 2002-06-28T00:00:00.000000 2002-06-28T00:00:00.000000
certa-2002-avi-139 Vulnérabilité de souches client DNS 2002-06-28T00:00:00.000000 2002-08-19T00:00:00.000000
certa-2002-avi-140 Vulnérabilité dans Sendmail 2002-06-28T00:00:00.000000 2002-06-28T00:00:00.000000
CERTA-2002-AVI-141 Vulnérabilité dans CISCO Secure ACS pour UNIX 2002-07-04T00:00:00.000000 2002-07-04T00:00:00.000000
certa-2002-avi-141 Vulnérabilité dans CISCO Secure ACS pour UNIX 2002-07-04T00:00:00.000000 2002-07-04T00:00:00.000000
CERTA-2002-AVI-142 Vulnérabilité sur Squid 2002-07-05T00:00:00.000000 2002-07-19T00:00:00.000000
certa-2002-avi-142 Vulnérabilité sur Squid 2002-07-05T00:00:00.000000 2002-07-19T00:00:00.000000
CERTA-2002-AVI-143 Vulnérabilité ICMP dans le noyau Linux 2002-07-08T00:00:00.000000 2002-07-08T00:00:00.000000
CERTA-2002-AVI-144 Vulnérabilité dans CIPE 2002-07-08T00:00:00.000000 2002-07-08T00:00:00.000000
certa-2002-avi-143 Vulnérabilité ICMP dans le noyau Linux 2002-07-08T00:00:00.000000 2002-07-08T00:00:00.000000
certa-2002-avi-144 Vulnérabilité dans CIPE 2002-07-08T00:00:00.000000 2002-07-08T00:00:00.000000
CERTA-2002-AVI-145 Multiples vulnérabilités dans Microsoft SQL Server 2002-07-11T00:00:00.000000 2002-07-11T00:00:00.000000
CERTA-2002-AVI-146 Vulnérabilités sur iPlanet Webserver 2002-07-11T00:00:00.000000 2002-07-11T00:00:00.000000
ID Description Published Updated
jvndb-2012-000056 FeedDemon vulnerable to arbitrary script execution 2012-06-07T15:39+09:00 2012-06-07T15:39+09:00
jvndb-2012-000046 Flash Player issue in implementations of the Same Origin Policy 2012-06-11T15:05+09:00 2012-06-13T16:39+09:00
jvndb-2012-000057 Dolphin Browser vulnerable in the WebView class 2012-06-14T14:20+09:00 2012-06-14T14:20+09:00
jvndb-2012-000062 WEB PATIO vulnerable to cross-site scripting 2012-06-19T12:35+09:00 2012-06-19T12:35+09:00
jvndb-2012-000060 SmallPICT vulnerable to cross-site scripting 2012-06-19T14:00+09:00 2012-06-19T14:00+09:00
jvndb-2012-000061 WEB PATIO vulnerable to cross-site scripting 2012-06-19T14:31+09:00 2012-06-19T14:31+09:00
jvndb-2012-000063 Python SimpleHTTPServer vulnerable to cross-site scripting 2012-06-19T14:38+09:00 2012-12-26T18:01+09:00
jvndb-2012-000065 Zenphoto vulnerable to cross-site scripting 2012-07-03T14:49+09:00 2012-07-03T14:49+09:00
jvndb-2012-000064 Yome Collection for Android issue in management of IMEI 2012-07-03T14:57+09:00 2012-07-03T14:57+09:00
jvndb-2012-000066 Ruby hash table implementation vulnerable to denial-of-service 2012-07-06T17:11+09:00 2012-07-06T17:11+09:00
jvndb-2012-000067 Movable Type plugin MT4i vulnerable to cross-site scripting 2012-07-06T17:14+09:00 2012-07-06T17:14+09:00
jvndb-2012-000068 YY-BOARD vulnerable to cross-site scripting 2012-07-06T17:19+09:00 2012-07-06T17:19+09:00
jvndb-2012-000069 Movable Type plugin MT4i vulnerable to cross-site scripting 2012-07-06T17:24+09:00 2012-07-06T17:24+09:00
jvndb-2012-000070 Yahoo! Browser vulnerable in the WebView class 2012-07-13T15:00+09:00 2012-07-20T12:12+09:00
jvndb-2012-003244 Privilege escalation vulnerability in Hitachi JP1/NETM/DM 2012-07-23T17:13+09:00 2012-07-23T17:13+09:00
jvndb-2012-000071 Sleipnir Mobile for Android vulnerable in the WebView class 2012-07-24T14:05+09:00 2012-07-24T14:05+09:00
jvndb-2012-000009 Multiple web browsers vulnerable in processing Tranfer-Encoding header 2012-07-30T14:53+09:00 2012-07-30T14:53+09:00
jvndb-2012-000072 Yahoo! Toolbar (for Chrome, Safari) vulnerable to toolbar alteration 2012-07-30T14:56+09:00 2012-08-02T16:33+09:00
jvndb-2012-000073 GoodReader vulnerable to cross-site scripting 2012-08-02T14:46+09:00 2012-08-02T14:46+09:00
jvndb-2012-000074 LINE for Android vulnerable in handling of implicit intents 2012-08-07T13:33+09:00 2012-08-07T13:33+09:00
jvndb-2012-000075 Sleipnir Mobile for Android vulnerable to arbitrary Java method execution 2012-08-08T14:39+09:00 2012-08-08T14:39+09:00
jvndb-2012-000076 Sleipnir Mobile for Android vulnerable to arbitrary script execution 2012-08-08T14:43+09:00 2012-08-08T14:43+09:00
jvndb-2012-003525 Cross-site Scripting Vulnerability in JP1/Integrated Management - Service Support 2012-08-10T15:05+09:00 2012-08-10T15:05+09:00
jvndb-2012-000077 Multiple GREE Android applications vulnerable in the WebView class 2012-08-17T15:52+09:00 2012-08-17T15:52+09:00
jvndb-2012-000078 mixi for Android information management vulnerability 2012-08-17T15:58+09:00 2012-08-17T15:58+09:00
jvndb-2012-000079 Adobe Reader fails to properly handle signatures 2012-08-30T13:57+09:00 2014-05-23T18:34+09:00
jvndb-2012-000080 Opera address bar spoofing vulnerability 2012-08-30T14:00+09:00 2013-06-26T13:48+09:00
jvndb-2012-000081 Cybozu Live for Android vulnerable to arbitrary Java method execution 2012-09-03T10:34+09:00 2012-09-03T10:34+09:00
jvndb-2012-000082 Cybozu Live for Android vulnerable in the WebView class 2012-09-03T10:41+09:00 2012-09-03T10:41+09:00
jvndb-2012-000083 Cybozu KUNAI for Android vulnerable to arbitrary Java method execution 2012-09-07T16:39+09:00 2012-09-07T16:39+09:00
ID Description Published Updated
cnvd-2015-00741 BusyBox本地安全绕过漏洞 2015-01-28 2015-01-29
cnvd-2015-00743 LibTIFF存在多个拒绝服务漏洞(CNVD-2015-00743) 2015-01-28 2015-01-29
cnvd-2015-00744 LibTIFF存在多个拒绝服务漏洞(CNVD-2015-00744) 2015-01-28 2015-01-29
cnvd-2015-00745 FerretCMS存在多个HTML注入漏洞 2015-01-28 2015-01-29
cnvd-2015-00746 FerretCMS任意文件上传漏洞 2015-01-28 2015-01-29
cnvd-2015-00747 FerretCMS跨站脚本漏洞 2015-01-28 2015-01-29
cnvd-2015-00748 WebKit内存破坏漏洞(CNVD-2015-00748) 2015-01-28 2015-01-29
cnvd-2015-00749 WebKit内存破坏漏洞(CNVD-2015-00749) 2015-01-28 2015-01-29
cnvd-2015-00750 WebKit内存破坏漏洞(CNVD-2015-00750) 2015-01-28 2015-01-29
cnvd-2015-00751 socat远程拒绝服务漏洞(CNVD-2015-00751) 2015-01-28 2015-01-29
cnvd-2015-00752 Linux Kernel Crypto API本地安全绕过漏洞(CNVD-2015-00752) 2015-01-28 2015-01-29
cnvd-2015-00753 Linux Kernel Crypto API本地安全绕过漏洞(CNVD-2015-00753) 2015-01-28 2015-01-29
cnvd-2015-00754 Infinite Automation Systems Mango Automation跨站脚本漏洞 2015-01-28 2015-01-29
cnvd-2015-00755 MantisBT跨站脚本漏洞 2015-01-28 2015-01-29
cnvd-2015-00756 MantisBT不当访问控制漏洞 2015-01-28 2015-01-29
cnvd-2015-00757 MantisBT SQL注入漏洞 2015-01-28 2015-01-29
cnvd-2015-00758 Apple MAC OS X Yosemite信息泄露漏洞(CNVD-2015-00758) 2015-01-28 2015-01-29
cnvd-2015-00759 Apple MAC OS X Yosemite信息泄露漏洞(CNVD-2015-00759) 2015-01-28 2015-01-29
cnvd-2015-00760 Apple MAC OS X Yosemite安全绕过漏洞 2015-01-28 2015-01-29
cnvd-2015-00761 Apple MAC OS X Yosemite信息泄露漏洞(CNVD-2015-00761) 2015-01-28 2015-01-29
cnvd-2015-00762 PHP 'exif_process_unicode'函数远程代码执行漏洞 2015-01-28 2015-01-29
cnvd-2015-00763 HP SiteScope远程权限提升漏洞 2015-01-28 2015-01-29
cnvd-2015-00838 SupportCenter Plus存在多个跨站脚本漏洞 2015-01-28 2015-01-30
cnvd-2015-00839 FluxBB本地PHP文件包含漏洞 2015-01-28 2015-01-30
cnvd-2015-00742 Saurus CMS存在多个跨站脚本漏洞 2015-01-29 2015-01-30
cnvd-2015-00775 多个Schneider Electric产品堆栈缓冲区溢出漏洞 2015-01-29 2015-01-30
cnvd-2015-00810 Google Chrome Blink拒绝服务漏洞(CNVD-2015-00810) 2015-01-29 2015-01-30
cnvd-2015-00811 Google Chrome Skia拒绝服务漏洞(CNVD-2015-00811) 2015-01-29 2015-01-30
cnvd-2015-00812 Google Chrome PDFium拒绝服务漏洞 2015-01-29 2015-01-30
cnvd-2015-00813 Pivotal Software RabbitMQ management插件跨站脚本漏洞(CNVD-2015-00813) 2015-01-29 2015-01-30
ID Description Published Updated
bdu:2015-03171 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03172 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03173 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03174 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03175 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03176 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03177 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03178 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03179 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03180 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03181 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03182 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03183 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03184 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03185 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03186 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03187 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03188 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03189 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03190 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03191 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03192 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03193 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03194 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03195 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03196 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03197 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03198 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03199 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
bdu:2015-03200 Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику н… 28.04.2015 28.11.2016
ID Description Updated
var-202012-1624 Chengdu Feiyuxing Technology Co., Ltd. is a company dedicated to providing intelligent an… 2022-05-04T09:15:35.511000Z
var-202011-1250 Session fixation vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R… 2022-05-04T09:15:37.854000Z
var-202011-1252 Improper access control vulnerability in TCP/IP function included in the firmware of MELS… 2022-05-04T09:15:37.828000Z
var-202011-1273 A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Mod… 2022-05-04T09:15:37.753000Z
var-202011-1274 A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Mo… 2022-05-04T09:15:37.799000Z
var-202011-1275 A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnera… 2022-05-04T09:15:37.776000Z
var-202011-1295 A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnera… 2022-05-04T09:15:37.678000Z
var-202011-1526 Rockchip Microelectronics Co., Ltd. has a R&D team specializing in system-level chip desi… 2022-05-04T09:15:37.415000Z
var-202011-1547 Advantech WebAccess/HMI Designer is a man-machine interface integrated development tool. … 2022-05-04T09:15:37.403000Z
var-202011-1568 Advantech WebAccess/HMI Designer is a man-machine interface integrated development tool. … 2022-05-04T09:15:37.393000Z
var-202011-1590 HGW RL821GWV-D is a router. Excitel HGW RL821GWV-D has an information disclosure vuln… 2022-05-04T09:15:37.381000Z
var-202011-1249 Buffer overflow vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R … 2022-05-04T09:15:40.640000Z
var-202011-1251 NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of ME… 2022-05-04T09:15:40.665000Z
var-202011-1253 Improper neutralization of argument delimiters in a command ('Argument Injection') vulner… 2022-05-04T09:15:40.720000Z
var-202011-1254 Resource Management Errors vulnerability in TCP/IP function included in the firmware of M… 2022-05-04T09:15:40.693000Z
var-202010-1598 D-Link DIR-852 is a wireless router. D-Link DIR-852 has a command execution vulnerabi… 2022-05-04T09:15:41.779000Z
var-202010-1619 P-660HW-T1 is a wireless router product of Zhongqin Communication Equipment Trading (Shan… 2022-05-04T09:15:41.769000Z
var-202010-1640 Shanghai ZLAN Information Technology Co., Ltd. is a high-tech enterprise that provides in… 2022-05-04T09:15:41.760000Z
var-202011-0413 SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 78… 2022-05-04T09:15:41.487000Z
var-202010-1092 User enumeration vulnerability can be exploited to get a list of user accounts and person… 2022-05-04T09:15:42.517000Z
var-202010-1367 IBM Resilient SOAR V38.0 could allow an attacker on the internal net work to provide the … 2022-05-04T09:15:42.045000Z
var-202009-1678 Siemens is a global technology company that provides customers with solutions in the fiel… 2022-05-04T09:15:43.397000Z
var-202009-1720 Redmi Note 7 generally refers to Redmi Note 7. Redmi Note 7 is the first product of Xiaom… 2022-05-04T09:15:43.375000Z
var-202008-1285 China Pulian Technology Co., Ltd. is the world's leading supplier of network communicatio… 2022-05-04T09:15:45.023000Z
var-202008-1327 KingView is an industrial automation configuration software produced by Beijing Yakong Te… 2022-05-04T09:15:45Z
var-202007-1477 Xiaomi Mi 6 is a flagship device officially released by Xiaomi on April 19, 2017. The… 2022-05-04T09:15:46.167000Z
var-202006-1886 Shenzhen Jixiang Tengda Technology Co., Ltd. is a leading global network equipment provid… 2022-05-04T09:15:50.452000Z
var-202006-1907 Advantech WebAccessNode is a HMI/SCADA monitoring software based entirely on IE browser … 2022-05-04T09:15:50.440000Z
var-202006-1928 DrayTek Vigor series routers are dual-WAN security firewall routers designed for medium-s… 2022-05-04T09:15:50.430000Z
var-202005-1075 Zhejiang Dahua Technology Co., Ltd. is a video-centric intelligent IoT solution provider … 2022-05-04T09:15:52.153000Z
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated