Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2026-26300
N/A
Not used N/A N/A 2026-02-14T03:55:07.406Z
CVE-2026-26299
N/A
Not used N/A N/A 2026-02-14T03:55:07.938Z
CVE-2026-26302
N/A
Not used N/A N/A 2026-02-14T03:55:06.462Z
CVE-2026-26301
N/A
Not used N/A N/A 2026-02-14T03:55:06.945Z
CVE-2026-26303
N/A
Not used N/A N/A 2026-02-14T03:55:05.907Z
CVE-2025-55338
6.1 (3.1)
Windows BitLocker Security Feature Bypass Vulnerability Microsoft
Windows 10 Version 1507
2025-10-14T17:00:16.093Z 2026-02-13T23:13:12.160Z
CVE-2025-59213
8.8 (3.1)
Configuration Manager Elevation of Privilege Vulnerability Microsoft
Microsoft Configuration Manager
2025-10-14T17:01:35.025Z 2026-02-13T23:13:11.649Z
CVE-2025-60711
6.3 (3.1)
Microsoft Edge (Chromium-based) Remote Code Execution … Microsoft
Microsoft Edge (Chromium-based)
2025-10-31T19:29:01.444Z 2026-02-13T23:13:10.983Z
CVE-2025-59501
4.8 (3.1)
Microsoft Configuration Manager Spoofing Vulnerability Microsoft
Microsoft Configuration Manager
2025-10-31T16:45:40.699Z 2026-02-13T23:13:10.291Z
CVE-2025-59503
10 (3.1)
Azure Compute Resource Provider Elevation of Privilege… Microsoft
Azure Compute Resource Provider
2025-10-23T21:18:06.047Z 2026-02-13T23:13:09.086Z
CVE-2025-59500
7.7 (3.1)
Azure Notification Service Elevation of Privilege Vuln… Microsoft
Azure Notification Service
2025-10-23T21:07:30.428Z 2026-02-13T23:13:09.724Z
CVE-2025-59273
7.3 (3.1)
Azure Event Grid System Elevation of Privilege Vulnerability Microsoft
Azure Event Grid System
2025-10-23T21:17:49.064Z 2026-02-13T23:13:08.551Z
CVE-2025-59286
9.3 (3.1)
Copilot Information Disclosure Vulnerability Microsoft
Microsoft 365 Copilot's Business Chat
2025-10-09T21:04:15.392Z 2026-02-13T23:13:07.989Z
CVE-2025-55321
9.3 (3.1)
Azure Monitor Log Analytics Spoofing Vulnerability Microsoft
Azure Monitor
2025-10-09T21:04:12.117Z 2026-02-13T23:13:07.431Z
CVE-2025-59272
9.3 (3.1)
Copilot Information Disclosure Vulnerability Microsoft
Microsoft 365 Copilot's Business Chat
2025-10-09T21:04:14.254Z 2026-02-13T23:13:06.977Z
CVE-2025-59271
8.7 (3.1)
Redis Enterprise Elevation of Privilege Vulnerability Microsoft
Azure Cache for Redis Enterprise
2025-10-09T21:04:13.580Z 2026-02-13T23:13:06.345Z
CVE-2025-59252
9.3 (3.1)
M365 Copilot Information Disclosure Vulnerability Microsoft
Microsoft 365 Word Copilot
2025-10-09T21:04:12.988Z 2026-02-13T23:13:05.787Z
CVE-2025-59247
8.8 (3.1)
Azure PlayFab Elevation of Privilege Vulnerability Microsoft
Azure PlayFab
2025-10-09T21:04:10.867Z 2026-02-13T23:13:05.312Z
CVE-2025-59246
9.8 (3.1)
Azure Entra ID Elevation of Privilege Vulnerability Microsoft
Microsoft Entra
2025-10-09T21:04:09.291Z 2026-02-13T23:13:04.759Z
CVE-2025-59218
9.6 (3.1)
Azure Entra ID Elevation of Privilege Vulnerability Microsoft
Microsoft Entra
2025-10-09T21:04:07.739Z 2026-02-13T23:13:04.146Z
CVE-2025-59497
7 (3.1)
Microsoft Defender for Linux Denial of Service Vulnerability Microsoft
Microsoft Defender for Endpoint for Linux
2025-10-14T17:01:48.832Z 2026-02-13T23:13:03.545Z
CVE-2025-59289
7 (3.1)
Windows Bluetooth Service Elevation of Privilege Vulne… Microsoft
Windows 10 Version 21H2
2025-10-14T17:01:48.272Z 2026-02-13T23:13:02.992Z
CVE-2025-59287
9.8 (3.1)
Windows Server Update Service (WSUS) Remote Code Execu… Microsoft
Windows Server 2012
2025-10-14T17:01:47.629Z 2026-02-13T23:13:02.410Z
CVE-2025-59285
7 (3.1)
Azure Monitor Agent Elevation of Privilege Vulnerability Microsoft
Azure Monitor
2025-10-14T17:01:46.994Z 2026-02-13T23:13:01.760Z
CVE-2025-59278
7.8 (3.1)
Windows Authentication Elevation of Privilege Vulnerability Microsoft
Windows 10 Version 1507
2025-10-14T17:01:46.365Z 2026-02-13T23:13:00.965Z
CVE-2025-59275
7.8 (3.1)
Windows Authentication Elevation of Privilege Vulnerability Microsoft
Windows 10 Version 1507
2025-10-14T17:01:45.803Z 2026-02-13T23:13:00.405Z
CVE-2025-59261
7 (3.1)
Windows Graphics Component Elevation of Privilege Vuln… Microsoft
Windows 11 version 22H2
2025-10-14T17:01:45.144Z 2026-02-13T23:12:59.928Z
CVE-2025-59260
5.5 (3.1)
Microsoft Failover Cluster Virtual Driver Information … Microsoft
Windows Server 2016
2025-10-14T17:01:44.497Z 2026-02-13T23:12:59.368Z
CVE-2025-59253
5.5 (3.1)
Windows Search Service Denial of Service Vulnerability Microsoft
Windows 10 Version 1507
2025-10-14T17:01:43.961Z 2026-02-13T23:12:58.828Z
CVE-2025-59230
7.8 (3.1)
Windows Remote Access Connection Manager Elevation of … Microsoft
Windows 10 Version 1507
2025-10-14T17:01:43.397Z 2026-02-13T23:12:58.284Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-2000
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
DCN DCME-320 Web Management Backend bridge_cfg.php app… DCN
DCME-320
2026-02-06T06:32:05.840Z 2026-02-12T15:08:14.859Z
CVE-2026-2008
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
abhiphile fermat-mcp eqn_chart.py eqn_chart code injection abhiphile
fermat-mcp
2026-02-06T07:02:07.279Z 2026-02-12T15:06:58.507Z
CVE-2026-2010
2.3 (4.0)
4.2 (3.1)
4.2 (3.0)
Sanluan PublicCMS Trade Payment TradePaymentService.ja… Sanluan
PublicCMS
2026-02-06T08:02:09.018Z 2026-02-12T15:05:45.408Z
CVE-2026-2016
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
happyfish100 libfastcommon base64.c base64_decode stac… happyfish100
libfastcommon
2026-02-06T11:02:08.107Z 2026-02-06T13:08:43.137Z
CVE-2026-2017
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
IP-COM W30AP POST Request wx3auth R7WebsSecurityHandle… IP-COM
W30AP
2026-02-06T11:32:12.618Z 2026-02-06T13:03:11.589Z
CVE-2026-2054
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
D-Link DIR-605L/DIR-619L Wifi Setting information disclosure D-Link
DIR-605L
2026-02-06T12:32:08.823Z 2026-02-06T16:41:52.170Z
CVE-2026-2055
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
D-Link DIR-605L/DIR-619L DHCP Client Information infor… D-Link
DIR-605L
2026-02-06T13:02:08.052Z 2026-02-06T16:46:35.413Z
CVE-2026-2056
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
D-Link DIR-605L/DIR-619L DHCP Connection Status wan_co… D-Link
DIR-605L
2026-02-06T14:02:09.758Z 2026-02-06T16:48:10.195Z
CVE-2026-2058
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
mathurvishal CloudClassroom-PHP-Project Post Query Det… mathurvishal
CloudClassroom-PHP-Project
2026-02-06T16:32:08.195Z 2026-02-06T16:54:07.152Z
CVE-2026-2074
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
O2OA HTTP POST Request check xml external entity reference n/a
O2OA
2026-02-07T04:02:06.652Z 2026-02-10T15:24:44.981Z
CVE-2026-2146
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
guchengwuyue yshopmall co.yixiang.utils.FileUtil updat… guchengwuyue
yshopmall
2026-02-08T09:32:07.064Z 2026-02-10T21:19:22.192Z
CVE-2024-23462
3.3 (3.1)
ZCC Mac validinstaller file integrity check missing Zscaler
Client Connector
2024-05-02T13:11:38.955Z 2024-08-01T23:06:24.159Z
CVE-2026-2200
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
heyewei JFinalCMS API Endpoint save cross site scripting heyewei
JFinalCMS
2026-02-09T01:02:05.911Z 2026-02-09T16:35:10.038Z
CVE-2026-1108
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
cijliu librtsp rtsp_rely_dumps buffer overflow cijliu
librtsp
2026-01-18T01:32:06.797Z 2026-01-20T17:11:45.294Z
CVE-2026-1109
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
cijliu librtsp rtsp_parse_request buffer overflow cijliu
librtsp
2026-01-18T03:02:06.182Z 2026-01-20T17:10:10.612Z
CVE-2025-15533
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
raysan5 raylib rtext.c GenImageFontAtlas heap-based overflow raysan5
raylib
2026-01-18T05:02:08.672Z 2026-01-21T18:53:31.970Z
CVE-2026-1452
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. N/A N/A 2026-02-17T17:26:12.868Z
CVE-2025-15534
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
raysan5 raylib rtext.c LoadFontData integer overflow raysan5
raylib
2026-01-18T06:32:06.449Z 2026-01-21T18:53:17.884Z
CVE-2026-24002
9.1 (3.1)
pyodide sandbox option is insecure gristlabs
grist-core
2026-01-22T02:26:28.765Z 2026-01-22T12:54:32.232Z
CVE-2024-23459
7.1 (3.1)
Multiple Arbitrary Creates/Overwrites by link following Zscaler
Client Connector
2024-05-02T13:11:19.436Z 2024-08-01T23:06:24.598Z
CVE-2023-28798
6.5 (3.1)
Out-of-bounds write to heap in pacparser Zscaler
Client Connector
2024-05-02T13:10:31.933Z 2024-08-02T13:51:38.162Z
CVE-2026-24042
9.4 (3.1)
Appsmith public apps can execute unpublished actions (… appsmithorg
appsmith
2026-01-22T03:52:54.463Z 2026-01-22T12:28:28.202Z
CVE-2026-24055
6.3 (4.0)
Langfuse Slack OAuth Installation Endpoint Lacks Authe… langfuse
langfuse
2026-01-22T03:07:03.784Z 2026-01-22T12:40:42.009Z
CVE-2025-36058
5.5 (3.1)
Multiple security vulnerabilities are addressed in IBM… IBM
Business Automation Workflow containers
2026-01-20T15:09:07.082Z 2026-01-20T15:53:20.326Z
CVE-2024-23461
4.2 (3.1)
ZCC macOS Upgrade ZIP Bomb DoS Zscaler
Client Connector
2024-05-02T13:11:29.433Z 2024-08-01T23:06:24.232Z
CVE-2025-36059
4.7 (3.1)
Multiple security vulnerabilities are addressed in IBM… IBM
Business Automation Workflow containers
2026-01-20T15:07:46.448Z 2026-01-20T15:54:41.357Z
CVE-2025-65924
4.1 (3.1)
ERPNext thru 15.88.1 does not sanitize or remove … n/a
n/a
2026-02-03T00:00:00.000Z 2026-02-17T16:42:43.134Z
CVE-2025-13465
6.9 (4.0)
Prototype Pollution Vulnerability in Lodash _.unset an… Lodash
Lodash
2026-01-21T19:05:28.846Z 2026-01-21T19:43:38.268Z
CVE-2026-23526
8.5 (4.0)
CVAT vulnerable to privilege escalation of users with … cvat-ai
cvat
2026-01-21T21:40:25.214Z 2026-01-23T04:55:22.148Z
CVE-2026-23960
7.3 (4.0)
Argo Workflows affected by stored XSS in the artifact … argoproj
argo-workflows
2026-01-21T22:02:50.491Z 2026-01-22T16:49:43.075Z
ID Description Published Updated
fkie_cve-2024-23461 An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS … 2024-05-02T13:23:06.567 2026-02-17T17:29:15.907
fkie_cve-2025-36059 IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 2… 2026-01-20T16:16:02.920 2026-02-17T17:24:57.763
fkie_cve-2025-65924 ERPNext thru 15.88.1 does not sanitize or remove certain HTML tags specifically `<a>` hyperlinks in… 2026-02-03T18:16:15.810 2026-02-17T17:21:04.173
fkie_cve-2025-13465 Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.om… 2026-01-21T20:16:05.250 2026-02-17T17:10:07.520
fkie_cve-2026-23526 CVAT is an open source interactive video and image annotation tool for computer vision. In versions… 2026-01-21T22:15:50.433 2026-02-17T17:08:52.683
fkie_cve-2026-23960 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs o… 2026-01-21T22:15:50.627 2026-02-17T16:56:21.320
fkie_cve-2026-23630 Docmost is open-source collaborative wiki and documentation software. In versions 0.3.0 through 0.2… 2026-01-21T23:15:52.187 2026-02-17T16:50:10.463
fkie_cve-2026-23951 SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the va… 2026-01-22T01:15:52.633 2026-02-17T16:48:48.433
fkie_cve-2026-23946 Tendenci is an open source content management system built for non-profits, associations and cause-… 2026-01-22T01:15:52.467 2026-02-17T16:44:09.617
fkie_cve-2026-23958 Dataease is an open source data visualization analysis tool. Prior to version 2.10.19, DataEase use… 2026-01-22T02:15:52.627 2026-02-17T16:28:47.743
fkie_cve-2026-20682 A logic issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPa… 2026-02-11T23:16:10.557 2026-02-17T16:20:28.700
fkie_cve-2026-20677 A race condition was addressed with improved handling of symbolic links. This issue is fixed in mac… 2026-02-11T23:16:10.107 2026-02-17T16:20:28.307
fkie_cve-2026-20629 A privacy issue was addressed with improved handling of temporary files. This issue is fixed in mac… 2026-02-11T23:16:06.417 2026-02-17T16:20:27.980
fkie_cve-2026-20601 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe … 2026-02-11T23:16:03.907 2026-02-17T16:20:27.817
fkie_cve-2026-23959 CoreShop is a Pimcore enhanced eCommerce solution. An error-based SQL Injection vulnerability was i… 2026-01-22T03:15:46.233 2026-02-17T16:13:17.520
fkie_cve-2026-23687 SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with norma… 2026-02-10T04:16:03.180 2026-02-17T16:12:35.840
fkie_cve-2026-2258 A flaw has been found in aardappel lobster up to 2025.4. Affected by this vulnerability is the func… 2026-02-10T00:16:06.523 2026-02-17T16:12:27.633
fkie_cve-2026-0484 Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an aut… 2026-02-10T04:16:00.947 2026-02-17T16:12:08.050
fkie_cve-2026-0485 SAP BusinessObjects BI Platform allows an unauthenticated attacker to send specially crafted reques… 2026-02-10T04:16:01.387 2026-02-17T16:11:42.843
fkie_cve-2026-0486 In ABAP based SAP systems a remote enabled function module does not perform necessary authorization… 2026-02-10T04:16:01.550 2026-02-17T16:11:29.140
fkie_cve-2026-23991 go-tuf is a Go implementation of The Update Framework (TUF). Starting in version 2.0.0 and prior to… 2026-01-22T03:15:47.317 2026-02-17T16:10:55.810
fkie_cve-2026-25991 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists… 2026-02-13T19:17:28.953 2026-02-17T16:10:27.940
fkie_cve-2026-0488 An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a g… 2026-02-10T04:16:01.710 2026-02-17T16:10:03.600
fkie_cve-2026-25964 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists… 2026-02-13T19:17:28.810 2026-02-17T16:07:02.177
fkie_cve-2026-0490 SAP BusinessObjects BI Platform allows an unauthenticated attacker to craft a specific network requ… 2026-02-10T04:16:01.873 2026-02-17T16:06:59.097
fkie_cve-2026-0505 The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters tha… 2026-02-10T04:16:02.030 2026-02-17T16:06:27.080
fkie_cve-2026-0508 The SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker with high p… 2026-02-10T04:16:02.187 2026-02-17T16:06:15.913
fkie_cve-2026-0509 SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged use… 2026-02-10T04:16:02.357 2026-02-17T16:04:59.500
fkie_cve-2026-23681 Due to missing authorization check in a function module in SAP Support Tools Plug-In, an authentica… 2026-02-10T04:16:02.520 2026-02-17T16:04:47.287
fkie_cve-2026-23684 A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker a… 2026-02-10T04:16:02.683 2026-02-17T16:04:38.427
ID Severity Description Published Updated
ghsa-53wq-r63f-m33q
9.1 (3.1)
The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memo… 2022-05-24T19:08:56Z 2026-02-13T21:31:31Z
ghsa-cgmm-x5ww-q5cr
5.3 (4.0)
beautiful-mermaid contains an SVG attribute injection issue that can lead to cross-site scripting (XSS) 2026-02-13T18:31:25Z 2026-02-13T21:04:19Z
ghsa-w5cr-2qhr-jqc5
6.2 (4.0)
Cloudflare Agents has a Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground site 2026-02-13T21:04:00Z 2026-02-13T21:04:00Z
ghsa-p5vf-5754-x7p3
`polymarket-client-sdks` was removed from crates.io for malicious code 2026-02-13T21:02:38Z 2026-02-13T21:02:38Z
ghsa-9pj7-jh2r-87g8
4.3 (3.1)
Mattermost doesn't validate user permissions when creating Jira issues from Mattermost posts 2026-02-13T12:31:21Z 2026-02-13T20:56:15Z
ghsa-rp46-r563-jrc7
6.9 (4.0)
Apache Avro Java SDK is Vulnerable to Code Injection 2026-02-13T12:31:21Z 2026-02-13T20:56:03Z
ghsa-2xf7-hmf6-p64j
3.1 (3.1)
Mattermost doesn't properly validate channel membership at the time of data retrieval 2026-02-13T12:31:21Z 2026-02-13T20:55:54Z
ghsa-c7ph-f7jm-xv4w
6.3 (4.0)
rPGP's integrity protection of encrypted data was not always checked 2026-02-13T20:55:20Z 2026-02-13T20:55:20Z
ghsa-8h58-w33p-wq3g
8.7 (4.0)
rPGP affected by crash in message handling for deeply nested messages 2026-02-13T20:54:27Z 2026-02-13T20:54:27Z
ghsa-7587-4wv6-m68m
8.7 (4.0)
rPGP vulnerable to parser crash on crafted RSA secret key packets through CVE-2026-21895 2026-02-13T20:54:19Z 2026-02-13T20:54:19Z
ghsa-8wc6-vgrq-x6cf
5.5 (3.1)
Child processes spawned by Renovate incorrectly have full access to environment variables 2026-02-13T20:53:58Z 2026-02-13T20:53:58Z
ghsa-qhp6-6p8p-2rqh
8.1 (3.1)
Wildfly Elytron integration susceptible to brute force attacks via CLI 2026-02-13T20:52:26Z 2026-02-13T20:52:26Z
ghsa-3jxr-23ph-c89g
8.1 (3.1)
Duplicate Advisory: Wildfly Elytron integration susceptible to brute force attacks via CLI 2025-03-04T18:33:43Z 2026-02-13T20:52:09Z
ghsa-hcvw-475w-8g7p
8.1 (3.1)
Keycloak affected by improper invitation token validation 2026-02-09T21:31:03Z 2026-02-13T20:32:01Z
ghsa-wv3h-x6c4-r867
6.5 (3.1)
Keycloak services allows the issuance of access and refresh tokens for disabled users 2026-01-21T09:31:30Z 2026-02-13T20:24:37Z
ghsa-g433-pq76-6cmf
Bug fixes in hpke-rs, hpke-rs-rust-crypto 2026-02-13T20:05:10Z 2026-02-13T20:05:10Z
ghsa-cvhv-6xm6-c3v4
6.2 (4.0)
Cloudflare Agents is Vulnerable to Reflected Cross-Site Scripting in the AI Playground's OAuth call… 2026-02-13T03:31:23Z 2026-02-13T20:04:56Z
ghsa-38c4-r59v-3vqw
5.3 (3.1)
5.5 (4.0)
markdown-it is has a Regular Expression Denial of Service (ReDoS) 2026-02-12T06:30:13Z 2026-02-13T20:04:39Z
ghsa-6426-9fv3-65x8
5.4 (3.1)
Django has an SQL Injection issue 2026-02-03T15:30:24Z 2026-02-13T19:55:25Z
ghsa-qvhc-9v3j-5rfw
8.7 (4.0)
Microsoft Security Advisory CVE-2026-21218 | .NET Security Feature Bypass Vulnerability 2026-02-10T21:32:18Z 2026-02-13T19:43:22Z
ghsa-w7w9-2vjv-7r67
6.1 (3.1)
5.4 (4.0)
A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Wi… 2026-02-13T18:31:25Z 2026-02-13T18:31:25Z
ghsa-qqhc-37jx-7gh5
6.5 (3.1)
A cross-site scripting (XSS) vulnerability in the item management and sales invoice function of Ope… 2026-02-13T18:31:25Z 2026-02-13T18:31:25Z
ghsa-7v9f-f4qv-fcxh
5.8 (4.0)
Local privilege escalation in Genetec Sipelia Plugin. An authenticated low-privileged Windows user … 2026-02-13T18:31:25Z 2026-02-13T18:31:25Z
ghsa-5wr5-vxhh-x7gm
10.0 (4.0)
Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Servi… 2026-02-13T18:31:25Z 2026-02-13T18:31:25Z
ghsa-3669-8ww5-g35f
6.5 (3.1)
A cross-site scripting (XSS) vulnerability in the Generate Item Barcode function of OpenSourcePOS v… 2026-02-13T18:31:25Z 2026-02-13T18:31:25Z
ghsa-xrqq-m9vv-pq36
5.5 (3.1)
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15… 2026-02-12T00:31:04Z 2026-02-13T18:31:24Z
ghsa-vwfj-gc28-j2fg
6.5 (3.1)
A cross-site scripting (XSS) vulnerability in the Customers function of OpenSourcePOS v3.4.1 allows… 2026-02-13T18:31:24Z 2026-02-13T18:31:24Z
ghsa-p5cr-gq3j-93c4
6.1 (3.1)
lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting (XSS) exists in the /setting/ page where… 2026-02-13T00:32:51Z 2026-02-13T18:31:24Z
ghsa-p47v-wp9g-8362
4.4 (3.1)
The issue was addressed with improved memory handling. This issue is fixed in watchOS 26.3, tvOS 26… 2026-02-12T00:31:04Z 2026-02-13T18:31:24Z
ghsa-jhq4-533p-8p4c
5.5 (3.1)
This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26.3… 2026-02-12T00:31:03Z 2026-02-13T18:31:24Z
ID Severity Description Package Published Updated
pysec-2023-153
6.1 (3.1)
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_u… horizon 2023-08-22T19:16:00+00:00 2023-08-30T18:28:45.068261+00:00
pysec-2023-92
Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt. langchain 2023-06-20T15:15:00Z 2023-08-29T18:59:00.000000Z
pysec-2023-145
9.8 (3.1)
An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via th… langchain 2023-08-15T17:15:00Z 2023-08-29T18:47:00.000000Z
pysec-2023-152
8.1 (3.1)
Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be… apache-airflow 2023-08-23T16:15:00+00:00 2023-08-29T18:28:28.180958+00:00
pysec-2023-109
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the… langchain 2023-07-06T14:15:00Z 2023-08-29T16:42:00.000000Z
pysec-2023-98
An issue in langchain v.0.0.199 allows an attacker to execute arbitrary code via the PALC… langchain 2023-07-03T21:15:00Z 2023-08-29T16:40:00.000000Z
pysec-2023-151
9.8 (3.1)
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via th… langchain 2023-08-22T19:16:00Z 2023-08-29T15:11:37.047967Z
pysec-2023-91
Langchain 0.0.171 is vulnerable to Arbitrary Code Execution. langchain 2023-06-14T15:15:00Z 2023-08-28T16:50:25.676144Z
pysec-2023-110
SQL injection vulnerability in langchain v.0.0.64 allows a remote attacker to obtain sens… langchain 2023-07-06T14:15:00Z 2023-08-28T16:50:24.862628Z
pysec-2023-150
7.8 (3.1)
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 a… exiv2 2023-08-22T19:15:00+00:00 2023-08-25T18:28:13.546911+00:00
pysec-2023-149
The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabl… json2xml 2023-08-22T19:16:00+00:00 2023-08-22T20:23:14.541580+00:00
pysec-2023-148
9.8 (3.1)
An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary… llama-index 2023-08-15T17:15:00+00:00 2023-08-22T18:27:29.213194+00:00
pysec-2023-147
9.8 (3.1)
An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execu… langchain 2023-08-15T17:15:00+00:00 2023-08-22T18:27:28.580705+00:00
pysec-2023-138
9.8 (3.1)
An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary co… langchain 2023-08-05T03:15:00Z 2023-08-22T15:51:39.650271Z
pysec-2023-146
9.8 (3.1)
An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to exe… langchain 2023-08-15T17:15:00+00:00 2023-08-22T14:25:42.963301+00:00
pysec-2023-112
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have c… cryptography 2023-07-14T20:15:00+00:00 2023-08-21T15:28:13.372385+00:00
pysec-2023-102
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8… scipy 2023-07-05T17:15:00Z 2023-08-17T13:32:44.929651Z
pysec-2023-144
8.8 (3.1)
Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.… wger 2023-08-08T16:15:00+00:00 2023-08-17T03:22:34.520767+00:00
pysec-2023-143
5.4 (3.1)
Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows … wger 2023-08-08T16:15:00+00:00 2023-08-17T03:22:34.437974+00:00
pysec-2023-142
5.9 (3.1)
Vyer is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In ver… vyper 2023-08-07T19:15:00+00:00 2023-08-17T03:22:33.953997+00:00
pysec-2022-43058
7.5 (3.1)
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i… pywasm3 2022-09-20T18:15:00+00:00 2023-08-17T03:22:33.607469+00:00
pysec-2022-43057
5.5 (3.1)
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Mem… pywasm3 2022-07-27T14:15:00+00:00 2023-08-17T03:22:33.522615+00:00
pysec-2023-140
6.5 (3.1)
MindsDB's AI Virtual Database allows developers to connect any AI/ML model to any datasou… mindsdb 2023-08-04T18:15:00+00:00 2023-08-17T03:22:32.744229+00:00
pysec-2023-139
5.3 (3.1)
Sydent is an identity server for the Matrix communications protocol. Prior to version 2.5… matrix-sydent 2023-08-04T16:15:00+00:00 2023-08-17T03:22:32.583512+00:00
pysec-2023-137
GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from… gitpython 2023-08-11T07:15:00+00:00 2023-08-17T03:22:31.332731+00:00
pysec-2022-43056
9.8 (3.1)
The keep for python, as distributed on PyPI, included a code-execution backdoor inserted … keep 2022-06-08T18:15:00+00:00 2023-08-17T03:22:31.636090+00:00
pysec-2022-43055
7.5 (3.1)
Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by r… hyperledger 2022-11-12T20:15:00+00:00 2023-08-17T03:22:31.453589+00:00
pysec-2022-43054
7.5 (3.1)
An access control issue in the component /ManageRoute/postRoute of FreeTAKServer v1.9.8 a… freetakserver 2022-03-11T00:15:00+00:00 2023-08-17T03:22:31.240214+00:00
pysec-2023-136
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Dril… apache-airflow 2023-08-11T08:15:00+00:00 2023-08-17T03:22:30.530556+00:00
pysec-2023-135
Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. These ar… certifi 2023-08-03T19:36:12+00:00 2023-08-07T05:41:30.977938+00:00
ID Description Updated
gsd-2024-33283 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.630959Z
gsd-2024-33282 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.611885Z
gsd-2024-33281 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.648581Z
gsd-2024-33280 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.609399Z
gsd-2024-33279 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.616853Z
gsd-2024-33278 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.733959Z
gsd-2024-33277 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.745937Z
gsd-2024-33276 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.761165Z
gsd-2024-33275 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.756484Z
gsd-2024-33274 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.762400Z
gsd-2024-33273 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.759747Z
gsd-2024-33272 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.617526Z
gsd-2024-33271 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.694529Z
gsd-2024-33270 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.643212Z
gsd-2024-33269 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.732290Z
gsd-2024-33268 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.718577Z
gsd-2024-33267 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.738163Z
gsd-2024-33266 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.741026Z
gsd-2024-33265 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.633689Z
gsd-2024-33264 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.735849Z
gsd-2024-33263 QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(… 2024-04-24T05:02:09.681513Z
gsd-2024-33262 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.725480Z
gsd-2024-33261 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.722494Z
gsd-2024-33260 Jerryscript commit cefd391 was discovered to contain a segmentation violation via the com… 2024-04-24T05:02:09.630501Z
gsd-2024-33259 Jerryscript commit cefd391 was discovered to contain a segmentation violation via the com… 2024-04-24T05:02:09.609662Z
gsd-2024-33258 Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the com… 2024-04-24T05:02:09.753118Z
gsd-2024-33257 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.704832Z
gsd-2024-33256 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.691816Z
gsd-2024-33255 Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMA_STRING… 2024-04-24T05:02:09.756677Z
gsd-2024-33254 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.738567Z
ID Description Published Updated
MAL-2026-584 Malicious code in chai-as-extended (npm) 2026-01-28T15:06:22Z 2026-02-02T05:56:26Z
MAL-2026-565 Malicious code in converse-rn-lib (npm) 2026-01-28T07:50:39Z 2026-02-02T05:56:26Z
MAL-2026-564 Malicious code in chai-as-hashed (npm) 2026-01-28T07:53:44Z 2026-02-02T05:56:26Z
MAL-2026-555 Malicious code in acuitymobileapp (npm) 2026-01-28T07:13:15Z 2026-02-02T05:56:26Z
MAL-2026-550 Malicious code in cdnhost (npm) 2026-01-28T03:21:37Z 2026-02-02T05:56:26Z
MAL-2026-549 Malicious code in blockchain-helper-lib (npm) 2026-01-28T03:20:46Z 2026-02-02T05:56:26Z
MAL-2026-508 Malicious code in cartos-dds-ui (npm) 2026-01-26T16:41:17Z 2026-02-02T05:56:26Z
mal-2026-578 Malicious code in @pukpuk1/somsodamsd (npm) 2026-01-28T13:59:24Z 2026-02-02T05:56:25Z
mal-2026-563 Malicious code in @nayzak51/primebeem-db (npm) 2026-01-28T07:27:26Z 2026-02-02T05:56:25Z
mal-2026-528 Malicious code in @shije/new-qs (npm) 2026-01-27T07:55:42Z 2026-02-02T05:56:25Z
mal-2026-527 Malicious code in @santandergroup-uk/edgehome-components (npm) 2026-01-27T08:16:51Z 2026-02-02T05:56:25Z
mal-2026-526 Malicious code in @row-components/pricing-embedded-sui (npm) 2026-01-27T08:01:02Z 2026-02-02T05:56:25Z
mal-2026-519 Malicious code in @afg-ikea/ikea-modals (npm) 2026-01-27T02:11:41Z 2026-02-02T05:56:25Z
mal-2026-518 Malicious code in @afg-ikea/ikea-kiosk-related-components (npm) 2026-01-27T02:11:40Z 2026-02-02T05:56:25Z
mal-2026-517 Malicious code in @afg-ikea/ikea-family-registration-module (npm) 2026-01-27T02:11:40Z 2026-02-02T05:56:25Z
mal-2026-509 Malicious code in @sommos/create-program-template-form-data (npm) 2026-01-26T18:20:46Z 2026-02-02T05:56:25Z
MAL-2026-578 Malicious code in @pukpuk1/somsodamsd (npm) 2026-01-28T13:59:24Z 2026-02-02T05:56:25Z
MAL-2026-563 Malicious code in @nayzak51/primebeem-db (npm) 2026-01-28T07:27:26Z 2026-02-02T05:56:25Z
MAL-2026-528 Malicious code in @shije/new-qs (npm) 2026-01-27T07:55:42Z 2026-02-02T05:56:25Z
MAL-2026-527 Malicious code in @santandergroup-uk/edgehome-components (npm) 2026-01-27T08:16:51Z 2026-02-02T05:56:25Z
MAL-2026-526 Malicious code in @row-components/pricing-embedded-sui (npm) 2026-01-27T08:01:02Z 2026-02-02T05:56:25Z
MAL-2026-519 Malicious code in @afg-ikea/ikea-modals (npm) 2026-01-27T02:11:41Z 2026-02-02T05:56:25Z
MAL-2026-518 Malicious code in @afg-ikea/ikea-kiosk-related-components (npm) 2026-01-27T02:11:40Z 2026-02-02T05:56:25Z
MAL-2026-517 Malicious code in @afg-ikea/ikea-family-registration-module (npm) 2026-01-27T02:11:40Z 2026-02-02T05:56:25Z
MAL-2026-509 Malicious code in @sommos/create-program-template-form-data (npm) 2026-01-26T18:20:46Z 2026-02-02T05:56:25Z
mal-2026-635 Malicious code in finnairshop (npm) 2026-02-02T05:19:43Z 2026-02-02T05:19:43Z
mal-2026-633 Malicious code in cowsay-fancy (npm) 2026-02-02T05:19:43Z 2026-02-02T05:19:43Z
mal-2026-632 Malicious code in cowsay-deluxe (npm) 2026-02-02T05:19:43Z 2026-02-02T05:19:43Z
mal-2026-631 Malicious code in cowsay-caps (npm) 2026-02-02T05:19:43Z 2026-02-02T05:19:43Z
mal-2026-630 Malicious code in cowsay-allcaps (npm) 2026-02-02T05:19:43Z 2026-02-02T05:19:43Z
ID Description Published Updated
wid-sec-w-2024-0538 Django: Schwachstelle ermöglicht Denial of Service 2024-03-03T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2024-0511 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe 2024-02-28T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2024-0306 Django: Schwachstelle ermöglicht Denial of Service 2024-02-06T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2023-2259 Django: Schwachstelle ermöglicht Denial of Service 2023-09-04T22:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2023-0847 Nextcloud: Mehrere Schwachstellen ermöglichen Manipulation von Dateien 2023-04-04T22:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2023-0352 Django: Schwachstelle ermöglicht Denial of Service 2023-02-13T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2023-0345 Red Hat Update Infrastructure (RHUI): Mehrere Schwachstellen 2023-02-13T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2023-0262 Django: Schwachstelle ermöglicht Denial of Service 2023-02-01T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2022-2183 Nextcloud: Mehrere Schwachstellen 2022-11-27T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2022-2008 GNU libc: mehrere Schwachstellen 2017-02-14T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2022-1220 GNU libc: Mehrere Schwachstellen ermöglichen Codeausführung und Denial of Service 2022-01-16T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2022-1206 GNU libc: Mehrere Schwachstellen 2022-01-24T23:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2022-0847 Red Hat Enterprise Linux (Django): Schwachstelle ermöglicht Manipulation von Dateien 2022-07-27T22:00:00.000+00:00 2025-09-17T22:00:00.000+00:00
wid-sec-w-2025-2046 cPanel cPanel/WHM: Schwachstelle ermöglicht Manipulation von Dateien 2025-09-14T22:00:00.000+00:00 2025-09-15T22:00:00.000+00:00
wid-sec-w-2024-3291 Apple macOS: Mehrere Schwachstellen 2024-10-28T23:00:00.000+00:00 2025-09-15T22:00:00.000+00:00
wid-sec-w-2025-2044 Microsoft Visual Studio Code: Schwachstelle ermöglicht Codeausführung 2025-09-14T22:00:00.000+00:00 2025-09-14T22:00:00.000+00:00
wid-sec-w-2025-1861 Liferay DXP und Portal: Mehrere Schwachstellen 2025-08-18T22:00:00.000+00:00 2025-09-14T22:00:00.000+00:00
wid-sec-w-2025-2015 Google Chrome und Microsoft Edge: Mehrere Schwachstellen 2025-09-09T22:00:00.000+00:00 2025-09-11T22:00:00.000+00:00
wid-sec-w-2025-2004 Microsoft Azure und Microsoft Entra: Mehrere Schwachstellen 2025-09-09T22:00:00.000+00:00 2025-09-10T22:00:00.000+00:00
wid-sec-w-2025-1835 Proxmox Virtual Environment und Backup Server: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2025-08-13T22:00:00.000+00:00 2025-09-09T22:00:00.000+00:00
wid-sec-w-2025-1986 Apache Jackrabbit: Schwachstelle ermöglicht Codeausführung 2025-09-07T22:00:00.000+00:00 2025-09-08T22:00:00.000+00:00
wid-sec-w-2025-1944 Android Patchday September 2025: Multiple Vulnerabilities 2025-09-02T22:00:00.000+00:00 2025-09-08T22:00:00.000+00:00
wid-sec-w-2025-1901 Red Hat Enterprise Linux (aide): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-08-24T22:00:00.000+00:00 2025-09-08T22:00:00.000+00:00
wid-sec-w-2025-1703 WebKitGTK: Mehrere Schwachstellen 2025-08-03T22:00:00.000+00:00 2025-09-08T22:00:00.000+00:00
wid-sec-w-2025-1516 Golang Go: Schwachstelle ermöglicht Codeausführung 2025-07-08T22:00:00.000+00:00 2025-09-08T22:00:00.000+00:00
wid-sec-w-2025-1941 TYPO3 Extension (Backup Plus): Schwachstelle ermöglicht Codeausführung 2025-09-01T22:00:00.000+00:00 2025-09-02T22:00:00.000+00:00
wid-sec-w-2025-1937 Samsung Exynos: Schwachstelle ermöglicht Denial of Service 2025-08-31T22:00:00.000+00:00 2025-09-02T22:00:00.000+00:00
wid-sec-w-2025-1922 Rancher: Schwachstelle ermöglicht Denial of Service 2025-08-28T22:00:00.000+00:00 2025-09-02T22:00:00.000+00:00
wid-sec-w-2025-1913 Google Chrome und Microsoft Edge: Schwachstelle ermöglicht Codeausführung 2025-08-26T22:00:00.000+00:00 2025-09-02T22:00:00.000+00:00
wid-sec-w-2025-1815 Foxit PDF Editor und Reader: Mehrere Schwachstellen 2025-08-12T22:00:00.000+00:00 2025-09-02T22:00:00.000+00:00
ID Description Published Updated
ssa-997732 SSA-997732: Modfem File Parsing Vulnerability in Simcenter Femap before V2021.2 2021-09-14T00:00:00Z 2021-09-14T00:00:00Z
ssa-987403 SSA-987403: Multiple Vulnerabilities in Teamcenter 2021-09-14T00:00:00Z 2021-09-14T00:00:00Z
ssa-944498 SSA-944498: Buffer Overflow Vulnerability in Web Server of APOGEE and TALON Automation Devices 2021-09-14T00:00:00Z 2021-09-14T00:00:00Z
ssa-938030 SSA-938030: DGN and PAR File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.2.0.2 2021-08-10T00:00:00Z 2021-09-14T00:00:00Z
ssa-936080 SSA-936080: Multiple Vulnerabilities in Third-Party Component libcurl 2021-03-09T00:00:00Z 2021-09-14T00:00:00Z
ssa-865327 SSA-865327: Incorrect Authorization Vulnerability in Industrial Products 2021-08-10T00:00:00Z 2021-09-14T00:00:00Z
ssa-835377 SSA-835377: Missing Authentication Vulnerability in SINEMA Server 2021-09-14T00:00:00Z 2021-09-14T00:00:00Z
ssa-830194 SSA-830194: Missing Authentication Vulnerability in S7-1200 Devices 2021-08-10T00:00:00Z 2021-09-14T00:00:00Z
ssa-756744 SSA-756744: OS Command Injection Vulnerability in SINEC NMS 2021-08-10T00:00:00Z 2021-09-14T00:00:00Z
ssa-692317 SSA-692317: Authorization Bypass Vulnerability in Industrial Edge 2021-09-14T00:00:00Z 2021-09-14T00:00:00Z
ssa-535380 SSA-535380: Command Injection Vulnerability in Siveillance OIS Affecting Several Building Management Systems 2021-09-14T00:00:00Z 2021-09-14T00:00:00Z
ssa-453715 SSA-453715: Deserialization Vulnerability in CCOM Communication Component of Desigo CC Family 2021-09-14T00:00:00Z 2021-09-14T00:00:00Z
ssa-434536 SSA-434536: Memory Protection Bypass Vulnerability in SINUMERIK ONE and SINUMERIK MC 2021-07-13T00:00:00Z 2021-09-14T00:00:00Z
ssa-434535 SSA-434535: Memory Protection Bypass Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives 2021-07-13T00:00:00Z 2021-09-14T00:00:00Z
ssa-434534 SSA-434534: Memory Protection Bypass Vulnerability in SIMATIC S7-1200 and S7-1500 CPU Families 2021-05-28T00:00:00Z 2021-09-14T00:00:00Z
ssa-428051 SSA-428051: Privilege Escalation Vulnerability in TIA Administrator 2021-02-09T00:00:00Z 2021-09-14T00:00:00Z
ssa-413407 SSA-413407: Path Traversal Vulnerability in Teamcenter Active Workspace 2021-09-14T00:00:00Z 2021-09-14T00:00:00Z
ssa-334944 SSA-334944: Vulnerability in SINEMA Remote Connect Server 2021-09-14T00:00:00Z 2021-09-14T00:00:00Z
ssa-330339 SSA-330339: Web Vulnerabilities in SINEC NMS 2021-09-14T00:00:00Z 2021-09-14T00:00:00Z
ssa-288459 SSA-288459: Heap Overflow Vulnerability in RFID terminals 2021-09-14T00:00:00Z 2021-09-14T00:00:00Z
ssa-208530 SSA-208530: File parsing vulnerabilities in IFC adapter in NX 2021-09-14T00:00:00Z 2021-09-14T00:00:00Z
ssa-187092 SSA-187092: Several Buffer-Overflow Vulnerabilities in Web Server of SCALANCE X-200 2021-04-13T00:00:00Z 2021-09-14T00:00:00Z
ssa-139628 SSA-139628: Vulnerabilities in Web Server for Scalance X Products 2021-01-12T00:00:00Z 2021-09-14T00:00:00Z
ssa-109294 SSA-109294: Scene File Parsing Vulnerability in Simcenter STAR-CCM+ Viewer 2021-09-14T00:00:00Z 2021-09-14T00:00:00Z
ssa-816035 SSA-816035: Code Execution Vulnerability in SINEMA Remote Connect Client 2021-08-19T00:00:00Z 2021-08-19T00:00:00Z
ssa-818688 SSA-818688: Multiple Vulnerabilities in Solid Edge before SE2021MP7 2021-08-10T00:00:00Z 2021-08-10T00:00:00Z
ssa-752103 SSA-752103: Telnet Authentication Vulnerability in SINAMICS Medium Voltage Products 2021-05-11T00:00:00Z 2021-08-10T00:00:00Z
ssa-553445 SSA-553445: DNS "Name:Wreck" Vulnerabilities in Multiple Siemens Energy AGT and SGT solutions 2021-08-10T00:00:00Z 2021-08-10T00:00:00Z
ssa-365397 SSA-365397: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.2.0.1 2021-08-10T00:00:00Z 2021-08-10T00:00:00Z
ssa-286838 SSA-286838: Multiple Vulnerabilities in SINAMICS Medium Voltage Products 2021-05-11T00:00:00Z 2021-08-10T00:00:00Z
ID Description Published Updated
rhsa-2024:3259 Red Hat Security Advisory: go-toolset:rhel8 security update 2024-05-22T11:47:21+00:00 2026-02-18T19:36:56+00:00
rhsa-2024:2988 Red Hat Security Advisory: container-tools:rhel8 security update 2024-05-22T09:48:55+00:00 2026-02-18T19:36:55+00:00
rhsa-2024:2944 Red Hat Security Advisory: AMQ Broker 7.12.0.OPR.1.GA Container Images release and security update 2024-05-21T14:04:45+00:00 2026-02-18T19:36:55+00:00
rhsa-2024:2892 Red Hat Security Advisory: go-toolset-1.19-golang security update 2024-05-20T10:31:07+00:00 2026-02-18T19:36:55+00:00
rhsa-2024:2941 Red Hat Security Advisory: RHACS 4.4 enhancement and security update 2024-05-21T09:58:45+00:00 2026-02-18T19:36:54+00:00
rhsa-2024:2936 Red Hat Security Advisory: go-toolset:rhel8 security update 2024-05-21T10:06:56+00:00 2026-02-18T19:36:54+00:00
rhsa-2024:2935 Red Hat Security Advisory: go-toolset:rhel8 security update 2024-05-21T10:06:56+00:00 2026-02-18T19:36:54+00:00
rhsa-2024:2933 Red Hat Security Advisory: logging for Red Hat OpenShift security update 2024-05-23T06:20:48+00:00 2026-02-18T19:36:53+00:00
rhsa-2024:2932 Red Hat Security Advisory: logging for Red Hat OpenShift security update 2024-05-23T07:08:54+00:00 2026-02-18T19:36:53+00:00
rhsa-2024:2929 Red Hat Security Advisory: logging for Red Hat OpenShift security update 2024-05-23T06:49:37+00:00 2026-02-18T19:36:52+00:00
rhsa-2024:2901 Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.12.1-394 Security Update 2024-05-23T14:09:31+00:00 2026-02-18T19:36:51+00:00
rhsa-2024:2875 Red Hat Security Advisory: OpenShift Container Platform 4.13.42 bug fix and security update 2024-05-23T18:10:59+00:00 2026-02-18T19:36:50+00:00
rhsa-2024:2729 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (etcd) security update 2024-05-22T20:41:23+00:00 2026-02-18T19:36:50+00:00
rhsa-2024:2865 Red Hat Security Advisory: OpenShift Container Platform 4.15.14 bug fix and security update 2024-05-21T09:37:43+00:00 2026-02-18T19:36:49+00:00
rhsa-2024:2782 Red Hat Security Advisory: OpenShift Container Platform 4.12.57 security update 2024-05-16T18:09:19+00:00 2026-02-18T19:36:49+00:00
rhsa-2024:2773 Red Hat Security Advisory: OpenShift Container Platform 4.15.13 bug fix and security update 2024-05-15T18:40:53+00:00 2026-02-18T19:36:49+00:00
rhsa-2024:2767 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (collectd-sensubility) security update 2024-05-22T20:14:09+00:00 2026-02-18T19:36:49+00:00
rhsa-2024:2730 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (collectd-sensubility) security update 2024-05-22T20:41:27+00:00 2026-02-18T19:36:48+00:00
rhsa-2024:2728 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 director Operator container images security update 2024-05-29T19:50:12+00:00 2026-02-18T19:36:47+00:00
rhsa-2024:2724 Red Hat Security Advisory: git-lfs security update 2024-05-07T10:45:42+00:00 2026-02-18T19:36:47+00:00
rhsa-2024:2699 Red Hat Security Advisory: git-lfs security update 2024-05-06T06:57:12+00:00 2026-02-18T19:36:47+00:00
rhsa-2024:2672 Red Hat Security Advisory: OpenShift Container Platform 4.14.24 packages and security update 2024-05-09T17:18:03+00:00 2026-02-18T19:36:47+00:00
rhsa-2024:2671 Red Hat Security Advisory: Red Hat build of MicroShift 4.14.24 security update 2024-05-09T17:32:49+00:00 2026-02-18T19:36:46+00:00
rhsa-2024:2668 Red Hat Security Advisory: OpenShift Container Platform 4.14.24 bug fix and security update 2024-05-09T16:49:07+00:00 2026-02-18T19:36:46+00:00
rhsa-2024:2667 Red Hat Security Advisory: Red Hat build of MicroShift 4.15.12 security update 2024-05-09T14:38:13+00:00 2026-02-18T19:36:46+00:00
rhsa-2024:2664 Red Hat Security Advisory: OpenShift Container Platform 4.15.12 security update 2024-05-09T13:53:31+00:00 2026-02-18T19:36:45+00:00
rhsa-2024:2625 Red Hat Security Advisory: rhc-worker-script security and enhancement update 2024-04-30T19:47:52+00:00 2026-02-18T19:36:45+00:00
rhsa-2024:2562 Red Hat Security Advisory: golang security update 2024-04-30T13:33:46+00:00 2026-02-18T19:36:45+00:00
rhsa-2024:2272 Red Hat Security Advisory: containernetworking-plugins security update 2024-04-30T09:51:34+00:00 2026-02-18T19:36:45+00:00
rhsa-2024:2245 Red Hat Security Advisory: buildah security update 2024-04-30T10:08:31+00:00 2026-02-18T19:36:44+00:00
ID Description Published Updated
icsa-15-097-01 Moxa VPort ActiveX SDK Plus Stack-Based Buffer Overflow Vulnerability 2015-01-08T07:00:00.000000Z 2025-06-06T21:40:40.543597Z
icsa-15-092-01 Schneider Electric VAMPSET Software Buffer Overflow Vulnerability 2015-01-03T07:00:00.000000Z 2025-06-06T21:40:34.059444Z
icsa-15-090-03 Hospira MedNet Vulnerabilitie 2015-01-01T07:00:00.000000Z 2025-06-06T21:40:27.581727Z
icsa-15-090-02 Ecava IntegraXor DLL Vulnerabilities 2015-01-01T07:00:00.000000Z 2025-06-06T21:40:21.136198Z
icsa-15-090-01 Inductive Automation Ignition Vulnerabilities 2015-01-01T07:00:00.000000Z 2025-06-06T21:40:14.674541Z
icsa-15-085-01a Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Vulnerabilities (Update A) 2015-12-27T07:00:00.000000Z 2025-06-06T21:40:08.191186Z
icsa-15-076-02 Honeywell XL Web Controller Directory Traversal Vulnerability 2015-12-18T07:00:00.000000Z 2025-06-06T21:40:01.723578Z
icsa-15-076-01 XZERES 442SR Wind Turbine Vulnerability 2015-12-18T07:00:00.000000Z 2025-06-06T21:39:55.283613Z
icsa-15-071-01 Schneider Electric Pelco DS-NVs Buffer Overflow Vulnerability 2015-12-13T07:00:00.000000Z 2025-06-06T21:39:48.399594Z
icsa-15-027-02 Schneider Electric Multiple Products Buffer Overflow Vulnerability 2015-10-30T06:00:00.000000Z 2025-06-06T18:47:40.171170Z
icsa-15-006-01 Eaton Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Ethernet Vulnerability 2015-10-09T06:00:00.000000Z 2025-06-06T18:47:33.703835Z
icsa-14-353-01c Network Time Protocol Vulnerabilities 2014-09-21T06:00:00.000000Z 2025-06-06T18:46:55.063437Z
icsa-14-273-01 SchneiderWEB Server Directory Traversal Vulnerability 2014-07-03T06:00:00.000000Z 2025-06-06T18:46:48.565481Z
icsa-14-269-01a Bash Command Injection Vulnerability 2014-06-29T06:00:00.000000Z 2025-06-06T18:46:41.883464Z
icsa-14-238-02 Schneider Electric Wonderware Vulnerabilities 2014-05-29T06:00:00.000000Z 2025-06-06T18:46:09.707282Z
icsa-14-205-01 Morpho Itemiser 3 Hard-Coded Credential 2014-04-26T06:00:00.000000Z 2025-06-06T18:46:03.252742Z
icsa-14-202-01a OleumTech WIO Family Vulnerabilities 2014-04-23T06:00:00.000000Z 2025-06-06T18:45:43.946744Z
icsa-14-114-02 Siemens SIMATIC S7-1200 CPU Web Vulnerabilities 2014-01-25T07:00:00.000000Z 2025-06-06T18:45:30.985803Z
icsa-14-114-01 Certec atvise scada OpenSSL Heartbleed Vulnerability 2014-01-25T07:00:00.000000Z 2025-06-06T18:45:24.365433Z
icsa-14-107-02 InduSoft Web Studio Directory Traversal Vulnerability 2014-01-18T07:00:00.000000Z 2025-06-06T18:45:17.946852Z
icsa-14-107-01 Siemens SINEMA Vulnerabilities 2014-01-18T07:00:00.000000Z 2025-06-06T18:44:58.592001Z
icsa-14-016-01 Ecava IntegraXor Buffer Overflow Vulnerability 2014-10-19T06:00:00.000000Z 2025-06-06T18:44:52.152987Z
icsa-14-014-01 Schneider Electric ClearSCADA Uncontrolled Resource Consumption Vulnerability 2014-10-17T06:00:00.000000Z 2025-06-06T18:44:45.696445Z
icsa-14-010-01 MatrikonOPC Improper Input Validation 2014-10-13T06:00:00.000000Z 2025-06-06T18:44:39.268482Z
icsa-14-008-01 Ecava Sdn Bhd IntegraXor Project Directory Information Disclosure Vulnerability 2014-10-11T06:00:00.000000Z 2025-06-06T18:44:32.855266Z
icsa-14-007-01b Sierra Wireless AirLink Raven X EV-DO Vulnerabilities (Update B) 2014-10-10T06:00:00.000000Z 2025-06-06T18:44:19.916379Z
icsa-14-006-01 Schneider Electric Telvent SAGE RTU DNP3 Improper Input Validation Vulnerability 2014-10-09T06:00:00.000000Z 2025-06-06T18:44:13.497573Z
icsa-13-350-01a Schneider Electric CitectSCADA Products Exception Handler Vulnerability (Update A) 2013-09-18T06:00:00.000000Z 2025-06-06T18:43:53.863083Z
icsa-13-347-01 Siemens COMOS Privilege Escalation 2013-09-15T06:00:00.000000Z 2025-06-06T18:43:47.381681Z
icsa-13-346-02 Cooper Power Systems Cybectec DNP3 Master OPC Server Improper Input Validation 2013-09-14T06:00:00.000000Z 2025-06-06T18:43:40.964007Z
ID Description Published Updated
cisco-sa-vmanage-unauthapi-sphCLYPA Cisco SD-WAN vManage Unauthenticated REST API Access Vulnerability 2023-07-12T16:00:00+00:00 2024-03-12T18:21:23+00:00
cisco-sa-esa-sma-wsa-xss-cp9duemq Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities 2023-06-21T16:00:00+00:00 2023-07-11T16:43:10+00:00
cisco-sa-esa-sma-wsa-xss-cP9DuEmq Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities 2023-06-21T16:00:00+00:00 2023-07-11T16:43:10+00:00
cisco-sa-aci-cloudsec-enc-vs5wn2sx Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability 2023-07-05T16:00:00+00:00 2023-07-08T14:43:43+00:00
cisco-sa-aci-cloudsec-enc-Vs5Wn2sX Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability 2023-07-05T16:00:00+00:00 2023-07-08T14:43:43+00:00
cisco-sa-duo-auth-info-jgkswblz Cisco Duo Authentication Proxy Information Disclosure Vulnerability 2023-07-05T16:00:00+00:00 2023-07-07T15:45:19+00:00
cisco-sa-duo-auth-info-JgkSWBLz Cisco Duo Authentication Proxy Information Disclosure Vulnerability 2023-07-05T16:00:00+00:00 2023-07-07T15:45:19+00:00
cisco-sa-ac-csc-privesc-wx4u4kw Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows Privilege Escalation Vulnerability 2023-06-07T16:00:00+00:00 2023-07-05T16:20:46+00:00
cisco-sa-ac-csc-privesc-wx4U4Kw Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows Privilege Escalation Vulnerability 2023-06-07T16:00:00+00:00 2023-07-05T16:20:46+00:00
cisco-sa-sxsscsrf-2l24bbx6 Cisco Webex Meetings Web UI Vulnerabilities 2023-07-05T16:00:00+00:00 2023-07-05T16:00:00+00:00
cisco-sa-sxsscsrf-2L24bBx6 Cisco Webex Meetings Web UI Vulnerabilities 2023-07-05T16:00:00+00:00 2023-07-05T16:00:00+00:00
cisco-sa-bw-privesc-yw4ekrxw Cisco BroadWorks Privilege Escalation Vulnerability 2023-07-05T16:00:00+00:00 2023-07-05T16:00:00+00:00
cisco-sa-bw-privesc-yw4ekrXW Cisco BroadWorks Privilege Escalation Vulnerability 2023-07-05T16:00:00+00:00 2023-07-05T16:00:00+00:00
cisco-sa-duo-replay-knunkd Cisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability 2023-04-05T16:00:00+00:00 2023-06-23T16:48:56+00:00
cisco-sa-duo-replay-knuNKd Cisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability 2023-04-05T16:00:00+00:00 2023-06-23T16:48:56+00:00
cisco-sa-duo-mac-bypass-oyzpvpnx Cisco Duo Two-Factor Authentication for macOS Authentication Bypass Vulnerability 2023-06-21T16:00:00+00:00 2023-06-21T16:00:00+00:00
cisco-sa-duo-mac-bypass-OyZpVPnx Cisco Duo Two-Factor Authentication for macOS Authentication Bypass Vulnerability 2023-06-21T16:00:00+00:00 2023-06-21T16:00:00+00:00
cisco-sa-sd-wan-fhqh8pkx Cisco SD-WAN Software Information Disclosure Vulnerability 2021-09-22T16:00:00+00:00 2023-06-16T19:11:51+00:00
cisco-sa-sd-wan-Fhqh8pKX Cisco SD-WAN Software Information Disclosure Vulnerability 2021-09-22T16:00:00+00:00 2023-06-16T19:11:51+00:00
cisco-sa-smb-sxss-opyjzume Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Stored Cross-Site Scripting Vulnerability 2023-06-07T16:00:00+00:00 2023-06-07T16:00:00+00:00
cisco-sa-smb-sxss-OPYJZUmE Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Stored Cross-Site Scripting Vulnerability 2023-06-07T16:00:00+00:00 2023-06-07T16:00:00+00:00
cisco-sa-expressway-priv-esc-ls2b9t7b Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities 2023-06-07T16:00:00+00:00 2023-06-07T16:00:00+00:00
cisco-sa-expressway-priv-esc-Ls2B9t7b Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities 2023-06-07T16:00:00+00:00 2023-06-07T16:00:00+00:00
cisco-sa-cucm-imp-dos-49gl7rzt Cisco Unified Communications Manager IM & Presence Service Denial of Service Vulnerability 2023-06-07T16:00:00+00:00 2023-06-07T16:00:00+00:00
cisco-sa-cucm-imp-dos-49GL7rzT Cisco Unified Communications Manager IM & Presence Service Denial of Service Vulnerability 2023-06-07T16:00:00+00:00 2023-06-07T16:00:00+00:00
cisco-sa-cucm-dos-4ag3ywbd Cisco Unified Communications Manager Denial of Service Vulnerability 2023-06-07T16:00:00+00:00 2023-06-07T16:00:00+00:00
cisco-sa-cucm-dos-4Ag3yWbD Cisco Unified Communications Manager Denial of Service Vulnerability 2023-06-07T16:00:00+00:00 2023-06-07T16:00:00+00:00
cisco-sa-csw-auth-openapi-ktndjdnx Cisco Secure Workload Authenticated OpenAPI Privilege Escalation Vulnerability 2023-06-07T16:00:00+00:00 2023-06-07T16:00:00+00:00
cisco-sa-csw-auth-openapi-kTndjdNX Cisco Secure Workload Authenticated OpenAPI Privilege Escalation Vulnerability 2023-06-07T16:00:00+00:00 2023-06-07T16:00:00+00:00
cisco-sa-iox-8whgn5dl Cisco IOx Application Hosting Environment Command Injection Vulnerability 2023-02-01T16:00:00+00:00 2023-06-01T15:34:21+00:00
ID Description Published Updated
msrc_cve-2025-38204 jfs: fix array-index-out-of-bounds read in add_missing_indices 2025-07-02T00:00:00.000Z 2026-02-18T02:17:53.000Z
msrc_cve-2025-49794 Libxml: heap use after free (uaf) leads to denial of service (dos) 2025-06-02T00:00:00.000Z 2026-02-18T02:17:52.000Z
msrc_cve-2022-48893 drm/i915/gt: Cleanup partial engine discovery failures 2024-08-02T00:00:00.000Z 2026-02-18T02:17:50.000Z
msrc_cve-2019-16276 Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling. 2019-09-02T00:00:00.000Z 2026-02-18T02:17:46.000Z
msrc_cve-2024-57887 drm: adv7511: Fix use-after-free in adv7533_attach_dsi() 2025-01-02T00:00:00.000Z 2026-02-18T02:17:42.000Z
msrc_cve-2022-35409 An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function. 2022-07-02T00:00:00.000Z 2026-02-18T02:17:36.000Z
msrc_cve-2023-31484 CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. 2023-04-01T00:00:00.000Z 2026-02-18T02:17:32.000Z
msrc_cve-2025-38351 KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush 2025-07-02T00:00:00.000Z 2026-02-18T02:17:30.000Z
msrc_cve-2021-33198 In Go before 1.15.13 and 1.16.x before 1.16.5 there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method. 2021-08-02T00:00:00.000Z 2026-02-18T02:17:26.000Z
msrc_cve-2025-37819 irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() 2025-05-02T00:00:00.000Z 2026-02-18T02:17:24.000Z
msrc_cve-2025-32050 Libsoup: integer overflow in append_param_quoted 2025-04-02T00:00:00.000Z 2026-02-18T02:17:07.000Z
msrc_cve-2024-42277 iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en 2024-08-02T00:00:00.000Z 2026-02-18T02:17:03.000Z
msrc_cve-2025-68371 scsi: smartpqi: Fix device resources accessed after device removal 2025-12-02T00:00:00.000Z 2026-02-18T02:17:01.000Z
msrc_cve-2025-38230 jfs: validate AG parameters in dbMount() to prevent crashes 2025-07-02T00:00:00.000Z 2026-02-18T02:16:59.000Z
msrc_cve-2023-49295 quic-go's path validation mechanism can cause denial of service 2024-01-01T08:00:00.000Z 2026-02-18T02:16:52.000Z
msrc_cve-2024-28863 node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation 2024-03-02T08:00:00.000Z 2026-02-18T02:16:39.000Z
msrc_cve-2025-40913 Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow 2025-07-02T00:00:00.000Z 2026-02-18T02:16:33.000Z
msrc_cve-2025-49796 Libxml: type confusion leads to denial of service (dos) 2025-06-02T00:00:00.000Z 2026-02-18T02:16:31.000Z
msrc_cve-2019-16910 Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.) 2019-09-02T00:00:00.000Z 2026-02-18T02:16:29.000Z
msrc_cve-2024-50038 netfilter: xtables: avoid NFPROTO_UNSPEC where needed 2024-10-01T07:00:00.000Z 2026-02-18T02:16:28.000Z
msrc_cve-2025-37963 arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users 2025-05-02T00:00:00.000Z 2026-02-18T02:16:24.000Z
msrc_cve-2025-22870 HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 2025-03-02T00:00:00.000Z 2026-02-18T02:16:11.000Z
msrc_cve-2024-42280 mISDN: Fix a use after free in hfcmulti_tx() 2024-08-02T00:00:00.000Z 2026-02-18T02:16:05.000Z
msrc_cve-2018-10906 In fuse before versions 2.9.8 and 3.x before 3.2.5 fusermount is vulnerable to a restriction bypass when SELinux is active. This allows non-root users to mount a FUSE file system with the 'allow_other' mount option regardless of whether 'user_allow_other' is set in the fuse configuration. An attacker may use this flaw to mount a FUSE file system accessible by other users and trick them into accessing files on that file system possibly causing Denial of Service or other unspecified effects. 2018-07-02T00:00:00.000Z 2026-02-18T02:16:05.000Z
msrc_cve-2020-25576 An issue was discovered in the rand_core crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints. 2020-09-02T00:00:00.000Z 2026-02-18T02:16:00.000Z
msrc_cve-2025-38213 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2025-07-02T00:00:00.000Z 2026-02-18T02:15:45.000Z
msrc_cve-2024-47670 ocfs2: add bounds checking to ocfs2_xattr_find_entry() 2024-10-01T07:00:00.000Z 2026-02-18T02:15:43.000Z
msrc_cve-2024-21646 Azure IoT Platform Device SDK Remote Code Execution Vulnerability 2024-01-01T08:00:00.000Z 2026-02-18T02:15:34.000Z
msrc_cve-2024-30261 Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect 2024-04-02T07:00:00.000Z 2026-02-18T02:15:32.000Z
msrc_cve-2025-38575 ksmbd: use aead_request_free to match aead_request_alloc 2025-04-02T00:00:00.000Z 2026-02-18T02:15:31.000Z
ID Description Published Updated
opensuse-su-2025:15407-1 python311-3.11.13-4.1 on GA media 2025-08-04T00:00:00Z 2025-08-04T00:00:00Z
opensuse-su-2025:15406-1 kubeshark-cli-52.8.0-1.1 on GA media 2025-08-04T00:00:00Z 2025-08-04T00:00:00Z
opensuse-su-2025:15405-1 govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media 2025-08-04T00:00:00Z 2025-08-04T00:00:00Z
opensuse-su-2025:15404-1 python39-3.9.23-4.1 on GA media 2025-08-03T00:00:00Z 2025-08-03T00:00:00Z
opensuse-su-2025:15403-1 python314-3.14.0~rc1-2.1 on GA media 2025-08-03T00:00:00Z 2025-08-03T00:00:00Z
opensuse-su-2025:15402-1 python310-3.10.18-4.1 on GA media 2025-08-03T00:00:00Z 2025-08-03T00:00:00Z
opensuse-su-2025:15401-1 liblua5_5-5-5.5.0~beta1-1.1 on GA media 2025-08-03T00:00:00Z 2025-08-03T00:00:00Z
opensuse-su-2025:15400-1 grub2-2.12-56.1 on GA media 2025-08-03T00:00:00Z 2025-08-03T00:00:00Z
opensuse-su-2025:15399-1 chromedriver-138.0.7204.183-1.1 on GA media 2025-08-01T00:00:00Z 2025-08-01T00:00:00Z
opensuse-su-2025:15398-1 kwctl-1.27.1-1.1 on GA media 2025-07-31T00:00:00Z 2025-07-31T00:00:00Z
opensuse-su-2025:15397-1 gdk-pixbuf-devel-2.42.12-4.1 on GA media 2025-07-31T00:00:00Z 2025-07-31T00:00:00Z
opensuse-su-2025:15396-1 ffmpeg-7-7.1.1-8.1 on GA media 2025-07-30T00:00:00Z 2025-07-30T00:00:00Z
opensuse-su-2025:15395-1 docker-28.3.3_ce-26.1 on GA media 2025-07-30T00:00:00Z 2025-07-30T00:00:00Z
opensuse-su-2025:15394-1 libsuricata8_0_0-8.0.0-1.1 on GA media 2025-07-28T00:00:00Z 2025-07-28T00:00:00Z
opensuse-su-2025:15393-1 java-21-openj9-21.0.8.0-1.1 on GA media 2025-07-27T00:00:00Z 2025-07-27T00:00:00Z
opensuse-su-2025:15392-1 java-1_8_0-openj9-1.8.0.462-1.1 on GA media 2025-07-27T00:00:00Z 2025-07-27T00:00:00Z
opensuse-su-2025:15391-1 java-17-openj9-17.0.16.0-1.1 on GA media 2025-07-27T00:00:00Z 2025-07-27T00:00:00Z
opensuse-su-2025:15390-1 java-11-openj9-11.0.28.0-1.1 on GA media 2025-07-27T00:00:00Z 2025-07-27T00:00:00Z
opensuse-su-2025:15389-1 forgejo-longterm-11.0.3-1.1 on GA media 2025-07-27T00:00:00Z 2025-07-27T00:00:00Z
opensuse-su-2025:15388-1 rpi-imager-1.9.5-1.1 on GA media 2025-07-26T00:00:00Z 2025-07-26T00:00:00Z
opensuse-su-2025:15387-1 libmozjs-128-0-128.13.0-1.1 on GA media 2025-07-26T00:00:00Z 2025-07-26T00:00:00Z
opensuse-su-2025:15386-1 MozillaFirefox-141.0-1.1 on GA media 2025-07-26T00:00:00Z 2025-07-26T00:00:00Z
opensuse-su-2025:15385-1 perl-Authen-SASL-2.180.0-2.1 on GA media 2025-07-25T00:00:00Z 2025-07-25T00:00:00Z
opensuse-su-2025:15384-1 apache2-2.4.65-1.1 on GA media 2025-07-25T00:00:00Z 2025-07-25T00:00:00Z
opensuse-su-2025:15383-1 MozillaThunderbird-140.1.0-1.1 on GA media 2025-07-25T00:00:00Z 2025-07-25T00:00:00Z
opensuse-su-2025:15382-1 ruby3.4-rubygem-thor-1.4.0-1.1 on GA media 2025-07-24T00:00:00Z 2025-07-24T00:00:00Z
opensuse-su-2025:15381-1 python311-starlette-0.47.2-1.1 on GA media 2025-07-24T00:00:00Z 2025-07-24T00:00:00Z
opensuse-su-2025:15380-1 jupyter-nbdime-7.0.2-21.1 on GA media 2025-07-24T00:00:00Z 2025-07-24T00:00:00Z
opensuse-su-2025:15379-1 minio-client-20250721T052808Z-1.1 on GA media 2025-07-24T00:00:00Z 2025-07-24T00:00:00Z
opensuse-su-2025:15378-1 javamail-1.6.2-3.1 on GA media 2025-07-24T00:00:00Z 2025-07-24T00:00:00Z
ID Description Published Updated
osv-2023-1365 Heap-use-after-free in xmlStaticCopyNode 2023-12-28T00:07:29.258949Z 2023-12-28T00:07:29.259296Z
osv-2023-1364 Heap-buffer-overflow in processClientServerHello 2023-12-28T00:01:38.624999Z 2023-12-28T00:01:38.625414Z
osv-2023-1361 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr 2023-12-27T00:01:27.841254Z 2023-12-27T00:01:27.841623Z
osv-2023-1360 Heap-buffer-overflow in NetworkInterface::dissectPacket 2023-12-27T00:00:10.846266Z 2023-12-27T00:00:10.846829Z
osv-2023-1358 Heap-buffer-overflow in js_free_function_def 2023-12-26T00:04:18.300258Z 2023-12-26T00:04:18.300779Z
osv-2023-1357 Heap-buffer-overflow in processClientServerHello 2023-12-25T00:13:45.414227Z 2023-12-25T00:13:45.414669Z
osv-2023-1356 Heap-buffer-overflow in rawspeed::DngDecoder::parseWhiteBalance 2023-12-25T00:10:36.482844Z 2023-12-25T00:10:36.483166Z
osv-2023-1354 Heap-buffer-overflow in processClientServerHello 2023-12-25T00:03:08.530303Z 2023-12-25T00:03:08.530510Z
osv-2023-1353 Security exception in org.apache.poi.ddf.EscherContainerRecord.fillFields 2023-12-25T00:03:02.003193Z 2023-12-25T00:03:02.003829Z
osv-2023-1352 Heap-buffer-overflow in Flow::dissectMDNS 2023-12-24T00:05:23.975196Z 2023-12-24T00:05:23.975551Z
osv-2023-756 Heap-buffer-overflow in rawspeed::DngDecoder::decodeMetaDataInternal 2023-08-28T14:02:10.741602Z 2023-12-23T14:16:41.470280Z
osv-2022-896 Segv on unknown address in Sass::unifyComplex 2022-09-15T00:02:01.621945Z 2023-12-22T14:15:53.864807Z
osv-2021-508 Segv on unknown address in Sass::CompoundSelector::resolve_parent_refs 2021-03-09T00:02:18.581527Z 2023-12-22T14:10:14.701082Z
osv-2020-1420 Bad-cast to Sass::PreValue from Sass::Unary_Expression 2020-07-28T00:00:14.887375Z 2023-12-22T14:07:59.765838Z
osv-2020-862 Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::Extension, std::__1::allocator<Sass::Ext 2020-07-14T22:13:48.731457Z 2023-12-22T14:06:49.113213Z
osv-2023-1343 Heap-buffer-overflow in _libssh2_kex_agree_instr 2023-12-22T00:10:36.346763Z 2023-12-22T00:10:36.347283Z
osv-2023-276 Heap-use-after-free in aiScene::~aiScene 2023-04-04T14:01:47.666563Z 2023-12-21T14:16:54.547364Z
osv-2023-736 Heap-buffer-overflow in HeifContext::interpret_heif_file 2023-08-25T14:00:14.487219Z 2023-12-20T14:12:01.243209Z
osv-2023-1327 Security exception in com.github.javaparser.CommentsInserter.insertComments 2023-12-18T00:10:41.666920Z 2023-12-18T00:10:41.667465Z
osv-2023-1325 UNKNOWN WRITE in zero 2023-12-18T00:04:49.365880Z 2023-12-18T00:04:49.366308Z
osv-2023-1324 Heap-use-after-free in memory_bclose 2023-12-18T00:03:27.139777Z 2023-12-18T00:03:27.140220Z
osv-2023-1320 Heap-use-after-free in memory_bstat 2023-12-17T00:12:41.223755Z 2023-12-17T00:12:41.224161Z
osv-2023-1315 Heap-use-after-free in htmlParseDocument 2023-12-17T00:02:06.164794Z 2023-12-17T00:02:06.165194Z
osv-2023-42 Heap-buffer-overflow in bit_read_BB 2023-02-02T13:00:40.999896Z 2023-12-16T14:20:07.644053Z
osv-2023-1303 Heap-use-after-free in htmlCurrentChar 2023-12-15T00:00:06.313566Z 2023-12-15T00:00:06.314002Z
osv-2023-1302 Global-buffer-overflow in pcre_get_compiled_regex_cache_ex 2023-12-14T00:13:52.791976Z 2023-12-14T00:13:52.792479Z
osv-2023-1301 Global-buffer-overflow in xmlDictLookupInternal 2023-12-14T00:13:26.532719Z 2023-12-14T00:13:26.533280Z
osv-2023-1300 Security exception in com.fasterxml.jackson.core.JsonParser.currentName 2023-12-14T00:13:10.208981Z 2023-12-14T00:13:10.209415Z
osv-2023-1299 Global-buffer-overflow in pcre_get_compiled_regex_cache_ex 2023-12-14T00:12:13.097305Z 2023-12-14T00:12:13.097842Z
osv-2023-1298 Heap-buffer-overflow in loongarch_split_args_by_comma 2023-12-14T00:10:40.133892Z 2023-12-14T00:10:40.134313Z
ID Description Published Updated
rustsec-2022-0061 Crate `parity-wasm` deprecated by the author 2022-10-01T12:00:00Z 2022-10-23T11:05:06Z
rustsec-2022-0060 orbtk is Unmaintained 2022-10-13T12:00:00Z 2022-10-19T01:14:12Z
rustsec-2022-0058 Library exclusively intended to inject UB into safe Rust. 2022-09-28T12:00:00Z 2022-10-11T10:32:22Z
rustsec-2022-0056 clipboard is Unmaintained 2022-06-25T12:00:00Z 2022-09-24T11:52:27Z
rustsec-2021-0143 kamadak-exif DoS with untrusted PNG data 2021-01-04T12:00:00Z 2022-09-08T10:52:02Z
rustsec-2021-0142 dotenv is Unmaintained 2021-12-24T12:00:00Z 2022-08-30T19:40:13Z
rustsec-2021-0141 dotenv is Unmaintained 2021-12-24T12:00:00Z 2022-08-30T19:40:13Z
rustsec-2020-0077 memmap is unmaintained 2020-12-02T12:00:00Z 2022-08-25T07:09:30Z
rustsec-2022-0050 Interledger is Unmaintained 2022-08-04T12:00:00Z 2022-08-19T05:34:11Z
rustsec-2020-0055 Please see RUSTSEC-2018-0020 2020-10-21T12:00:00Z 2022-08-16T02:38:08Z
rustsec-2020-0054 directories is unmaintained, use directories-next instead 2020-10-16T12:00:00Z 2022-08-16T02:38:08Z
rustsec-2020-0053 dirs is unmaintained, use dirs-next instead 2020-10-16T12:00:00Z 2022-08-16T02:38:08Z
rustsec-2019-0031 spin is no longer actively maintained 2019-11-21T12:00:00Z 2022-08-16T02:38:08Z
rustsec-2021-0137 sodiumoxide is deprecated 2021-10-22T12:00:00Z 2022-08-10T04:01:59Z
rustsec-2022-0037 Denial of service on deeply nested fragment requests 2022-07-21T12:00:00Z 2022-08-06T06:41:24Z
rustsec-2020-0159 Potential segfault in `localtime_r` invocations 2020-11-10T12:00:00Z 2022-08-04T19:52:46Z
rustsec-2022-0041 Unsoundness of AtomicCell<*64> arithmetics on 32-bit targets that support Atomic*64 2022-02-05T12:00:00Z 2022-08-04T13:56:30Z
rustsec-2022-0039 project abandoned 2022-01-17T12:00:00Z 2022-08-02T18:15:56Z
rustsec-2022-0038 Denial of service on deeply nested fragment requests 2022-07-28T12:00:00Z 2022-08-02T17:59:55Z
rustsec-2022-0036 project abandoned 2022-01-17T12:00:00Z 2022-08-02T17:34:36Z
rustsec-2020-0163 `term_size` is unmaintained; use `terminal_size` instead 2020-11-03T12:00:00Z 2022-08-02T14:03:23Z
rustsec-2022-0034 Safety issues in `pkcs11` 2022-07-22T12:00:00Z 2022-07-25T17:19:15Z
rustsec-2022-0031 Panic due to improper UTF-8 indexing 2022-05-21T12:00:00Z 2022-06-26T20:01:26Z
rustsec-2022-0030 Stack overflow during recursive expression parsing 2022-05-21T12:00:00Z 2022-06-26T19:44:13Z
rustsec-2022-0024 double-checked-cell is unmaintained 2022-05-11T12:00:00Z 2022-05-11T21:13:02Z
rustsec-2022-0023 `static_type_map` has been renamed to `erased_set` 2022-05-11T12:00:00Z 2022-05-11T19:44:11Z
rustsec-2022-0015 pty is unmaintained 2022-03-22T12:00:00Z 2022-03-22T14:52:42Z
rustsec-2021-0134 rental is unmaintained, author has moved on 2021-12-27T12:00:00Z 2022-03-06T11:02:04Z
rustsec-2020-0162 `tokio-proto` is deprecated/unmaintained 2020-02-06T12:00:00Z 2022-02-07T02:25:36Z
rustsec-2022-0005 crate has been renamed to `ftdi-embedded-hal` 2022-01-22T12:00:00Z 2022-01-22T18:27:42Z
ID Description Published Updated
bit-tensorflow-2025-55556 2025-10-05T23:59:42.019Z 2025-10-06T00:06:00.502Z
bit-pytorch-2025-55558 2025-10-05T23:47:59.108Z 2025-10-06T00:06:00.502Z
bit-pytorch-2025-55557 2025-10-05T23:47:57.792Z 2025-10-06T00:06:00.502Z
bit-pytorch-2025-55553 2025-10-05T23:47:55.078Z 2025-10-06T00:06:00.502Z
bit-pytorch-2025-46153 2025-10-05T23:47:50.900Z 2025-10-06T00:06:00.502Z
bit-pytorch-2025-46152 2025-10-05T23:47:49.619Z 2025-10-06T00:06:00.502Z
bit-pytorch-2025-46150 2025-10-05T23:47:48.186Z 2025-10-06T00:06:00.502Z
bit-pytorch-2025-46149 2025-10-05T23:47:46.869Z 2025-10-06T00:06:00.502Z
bit-pytorch-2025-46148 2025-10-05T23:47:45.481Z 2025-10-06T00:06:00.502Z
bit-mongoose-2025-23061 2025-09-25T08:46:40.232Z 2025-10-06T00:06:00.502Z
bit-mongodb-2025-7259 Certain Queries with Duplicate _id Fields May Cause MongoDB Server to Crash 2025-10-05T23:44:19.761Z 2025-10-06T00:06:00.502Z
bit-mongodb-2025-6714 Incorrect Handling of incomplete data may prevent mongoS from Accepting New Connections 2025-10-05T23:44:18.162Z 2025-10-06T00:06:00.502Z
bit-mongodb-2025-6713 MongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage 2025-10-05T23:44:16.574Z 2025-10-06T00:06:00.502Z
bit-mongodb-2025-6712 MongoDB Server may be susceptible to DoS due to Accumulated Memory Allocation 2025-10-05T23:44:14.958Z 2025-10-06T00:06:00.502Z
bit-mongodb-2025-6711 Incomplete Redaction of Sensitive Information in MongoDB Server Logs 2025-10-05T23:44:13.320Z 2025-10-06T00:06:00.502Z
bit-django-2025-27556 2025-09-25T08:40:31.995Z 2025-10-06T00:06:00.502Z
bit-django-2024-56374 2025-03-10T08:13:20.368Z 2025-10-06T00:06:00.502Z
bit-discourse-2025-59337 Discourse: Cross-Site Data Exposure via Backup Restore Metacommand Injection in Multisite Deployments 2025-10-05T23:41:00.220Z 2025-10-06T00:06:00.502Z
bit-redis-2025-46686 2025-09-25T08:52:27.726Z 2025-10-03T15:12:57.579Z
bit-powershell-2025-49734 PowerShell Direct Elevation of Privilege Vulnerability 2025-10-03T08:49:03.988Z 2025-10-03T09:07:39.166Z
bit-kibana-2025-25014 Kibana arbitrary code execution via prototype pollution 2025-05-08T05:41:37.442Z 2025-10-03T09:07:39.166Z
bit-kibana-2024-12556 Kibana Prototype Pollution can lead to code injection 2025-04-10T07:12:32.246Z 2025-10-03T09:07:39.166Z
bit-elk-2025-25014 Kibana arbitrary code execution via prototype pollution 2025-05-08T05:37:10.649Z 2025-10-03T09:07:39.166Z
bit-elk-2024-12556 Kibana Prototype Pollution can lead to code injection 2025-04-10T07:07:56.053Z 2025-10-03T09:07:39.166Z
bit-elasticsearch-2024-52981 2025-04-10T07:10:18.243Z 2025-10-03T09:07:39.166Z
bit-elasticsearch-2024-52979 Elasticsearch Uncontrolled Resource Consumption vulnerability 2025-05-03T05:41:02.354Z 2025-10-03T09:07:39.166Z
bit-django-2025-26699 2025-03-10T08:13:13.707Z 2025-10-03T09:07:39.166Z
bit-wordpress-2025-58674 WordPress <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability 2025-09-25T08:55:10.378Z 2025-10-02T15:07:00.184Z
bit-wordpress-2025-58246 WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability 2025-09-25T08:55:08.592Z 2025-10-02T15:07:00.184Z
bit-mongodb-2024-10921 Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server 2025-10-02T14:44:36.017Z 2025-10-02T15:07:00.184Z
ID Description Updated
var-201806-1505 System software utilizing Lazy FP state restore technique on systems using Intel Core-bas… 2024-07-23T20:32:57.575000Z
var-201904-1410 A use after free issue was addressed with improved memory management. This issue affected… 2024-07-23T20:32:56.963000Z
var-200511-0062 The Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe so… 2024-07-23T20:32:56.794000Z
var-201506-0231 The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 befor… 2024-07-23T20:32:53.570000Z
var-201204-0111 The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on… 2024-07-23T20:32:19.934000Z
var-201912-0578 A memory corruption issue was addressed with improved input validation. This issue is fix… 2024-07-23T20:32:14.024000Z
var-201710-0928 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month fi… 2024-07-23T20:32:14.616000Z
var-201707-1176 An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari … 2024-07-23T20:31:50.100000Z
var-201007-0320 WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before… 2024-07-23T20:31:44.088000Z
var-201006-1253 WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari… 2024-07-23T20:31:44.497000Z
var-200603-0276 Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to r… 2024-07-23T20:31:11.533000Z
var-201912-0477 A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tv… 2024-07-23T20:31:09.597000Z
var-202109-0758 A vulnerability in the Protection Against Distributed Denial of Service Attacks feature o… 2024-07-23T20:31:08.412000Z
var-201210-0155 Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS … 2024-07-23T20:31:08.483000Z
var-201302-0143 Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.… 2024-07-23T20:31:06.906000Z
var-202109-1330 A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6,… 2024-07-23T20:31:03.287000Z
var-201702-0878 An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari … 2024-07-23T20:31:03.199000Z
var-201102-0097 Google Chrome before 9.0.597.94 does not properly handle anonymous blocks, which allows r… 2024-07-23T20:31:03.455000Z
var-201903-0418 A memory corruption issue was addressed with improved memory handling. This issue is fixe… 2024-07-23T20:30:59.999000Z
var-200705-0681 Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to… 2024-07-23T20:30:59.378000Z
var-202212-1523 The issue was addressed with improved memory handling. This issue is fixed in Safari 16.2… 2024-07-23T20:30:57.804000Z
var-200704-0227 Unspecified vulnerability in the CoreServices daemon in CarbonCore in Apple Mac OS X 10.4… 2024-07-23T20:30:57.670000Z
var-201912-1378 SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an… 2024-07-23T20:30:53.083000Z
var-200704-0222 URLMount in Apple Mac OS X 10.3.9 through 10.4.9 passes the username and password credent… 2024-07-23T20:30:53.685000Z
var-200110-0214 The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely cre… 2024-07-23T20:30:53.499000Z
var-201007-0199 The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 a… 2024-07-23T20:30:52.504000Z
var-202112-2255 In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has … 2024-07-23T20:30:28.280000Z
var-201603-0244 Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and… 2024-07-23T20:30:28.935000Z
var-200712-0605 Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_… 2024-07-23T20:30:10.502000Z
var-201302-0234 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-07-23T20:29:38.152000Z
ID Description Published Updated
jvndb-2022-000010 Multiple vulnerabilities in multiple ELECOM LAN routers 2022-02-08T16:13+09:00 2022-02-08T16:13+09:00
jvndb-2016-008013 Multiple ESET products for macOS vulnerable to improper server certificate verification 2022-02-07T14:18+09:00 2022-02-07T14:18+09:00
jvndb-2022-000007 Multiple vulnerabilities in TransmitMail 2022-01-25T15:31+09:00 2022-01-25T15:31+09:00
jvndb-2022-001097 Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux 2022-01-25T13:35+09:00 2022-01-25T13:35+09:00
jvndb-2022-001087 GROWI vulnerable to authorization bypass through user-controlled key 2022-01-24T14:07+09:00 2022-01-24T14:07+09:00
jvndb-2022-000006 Multiple cross-site scripting vulnerabilities in php_mailform 2022-01-20T15:42+09:00 2022-01-20T15:42+09:00
jvndb-2022-000001 Canon laser printers and small office multifunctional printers vulnerable to cross-site scripting 2022-01-19T14:00+09:00 2022-01-19T14:00+09:00
jvndb-2022-000005 PASSWORD MANAGER "MIRUPASS" PW10 / PW20 missing encryption 2022-01-13T15:26+09:00 2022-01-13T15:26+09:00
jvndb-2022-000004 Label printers "TEPRA" PRO SR5900P / SR-R7900P vulnerable to insufficiently protected credentials 2022-01-13T15:21+09:00 2022-01-13T15:21+09:00
jvndb-2022-000003 Jimoty App for Android uses a hard-coded API key for an external service 2022-01-12T15:37+09:00 2022-01-12T15:37+09:00
jvndb-2022-000002 Multiple vulnerabilities in WordPress Plugin "Quiz And Survey Master" 2022-01-12T15:33+09:00 2022-01-12T15:33+09:00
jvndb-2021-006117 Multiple vulnerabilities in IDEC PLCs 2021-12-27T16:54+09:00 2022-01-11T16:36+09:00
jvndb-2021-006146 Multiple vulnerabilities in KONICA MINOLTA MFPs and printing systems 2021-12-28T11:51+09:00 2021-12-28T11:51+09:00
jvndb-2021-006026 TP-Link TL-WR802N V4(JP) vulnerable to OS command injection 2021-12-24T15:31+09:00 2021-12-24T15:31+09:00
jvndb-2021-005998 Multiple vulnerabilities in QNAP VioStar NVR 2021-12-24T10:58+09:00 2021-12-24T10:58+09:00
jvndb-2021-003929 Multiple vulnerabilities in multiple Yamaha routers 2021-12-24T10:51+09:00 2021-12-24T10:51+09:00
jvndb-2021-000112 Android Apps developed using Yappli fails to restrict custom URL schemes properly 2021-12-22T15:07+09:00 2021-12-22T15:07+09:00
jvndb-2021-000111 Multiple vulnerabilities in GroupSession 2021-12-20T14:53+09:00 2021-12-21T14:20+09:00
jvndb-2021-000022 Multiple vulnerabilities in Cybozu Office 2021-03-15T15:56+09:00 2021-12-17T17:51+09:00
jvndb-2021-000093 Movable Type XMLRPC API vulnerable to OS command injection 2021-10-20T17:38+09:00 2021-12-17T17:36+09:00
jvndb-2021-000110 UNIVERGE DT Series vulnerable to missing encryption of sensitive data 2021-12-17T16:57+09:00 2021-12-17T16:57+09:00
jvndb-2021-005174 Multiple vulnerabilities in Trend Micro Security 2021 family (Consumer) 2021-12-09T13:43+09:00 2021-12-09T13:43+09:00
jvndb-2021-000107 Wi-Fi STATION SH-52A vulnerable to cross-site scripting 2021-11-30T14:49+09:00 2021-11-30T14:49+09:00
jvndb-2021-004716 Trend Micro Antivirus for MAC vulnerable to improper access controls 2021-11-29T13:52+09:00 2021-11-29T13:52+09:00
jvndb-2021-000106 Multiple vulnerabilities in baserCMS 2021-11-26T14:59+09:00 2021-11-26T14:59+09:00
jvndb-2021-000104 WordPress Plugin "Browser and Operating System Finder" vulnerable to cross-site request forgery 2021-11-25T14:31+09:00 2021-11-25T14:31+09:00
jvndb-2021-004432 Multiple Vulnerabilities in JP1/Automatic Operation 2021-11-22T16:10+09:00 2021-11-22T16:10+09:00
jvndb-2021-000103 WordPress Plugin "Push Notifications for WordPress (Lite)" vulnerable to cross-site request forgery 2021-11-16T13:42+09:00 2021-11-16T13:42+09:00
jvndb-2021-000102 rwtxt vulnerable to cross-site scripting 2021-11-16T13:38+09:00 2021-11-16T13:38+09:00
jvndb-2021-000101 Unlimited Sitemap Generator vulnerable to cross-site request forgery 2021-11-12T15:07+09:00 2021-11-12T15:07+09:00
ID Description Updated
ID Description Published Updated
suse-su-2025:21067-1 Security update for powerpc-utils 2025-11-10T14:24:22Z 2025-11-10T14:24:22Z
suse-su-2025:21054-1 Security update for runc 2025-11-10T14:24:22Z 2025-11-10T14:24:22Z
suse-su-2025:4038-1 Security update for java-1_8_0-openjdk 2025-11-10T14:22:51Z 2025-11-10T14:22:51Z
suse-su-2025:4036-1 Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP4) 2025-11-10T14:04:15Z 2025-11-10T14:04:15Z
suse-su-2025:4035-1 Security update for erlang26 2025-11-10T13:47:05Z 2025-11-10T13:47:05Z
suse-su-2025:4029-1 Security update for squid 2025-11-10T11:44:34Z 2025-11-10T11:44:34Z
suse-su-2025:4026-1 Security update for squid 2025-11-10T09:12:43Z 2025-11-10T09:12:43Z
suse-su-2025:4024-1 Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5) 2025-11-10T08:14:25Z 2025-11-10T08:14:25Z
suse-su-2025:4016-1 Security update for the Linux Kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP3) 2025-11-10T08:13:30Z 2025-11-10T08:13:30Z
suse-su-2025:4031-1 Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5) 2025-11-10T08:12:19Z 2025-11-10T08:12:19Z
suse-su-2025:4006-1 Security update for MozillaThunderbird 2025-11-10T08:00:18Z 2025-11-10T08:00:18Z
suse-su-2025:4005-1 Security update for java-1_8_0-openj9 2025-11-10T01:04:17Z 2025-11-10T01:04:17Z
suse-su-2025:4004-1 Security update for the Linux Kernel (Live Patch 61 for SLE 15 SP3) 2025-11-09T07:03:51Z 2025-11-09T07:03:51Z
suse-su-2025:4003-1 Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP5) 2025-11-09T05:04:13Z 2025-11-09T05:04:13Z
suse-su-2025:4001-1 Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP7) 2025-11-09T01:33:43Z 2025-11-09T01:33:43Z
suse-su-2025:4000-1 Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6) 2025-11-07T17:04:39Z 2025-11-07T17:04:39Z
suse-su-2025:3998-1 Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP7) 2025-11-07T16:04:09Z 2025-11-07T16:04:09Z
suse-su-2025:3997-1 Security update for java-17-openjdk 2025-11-07T15:50:20Z 2025-11-07T15:50:20Z
suse-su-2025:3996-1 Security update for java-11-openjdk 2025-11-07T15:48:31Z 2025-11-07T15:48:31Z
suse-su-2025:3995-1 Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP7) 2025-11-07T15:33:40Z 2025-11-07T15:33:40Z
suse-su-2025:3989-1 Security update for tiff 2025-11-07T13:44:29Z 2025-11-07T13:44:29Z
suse-su-2025:3987-1 Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP7) 2025-11-07T13:03:43Z 2025-11-07T13:03:43Z
suse-su-2025:3986-1 Security update for gpg2 2025-11-07T10:31:06Z 2025-11-07T10:31:06Z
suse-su-2025:3985-1 Security update for ImageMagick 2025-11-07T10:30:54Z 2025-11-07T10:30:54Z
suse-su-2025:3983-1 Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP6) 2025-11-06T21:33:47Z 2025-11-06T21:33:47Z
suse-su-2025:20996-1 Security update for the Linux Kernel 2025-11-06T15:51:37Z 2025-11-06T15:51:37Z
suse-su-2025:3978-1 Security update for ImageMagick 2025-11-06T15:43:10Z 2025-11-06T15:43:10Z
suse-su-2025:20994-1 Security update for the Linux Kernel 2025-11-06T15:30:43Z 2025-11-06T15:30:43Z
suse-su-2025:3976-1 Security update for bind 2025-11-06T13:14:37Z 2025-11-06T13:14:37Z
suse-su-2025:3970-1 Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP6) 2025-11-06T12:03:46Z 2025-11-06T12:03:46Z
ID Description Published Updated
cnvd-2026-03163 Online Security Guards Hiring System edit-guard-detail.php文件SQL注入漏洞 2025-04-09 2026-01-14
cnvd-2026-03162 Online Security Guards Hiring System changeimage.php文件SQL注入漏洞 2025-04-09 2026-01-14
cnvd-2026-03161 Men Salon Management System search-invoices.php 文件SQL注入漏洞 2025-04-09 2026-01-14
cnvd-2026-03160 Men Salon Management System appointment.php文件SQL注入漏洞 2025-04-09 2026-01-14
cnvd-2026-03159 Men Salon Management System add-customer-services.php文件SQL注入漏洞 2025-04-09 2026-01-14
cnvd-2026-03158 Men Salon Management System add-customer.php文件SQL注入漏洞 2025-04-09 2026-01-14
cnvd-2026-03157 Men Salon Management System about-us.php文件SQL注入漏洞 2025-04-09 2026-01-14
cnvd-2026-03156 Men Salon Management System add-services.php文件SQL注入漏洞 2025-04-16 2026-01-14
cnvd-2026-03155 Men Salon Management System admin-profile.php文件SQL注入漏洞 2025-04-18 2026-01-14
cnvd-2026-03154 Men Salon Management System view-appointment.php文件SQL注入漏洞 2025-04-30 2026-01-14
cnvd-2026-03153 Men Salon Management System /search-appointment.php文件SQL注入漏洞 2025-04-30 2026-01-14
cnvd-2026-03152 Men Salon Management System sales-reports-detail.php文件SQL注入漏洞 2025-04-30 2026-01-14
cnvd-2026-03151 Men Salon Management System forgot-password.php文件SQL注入漏洞 2025-04-30 2026-01-14
cnvd-2026-03150 Men Salon Management System contact-us.php文件SQL注入漏洞 2025-04-30 2026-01-14
cnvd-2026-03149 Men Salon Management System change-password.php文件SQL注入漏洞 2025-05-14 2026-01-14
cnvd-2026-03148 Student Result Management System /editmyexp.php文件SQL注入漏洞 2025-06-06 2026-01-14
cnvd-2026-03147 Student Management System using PHP and MySQL password-recovery.php文件SQL注入漏洞 2025-06-06 2026-01-14
cnvd-2026-03146 Student Management System using PHP and MySQL SQL注入漏洞 2025-06-06 2026-01-14
cnvd-2026-03084 Huawei HarmonyOS/EMUI接口权限管控漏洞 2023-12-07 2026-01-14
cnvd-2026-03058 Google Android混淆代理漏洞 2025-12-10 2026-01-14
cnvd-2026-05016 UTT 520W formUser函数缓冲区溢出漏洞 2026-01-09 2026-01-13
cnvd-2026-05015 UTT 512W formConfigCliForEngineerOnly函数缓冲区溢出漏洞 2026-01-09 2026-01-13
cnvd-2026-04543 Tenda AC23缓冲区溢出漏洞 2026-01-09 2026-01-13
cnvd-2026-03261 Echo Specto CM跨站脚本漏洞 2026-01-09 2026-01-13
cnvd-2026-03011 Mozilla Firefox代码执行漏洞(CNVD-2026-03011) 2025-12-25 2026-01-13
cnvd-2026-02992 Mozilla Firefox for iOS欺骗漏洞(CNVD-2026-02992) 2025-12-25 2026-01-13
cnvd-2026-02991 Mozilla Firefox内存错误引用漏洞(CNVD-2026-02991) 2025-12-25 2026-01-13
cnvd-2026-02980 WordPress插件Shortcodes and extra features for Phlox theme信息泄露漏洞 2026-01-09 2026-01-13
cnvd-2026-02976 Google Android权限提升漏洞(CNVD-2026-02976) 2025-12-10 2026-01-13
cnvd-2026-02975 Google Android拒绝服务漏洞(CNVD-2026-02975) 2025-12-10 2026-01-13
ID Description Published Updated
certfr-2025-avi-0917 Multiples vulnérabilités dans les produits Moxa 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
certfr-2025-avi-0916 Vulnérabilité dans le pilote MongoDB Pilote Atlas SQL ODBC 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
CERTFR-2025-AVI-0924 Multiples vulnérabilités dans les produits IBM 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
CERTFR-2025-AVI-0923 Multiples vulnérabilités dans le noyau Linux de Red Hat 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
CERTFR-2025-AVI-0922 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
CERTFR-2025-AVI-0921 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
CERTFR-2025-AVI-0920 Multiples vulnérabilités dans les produits Microsoft 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
CERTFR-2025-AVI-0919 Multiples vulnérabilités dans Microsoft Azure 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
CERTFR-2025-AVI-0918 Multiples vulnérabilités dans Liferay 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
CERTFR-2025-AVI-0917 Multiples vulnérabilités dans les produits Moxa 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
CERTFR-2025-AVI-0916 Vulnérabilité dans le pilote MongoDB Pilote Atlas SQL ODBC 2025-10-24T00:00:00.000000 2025-10-24T00:00:00.000000
certfr-2025-avi-0915 Multiples vulnérabilités dans les produits Microsoft 2025-10-23T00:00:00.000000 2025-10-23T00:00:00.000000
certfr-2025-avi-0914 Multiples vulnérabilités dans les produits Centreon 2025-10-23T00:00:00.000000 2025-10-23T00:00:00.000000
certfr-2025-avi-0913 Multiples vulnérabilités dans ISC BIND 2025-10-23T00:00:00.000000 2025-10-23T00:00:00.000000
CERTFR-2025-AVI-0915 Multiples vulnérabilités dans les produits Microsoft 2025-10-23T00:00:00.000000 2025-10-23T00:00:00.000000
CERTFR-2025-AVI-0914 Multiples vulnérabilités dans les produits Centreon 2025-10-23T00:00:00.000000 2025-10-23T00:00:00.000000
CERTFR-2025-AVI-0913 Multiples vulnérabilités dans ISC BIND 2025-10-23T00:00:00.000000 2025-10-23T00:00:00.000000
certfr-2025-avi-0912 Vulnérabilité dans SolarWinds Observability 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0911 Multiples vulnérabilités dans Oracle Weblogic 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0910 Multiples vulnérabilités dans Oracle Virtualization 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0909 Multiples vulnérabilités dans Oracle Systems 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0908 Multiples vulnérabilités dans Oracle PeopleSoft 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0907 Multiples vulnérabilités dans Oracle MySQL 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0906 Multiples vulnérabilités dans Oracle Java SE 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0905 Multiples vulnérabilités dans Oracle Database Server 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0904 Multiples vulnérabilités dans GitLab 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0903 Multiples vulnérabilités dans les produits Atlassian 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0902 Multiples vulnérabilités dans Xen 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0901 Vulnérabilité dans Google Chrome 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
certfr-2025-avi-0900 Multiples vulnérabilités dans Centreon Web 2025-10-22T00:00:00.000000 2025-10-22T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated