Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-25429 |
9.8 (3.1)
|
WordPress Nexa Blocks plugin <= 1.1.1 - PHP Object Inj… |
wpdive |
Nexa Blocks |
2026-03-25T16:14:49.161Z | 2026-04-23T14:14:09.663Z |
| CVE-2026-25390 |
6.5 (3.1)
|
WordPress New User Approve plugin <= 3.2.3 - Broken Ac… |
Saad Iqbal |
New User Approve |
2026-03-25T16:14:47.530Z | 2026-04-23T14:14:09.635Z |
| CVE-2026-25380 |
8.1 (3.1)
|
WordPress Feedy theme < 2.1.5 - Local File Inclusion v… |
jwsthemes |
Feedy |
2026-03-25T16:14:46.878Z | 2026-04-23T14:14:09.621Z |
| CVE-2026-25406 |
8.1 (3.1)
|
WordPress Tutor LMS Pro plugin <= 3.9.4 - Broken Authe… |
Themeum |
Tutor LMS Pro |
2026-03-25T16:14:48.521Z | 2026-04-23T14:14:09.617Z |
| CVE-2026-25414 |
8.8 (3.1)
|
WordPress WPBookit Pro plugin <= 1.6.18 - Privilege Es… |
iqonicdesign |
WPBookit Pro |
2026-03-25T16:14:48.841Z | 2026-04-23T14:14:09.609Z |
| CVE-2026-25435 |
7.1 (3.1)
|
WordPress Booking calendar, Appointment Booking System… |
wpdevart |
Booking calendar, Appointment Booking System |
2026-03-25T16:14:49.497Z | 2026-04-23T14:14:09.590Z |
| CVE-2026-25396 |
7.5 (3.1)
|
WordPress Commerce Coinbase For WooCommerce plugin <= … |
CoderPress |
Commerce Coinbase For WooCommerce |
2026-03-25T16:14:47.683Z | 2026-04-23T14:14:09.551Z |
| CVE-2026-25397 |
7.5 (3.1)
|
WordPress File Uploader for WooCommerce plugin <= 1.0.… |
Snowray Software |
File Uploader for WooCommerce |
2026-03-25T16:14:47.850Z | 2026-04-23T14:14:09.521Z |
| CVE-2026-25379 |
8.1 (3.1)
|
WordPress StreamVid theme < 6.8.6 - Local File Inclusi… |
jwsthemes |
StreamVid |
2026-03-25T16:14:46.711Z | 2026-04-23T14:14:09.466Z |
| CVE-2026-25387 |
4.3 (3.1)
|
WordPress Image Optimizer by Elementor plugin <= 1.7.1… |
Elementor |
Image Optimizer by Elementor |
2026-02-19T08:27:02.035Z | 2026-04-23T14:14:09.350Z |
| CVE-2026-25382 |
8.1 (3.1)
|
WordPress IdealAuto theme < 3.8.6 - Local File Inclusi… |
jwsthemes |
IdealAuto |
2026-03-25T16:14:47.198Z | 2026-04-23T14:14:09.338Z |
| CVE-2026-25369 |
7.1 (3.1)
|
WordPress Flexmls® IDX plugin <= 3.15.9 - Reflected Cr… |
flexmls |
Flexmls® IDX |
2026-03-16T14:13:48.908Z | 2026-04-23T14:14:09.199Z |
| CVE-2026-25377 |
9.3 (3.1)
|
WordPress Addon Jobsearch Chat plugin <= 3.0 - SQL Inj… |
eyecix |
Addon Jobsearch Chat |
2026-03-25T16:14:46.544Z | 2026-04-23T14:14:09.197Z |
| CVE-2026-25357 |
8.1 (3.1)
|
WordPress Ultimate Membership Pro plugin <= 13.7 - Acc… |
azzaroco |
Ultimate Membership Pro |
2026-03-25T16:14:44.726Z | 2026-04-23T14:14:09.190Z |
| CVE-2026-25373 |
7.1 (3.1)
|
WordPress Vayvo - Media Streaming & Membership WordPre… |
ProgressionStudios |
Vayvo |
2026-03-25T16:14:46.162Z | 2026-04-23T14:14:09.188Z |
| CVE-2026-25361 |
7.1 (3.1)
|
WordPress WpEvently plugin <= 5.1.4 - Reflected Cross … |
magepeopleteam |
WpEvently |
2026-03-25T16:14:45.515Z | 2026-04-23T14:14:09.162Z |
| CVE-2026-25370 |
5.3 (3.1)
|
WordPress WP Compress plugin <= 6.60.28 - Broken Acces… |
AresIT |
WP Compress |
2026-02-19T08:27:00.225Z | 2026-04-23T14:14:09.150Z |
| CVE-2026-25355 |
6.5 (3.1)
|
WordPress Sanzo theme < 2.4.3 - Cross Site Scripting (… |
skygroup |
Sanzo |
2026-03-25T16:14:44.356Z | 2026-04-23T14:14:09.117Z |
| CVE-2026-25353 |
7.1 (3.1)
|
WordPress Nooni theme < 1.5.1 - Reflected Cross Site S… |
skygroup |
Nooni |
2026-03-25T16:14:44.036Z | 2026-04-23T14:14:08.960Z |
| CVE-2026-25351 |
7.1 (3.1)
|
WordPress MyMedi theme < 1.7.7 - Reflected Cross Site … |
skygroup |
MyMedi |
2026-03-25T16:14:43.709Z | 2026-04-23T14:14:08.906Z |
| CVE-2026-25346 |
7.1 (3.1)
|
WordPress FAQ Builder AYS plugin <= 1.8.2 - Cross Site… |
Ays Pro |
FAQ Builder AYS |
2026-03-25T16:14:42.888Z | 2026-04-23T14:14:08.855Z |
| CVE-2026-25349 |
7.1 (3.1)
|
WordPress Loobek theme < 1.5.2 - Reflected Cross Site … |
skygroup |
Loobek |
2026-03-25T16:14:43.362Z | 2026-04-23T14:14:08.848Z |
| CVE-2026-25339 |
6.5 (3.1)
|
WordPress Contact Form by WPForms plugin <= 1.9.8.7 - … |
Syed Balkhi |
Contact Form by WPForms |
2026-03-25T16:14:41.799Z | 2026-04-23T14:14:08.847Z |
| CVE-2026-25328 |
6.8 (3.1)
|
WordPress Product File Upload for WooCommerce plugin <… |
add-ons.org |
Product File Upload for WooCommerce |
2026-03-25T16:14:40.912Z | 2026-04-23T14:14:08.731Z |
| CVE-2026-25341 |
7.1 (3.1)
|
WordPress RSFirewall! plugin <= 1.1.45 - Cross Site Sc… |
RSJoomla! |
RSFirewall! |
2026-03-25T16:14:42.160Z | 2026-04-23T14:14:08.730Z |
| CVE-2026-25317 |
7.5 (3.1)
|
WordPress Print Invoice & Delivery Notes for WooCommer… |
tychesoftwares |
Print Invoice & Delivery Notes for WooCommerce |
2026-03-25T16:14:40.043Z | 2026-04-23T14:14:08.650Z |
| CVE-2026-25035 |
9.8 (3.1)
|
WordPress Contest Gallery plugin <= 28.1.2.2 - Account… |
Wasiliy Strecker / ContestGallery developer |
Contest Gallery |
2026-03-25T16:14:39.024Z | 2026-04-23T14:14:08.647Z |
| CVE-2026-25327 |
6.5 (3.1)
|
WordPress Five Star Restaurant Reservations plugin <= … |
Rustaurius |
Five Star Restaurant Reservations |
2026-03-25T16:14:40.419Z | 2026-04-23T14:14:08.559Z |
| CVE-2026-25344 |
6.5 (3.1)
|
WordPress Review Schema plugin <= 2.2.6 - Sensitive Da… |
RadiusTheme |
Review Schema |
2026-03-25T16:14:42.559Z | 2026-04-23T14:14:08.534Z |
| CVE-2026-25306 |
7.1 (3.1)
|
WordPress XStore Core plugin <= 5.6.4 - Reflected Cros… |
8theme |
XStore Core |
2026-03-25T16:14:39.348Z | 2026-04-23T14:14:08.455Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-1726 |
4.8 (3.1)
|
Multiple Vulnerabilities in IBM Guardium Key Lifecycle… |
IBM |
Guardium Key Lifecycle Manager |
2026-04-22T23:42:05.901Z | 2026-04-23T12:57:25.129Z |
| CVE-2026-1352 |
6.5 (3.1)
|
IBM® Db2® is vulnerable to a trap or return SQLCODE -9… |
IBM |
Db2 |
2026-04-22T23:37:35.127Z | 2026-04-23T13:57:34.912Z |
| CVE-2026-1274 |
4.9 (3.1)
|
IBM Guardium Data Protection is affected by multiple v… |
IBM |
Guardium Data Protection |
2026-04-22T23:30:59.128Z | 2026-04-23T12:50:23.904Z |
| CVE-2026-1272 |
2.7 (3.1)
|
IBM Guardium Data Protection is affected by multiple v… |
IBM |
Guardium Data Protection |
2026-04-22T23:33:45.499Z | 2026-04-23T16:23:59.338Z |
| CVE-2025-70994 |
7.3 (3.1)
|
Yadea T5 Electric Bicycles (models manufactured i… |
n/a |
n/a |
2026-04-23T00:00:00.000Z | 2026-04-23T15:10:43.811Z |
| CVE-2025-66286 |
4.7 (3.1)
|
Webkitgtk: authorization bypass through webpage::send-… |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-04-23T12:33:50.184Z | 2026-04-23T12:48:57.468Z |
| CVE-2025-62373 |
9.8 (3.1)
|
Pipecat vulnerable to Remote Code Execution by Pickle … |
pipecat-ai |
pipecat |
2026-04-23T14:40:17.897Z | 2026-04-23T18:35:54.660Z |
| CVE-2025-50229 |
N/A
|
Jizhicms v2.5.4 is vulnerable to SQL injection in… |
n/a |
n/a |
2026-04-23T00:00:00.000Z | 2026-04-23T14:59:54.460Z |
| CVE-2025-36074 |
5.5 (3.1)
|
Security vulnerability has been detected in IBM Securi… |
IBM |
Security Verify Directory (Container) |
2026-04-22T23:39:34.598Z | 2026-04-23T14:35:26.541Z |
| CVE-2025-13763 |
5.7 (3.1)
|
Libopensc: opensc: multiple uses of uninitialized variable |
OpenSC |
OpenSC |
2026-04-23T12:27:41.820Z | 2026-04-23T14:05:23.182Z |
| CVE-2025-10549 |
5.1 (3.1)
|
DLL Hijacking in EfficientLab Controlio Leads to Local… |
EfficientLab, LLC |
Controlio |
2026-04-23T06:57:27.220Z | 2026-04-23T14:03:43.631Z |
| CVE-2026-41305 |
6.1 (3.1)
|
PostCSS has XSS via Unescaped </style> in its CSS Stri… |
postcss |
postcss |
2026-04-24T02:27:47.719Z | 2026-04-24T16:23:41.198Z |
| CVE-2026-40474 |
7.6 (3.1)
|
wger has Broken Access Control in the Global Gym Confi… |
wger-project |
wger |
2026-04-17T21:39:03.677Z | 2026-04-20T16:08:12.427Z |
| CVE-2026-40353 |
5.1 (4.0)
|
wger: Stored XSS via Unescaped License Attribution Fields |
wger-project |
wger |
2026-04-17T21:16:12.401Z | 2026-04-20T16:17:52.305Z |
| CVE-2026-41177 |
5.5 (3.1)
|
Squidex has Blind SSRF via file:// Protocol in Restore… |
Squidex |
squidex |
2026-04-22T21:24:10.051Z | 2026-04-23T16:24:31.604Z |
| CVE-2026-41172 |
7.3 (4.0)
|
Squidex vulnerable to Server-Side Request Forgery (SSR… |
Squidex |
squidex |
2026-04-22T21:22:55.727Z | 2026-04-23T12:52:16.717Z |
| CVE-2026-41171 |
7.3 (4.0)
|
SSRF via Jint Scripting Engine HTTP Functions Due to M… |
Squidex |
squidex |
2026-04-22T21:16:14.013Z | 2026-04-23T12:54:01.682Z |
| CVE-2026-41170 |
7.2 (4.0)
|
Squidex has SSRF via Backup Restore Endpoint — Admin-C… |
Squidex |
squidex |
2026-04-22T21:13:18.847Z | 2026-04-23T14:24:06.260Z |
| CVE-2026-5039 |
6.1 (4.0)
|
Predictable Default Cryptographic Key Used for DES Enc… |
TP-Link Systems Inc. |
TL-WL841N v13 |
2026-04-23T16:10:13.269Z | 2026-04-23T17:40:28.657Z |
| CVE-2026-41909 |
5.3 (4.0)
5.4 (3.1)
|
OpenClaw < 2026.4.20 - Improper Authorization in Paire… |
OpenClaw |
OpenClaw |
2026-04-23T17:52:41.920Z | 2026-04-23T18:19:34.717Z |
| CVE-2026-41908 |
2.3 (4.0)
4.3 (3.1)
|
OpenClaw < 2026.4.20 - Scope Enforcement Bypass in Ass… |
OpenClaw |
OpenClaw |
2026-04-23T17:52:32.937Z | 2026-04-23T18:25:54.078Z |
| CVE-2026-41240 |
6 (4.0)
|
DOMPurify: FORBID_TAGS bypassed by function-based ADD_… |
cure53 |
DOMPurify |
2026-04-23T14:54:32.426Z | 2026-04-23T17:21:30.547Z |
| CVE-2026-40891 |
5.3 (3.1)
|
OpenTelemetry dotnet: Unbounded `grpc-status-details-b… |
open-telemetry |
opentelemetry-dotnet |
2026-04-23T17:54:36.033Z | 2026-04-23T18:23:08.858Z |
| CVE-2026-40472 |
9.9 (3.1)
|
Hackage package metadata stored XSS vulnerability |
|
|
2026-04-23T15:00:09.063Z | 2026-04-23T16:22:06.841Z |
| CVE-2026-40471 |
9.6 (3.1)
|
Hackage CSRF vulnerability |
|
|
2026-04-23T14:56:34.979Z | 2026-04-23T16:22:12.118Z |
| CVE-2026-40470 |
9.9 (3.1)
|
Hackage package and doc upload stored XSS vulnerability |
|
|
2026-04-23T14:53:47.724Z | 2026-04-23T16:22:27.341Z |
| CVE-2026-40182 |
5.3 (3.1)
|
OpenTelemetry dotnet: OTLP exporter reads unbounded HT… |
open-telemetry |
opentelemetry-dotnet |
2026-04-23T17:51:34.961Z | 2026-04-23T18:38:57.155Z |
| CVE-2026-39087 |
9.8 (3.1)
|
An issue in Ntfy ntfy.sh before v.2.21 allows a r… |
n/a |
n/a |
2026-04-23T00:00:00.000Z | 2026-04-23T18:58:16.833Z |
| CVE-2026-34003 |
7.8 (3.1)
|
Xorg: xwayland: x.org x server: information exposure a… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-04-23T14:54:05.479Z | 2026-04-24T03:55:31.996Z |
| CVE-2026-34001 |
7.8 (3.1)
|
Xorg: xwayland: x.org x server: use-after-free vulnera… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-04-23T14:54:00.333Z | 2026-04-24T03:55:27.598Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-31019 | In the Website module of Dolibarr ERP & CRM 22.0.4 and below, the application uses blacklist-based … | 2026-04-21T15:16:36.560 | 2026-04-23T16:10:14.493 |
| fkie_cve-2026-40614 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier,… | 2026-04-21T19:16:17.880 | 2026-04-23T16:09:54.393 |
| fkie_cve-2026-40869 | Decidim is a participatory democracy framework. Starting in version 0.19.0 and prior to versions 0.… | 2026-04-21T20:17:00.207 | 2026-04-23T16:08:50.607 |
| fkie_cve-2026-40892 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier,… | 2026-04-21T21:16:44.153 | 2026-04-23T16:07:18.487 |
| fkie_cve-2026-41056 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `allowOrigin($allowAl… | 2026-04-21T23:16:20.850 | 2026-04-23T16:05:23.570 |
| fkie_cve-2026-41055 | WWBN AVideo is an open source video platform. In versions 29.0 and below, an incomplete SSRF fix in… | 2026-04-21T23:16:20.707 | 2026-04-23T15:59:00.800 |
| fkie_cve-2026-40895 | follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that … | 2026-04-21T21:16:44.337 | 2026-04-23T15:54:31.857 |
| fkie_cve-2026-40927 | Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.0, when leaving… | 2026-04-21T21:16:46.110 | 2026-04-23T15:50:16.280 |
| fkie_cve-2026-40935 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/getCaptcha.php` … | 2026-04-21T23:16:20.577 | 2026-04-23T15:50:14.787 |
| fkie_cve-2026-40931 | Compressing is a compressing and uncompressing lib for node. Prior to 2.1.1 and 1.10.5, the patch f… | 2026-04-21T22:16:19.247 | 2026-04-23T15:49:20.480 |
| fkie_cve-2026-40928 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, multiple AVideo JSON endp… | 2026-04-21T23:16:20.300 | 2026-04-23T15:49:02.443 |
| fkie_cve-2026-40929 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/commentDelete.js… | 2026-04-21T23:16:20.433 | 2026-04-23T15:48:27.070 |
| fkie_cve-2026-40926 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, three admin-only JSON end… | 2026-04-21T23:16:20.163 | 2026-04-23T15:48:02.850 |
| fkie_cve-2026-28386 | Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and V… | 2026-04-07T22:16:20.513 | 2026-04-23T15:40:23.007 |
| fkie_cve-2026-40933 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3… | 2026-04-21T22:16:19.383 | 2026-04-23T15:40:22.850 |
| fkie_cve-2026-28388 | Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL p… | 2026-04-07T22:16:20.863 | 2026-04-23T15:40:08.410 |
| fkie_cve-2026-28389 | Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo … | 2026-04-07T22:16:21.030 | 2026-04-23T15:40:00.107 |
| fkie_cve-2026-28390 | Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientI… | 2026-04-07T22:16:21.190 | 2026-04-23T15:39:52.520 |
| fkie_cve-2026-31790 | Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can… | 2026-04-07T22:16:21.770 | 2026-04-23T15:39:44.033 |
| fkie_cve-2026-31789 | Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to … | 2026-04-07T22:16:21.617 | 2026-04-23T15:39:34.377 |
| fkie_cve-2026-39973 | Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path tr… | 2026-04-21T02:16:07.903 | 2026-04-23T15:39:26.490 |
| fkie_cve-2026-28387 | Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authenticatio… | 2026-04-07T22:16:20.700 | 2026-04-23T15:39:25.323 |
| fkie_cve-2026-41167 | Jellystat is a free and open source Statistics App for Jellyfin. Prior to version 1.1.10, multiple … | 2026-04-22T21:17:09.303 | 2026-04-23T15:37:23.773 |
| fkie_cve-2026-33656 | EspoCRM is an open source customer relationship management application. Prior to version 9.3.4, Esp… | 2026-04-22T21:17:05.330 | 2026-04-23T15:37:23.117 |
| fkie_cve-2026-28083 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-26T09:16:14.857 | 2026-04-23T15:37:22.883 |
| fkie_cve-2026-28080 | Missing Authorization vulnerability in Rank Math Rank Math SEO PRO seo-by-rank-math-pro allows Expl… | 2026-03-06T12:15:54.890 | 2026-04-23T15:37:22.787 |
| fkie_cve-2026-28073 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-03-19T06:16:26.550 | 2026-04-23T15:37:22.690 |
| fkie_cve-2026-28070 | Missing Authorization vulnerability in Tips and Tricks HQ WP eMember wp-eMember allows Exploiting I… | 2026-03-19T06:16:26.360 | 2026-04-23T15:37:22.590 |
| fkie_cve-2026-28044 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-03-19T06:16:26.173 | 2026-04-23T15:37:22.487 |
| fkie_cve-2026-28039 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-03-05T06:16:36.897 | 2026-04-23T15:37:22.327 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-pwwx-c4hj-3v9g |
4.1 (3.1)
|
Server-Side Request Forgery (SSRF) vulnerability in Envato Envato Elements allows Server Side Reque… | 2025-01-07T12:31:00Z | 2026-04-23T15:34:26Z |
| ghsa-m584-jg3p-v35g |
5.4 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in BUDDYBOSS LLC BuddyBoss Theme allows Cross Site … | 2025-01-02T15:31:58Z | 2026-04-23T15:34:26Z |
| ghsa-jp88-cx84-jjj5 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Marsian i-amaze allows Cross Site Request Forger… | 2025-01-02T15:31:58Z | 2026-04-23T15:34:26Z |
| ghsa-j27q-8m9v-cph3 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Creativthemes Point allows Cross Site Request Fo… | 2025-01-02T15:31:58Z | 2026-04-23T15:34:26Z |
| ghsa-gccm-257v-26xf |
5.4 (3.1)
|
Missing Authorization vulnerability in Xtemos WoodMart allows Exploiting Incorrectly Configured Acc… | 2025-01-02T15:31:59Z | 2026-04-23T15:34:26Z |
| ghsa-fg46-5wmx-p2gg |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in VolThemes Patricia Blog allows Cross Site Reques… | 2025-01-02T15:31:58Z | 2026-04-23T15:34:26Z |
| ghsa-ffqr-4qwv-gwp9 |
4.3 (3.1)
|
Missing Authorization vulnerability in Repute InfoSystems ARMember Premium allows Exploiting Incorr… | 2025-01-02T15:31:59Z | 2026-04-23T15:34:26Z |
| ghsa-9c7x-gvxw-8jhq |
4.3 (3.1)
|
Missing Authorization vulnerability in LuckyWP LuckyWP Scripts Control allows Exploiting Incorrectl… | 2025-01-02T15:31:59Z | 2026-04-23T15:34:26Z |
| ghsa-7xgj-vh96-453m |
6.5 (3.1)
|
Missing Authorization vulnerability in IDX IMPress Listings allows Exploiting Incorrectly Configure… | 2025-01-02T15:31:59Z | 2026-04-23T15:34:26Z |
| ghsa-7297-7fmm-32j7 |
5.3 (3.1)
|
Missing Authorization vulnerability in JoomUnited WP Table Manager allows Exploiting Incorrectly Co… | 2025-01-02T18:30:35Z | 2026-04-23T15:34:26Z |
| ghsa-659r-6ccr-7pp8 |
5.3 (3.1)
|
Missing Authorization vulnerability in Porto Theme Porto Theme - Functionality allows Exploiting In… | 2025-01-02T15:31:59Z | 2026-04-23T15:34:26Z |
| ghsa-mhhp-32w8-cvw6 |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-01-02T15:31:57Z | 2026-04-23T15:34:25Z |
| ghsa-8r8h-hr7m-2258 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Automattic WP Job Manager - Resume Manager allow… | 2025-01-02T15:31:58Z | 2026-04-23T15:34:25Z |
| ghsa-6crw-h5cj-4wrx |
5.4 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash al… | 2025-01-02T15:31:58Z | 2026-04-23T15:34:25Z |
| ghsa-fxqr-8c9h-vpmp |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Marsian allows Cross Site Request Forgery.This i… | 2025-01-02T15:31:57Z | 2026-04-23T15:34:24Z |
| ghsa-q78g-rq83-x9jw |
4.3 (3.1)
|
Missing Authorization vulnerability in Jakob Bouchard Hestia Nginx Cache allows Exploiting Incorrec… | 2025-01-02T12:32:15Z | 2026-04-23T15:34:22Z |
| ghsa-wj3g-6pcr-3c9p |
4.3 (3.1)
|
Missing Authorization vulnerability in LearningTimes BadgeOS allows Exploiting Incorrectly Configur… | 2025-01-02T12:32:14Z | 2026-04-23T15:34:20Z |
| ghsa-rrv4-98wq-7v85 |
5.3 (3.1)
|
Missing Authorization vulnerability in Seers Seers allows Exploiting Incorrectly Configured Access … | 2025-01-02T12:32:13Z | 2026-04-23T15:34:20Z |
| ghsa-h897-v8rp-9crr |
5.3 (3.1)
|
Missing Authorization vulnerability in CoCart Headless, LLC CoCart – Headless ecommerce allows Expl… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:20Z |
| ghsa-c956-q3cq-8j7r |
4.3 (3.1)
|
Missing Authorization vulnerability in wp-buy Visitors Traffic Real Time Statistics allows Exploiti… | 2025-01-02T12:32:14Z | 2026-04-23T15:34:20Z |
| ghsa-9mxr-x9pm-x97j |
5.4 (3.1)
|
Missing Authorization vulnerability in Dragfy Dragfy Addons for Elementor allows Exploiting Incorre… | 2025-01-02T12:32:14Z | 2026-04-23T15:34:20Z |
| ghsa-9h73-cr42-c392 |
5.4 (3.1)
|
Missing Authorization vulnerability in KaizenCoders Short URL allows Exploiting Incorrectly Configu… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:20Z |
| ghsa-98qp-x5rm-r37h |
4.3 (3.1)
|
Missing Authorization vulnerability in Ecreate Infotech Auto Tag Creator allows Exploiting Incorrec… | 2025-01-02T12:32:14Z | 2026-04-23T15:34:20Z |
| ghsa-7p95-mcq4-234w |
7.5 (3.1)
|
Missing Authorization vulnerability in spider-themes EazyDocs allows Exploiting Incorrectly Configu… | 2025-01-02T12:32:14Z | 2026-04-23T15:34:20Z |
| ghsa-43fh-63xp-xhfw |
4.3 (3.1)
|
Missing Authorization vulnerability in Flothemes Flo Forms allows Exploiting Incorrectly Configured… | 2025-01-02T12:32:14Z | 2026-04-23T15:34:20Z |
| ghsa-2p7v-6q2g-9wg5 |
6.5 (3.1)
|
Missing Authorization vulnerability in Toast Plugins Animator allows Exploiting Incorrectly Configu… | 2025-01-02T12:32:14Z | 2026-04-23T15:34:20Z |
| ghsa-22r9-5j98-76h8 |
7.5 (3.1)
|
Missing Authorization vulnerability in Themefic Ultimate Addons for Contact Form 7 allows Exploitin… | 2025-01-02T12:32:14Z | 2026-04-23T15:34:20Z |
| ghsa-xrpc-hpq7-f7wx |
7.5 (3.1)
|
Missing Authorization vulnerability in WP Travel WP Travel allows Exploiting Incorrectly Configured… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:19Z |
| ghsa-qxpg-92h3-8vjc |
5.3 (3.1)
|
Missing Authorization vulnerability in PressTigers Simple Job Board allows Exploiting Incorrectly C… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:19Z |
| ghsa-4gvq-p6q2-68qv |
5.4 (3.1)
|
Missing Authorization vulnerability in Labib Ahmed Animated Rotating Words allows Exploiting Incorr… | 2025-01-02T12:32:14Z | 2026-04-23T15:34:19Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-156 |
8.8 (3.1)
|
Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphe… | apache-airflow-providers-apache-spark | 2023-08-28T08:15:00+00:00 | 2023-09-01T18:27:11.679668+00:00 |
| pysec-2023-155 |
6.1 (3.1)
|
jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. … | jupyter-server | 2023-08-28T21:15:00+00:00 | 2023-09-01T16:31:48.441782+00:00 |
| pysec-2023-101 |
|
A cross-site scripting (XSS) vulnerability in Selenium Grid v3.141.59 allows attackers to… | selenium | 2023-07-05T18:15:00Z | 2023-08-31T20:11:41.543920Z |
| pysec-2023-153 |
6.1 (3.1)
|
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_u… | horizon | 2023-08-22T19:16:00+00:00 | 2023-08-30T18:28:45.068261+00:00 |
| pysec-2023-92 |
|
Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt. | langchain | 2023-06-20T15:15:00Z | 2023-08-29T18:59:00.000000Z |
| pysec-2023-145 |
9.8 (3.1)
|
An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via th… | langchain | 2023-08-15T17:15:00Z | 2023-08-29T18:47:00.000000Z |
| pysec-2023-152 |
8.1 (3.1)
|
Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be… | apache-airflow | 2023-08-23T16:15:00+00:00 | 2023-08-29T18:28:28.180958+00:00 |
| pysec-2023-109 |
|
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the… | langchain | 2023-07-06T14:15:00Z | 2023-08-29T16:42:00.000000Z |
| pysec-2023-98 |
|
An issue in langchain v.0.0.199 allows an attacker to execute arbitrary code via the PALC… | langchain | 2023-07-03T21:15:00Z | 2023-08-29T16:40:00.000000Z |
| pysec-2023-151 |
9.8 (3.1)
|
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via th… | langchain | 2023-08-22T19:16:00Z | 2023-08-29T15:11:37.047967Z |
| pysec-2023-91 |
|
Langchain 0.0.171 is vulnerable to Arbitrary Code Execution. | langchain | 2023-06-14T15:15:00Z | 2023-08-28T16:50:25.676144Z |
| pysec-2023-110 |
|
SQL injection vulnerability in langchain v.0.0.64 allows a remote attacker to obtain sens… | langchain | 2023-07-06T14:15:00Z | 2023-08-28T16:50:24.862628Z |
| pysec-2023-150 |
7.8 (3.1)
|
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 a… | exiv2 | 2023-08-22T19:15:00+00:00 | 2023-08-25T18:28:13.546911+00:00 |
| pysec-2023-149 |
|
The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabl… | json2xml | 2023-08-22T19:16:00+00:00 | 2023-08-22T20:23:14.541580+00:00 |
| pysec-2023-148 |
9.8 (3.1)
|
An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary… | llama-index | 2023-08-15T17:15:00+00:00 | 2023-08-22T18:27:29.213194+00:00 |
| pysec-2023-147 |
9.8 (3.1)
|
An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execu… | langchain | 2023-08-15T17:15:00+00:00 | 2023-08-22T18:27:28.580705+00:00 |
| pysec-2023-138 |
9.8 (3.1)
|
An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary co… | langchain | 2023-08-05T03:15:00Z | 2023-08-22T15:51:39.650271Z |
| pysec-2023-146 |
9.8 (3.1)
|
An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to exe… | langchain | 2023-08-15T17:15:00+00:00 | 2023-08-22T14:25:42.963301+00:00 |
| pysec-2023-112 |
|
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have c… | cryptography | 2023-07-14T20:15:00+00:00 | 2023-08-21T15:28:13.372385+00:00 |
| pysec-2023-102 |
|
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8… | scipy | 2023-07-05T17:15:00Z | 2023-08-17T13:32:44.929651Z |
| pysec-2023-144 |
8.8 (3.1)
|
Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.… | wger | 2023-08-08T16:15:00+00:00 | 2023-08-17T03:22:34.520767+00:00 |
| pysec-2023-143 |
5.4 (3.1)
|
Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows … | wger | 2023-08-08T16:15:00+00:00 | 2023-08-17T03:22:34.437974+00:00 |
| pysec-2023-142 |
5.9 (3.1)
|
Vyer is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In ver… | vyper | 2023-08-07T19:15:00+00:00 | 2023-08-17T03:22:33.953997+00:00 |
| pysec-2022-43058 |
7.5 (3.1)
|
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i… | pywasm3 | 2022-09-20T18:15:00+00:00 | 2023-08-17T03:22:33.607469+00:00 |
| pysec-2022-43057 |
5.5 (3.1)
|
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Mem… | pywasm3 | 2022-07-27T14:15:00+00:00 | 2023-08-17T03:22:33.522615+00:00 |
| pysec-2023-140 |
6.5 (3.1)
|
MindsDB's AI Virtual Database allows developers to connect any AI/ML model to any datasou… | mindsdb | 2023-08-04T18:15:00+00:00 | 2023-08-17T03:22:32.744229+00:00 |
| pysec-2023-139 |
5.3 (3.1)
|
Sydent is an identity server for the Matrix communications protocol. Prior to version 2.5… | matrix-sydent | 2023-08-04T16:15:00+00:00 | 2023-08-17T03:22:32.583512+00:00 |
| pysec-2023-137 |
|
GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from… | gitpython | 2023-08-11T07:15:00+00:00 | 2023-08-17T03:22:31.332731+00:00 |
| pysec-2022-43056 |
9.8 (3.1)
|
The keep for python, as distributed on PyPI, included a code-execution backdoor inserted … | keep | 2022-06-08T18:15:00+00:00 | 2023-08-17T03:22:31.636090+00:00 |
| pysec-2022-43055 |
7.5 (3.1)
|
Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by r… | hyperledger | 2022-11-12T20:15:00+00:00 | 2023-08-17T03:22:31.453589+00:00 |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33283 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.630959Z |
| gsd-2024-33282 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.611885Z |
| gsd-2024-33281 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.648581Z |
| gsd-2024-33280 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.609399Z |
| gsd-2024-33279 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.616853Z |
| gsd-2024-33278 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.733959Z |
| gsd-2024-33277 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.745937Z |
| gsd-2024-33276 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.761165Z |
| gsd-2024-33275 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.756484Z |
| gsd-2024-33274 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.762400Z |
| gsd-2024-33273 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.759747Z |
| gsd-2024-33272 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.617526Z |
| gsd-2024-33271 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.694529Z |
| gsd-2024-33270 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.643212Z |
| gsd-2024-33269 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.732290Z |
| gsd-2024-33268 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.718577Z |
| gsd-2024-33267 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.738163Z |
| gsd-2024-33266 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.741026Z |
| gsd-2024-33265 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.633689Z |
| gsd-2024-33264 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.735849Z |
| gsd-2024-33263 | QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(… | 2024-04-24T05:02:09.681513Z |
| gsd-2024-33262 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.725480Z |
| gsd-2024-33261 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.722494Z |
| gsd-2024-33260 | Jerryscript commit cefd391 was discovered to contain a segmentation violation via the com… | 2024-04-24T05:02:09.630501Z |
| gsd-2024-33259 | Jerryscript commit cefd391 was discovered to contain a segmentation violation via the com… | 2024-04-24T05:02:09.609662Z |
| gsd-2024-33258 | Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the com… | 2024-04-24T05:02:09.753118Z |
| gsd-2024-33257 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.704832Z |
| gsd-2024-33256 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.691816Z |
| gsd-2024-33255 | Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMA_STRING… | 2024-04-24T05:02:09.756677Z |
| gsd-2024-33254 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.738567Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-2358 | Malicious code in env-cli-express (npm) | 2026-03-24T15:44:10Z | 2026-04-07T14:41:21Z |
| mal-2026-2357 | Malicious code in ectoplast-spirit (npm) | 2026-03-24T15:43:46Z | 2026-04-07T14:41:21Z |
| mal-2026-2356 | Malicious code in ecto-spirit-core (npm) | 2026-03-24T15:43:45Z | 2026-04-07T14:41:21Z |
| mal-2026-2355 | Malicious code in ecto-spirit (npm) | 2026-03-24T15:43:45Z | 2026-04-07T14:41:21Z |
| mal-2026-2354 | Malicious code in ecto-registry (npm) | 2026-03-24T15:43:44Z | 2026-04-07T14:41:21Z |
| mal-2026-2353 | Malicious code in ecto-engine (npm) | 2026-03-24T15:43:43Z | 2026-04-07T14:41:21Z |
| mal-2026-2352 | Malicious code in ecto-corsair-lwirz (npm) | 2026-03-24T15:43:43Z | 2026-04-07T14:41:21Z |
| mal-2026-2351 | Malicious code in dotenv-xtend (npm) | 2026-03-24T15:43:16Z | 2026-04-07T14:41:21Z |
| mal-2026-2350 | Malicious code in dotenv-express (npm) | 2026-03-24T15:43:15Z | 2026-04-07T14:41:21Z |
| mal-2026-2349 | Malicious code in deriv_ppetest (npm) | 2026-03-24T15:42:44Z | 2026-04-07T14:41:21Z |
| mal-2026-2348 | Malicious code in cursed-module (npm) | 2026-03-24T15:41:56Z | 2026-04-07T14:41:21Z |
| mal-2026-2347 | Malicious code in ctf-package-onetimeuseforctf (npm) | 2026-03-24T15:41:46Z | 2026-04-07T14:41:21Z |
| mal-2026-2346 | Malicious code in corsair-module (npm) | 2026-03-24T15:41:15Z | 2026-04-07T14:41:21Z |
| mal-2026-2345 | Malicious code in codecoverage-tools (npm) | 2026-03-24T15:40:45Z | 2026-04-07T14:41:21Z |
| mal-2026-2344 | Malicious code in codeanalysis-common (npm) | 2026-03-24T15:40:44Z | 2026-04-07T14:41:21Z |
| mal-2026-2323 | Malicious code in ethersproject-wallet (npm) | 2026-04-01T09:11:09Z | 2026-04-07T14:41:21Z |
| mal-2026-2447 | Malicious code in @toprank/partner (npm) | 2026-04-03T07:43:43Z | 2026-04-07T14:41:20Z |
| mal-2026-2413 | Malicious code in cclr-component-resources (npm) | 2026-03-24T09:03:35Z | 2026-04-07T14:41:20Z |
| mal-2026-2412 | Malicious code in @wame/ngx-frf-utilities (npm) | 2026-03-24T09:08:41Z | 2026-04-07T14:41:20Z |
| mal-2026-2411 | Malicious code in @wame/ngx-adfs (npm) | 2026-03-24T09:08:34Z | 2026-04-07T14:41:20Z |
| mal-2026-2409 | Malicious code in @phonos/types (npm) | 2026-03-24T09:07:37Z | 2026-04-07T14:41:20Z |
| mal-2026-2343 | Malicious code in chain-multer (npm) | 2026-03-24T15:40:17Z | 2026-04-07T14:41:20Z |
| mal-2026-2342 | Malicious code in chai-set (npm) | 2026-03-24T15:40:16Z | 2026-04-07T14:41:20Z |
| mal-2026-2341 | Malicious code in chai-chain-cognivault (npm) | 2026-03-24T15:40:13Z | 2026-04-07T14:41:20Z |
| mal-2026-2340 | Malicious code in chai-chain-argon (npm) | 2026-03-24T15:40:12Z | 2026-04-07T14:41:20Z |
| mal-2026-2339 | Malicious code in chai-as-chains (npm) | 2026-03-24T15:39:59Z | 2026-04-07T14:41:20Z |
| mal-2026-2338 | Malicious code in chai-as-attached (npm) | 2026-03-24T15:39:58Z | 2026-04-07T14:41:20Z |
| mal-2026-2337 | Malicious code in chai-as-aligned (npm) | 2026-03-24T15:39:57Z | 2026-04-07T14:41:20Z |
| mal-2026-2336 | Malicious code in cdnjavacss (npm) | 2026-03-24T15:39:45Z | 2026-04-07T14:41:20Z |
| mal-2026-2335 | Malicious code in azurestack-common (npm) | 2026-03-24T15:38:26Z | 2026-04-07T14:41:20Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0132 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2025-01-20T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2022-1964 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2022-11-06T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2022-0969 | Internet Systems Consortium BIND: Mehrere Schwachstellen | 2022-03-16T23:00:00.000+00:00 | 2025-11-20T23:00:00.000+00:00 |
| wid-sec-w-2025-2500 | Cisco Contact Center Produkte (CCE,CCX,CUIC): Mehrere Schwachstellen | 2025-11-05T23:00:00.000+00:00 | 2025-11-18T23:00:00.000+00:00 |
| wid-sec-w-2025-2612 | M-Files M-Files Server: Schwachstelle ermöglicht Denial of Service | 2025-11-16T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2609 | IBM SAN Volume Controller, Storwize und FlashSystem: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-11-16T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2474 | Android Patchday November 2025: Multiple Vulnerabilities | 2025-11-03T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2370 | Oracle Systems: Mehrere Schwachstellen | 2025-10-21T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2361 | Oracle Communications: Mehrere Schwachstellen | 2025-10-21T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2360 | Oracle Communications Applications: Mehrere Schwachstellen | 2025-10-21T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1850 | Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2025-08-14T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1636 | Apache HTTP Server: Schwachstelle ermöglicht umgehen von Sicherheitsvorkehrungen | 2025-07-23T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1623 | Mozilla Firefox , Firefox ESR und Thunderbird: Mehrere Schwachstellen | 2025-07-22T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1583 | ffmpeg: Schwachstelle ermöglicht Denial of Service | 2025-07-16T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1567 | Oracle MySQL: Mehrere Schwachstellen | 2025-07-15T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1428 | sudo: Mehrere Schwachstellen | 2025-06-30T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1395 | Mozilla Firefox: Mehrere Schwachstellen | 2025-06-24T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1352 | X.Org X11 und Xwayland: Mehrere Schwachstellen | 2025-06-17T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1245 | Django: Schwachstelle ermöglicht Manipulation von Dateien | 2025-06-04T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1221 | Samba: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-06-02T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-1134 | Ghostscript: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-05-22T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0987 | Eclipse Jetty: Mehrere Schwachstellen | 2025-05-08T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0718 | Red Hat Enterprise Linux (libxslt): Schwachstelle ermöglicht DoS und Codeausführung | 2025-04-06T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0572 | X.Org X11: Schwachstelle ermöglicht Denial of Service | 2025-03-16T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0503 | Apache Cassandra: Schwachstelle ermöglicht Codeausführung | 2025-03-06T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0302 | GnuTLS: Schwachstelle ermöglicht Denial of Service | 2025-02-09T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0284 | Apache Camel for Spring Boot: Mehrere Schwachstellen | 2025-02-05T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2024-3544 | Red Hat JBoss Data Grid: Mehrere Schwachstellen | 2024-11-25T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2024-3497 | Linux Kernel: Mehrere Schwachstellen | 2024-11-18T23:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2024-1783 | Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen | 2024-08-06T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-14-289-01 | IOServer Resource Exhaustion Vulnerability | 2014-07-19T06:00:00.000000Z | 2025-06-06T22:50:48.380867Z |
| icsa-14-288-01 | CareFusion Pyxis SupplyStation System Vulnerabilities | 2014-07-18T06:00:00.000000Z | 2025-06-06T22:50:22.557418Z |
| icsa-14-287-01 | GE Proficy HMI/SCADA DNP3 Driver Input Validation | 2014-07-17T06:00:00.000000Z | 2025-06-06T22:50:16.095529Z |
| icsa-14-275-02 | Accuenergy Acuvim II Authentication Vulnerabilities | 2014-07-05T06:00:00.000000Z | 2025-06-06T22:50:03.174225Z |
| icsa-14-275-01 | Meinberg Radio Clocks LANTIME M-Series XSS | 2014-07-05T06:00:00.000000Z | 2025-06-06T22:49:56.704328Z |
| icsa-14-269-02 | Fox DataDiode Proxy Server CSRF Vulnerability | 2014-06-29T06:00:00.000000Z | 2025-06-06T22:49:50.228012Z |
| icsa-14-261-01 | Advantech WebAccess Vulnerabilities | 2014-06-21T06:00:00.000000Z | 2025-06-06T22:48:58.295004Z |
| icsa-14-260-01a | Yokogawa CENTUM and Exaopc Vulnerability (Update A) | 2014-06-20T06:00:00.000000Z | 2025-06-06T22:48:51.805857Z |
| icsa-14-259-01a | Schneider Electric SCADA Expert ClearSCADA Vulnerabilities (Update A) | 2014-06-19T06:00:00.000000Z | 2025-06-06T22:48:32.407633Z |
| icsa-14-254-02 | Rockwell Micrologix 1400 DNP3 DOS Vulnerability | 2014-06-14T06:00:00.000000Z | 2025-06-06T22:48:25.978305Z |
| icsa-14-254-01 | Schneider Electric VAMPSET Buffer Overflow | 2014-06-14T06:00:00.000000Z | 2025-06-06T22:48:19.541393Z |
| icsa-14-247-01a | Sensys Networks Traffic Sensor Vulnerabilities (Update A) | 2014-06-07T06:00:00.000000Z | 2025-06-06T22:48:06.463498Z |
| icsa-14-238-01 | CG Automation Improper Input Validation | 2014-05-29T06:00:00.000000Z | 2025-06-06T22:47:53.555337Z |
| icsa-14-226-01 | Siemens SIMATIC S7-1500 CPU Denial of Service | 2014-05-17T06:00:00.000000Z | 2025-06-06T22:47:47.106108Z |
| icsa-14-224-01 | Ecava Integraxor SCADA Server Vulnerabilities | 2014-05-15T06:00:00.000000Z | 2025-06-06T22:47:21.277370Z |
| icsa-14-203-01 | Omron NS Series HMI Vulnerabilities | 2014-04-24T06:00:00.000000Z | 2025-06-06T22:46:35.467432Z |
| icsa-14-198-02 | Advantech WebAccess Vulnerabilities | 2014-04-19T06:00:00.000000Z | 2025-06-06T22:46:03.132898Z |
| icsa-14-198-01 | Cogent DataHub Code Injection Vulnerability | 2014-04-19T06:00:00.000000Z | 2025-06-06T22:45:56.681631Z |
| icsa-14-196-01 | SubSTATION Server Telegyr 8979 Master Vulnerabilities | 2014-04-17T06:00:00.000000Z | 2025-06-06T22:45:50.215260Z |
| icsa-14-189-02 | Innominate mGuard Unauthorized Leakage of System Data | 2014-04-10T06:00:00.000000Z | 2025-06-06T22:45:43.410774Z |
| icsa-13-077-01b | Schneider Electric PLCs Vulnerabilities | 2013-12-20T07:00:00.000000Z | 2025-06-06T22:40:07.027146Z |
| icsa-13-016-01 | Schneider Electric Authenticated Communication Risk Vulnerability | 2013-10-20T06:00:00.000000Z | 2025-06-06T22:39:47.591594Z |
| icsa-13-014-01 | Siemens SIMATIC RF Manager ActiveX Buffer Overflow | 2013-10-18T06:00:00.000000Z | 2025-06-06T22:39:41.115500Z |
| icsa-13-011-03 | Rockwell Automation ControlLogix PLC Vulnerabilities | 2013-10-15T06:00:00.000000Z | 2025-06-06T22:38:48.956870Z |
| icsa-12-205-02 | Siemens SIMATIC STEP 7 DLL Vulnerability | 2012-04-26T06:00:00.000000Z | 2025-06-06T22:38:22.736168Z |
| icsa-12-185-01 | WellinTech KingView Multiple Vulnerabilities | 2012-04-06T06:00:00.000000Z | 2025-06-06T22:37:50.390140Z |
| icsa-12-177-02 | Invensys Wonderware InTouch 10 DLL Hijack | 2012-03-29T06:00:00.000000Z | 2025-06-06T22:37:43.923140Z |
| icsa-12-167-01 | Innominate MGuard Weak HTTPS and SSH Keys | 2012-03-19T06:00:00.000000Z | 2025-06-06T22:37:37.465622Z |
| icsa-12-137-02 | Advantech Studio ISSymbol ActiveX Buffer Overflow | 2012-02-17T07:00:00.000000Z | 2025-06-06T22:37:31.006003Z |
| icsa-12-131-01 | Progea Movicon Memory Corruption Vulnerability | 2012-02-11T07:00:00.000000Z | 2025-06-06T22:37:24.554697Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-sb-rv-stack-shyv2f5n | Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Stack Overflow Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-sb-rv-stack-SHYv2f5N | Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Stack Overflow Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-ise-radius-dos-w7cnn7gt | Cisco Identity Services Engine RADIUS Denial of Service Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-ise-radius-dos-W7cNn7gt | Cisco Identity Services Engine RADIUS Denial of Service Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-hyperflex-redirect-uxlgqduf | Cisco HyperFlex HX Data Platform Open Redirect Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-hyperflex-redirect-UxLgqdUF | Cisco HyperFlex HX Data Platform Open Redirect Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-bw-auth-bypass-kcggmwhx | Cisco BroadWorks Application Delivery Platform and Xtended Services Platform Authentication Bypass Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-bw-auth-bypass-kCggMWhX | Cisco BroadWorks Application Delivery Platform and Xtended Services Platform Authentication Bypass Vulnerability | 2023-09-06T16:00:00+00:00 | 2023-09-06T16:00:00+00:00 |
| cisco-sa-commpilot-xss-jc46sezf | Cisco BroadWorks CommPilot Application Software Cross-Site Scripting Vulnerability | 2023-08-02T16:00:00+00:00 | 2023-08-30T19:34:29+00:00 |
| cisco-sa-commpilot-xss-jC46sezF | Cisco BroadWorks CommPilot Application Software Cross-Site Scripting Vulnerability | 2023-08-02T16:00:00+00:00 | 2023-08-30T19:34:29+00:00 |
| cisco-sa-cucm-priv-esc-d8bky5eg | Cisco Unified Communications Products Privilege Escalation Vulnerability | 2023-08-30T16:00:00+00:00 | 2023-08-30T16:00:00+00:00 |
| cisco-sa-cucm-priv-esc-D8Bky5eg | Cisco Unified Communications Products Privilege Escalation Vulnerability | 2023-08-30T16:00:00+00:00 | 2023-08-30T16:00:00+00:00 |
| cisco-sa-clamav-rnwneeee | ClamAV HFS+ File Scanning Infinite Loop Denial of Service Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-25T16:08:02+00:00 |
| cisco-sa-clamav-rNwNEEee | ClamAV HFS+ File Scanning Infinite Loop Denial of Service Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-25T16:08:02+00:00 |
| cisco-sa-nxos-sftp-xvap5hfd | Cisco Nexus 3000 and 9000 Series Switches SFTP Server File Access Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-nxos-sftp-xVAp5Hfd | Cisco Nexus 3000 and 9000 Series Switches SFTP Server File Access Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-nxos-remoteauth-dos-xb6pv74m | Cisco NX-OS Software TACACS+ or RADIUS Remote Authentication Directed Request Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-nxos-remoteauth-dos-XB6pv74m | Cisco NX-OS Software TACACS+ or RADIUS Remote Authentication Directed Request Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-nxos-n3_9k-isis-dos-ftcxb4vb | Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-nxos-n3_9k-isis-dos-FTCXB4Vb | Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-fxos-arbitrary-file-blk6yupl | Cisco FXOS Software Arbitrary File Write Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-fxos-arbitrary-file-BLk6YupL | Cisco FXOS Software Arbitrary File Write Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-fp-ucsfi-snmp-dos-qtv69nao | Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS 6300 Series Fabric Interconnects SNMP Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-fp-ucsfi-snmp-dos-qtv69NAO | Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS 6300 Series Fabric Interconnects SNMP Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-apic-uapa-f4tashk | Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-apic-uapa-F4TAShk | Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-te-va-priv-esc-pudgrx8e | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-17T22:00:29+00:00 |
| cisco-sa-te-va-priv-esc-PUdgrx8E | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-17T22:00:29+00:00 |
| cisco-sa-thoueye-privesc-nvhhgwb3 | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-17T21:54:23+00:00 |
| cisco-sa-thoueye-privesc-NVhHGwb3 | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-17T21:54:23+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-41066 | ibmvnic: Add tx check to prevent skb leak | 2024-07-01T07:00:00.000Z | 2026-03-31T15:07:14.000Z |
| msrc_cve-2024-57976 | btrfs: do proper folio cleanup when cow_file_range() failed | 2025-02-02T00:00:00.000Z | 2026-03-31T15:07:12.000Z |
| msrc_cve-2025-38590 | net/mlx5e: Remove skb secpath if xfrm state is not found | 2025-08-02T00:00:00.000Z | 2026-03-31T15:07:03.000Z |
| msrc_cve-2025-37747 | perf: Fix hang while freeing sigtrap event | 2025-05-02T00:00:00.000Z | 2026-03-31T15:07:03.000Z |
| msrc_cve-2024-26896 | wifi: wfx: fix memory leak when starting AP | 2024-04-02T07:00:00.000Z | 2026-03-31T15:06:53.000Z |
| msrc_cve-2024-53190 | wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures | 2024-12-02T00:00:00.000Z | 2026-03-31T15:06:52.000Z |
| msrc_cve-2024-40965 | i2c: lpi2c: Avoid calling clk_get_rate during transfer | 2024-07-01T07:00:00.000Z | 2026-03-31T15:06:52.000Z |
| msrc_cve-2025-39716 | parisc: Revise __get_user() to probe user read access | 2025-09-02T00:00:00.000Z | 2026-03-31T15:06:50.000Z |
| msrc_cve-2024-49988 | ksmbd: add refcnt to ksmbd_conn struct | 2024-10-01T07:00:00.000Z | 2026-03-31T15:06:50.000Z |
| msrc_cve-2025-38656 | wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() | 2025-08-02T00:00:00.000Z | 2026-03-31T15:06:40.000Z |
| msrc_cve-2025-37826 | scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer() | 2025-05-02T00:00:00.000Z | 2026-03-31T15:06:40.000Z |
| msrc_cve-2024-26886 | Bluetooth: af_bluetooth: Fix deadlock | 2024-04-02T07:00:00.000Z | 2026-03-31T15:06:32.000Z |
| msrc_cve-2026-32766 | astral-tokio-tar insufficiently validates PAX extensions during extraction | 2026-03-02T00:00:00.000Z | 2026-03-31T15:06:29.000Z |
| msrc_cve-2025-23155 | net: stmmac: Fix accessing freed irq affinity_hint | 2025-05-02T00:00:00.000Z | 2026-03-31T15:06:29.000Z |
| msrc_cve-2024-40969 | f2fs: don't set RO when shutting down f2fs | 2024-07-01T07:00:00.000Z | 2026-03-31T15:06:28.000Z |
| msrc_cve-2024-35799 | drm/amd/display: Prevent crash when disable stream | 2024-05-02T07:00:00.000Z | 2026-03-31T15:06:28.000Z |
| msrc_cve-2024-49987 | bpftool: Fix undefined behavior in qsort(NULL 0 ...) | 2024-10-01T07:00:00.000Z | 2026-03-31T15:06:26.000Z |
| msrc_cve-2025-38665 | can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode | 2025-08-02T00:00:00.000Z | 2026-03-31T15:06:25.000Z |
| msrc_cve-2025-37877 | iommu: Clear iommu-dma ops on cleanup | 2025-05-02T00:00:00.000Z | 2026-03-31T15:06:14.000Z |
| msrc_cve-2025-21786 | workqueue: Put the pwq after detaching the rescuer from the pool | 2025-02-02T00:00:00.000Z | 2026-03-31T15:06:09.000Z |
| msrc_cve-2026-23276 | net: add xmit recursion limit to tunnel xmit functions | 2026-03-02T00:00:00.000Z | 2026-03-31T15:06:06.000Z |
| msrc_cve-2025-23141 | KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses | 2025-05-02T00:00:00.000Z | 2026-03-31T15:06:05.000Z |
| msrc_cve-2024-40973 | media: mtk-vcodec: potential null pointer deference in SCP | 2024-07-01T07:00:00.000Z | 2026-03-31T15:06:05.000Z |
| msrc_cve-2024-27435 | nvme: fix reconnection fail due to reserved tag allocation | 2024-05-02T07:00:00.000Z | 2026-03-31T15:06:04.000Z |
| msrc_cve-2025-38520 | drm/amdkfd: Don't call mmput from MMU notifier callback | 2025-08-02T00:00:00.000Z | 2026-03-31T15:06:02.000Z |
| msrc_cve-2025-39764 | netfilter: ctnetlink: remove refcounting in expectation dumpers | 2025-09-02T00:00:00.000Z | 2026-03-31T15:05:59.000Z |
| msrc_cve-2024-36478 | null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' | 2024-06-02T07:00:00.000Z | 2026-03-31T15:05:45.000Z |
| msrc_cve-2025-39859 | ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog | 2025-09-02T00:00:00.000Z | 2026-03-31T15:05:42.000Z |
| msrc_cve-2025-22103 | net: fix NULL pointer dereference in l3mdev_l3_rcv | 2025-04-02T00:00:00.000Z | 2026-03-31T15:05:41.000Z |
| msrc_cve-2025-38644 | wifi: mac80211: reject TDLS operations when station is not associated | 2025-08-02T00:00:00.000Z | 2026-03-31T15:05:39.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2024-0223 | Kwetsbaarheden verholpen in Adobe Acrobat Reader | 2024-05-16T12:44:31.298431Z | 2024-05-16T12:44:31.298431Z |
| ncsc-2024-0222 | Kwetsbaarheden verholpen in Fortinet FortiOS | 2024-05-16T12:43:57.240443Z | 2024-05-16T12:43:57.240443Z |
| ncsc-2024-0221 | Kwetsbaarheden verholpen in Google Chrome | 2024-05-16T12:42:36.777137Z | 2024-05-16T12:42:36.777137Z |
| ncsc-2024-0220 | Kwetsbaarheden verholpen in Aruba Networks ArubaOS | 2024-05-16T12:41:16.031110Z | 2024-05-16T12:41:16.031110Z |
| ncsc-2024-0219 | Kwetsbaarheden verholpen in Apple iOS en iPadOS | 2024-05-15T12:47:39.940581Z | 2024-05-15T12:47:39.940581Z |
| ncsc-2024-0218 | Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird | 2024-05-15T12:29:43.620890Z | 2024-05-15T12:29:43.620890Z |
| ncsc-2024-0217 | Kwetsbaarheden verholpen in Apple MacOS | 2024-05-15T10:50:09.062571Z | 2024-05-15T11:18:13.188010Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2026:10022-1 | libsodium-devel-1.0.21-1.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-su-2026:10021-1 | coredns-1.14.0-1.1 on GA media | 2026-01-09T00:00:00Z | 2026-01-09T00:00:00Z |
| opensuse-ru-2026:20010-1 | Recommended update for trivy | 2026-01-08T14:37:24Z | 2026-01-08T14:37:24Z |
| opensuse-su-2026:10020-1 | traefik-3.6.6-1.1 on GA media | 2026-01-08T00:00:00Z | 2026-01-08T00:00:00Z |
| opensuse-su-2026:10019-1 | gdk-pixbuf-loader-libheif-1.21.1-1.1 on GA media | 2026-01-08T00:00:00Z | 2026-01-08T00:00:00Z |
| opensuse-su-2026:10018-1 | gimp-3.0.6-4.1 on GA media | 2026-01-08T00:00:00Z | 2026-01-08T00:00:00Z |
| opensuse-su-2026:10017-1 | curl-8.18.0-1.1 on GA media | 2026-01-08T00:00:00Z | 2026-01-08T00:00:00Z |
| opensuse-su-2026:10016-1 | chromedriver-143.0.7499.192-1.1 on GA media | 2026-01-08T00:00:00Z | 2026-01-08T00:00:00Z |
| opensuse-su-2026:20003-1 | Security update of valkey | 2026-01-07T09:43:28Z | 2026-01-07T09:43:28Z |
| opensuse-su-2026:10015-1 | libwget4-2.2.1-1.1 on GA media | 2026-01-07T00:00:00Z | 2026-01-07T00:00:00Z |
| opensuse-su-2026:10014-1 | python311-cbor2-5.8.0-2.1 on GA media | 2026-01-07T00:00:00Z | 2026-01-07T00:00:00Z |
| opensuse-su-2026:10013-1 | apptainer-1.4.5-1.1 on GA media | 2026-01-07T00:00:00Z | 2026-01-07T00:00:00Z |
| opensuse-su-2026:10012-1 | ImageMagick-7.1.2.12-1.1 on GA media | 2026-01-07T00:00:00Z | 2026-01-07T00:00:00Z |
| opensuse-su-2026:10011-1 | python314-3.14.2-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10010-1 | python311-filelock-3.20.2-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10009-1 | log4j-2.20.0-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10008-1 | gpsd-3.27.3-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10007-1 | c-ares-devel-1.34.6-1.1 on GA media | 2026-01-06T00:00:00Z | 2026-01-06T00:00:00Z |
| opensuse-su-2026:10006-1 | dcmtk-3.7.0-1.1 on GA media | 2026-01-05T00:00:00Z | 2026-01-05T00:00:00Z |
| opensuse-su-2026:10005-1 | python312-Django6-6.0-1.1 on GA media | 2026-01-03T00:00:00Z | 2026-01-03T00:00:00Z |
| opensuse-su-2026:10004-1 | fluidsynth-2.5.2-1.1 on GA media | 2026-01-03T00:00:00Z | 2026-01-03T00:00:00Z |
| opensuse-su-2026:20001-1 | Security update for sssd | 2026-01-02T16:58:16Z | 2026-01-02T16:58:16Z |
| opensuse-su-2026:20002-1 | Security update for MozillaThunderbird | 2026-01-02T12:14:18Z | 2026-01-02T12:14:18Z |
| opensuse-su-2026:10003-1 | python311-marshmallow-3.26.2-1.1 on GA media | 2026-01-02T00:00:00Z | 2026-01-02T00:00:00Z |
| opensuse-su-2026:10002-1 | libmatio-devel-1.5.29-1.1 on GA media | 2026-01-01T00:00:00Z | 2026-01-01T00:00:00Z |
| opensuse-su-2026:10001-1 | dirmngr-2.5.16-1.1 on GA media | 2026-01-01T00:00:00Z | 2026-01-01T00:00:00Z |
| opensuse-su-2026:10000-1 | gnu-recutils-1.9-3.1 on GA media | 2026-01-01T00:00:00Z | 2026-01-01T00:00:00Z |
| opensuse-su-2025:15854-1 | kepler-0.11.3-1.1 on GA media | 2025-12-31T00:00:00Z | 2025-12-31T00:00:00Z |
| opensuse-su-2025:20130-1 | Security update for bash-git-prompt | 2025-12-30T17:08:26Z | 2025-12-30T17:08:26Z |
| opensuse-su-2025:20121-1 | Security update for redis | 2025-12-30T17:05:45Z | 2025-12-30T17:05:45Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:7555 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.0 security update | 2023-11-28T18:50:01+00:00 | 2026-04-23T01:39:58+00:00 |
| rhsa-2023:7522 | Red Hat Security Advisory: OpenShift Virtualization 4.13.6 security and bug fix update | 2023-11-28T13:45:02+00:00 | 2026-04-23T01:39:57+00:00 |
| rhsa-2023:7521 | Red Hat Security Advisory: OpenShift Virtualization 4.13.6 RPMs security and bug fix update | 2023-11-28T13:17:06+00:00 | 2026-04-23T01:39:55+00:00 |
| rhsa-2023:7515 | Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 9.0.0 security update | 2023-11-27T16:08:33+00:00 | 2026-04-23T01:39:53+00:00 |
| rhsa-2023:7479 | Red Hat Security Advisory: OpenShift Container Platform 4.11.54 bug fix and security update | 2023-11-29T01:40:41+00:00 | 2026-04-23T01:39:53+00:00 |
| rhsa-2023:7478 | Red Hat Security Advisory: OpenShift Container Platform 4.11.54 security and extras update | 2023-11-29T00:44:58+00:00 | 2026-04-23T01:39:50+00:00 |
| rhsa-2023:7475 | Red Hat Security Advisory: OpenShift Container Platform 4.13.24 bug fix and security update | 2023-11-29T01:47:09+00:00 | 2026-04-23T01:39:49+00:00 |
| rhsa-2023:7474 | Red Hat Security Advisory: OpenShift Container Platform 4.13.24 security and extras update | 2023-11-29T00:33:54+00:00 | 2026-04-23T01:39:48+00:00 |
| rhsa-2023:7470 | Red Hat Security Advisory: OpenShift Container Platform 4.14.4 bug fix and security update | 2023-11-29T11:36:57+00:00 | 2026-04-23T01:39:48+00:00 |
| rhsa-2023:7469 | Red Hat Security Advisory: OpenShift Container Platform 4.14.4 security and extras update | 2023-11-29T10:27:24+00:00 | 2026-04-23T01:39:47+00:00 |
| rhsa-2023:7345 | Red Hat Security Advisory: Red Hat OpenShift GitOps v1.9.3 security update | 2023-11-20T08:34:18+00:00 | 2026-04-23T01:39:46+00:00 |
| rhsa-2023:7344 | Red Hat Security Advisory: openshift-gitops-kam security update | 2023-11-20T07:53:42+00:00 | 2026-04-23T01:39:46+00:00 |
| rhsa-2023:7342 | Red Hat Security Advisory: OpenShift Container Platform 4.11 low-latency extras update | 2023-11-16T20:48:36+00:00 | 2026-04-23T01:39:44+00:00 |
| rhsa-2023:7323 | Red Hat Security Advisory: OpenShift Container Platform 4.13.23 bug fix and security update | 2023-11-21T11:27:12+00:00 | 2026-04-23T01:39:44+00:00 |
| rhsa-2023:7322 | Red Hat Security Advisory: OpenShift Container Platform 4.13.23 security and extras update | 2023-11-21T11:27:54+00:00 | 2026-04-23T01:39:43+00:00 |
| rhsa-2023:7315 | Red Hat Security Advisory: OpenShift Container Platform 4.14.3 bug fix and security update | 2023-11-21T11:26:31+00:00 | 2026-04-23T01:39:43+00:00 |
| rhsa-2023:7288 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update | 2023-11-16T05:58:26+00:00 | 2026-04-23T01:39:42+00:00 |
| rhsa-2023:7215 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.2.12 | 2023-11-15T00:16:31+00:00 | 2026-04-23T01:39:41+00:00 |
| rhsa-2023:7201 | Red Hat Security Advisory: OpenShift Container Platform 4.15.0 packages and security update | 2024-02-27T22:34:13+00:00 | 2026-04-23T01:39:41+00:00 |
| rhsa-2023:7200 | Red Hat Security Advisory: OpenShift Container Platform 4.15.z security update | 2024-02-27T22:49:18+00:00 | 2026-04-23T01:39:38+00:00 |
| rhsa-2023:7198 | Red Hat Security Advisory: OpenShift Container Platform 4.15.0 bug fix and security update | 2024-02-27T20:49:10+00:00 | 2026-04-23T01:39:38+00:00 |
| rhsa-2023:6894 | Red Hat Security Advisory: OpenShift Container Platform 4.12.44 bug fix and security update | 2023-11-21T12:36:12+00:00 | 2026-04-23T01:39:37+00:00 |
| rhsa-2023:6893 | Red Hat Security Advisory: OpenShift Container Platform 4.12.44 security and extras update | 2023-11-21T12:20:30+00:00 | 2026-04-23T01:39:36+00:00 |
| rhsa-2023:6846 | Red Hat Security Advisory: OpenShift Container Platform 4.13.22 bug fix and security update | 2023-11-15T01:45:54+00:00 | 2026-04-23T01:39:34+00:00 |
| rhsa-2023:6845 | Red Hat Security Advisory: OpenShift Container Platform 4.13.22 security and extras update | 2023-11-15T00:43:04+00:00 | 2026-04-23T01:39:34+00:00 |
| rhsa-2023:6842 | Red Hat Security Advisory: OpenShift Container Platform 4.12.43 bug fix and security update | 2023-11-16T20:31:52+00:00 | 2026-04-23T01:39:33+00:00 |
| rhsa-2023:6841 | Red Hat Security Advisory: Red Hat OpenShift Enterprise security update | 2023-11-16T20:14:47+00:00 | 2026-04-23T01:39:33+00:00 |
| rhsa-2023:6840 | Red Hat Security Advisory: OpenShift Container Platform 4.14.2 packages and security update | 2023-11-15T07:24:02+00:00 | 2026-04-23T01:39:32+00:00 |
| rhsa-2023:6839 | Red Hat Security Advisory: OpenShift Container Platform 4.14.2 security update | 2023-11-16T05:56:26+00:00 | 2026-04-23T01:39:31+00:00 |
| rhsa-2023:6837 | Red Hat Security Advisory: OpenShift Container Platform 4.14.2 bug fix and security update | 2023-11-15T04:22:30+00:00 | 2026-04-23T01:39:31+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-740908 | SSA-740908: File Parsing Vulnerabilities in JT Translator in NX | 2021-11-09T00:00:00Z | 2021-11-09T00:00:00Z |
| ssa-537983 | SSA-537983: Local Code Execution Vulnerability in SENTRON powermanager V3 | 2021-11-09T00:00:00Z | 2021-11-09T00:00:00Z |
| ssa-338732 | SSA-338732: Information Disclosure Vulnerability in Mendix | 2021-11-09T00:00:00Z | 2021-11-09T00:00:00Z |
| ssa-328042 | SSA-328042: File Parsing Vulnerabilities in OBJ Translator in NX | 2021-11-09T00:00:00Z | 2021-11-09T00:00:00Z |
| ssa-145157 | SSA-145157: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V2.12 | 2021-11-09T00:00:00Z | 2021-11-09T00:00:00Z |
| ssa-847986 | SSA-847986: Denial-of-Service Vulnerabilities in SIPROTEC 5 relays | 2021-09-14T00:00:00Z | 2021-10-12T00:00:00Z |
| ssa-723417 | SSA-723417: Multiple Vulnerabilities in SCALANCE W1750D | 2021-05-11T00:00:00Z | 2021-10-12T00:00:00Z |
| ssa-538778 | SSA-538778: SmartVNC Vulnerabilities in SIMATIC HMI/WinCC Products | 2021-05-11T00:00:00Z | 2021-10-12T00:00:00Z |
| ssa-500748 | SSA-500748: Denial-of-Service Vulnerabilities in SIPROTEC 5 Devices | 2021-09-14T00:00:00Z | 2021-10-12T00:00:00Z |
| ssa-178380 | SSA-178380: Denial-of-Service Vulnerability in SINUMERIK Controllers | 2021-10-12T00:00:00Z | 2021-10-12T00:00:00Z |
| ssa-173565 | SSA-173565: Denial-of-Service Vulnerability in RUGGEDCOM ROX Devices | 2021-10-12T00:00:00Z | 2021-10-12T00:00:00Z |
| ssa-163251 | SSA-163251: Multiple Vulnerabilities in SINEC NMS | 2021-10-12T00:00:00Z | 2021-10-12T00:00:00Z |
| ssa-150692 | SSA-150692: Multiple Vulnerabilities in RUGGEDCOM ROX | 2021-09-14T00:00:00Z | 2021-10-12T00:00:00Z |
| ssa-728618 | SSA-728618: Multiple Vulnerabilities in Solid Edge before SE2021MP8 | 2021-09-28T00:00:00Z | 2021-09-28T00:00:00Z |
| ssa-997732 | SSA-997732: Modfem File Parsing Vulnerability in Simcenter Femap before V2021.2 | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-987403 | SSA-987403: Multiple Vulnerabilities in Teamcenter | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-944498 | SSA-944498: Buffer Overflow Vulnerability in Web Server of APOGEE and TALON Automation Devices | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-938030 | SSA-938030: DGN and PAR File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.2.0.2 | 2021-08-10T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-936080 | SSA-936080: Multiple Vulnerabilities in Third-Party Component libcurl | 2021-03-09T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-865327 | SSA-865327: Incorrect Authorization Vulnerability in Industrial Products | 2021-08-10T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-835377 | SSA-835377: Missing Authentication Vulnerability in SINEMA Server | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-830194 | SSA-830194: Missing Authentication Vulnerability in S7-1200 Devices | 2021-08-10T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-756744 | SSA-756744: OS Command Injection Vulnerability in SINEC NMS | 2021-08-10T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-692317 | SSA-692317: Authorization Bypass Vulnerability in Industrial Edge | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-535380 | SSA-535380: Command Injection Vulnerability in Siveillance OIS Affecting Several Building Management Systems | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-453715 | SSA-453715: Deserialization Vulnerability in CCOM Communication Component of Desigo CC Family | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-434536 | SSA-434536: Memory Protection Bypass Vulnerability in SINUMERIK ONE and SINUMERIK MC | 2021-07-13T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-434535 | SSA-434535: Memory Protection Bypass Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives | 2021-07-13T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-434534 | SSA-434534: Memory Protection Bypass Vulnerability in SIMATIC S7-1200 and S7-1500 CPU Families | 2021-05-28T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-428051 | SSA-428051: Privilege Escalation Vulnerability in TIA Administrator | 2021-02-09T00:00:00Z | 2021-09-14T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:20662-1 | Security update for openssh | 2026-03-10T18:35:27Z | 2026-03-10T18:35:27Z |
| suse-su-2026:20661-1 | Security update for virtiofsd | 2026-03-10T18:35:27Z | 2026-03-10T18:35:27Z |
| suse-su-2026:20716-1 | Security update for qemu | 2026-03-10T18:34:11Z | 2026-03-10T18:34:11Z |
| suse-su-2026:0860-1 | Security update for python-maturin | 2026-03-10T16:46:52Z | 2026-03-10T16:46:52Z |
| suse-su-2026:0859-1 | Security update for python-aiohttp | 2026-03-10T16:05:00Z | 2026-03-10T16:05:00Z |
| suse-su-2026:0858-1 | Security update for python-aiohttp | 2026-03-10T12:38:39Z | 2026-03-10T12:38:39Z |
| suse-su-2026:0857-1 | Security update for util-linux | 2026-03-10T11:01:32Z | 2026-03-10T11:01:32Z |
| suse-su-2026:20714-1 | Security update for util-linux | 2026-03-10T08:40:03Z | 2026-03-10T08:40:03Z |
| suse-su-2026:0856-1 | Security update for util-linux | 2026-03-10T08:35:29Z | 2026-03-10T08:35:29Z |
| suse-su-2026:0855-1 | Security update for c3p0 and mchange-commons | 2026-03-10T05:06:36Z | 2026-03-10T05:06:36Z |
| suse-su-2026:0854-1 | Security update for ImageMagick | 2026-03-09T15:34:51Z | 2026-03-09T15:34:51Z |
| suse-su-2026:0853-1 | Security update for ImageMagick | 2026-03-09T15:34:27Z | 2026-03-09T15:34:27Z |
| suse-su-2026:0852-1 | Security update for ImageMagick | 2026-03-09T15:32:56Z | 2026-03-09T15:32:56Z |
| suse-su-2026:0851-1 | Security update for ImageMagick | 2026-03-09T15:32:14Z | 2026-03-09T15:32:14Z |
| suse-su-2026:20710-1 | Security update for python311 | 2026-03-09T10:51:06Z | 2026-03-09T10:51:06Z |
| suse-su-2026:20688-1 | Security update for cockpit-podman | 2026-03-09T10:46:42Z | 2026-03-09T10:46:42Z |
| suse-su-2026:20659-1 | Security update for zlib | 2026-03-09T10:23:42Z | 2026-03-09T10:23:42Z |
| suse-su-2026:0849-1 | Security update for python-Flask | 2026-03-09T10:13:40Z | 2026-03-09T10:13:40Z |
| suse-su-2026:20709-1 | Security update for zlib | 2026-03-09T09:54:57Z | 2026-03-09T09:54:57Z |
| suse-su-2026:0848-1 | Security update for valkey | 2026-03-07T18:18:45Z | 2026-03-07T18:18:45Z |
| suse-su-2026:0847-1 | Security update for libsoup | 2026-03-07T01:34:36Z | 2026-03-07T01:34:36Z |
| suse-su-2026:0846-1 | Security update for python-Markdown | 2026-03-06T17:04:39Z | 2026-03-06T17:04:39Z |
| suse-su-2026:20682-1 | Security update for ucode-intel | 2026-03-06T13:29:07Z | 2026-03-06T13:29:07Z |
| suse-su-2026:20708-1 | Security update for gnutls | 2026-03-06T12:11:09Z | 2026-03-06T12:11:09Z |
| suse-su-2026:20707-1 | Security update for libxslt, libxml2 | 2026-03-06T11:53:41Z | 2026-03-06T11:53:41Z |
| suse-su-2026:20657-1 | Security update for libxslt, libxml2 | 2026-03-06T11:37:27Z | 2026-03-06T11:37:27Z |
| suse-su-2026:0840-1 | Security update for grpc | 2026-03-06T11:36:18Z | 2026-03-06T11:36:18Z |
| suse-su-2026:20656-1 | Security update for docker-compose | 2026-03-06T11:34:20Z | 2026-03-06T11:34:20Z |
| suse-su-2026:0838-1 | Security update for python-tornado | 2026-03-06T08:15:16Z | 2026-03-06T08:15:16Z |
| suse-su-2026:0834-1 | Security update for libsoup2 | 2026-03-05T20:00:24Z | 2026-03-05T20:00:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2025:13589 | Moderate: kernel security update | 2025-08-11T00:00:00Z | 2025-08-11T15:39:13Z |
| alsa-2025:12280 | Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update | 2025-07-30T00:00:00Z | 2025-08-09T13:24:27Z |
| alsa-2025:13429 | Moderate: libxml2 security update | 2025-08-07T00:00:00Z | 2025-08-07T22:17:37Z |
| alsa-2025:13428 | Moderate: libxml2 security update | 2025-08-07T00:00:00Z | 2025-08-07T21:44:30Z |
| alsa-2025:12746 | Important: kernel security update | 2025-08-04T00:00:00Z | 2025-08-07T11:25:17Z |
| alsa-2025:12752 | Important: kernel security update | 2025-08-04T00:00:00Z | 2025-08-07T10:29:22Z |
| alsa-2025:12753 | Important: kernel-rt security update | 2025-08-04T00:00:00Z | 2025-08-07T10:27:31Z |
| alsa-2025:12831 | Moderate: opentelemetry-collector security update | 2025-08-05T00:00:00Z | 2025-08-07T10:26:12Z |
| alsa-2025:12850 | Moderate: opentelemetry-collector security update | 2025-08-05T00:00:00Z | 2025-08-07T10:25:17Z |
| alsa-2025:13240 | Moderate: glibc security update | 2025-08-06T00:00:00Z | 2025-08-07T10:23:27Z |
| alsa-2025:13315 | Moderate: gdk-pixbuf2 security update | 2025-08-07T00:00:00Z | 2025-08-07T09:27:11Z |
| alsa-2025:11850 | Moderate: kernel security update | 2025-07-28T00:00:00Z | 2025-08-06T17:11:33Z |
| alsa-2025:13203 | Moderate: libxml2 security update | 2025-08-06T00:00:00Z | 2025-08-06T15:05:54Z |
| alsa-2025:13234 | Moderate: python-requests security update | 2025-08-06T00:00:00Z | 2025-08-06T15:03:44Z |
| alsa-2025:12980 | Moderate: glibc security update | 2025-08-05T00:00:00Z | 2025-08-06T14:24:57Z |
| alsa-2025:11855 | Moderate: kernel security update | 2025-07-28T00:00:00Z | 2025-08-06T06:59:49Z |
| alsa-2025:12834 | Moderate: python3.12-setuptools security update | 2025-08-05T00:00:00Z | 2025-08-06T05:36:51Z |
| alsa-2025:12519 | Moderate: python-requests security update | 2025-08-04T00:00:00Z | 2025-08-04T12:47:36Z |
| alsa-2025:11455 | Moderate: kernel security update | 2025-07-21T00:00:00Z | 2025-08-04T11:36:19Z |
| alsa-2025:11036 | Moderate: python-setuptools security update | 2025-07-15T00:00:00Z | 2025-08-04T11:32:31Z |
| alsa-2025:11035 | Moderate: lz4 security update | 2025-07-15T00:00:00Z | 2025-08-02T13:24:46Z |
| alsa-2025:12447 | Important: libxml2 security update | 2025-07-31T00:00:00Z | 2025-08-01T13:39:05Z |
| alsa-2025:12450 | Important: libxml2 security update | 2025-07-31T00:00:00Z | 2025-08-01T13:36:17Z |
| alsa-2025:11861 | Moderate: kernel security update | 2025-07-28T00:00:00Z | 2025-07-31T22:26:58Z |
| alsa-2025:11797 | Important: firefox security update | 2025-07-28T00:00:00Z | 2025-07-31T10:21:39Z |
| alsa-2025:11748 | Important: firefox security update | 2025-07-24T00:00:00Z | 2025-07-30T15:41:56Z |
| alsa-2025:12188 | Important: thunderbird security update | 2025-07-29T00:00:00Z | 2025-07-30T13:59:25Z |
| alsa-2025:12187 | Important: thunderbird security update | 2025-07-29T00:00:00Z | 2025-07-30T13:57:28Z |
| alsa-2025:10873 | Important: java-21-openjdk security update | 2025-07-16T00:00:00Z | 2025-07-30T13:16:04Z |
| alsa-2025:12100 | Moderate: libtpms security update | 2025-07-29T00:00:00Z | 2025-07-30T09:49:56Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2024-255 | UNKNOWN READ | 2024-04-13T00:10:35.758074Z | 2024-04-17T14:26:32.470274Z |
| osv-2024-114 | Segv on unknown address in lj_BC_RET1 | 2024-02-17T00:12:33.617106Z | 2024-04-17T14:24:32.039372Z |
| osv-2024-10 | Heap-buffer-overflow in __string | 2024-01-12T00:12:45.528472Z | 2024-04-16T16:14:55.449018Z |
| osv-2024-9 | Stack-buffer-overflow in _canonicalize | 2024-01-11T00:04:20.734197Z | 2024-04-16T15:44:42.424488Z |
| osv-2024-25 | Stack-buffer-overflow in icu_75::PluralRuleParser::parse | 2024-01-21T00:00:16.253854Z | 2024-04-16T15:30:31.262505Z |
| osv-2024-189 | Negative-size-param in vcf_parse_format | 2024-03-23T00:12:44.903137Z | 2024-04-16T14:19:36.401830Z |
| osv-2024-179 | UNKNOWN READ in gs_font_finalize | 2024-03-17T00:03:41.275523Z | 2024-04-12T14:46:15.104038Z |
| osv-2024-246 | UNKNOWN READ in ndpi_detection_process_packet | 2024-04-08T00:12:19.539863Z | 2024-04-08T00:12:19.540398Z |
| osv-2024-221 | Heap-buffer-overflow in libspdm_copy_mem | 2024-03-31T00:05:20.376065Z | 2024-04-06T14:38:17.060185Z |
| osv-2024-17 | Heap-use-after-free in iasecc_delete_file | 2024-01-17T00:12:20.698997Z | 2024-04-05T14:21:32.049652Z |
| osv-2024-138 | Security exception in com.github.javaparser.GeneratedJavaParser.Expression | 2024-02-28T00:05:23.810172Z | 2024-04-04T14:17:31.086359Z |
| osv-2024-137 | Global-buffer-overflow in igraph_dl_yylex | 2024-02-27T00:01:01.786536Z | 2024-04-03T14:17:44.548648Z |
| osv-2024-89 | Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst | 2024-02-09T00:03:08.288815Z | 2024-04-01T14:22:58.864850Z |
| osv-2023-605 | Heap-use-after-free in Elf64_free | 2023-07-23T14:00:51.654724Z | 2024-04-01T14:21:09.455014Z |
| osv-2024-4 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2024-01-04T00:13:53.974088Z | 2024-04-01T14:13:38.051217Z |
| osv-2024-217 | Heap-use-after-free in dropNode | 2024-03-30T00:03:20.549054Z | 2024-03-30T00:03:20.549358Z |
| osv-2024-207 | Heap-buffer-overflow in emit_goto | 2024-03-27T00:05:42.651468Z | 2024-03-27T00:05:42.651810Z |
| osv-2024-204 | Heap-use-after-free in JS_NewObjectFromShape | 2024-03-27T00:00:05.756758Z | 2024-03-27T00:00:05.757264Z |
| osv-2024-198 | Heap-use-after-free in xmlCopyPropInternal | 2024-03-25T00:05:53.628217Z | 2024-03-25T00:05:53.628547Z |
| osv-2024-194 | Heap-use-after-free in xmlDOMWrapNSNormAcquireNormalizedNs | 2024-03-24T00:06:16.876227Z | 2024-03-24T00:06:16.876833Z |
| osv-2024-193 | Use-of-uninitialized-value in api.c | 2024-03-24T00:04:56.514783Z | 2024-03-24T00:04:56.515126Z |
| osv-2024-187 | Heap-buffer-overflow in pcre2_fuzzsupport.c | 2024-03-23T00:06:48.454975Z | 2024-03-23T00:06:48.455591Z |
| osv-2024-182 | Heap-buffer-overflow in pcre2_fuzzsupport.c | 2024-03-19T00:03:53.557559Z | 2024-03-19T00:03:53.558132Z |
| osv-2024-180 | Heap-buffer-overflow in ixheaace_process | 2024-03-17T00:05:09.373138Z | 2024-03-17T00:05:09.373453Z |
| osv-2024-178 | Global-buffer-overflow in dissect_dns_answer | 2024-03-16T00:04:44.507570Z | 2024-03-16T00:04:44.508060Z |
| osv-2024-177 | Heap-buffer-overflow in p11_rpc_buffer_get_date_value | 2024-03-16T00:01:15.392885Z | 2024-03-16T00:01:15.393177Z |
| osv-2024-173 | Heap-buffer-overflow in pcre2_fuzzsupport.c | 2024-03-15T00:09:32.005883Z | 2024-03-15T00:09:32.006372Z |
| osv-2024-170 | Use-of-uninitialized-value in pcpp::Packet::createFirstLayer | 2024-03-14T00:14:30.862304Z | 2024-03-14T00:14:30.862862Z |
| osv-2024-24 | Security exception in java.base/java.util.Arrays.copyOf | 2024-01-20T00:04:01.700018Z | 2024-03-13T14:21:08.789955Z |
| osv-2024-161 | Heap-buffer-overflow in pcre2_fuzzsupport.c | 2024-03-11T00:00:35.333844Z | 2024-03-11T00:00:35.334478Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2020-0038 | Memory safety issues in `compact::Vec` | 2020-09-03T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0037 | Misbehaving `HandleLike` implementation can lead to memory safety violation | 2020-08-31T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0035 | Chunk API does not respect align requirement | 2020-08-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0034 | Multiple security issues including data race, buffer overflow, and uninitialized memory drop | 2020-08-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0033 | Matrix::new() drops uninitialized memory | 2020-08-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0032 | StrcCtx deallocates a memory region that it doesn't own | 2020-08-20T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0031 | HTTP Request smuggling through malformed Transfer Encoding headers | 2020-06-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0030 | Missing sanitization in mozwire allows local file overwrite of files ending in .conf | 2020-08-18T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0029 | Allows viewing and modifying arbitrary structs as bytes | 2020-06-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0028 | `LocalRequest::clone` creates multiple mutable references to the same object | 2020-05-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0027 | traitobject assumes the layout of fat pointers | 2020-06-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0026 | linked-hash-map creates uninitialized NonNull pointer | 2020-06-23T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0025 | bigint is unmaintained, use uint instead | 2020-05-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0023 | Lifetime boundary for `raw_slice` and `raw_slice_mut` are incorrect | 2020-02-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0022 | Ozone contains several memory safety issues | 2020-07-04T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0021 | rio allows a use-after-free buffer access when a future is leaked | 2020-05-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0019 | tokio-rustls reads may cause excessive memory usage | 2020-05-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0017 | Use after free in ArcIntern::drop | 2020-05-28T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0015 | Crash causing Denial of Service attack | 2020-04-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0014 | Various memory safety issues | 2020-04-23T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0013 | fake-static allows converting any reference into a `'static` reference | 2020-04-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0012 | Relies on undefined behavior of `char::from_u32_unchecked` | 2020-04-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0011 | Library exclusively intended to obfuscate code. | 2020-04-23T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0009 | `read_scalar` and `read_scalar_at` allow transmuting values without `unsafe` blocks | 2020-04-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0008 | Flaw in hyper allows request smuggling by sending a body in GET requests | 2020-03-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0007 | use-after or double free of allocated memory | 2020-03-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0006 | Flaw in `realloc` allows reading unknown memory | 2020-03-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0005 | CBox API allows to de-reference raw pointers without `unsafe` code | 2020-03-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0004 | sigstack allocation bug can cause memory corruption or leak | 2020-01-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2020-0002 | Parsing a specially crafted message can result in a stack overflow | 2020-01-16T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-python-2025-15366 | IMAP command injection in user-controlled commands | 2026-01-26T14:49:42.105Z | 2026-01-26T15:09:56.435Z |
| bit-python-2025-12781 | base64.b64decode() always accepts "+/" characters, despite setting altchars | 2026-01-26T14:49:35.455Z | 2026-01-26T15:09:56.435Z |
| bit-php-2025-14178 | Heap buffer overflow in array_merge() | 2026-01-08T11:48:32.142Z | 2026-01-26T15:09:56.435Z |
| bit-node-2025-59465 | 2026-01-26T14:47:56.981Z | 2026-01-26T15:09:56.435Z | |
| bit-node-2025-55131 | 2026-01-26T14:47:51.686Z | 2026-01-26T15:09:56.435Z | |
| bit-moodle-2025-3647 | Moodle: idor when accessing the cohorts report | 2026-01-26T14:49:52.208Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3645 | Moodle: idor in messaging web service allows access to some user details | 2026-01-26T14:49:50.806Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3644 | Moodle: ajax section delete does not respect course_can_delete_section() | 2026-01-26T14:49:49.408Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3643 | Moodle: reflected xss risk in policy tool | 2026-01-26T14:49:47.987Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3642 | Moodle: authenticated remote code execution risk in the moodle lms equella repository | 2026-01-26T14:49:46.287Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3641 | Moodle: authenticated remote code execution risk in the moodle lms dropbox repository | 2026-01-26T14:49:44.921Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3640 | Moodle: idor in web service allows users enrolled in a course to access some details of other users | 2026-01-26T14:49:43.349Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3637 | Moodle: csrf token exposure via url in moodle mod_data module | 2026-01-26T14:49:40.549Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3636 | Moodle: idor in moodle rss block allows unauthorized access to rss feeds | 2026-01-26T14:49:39.118Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3635 | Moodle: csrf risk in moodle user tours manager allows tour duplication | 2026-01-26T14:49:37.686Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3634 | Moodle: moodle allows course self-enrolment before completing mfa | 2026-01-26T14:49:36.271Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3628 | Moodle: moodle assignment submission search leaks anonymous student identities | 2026-01-26T14:49:34.772Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3627 | Moodle: partial data exposure in moodle before completing multi-factor authentication | 2026-01-26T14:49:33.343Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-3625 | Moodle: user dos and name disclosure via idor in moodle mfa email factor revoke action | 2026-01-26T14:49:31.897Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-32045 | Moodle: hidden grades shown to users without permission on some grade reports | 2026-01-26T14:49:30.385Z | 2026-01-26T15:09:56.435Z |
| bit-moodle-2025-32044 | Moodle: unauthenticated rest api user data exposure | 2026-01-26T14:49:29.093Z | 2026-01-26T15:09:56.435Z |
| bit-mastodon-2026-22246 | Local Mastodon users can enumerate and access severed relationships of every other local user | 2026-01-13T11:27:33.626Z | 2026-01-26T15:09:56.435Z |
| bit-libpython-2025-15367 | POP3 command injection in user-controlled commands | 2026-01-26T14:43:12.088Z | 2026-01-26T15:09:56.435Z |
| bit-libpython-2025-15366 | IMAP command injection in user-controlled commands | 2026-01-26T14:43:10.455Z | 2026-01-26T15:09:56.435Z |
| bit-libpython-2025-12781 | base64.b64decode() always accepts "+/" characters, despite setting altchars | 2026-01-26T14:43:03.724Z | 2026-01-26T15:09:56.435Z |
| bit-libphp-2025-14178 | Heap buffer overflow in array_merge() | 2026-01-08T11:43:28.412Z | 2026-01-26T15:09:56.435Z |
| bit-harbor-2024-22261 | SQL Injection in Harbor scan log API | 2026-01-26T14:40:06.365Z | 2026-01-26T15:09:56.435Z |
| bit-harbor-2022-31666 | Harbor fails to validate user permissions while Viewing, updating and deleting Webhook policies | 2026-01-26T14:39:52.521Z | 2026-01-26T15:09:56.435Z |
| bit-gitlab-2025-9222 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2026-01-13T09:09:30.025Z | 2026-01-26T15:09:56.435Z |
| bit-gitlab-2025-6454 | Server-Side Request Forgery (SSRF) in GitLab | 2025-09-16T09:08:45.357Z | 2026-01-26T15:09:56.435Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-1077 | Multiples vulnérabilités dans Traefik | 2025-12-08T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| CERTFR-2024-AVI-1026 | Multiples vulnérabilités dans les produits Synology | 2024-11-28T00:00:00.000000 | 2025-12-08T00:00:00.000000 |
| certfr-2025-avi-1075 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1074 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1073 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1072 | Multiples vulnérabilités dans les produits IBM | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1071 | Multiples vulnérabilités dans Apache HTTP Server | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1070 | Multiples vulnérabilités dans Microsoft CBL Mariner | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1069 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1068 | Vulnérabilité dans Python | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1067 | Vulnérabilité dans Apache Struts | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1066 | Multiples vulnérabilités dans les produits Nextcloud | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1065 | Multiples vulnérabilités dans NetApp ONTAP | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1075 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1074 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1073 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1072 | Multiples vulnérabilités dans les produits IBM | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1071 | Multiples vulnérabilités dans Apache HTTP Server | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1070 | Multiples vulnérabilités dans Microsoft CBL Mariner | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1069 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1068 | Vulnérabilité dans Python | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1067 | Vulnérabilité dans Apache Struts | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1066 | Multiples vulnérabilités dans les produits Nextcloud | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| CERTFR-2025-AVI-1065 | Multiples vulnérabilités dans NetApp ONTAP | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1064 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2025-avi-1063 | Multiples vulnérabilités dans les produits Splunk | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2025-avi-1062 | Multiples vulnérabilités dans Wireshark | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2025-avi-1061 | Vulnérabilité dans PostgreSQL PgBouncer | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2024-avi-1090 | Multiples vulnérabilités dans Synacor Zimbra Collaboration | 2024-12-18T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| CERTFR-2025-AVI-1064 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-000007 | WordPress plugin "Welcart e-Commerce" vulnerable to directory traversal | 2023-01-17T14:17+09:00 | 2023-01-17T14:17+09:00 |
| jvndb-2023-001005 | Active debug code vulnerability in OMRON CP1L-EL20DR-D | 2023-01-12T15:53+09:00 | 2023-01-12T15:53+09:00 |
| jvndb-2023-001003 | Access of uninitialized pointer vulnerability in OMRON CX-Motion-MCH | 2023-01-12T15:06+09:00 | 2023-01-12T15:06+09:00 |
| jvndb-2023-000006 | Multiple vulnerabilities in PIXELA PIX-RT100 | 2023-01-12T14:50+09:00 | 2023-01-12T14:50+09:00 |
| jvndb-2023-001002 | OpenAM Web Policy Agent (OpenAM Consortium Edition) vulnerable to path traversal | 2023-01-11T17:07+09:00 | 2023-01-11T17:07+09:00 |
| jvndb-2022-002779 | Multiple vulnerabilities in Contec CONPROSYS HMI System (CHS) | 2022-12-16T13:29+09:00 | 2023-01-11T16:55+09:00 |
| jvndb-2023-000005 | Multiple vulnerabilities in MAHO-PBX NetDevancer series | 2023-01-11T16:11+09:00 | 2023-01-11T16:11+09:00 |
| jvndb-2023-000003 | TP-Link SG105PE vulnerable to authentication bypass | 2023-01-11T15:04+09:00 | 2023-01-11T15:04+09:00 |
| jvndb-2023-000004 | pgAdmin 4 vulnerable to open redirect | 2023-01-11T14:23+09:00 | 2023-01-11T14:23+09:00 |
| jvndb-2023-000002 | Digital Arts m-FILTER vulnerable to improper authentication | 2023-01-06T14:57+09:00 | 2023-01-06T14:57+09:00 |
| jvndb-2023-000001 | Multiple code injection vulnerabilities in ruby-git | 2023-01-05T15:51+09:00 | 2023-01-05T15:51+09:00 |
| jvndb-2022-002838 | Multiple vulnerabilities in Fuji Electric V-Server | 2023-01-04T14:21+09:00 | 2023-01-04T14:21+09:00 |
| jvndb-2022-002837 | Multiple vulnerabilities in Fuji Electric V-SFT and TELLUS | 2023-01-04T14:16+09:00 | 2023-01-04T14:16+09:00 |
| jvndb-2022-000102 | Installers generated by Squirrel.Windows may insecurely load Dynamic Link Libraries | 2022-12-21T14:23+09:00 | 2022-12-21T14:23+09:00 |
| jvndb-2022-000101 | +Message App improper handling of Unicode control characters | 2022-12-21T14:13+09:00 | 2022-12-21T14:13+09:00 |
| jvndb-2022-002783 | Use-after-free vulnerability in Omron CX-Drive | 2022-12-20T15:32+09:00 | 2022-12-20T15:32+09:00 |
| jvndb-2022-002780 | Command injection vulnerability in SHARP Multifunctional Products (MFP) | 2022-12-20T12:12+09:00 | 2022-12-20T12:12+09:00 |
| jvndb-2022-000099 | Corel Roxio Creator LJB starts a program with an unquoted file path | 2022-12-19T13:47+09:00 | 2022-12-19T13:47+09:00 |
| jvndb-2022-000098 | Zenphoto vulnerable to cross-site scripting | 2022-12-19T13:39+09:00 | 2022-12-19T13:39+09:00 |
| jvndb-2022-002771 | Information Exposure Vulnerability in JP1/Automatic Operation | 2022-12-07T17:30+09:00 | 2022-12-07T17:30+09:00 |
| jvndb-2022-000091 | WordPress Plugin "WordPress Popular Posts" accepts untrusted external inputs to update certain internal variables | 2022-11-18T15:14+09:00 | 2022-11-18T15:14+09:00 |
| jvndb-2022-000089 | RICOH Aficio SP 4210N vulnerable to cross-site scripting | 2022-11-17T11:15+09:00 | 2022-11-17T11:15+09:00 |
| jvndb-2022-002691 | Multiple vulnerabilities in OMRON products | 2022-11-10T09:46+09:00 | 2022-11-10T09:46+09:00 |
| jvndb-2022-002444 | Multiple vulnerabilities in Buffalo network devices | 2022-10-05T17:44+09:00 | 2022-10-13T16:28+09:00 |
| jvndb-2022-002443 | Privilege Escalation Vulnerability in Hitachi Storage Plug-in for VMware vCenter | 2022-10-05T17:28+09:00 | 2022-10-05T17:28+09:00 |
| jvndb-2022-002364 | DoS Vulnerability in uCosminexus TP1/Client/J and Cosminexus Service Coordinator | 2022-09-14T11:34+09:00 | 2022-09-14T11:34+09:00 |
| jvndb-2022-002346 | Multiple vulnerabilities in Contec FLEXLAN FX3000 and FX2000 series | 2022-09-02T18:08+09:00 | 2022-09-02T18:08+09:00 |
| jvndb-2022-002295 | Multiple vulnerabilities in Trend Micro Security | 2022-08-19T11:42+09:00 | 2022-08-19T11:42+09:00 |
| jvndb-2016-000113 | Apache Struts vulnerable to input validation bypass | 2016-06-20T17:20+09:00 | 2022-08-09T14:10+09:00 |
| jvndb-2016-000112 | Apache Struts vulnerable to validation bypass in Getter method | 2016-06-20T17:19+09:00 | 2022-08-09T14:08+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-13225 | TOTOLINK A950RG堆栈缓冲区溢出漏洞 | 2026-02-11 | 2026-03-11 |
| cnvd-2026-13153 | D-Link DIR-513堆栈缓冲区溢出漏洞 | 2026-03-09 | 2026-03-11 |
| cnvd-2026-13152 | D-Link DIR-513 goform/formSetDomainFilter文件缓冲区溢出漏洞 | 2026-03-09 | 2026-03-11 |
| cnvd-2026-13257 | Chamilo index.php文件SQL注入漏洞 | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13256 | Chamilo hotpotatoes.php文件SQL注入漏洞 | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13255 | Chamilo copy_course_session_selected.php文件SQL注入漏洞 | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13254 | Chamilo check_parse_lang.php文件操作系统命令注入漏洞 | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13253 | Chamilo add_users_to_session.php文件跨站脚本漏洞 | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13252 | Apache Superset安全绕过漏洞(CNVD-2026-13252) | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13251 | Apache Superset信息泄露漏洞 | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13250 | Apache Superset安全绕过漏洞 | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13249 | Apache Superset SQL注入漏洞 | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13248 | Apache Airflow日志信息泄露漏洞 | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13247 | WordPress插件Simple Job Board信息泄露漏洞 | 2025-10-24 | 2026-03-10 |
| cnvd-2026-13246 | WordPress插件MasterStudy LMS信息泄露漏洞 | 2025-10-24 | 2026-03-10 |
| cnvd-2026-13245 | WordPress插件IDonatePro信息泄露漏洞 | 2025-10-24 | 2026-03-10 |
| cnvd-2026-13244 | WordPress插件easy-post-submission信息泄露漏洞 | 2025-10-24 | 2026-03-10 |
| cnvd-2026-13243 | WordPress插件Quickcreator信息泄露漏洞 | 2025-10-30 | 2026-03-10 |
| cnvd-2026-13242 | WordPress插件Atarim信息泄露漏洞 | 2025-10-31 | 2026-03-10 |
| cnvd-2026-13241 | WordPress插件WooCommerce信息泄露漏洞 | 2025-11-05 | 2026-03-10 |
| cnvd-2026-13240 | WordPress插件WP Discourse信息泄露漏洞 | 2025-11-05 | 2026-03-10 |
| cnvd-2026-13239 | WordPress插件Rank Math SEO信息泄露漏洞 | 2025-11-05 | 2026-03-10 |
| cnvd-2026-13237 | WordPress插件integrate-google-drive信息泄露漏洞 | 2025-11-11 | 2026-03-10 |
| cnvd-2026-13234 | 多款Advantech产品存在未明漏洞 | 2025-07-04 | 2026-03-10 |
| cnvd-2026-13151 | Google Android存在未明漏洞(CNVD-2026-13151) | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13150 | Google Android拒绝服务漏洞(CNVD-2026-13150) | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13149 | Google Android权限提升漏洞(CNVD-2026-13149) | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13148 | Google Android权限提升漏洞(CNVD-2026-13148) | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13147 | Google Android拒绝服务漏洞(CNVD-2026-13147) | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13146 | Google Android权限提升漏洞(CNVD-2026-13146) | 2026-03-09 | 2026-03-10 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-09004 | Уязвимость функции gve_alloc_pending_packet() ядра операционной системы Linux, позволяюща… | 28.07.2025 | 16.02.2026 |
| bdu:2025-09003 | Уязвимость функции mgmt_remove_adv_monitor_complete() ядра операционной системы Linux, по… | 28.07.2025 | 16.02.2026 |
| bdu:2025-09002 | Уязвимость функции ufshcd_err_handling_prepare ядра операционной системы Linux, позволяющ… | 28.07.2025 | 16.02.2026 |
| bdu:2025-08999 | Уязвимость функции idr_for_each() ядра операционной системы Linux, позволяющая нарушителю… | 28.07.2025 | 16.02.2026 |
| bdu:2025-08979 | Уязвимость функции xmlSchematronGetNode библиотеки Libxml2, позволяющая нарушителю вызват… | 24.07.2025 | 16.02.2026 |
| bdu:2025-08978 | Уязвимость функции xmlSchematronFormatReport() библиотеки libxml2, позволяющая нарушителю… | 24.07.2025 | 16.02.2026 |
| bdu:2025-08976 | Уязвимость функции mod_ssl веб-сервера Apache HTTP Server, позволяющая нарушителю получит… | 24.07.2025 | 16.02.2026 |
| bdu:2025-08975 | Уязвимость ядра веб-сервера Apache HTTP Server, позволяющая нарушителю оказать воздействи… | 24.07.2025 | 16.02.2026 |
| bdu:2025-08958 | Уязвимость функции mod_ssl веб-сервера Apache HTTP Server, позволяющая нарушителю оказать… | 24.07.2025 | 16.02.2026 |
| bdu:2025-08957 | Уязвимость модуля mod_proxy веб-сервера Apache HTTP Server, позволяющая нарушителю осущес… | 24.07.2025 | 16.02.2026 |
| bdu:2025-08955 | Уязвимость веб-сервера Apache HTTP Server, связанная с утечкой памяти, позволяющая наруш… | 24.07.2025 | 16.02.2026 |
| bdu:2025-08952 | Уязвимость сервера приложений Apache Tomcat, связанная с неконтролируемым расходом ресурс… | 24.07.2025 | 16.02.2026 |
| bdu:2025-08939 | Уязвимость микропрограммного обеспечения процессоров AMD, связанная с недостаточной защит… | 24.07.2025 | 16.02.2026 |
| bdu:2025-08927 | Уязвимость функции eir_get_service_data() ядра операционной системы Linux, позволяющая на… | 24.07.2025 | 16.02.2026 |
| bdu:2025-08925 | Уязвимость микропрограммного обеспечения процессоров AMD, связанная с недостаточной защит… | 24.07.2025 | 16.02.2026 |
| bdu:2025-08924 | Уязвимость функции regs_get_kernel_stack_nth() ядра операционной системы Linux, позволяющ… | 24.07.2025 | 16.02.2026 |
| bdu:2025-08917 | Уязвимость модуля drivers/firmware/arm_ffa/bus.c ядра операционных систем Linux, позволяю… | 24.07.2025 | 16.02.2026 |
| bdu:2025-08916 | Уязвимость модуля drivers/media/usb/cx231xx/cx231xx-417.c ядра операционных систем Linux,… | 24.07.2025 | 16.02.2026 |
| bdu:2025-08915 | Уязвимость функции tipc_aead_encrypt_done() модуля net/tipc/crypto.c ядра операционных си… | 24.07.2025 | 16.02.2026 |
| bdu:2025-08840 | Уязвимость интерфейса Vnet/IP SCADA-системы Yokogawa CENTUM VP, позволяющая нарушителю вы… | 22.07.2025 | 16.02.2026 |
| bdu:2025-08839 | Уязвимость интерфейса Vnet/IP SCADA-системы Yokogawa CENTUM VP, позволяющая нарушителю вы… | 22.07.2025 | 16.02.2026 |
| bdu:2025-08838 | Уязвимость интерфейса Vnet/IP SCADA-системы Yokogawa CENTUM VP, позволяющая нарушителю вы… | 22.07.2025 | 16.02.2026 |
| bdu:2025-08837 | Уязвимость интерфейса Vnet/IP SCADA-системы Yokogawa CENTUM VP, позволяющая нарушителю вы… | 22.07.2025 | 16.02.2026 |
| bdu:2025-08836 | Уязвимость интерфейса Vnet/IP SCADA-системы Yokogawa CENTUM VP, позволяющая нарушителю вы… | 22.07.2025 | 16.02.2026 |
| bdu:2025-08807 | Уязвимость модуля fs/f2fs/inode.c ядра операционной системы Linux, позволяющая нарушителю… | 22.07.2025 | 16.02.2026 |
| bdu:2025-08806 | Уязвимость функции dev_put() модуля net/atm/lec.c ядра операционных систем Linux, позволя… | 22.07.2025 | 16.02.2026 |
| bdu:2025-08803 | Уязвимость функции atm_dev_deregister() (net/atm/resources.c) операционных систем Linux, … | 22.07.2025 | 16.02.2026 |
| bdu:2025-08802 | Уязвимость функции acpi_ps_complete_final_op() модуля drivers/acpi/acpica/psobject.c ядра… | 22.07.2025 | 16.02.2026 |
| bdu:2025-08796 | Уязвимость функции software_node_get_reference_args() ядра операционной системы Linux, по… | 22.07.2025 | 16.02.2026 |
| bdu:2025-08793 | Уязвимость драйвера TTY ядра операционных систем Linux, позволяющая нарушителю вызвать от… | 22.07.2025 | 16.02.2026 |
| ID | Description | Updated |
|---|---|---|
| var-201806-1505 | System software utilizing Lazy FP state restore technique on systems using Intel Core-bas… | 2024-07-23T20:32:57.575000Z |
| var-201904-1410 | A use after free issue was addressed with improved memory management. This issue affected… | 2024-07-23T20:32:56.963000Z |
| var-200511-0062 | The Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe so… | 2024-07-23T20:32:56.794000Z |
| var-201506-0231 | The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 befor… | 2024-07-23T20:32:53.570000Z |
| var-201204-0111 | The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on… | 2024-07-23T20:32:19.934000Z |
| var-201912-0578 | A memory corruption issue was addressed with improved input validation. This issue is fix… | 2024-07-23T20:32:14.024000Z |
| var-201710-0928 | When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month fi… | 2024-07-23T20:32:14.616000Z |
| var-201707-1176 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari … | 2024-07-23T20:31:50.100000Z |
| var-201007-0320 | WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before… | 2024-07-23T20:31:44.088000Z |
| var-201006-1253 | WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari… | 2024-07-23T20:31:44.497000Z |
| var-200603-0276 | Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to r… | 2024-07-23T20:31:11.533000Z |
| var-201912-0477 | A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tv… | 2024-07-23T20:31:09.597000Z |
| var-202109-0758 | A vulnerability in the Protection Against Distributed Denial of Service Attacks feature o… | 2024-07-23T20:31:08.412000Z |
| var-201210-0155 | Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS … | 2024-07-23T20:31:08.483000Z |
| var-201302-0143 | Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.… | 2024-07-23T20:31:06.906000Z |
| var-202109-1330 | A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6,… | 2024-07-23T20:31:03.287000Z |
| var-201702-0878 | An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari … | 2024-07-23T20:31:03.199000Z |
| var-201102-0097 | Google Chrome before 9.0.597.94 does not properly handle anonymous blocks, which allows r… | 2024-07-23T20:31:03.455000Z |
| var-201903-0418 | A memory corruption issue was addressed with improved memory handling. This issue is fixe… | 2024-07-23T20:30:59.999000Z |
| var-200705-0681 | Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to… | 2024-07-23T20:30:59.378000Z |
| var-202212-1523 | The issue was addressed with improved memory handling. This issue is fixed in Safari 16.2… | 2024-07-23T20:30:57.804000Z |
| var-200704-0227 | Unspecified vulnerability in the CoreServices daemon in CarbonCore in Apple Mac OS X 10.4… | 2024-07-23T20:30:57.670000Z |
| var-201912-1378 | SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an… | 2024-07-23T20:30:53.083000Z |
| var-200704-0222 | URLMount in Apple Mac OS X 10.3.9 through 10.4.9 passes the username and password credent… | 2024-07-23T20:30:53.685000Z |
| var-200110-0214 | The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely cre… | 2024-07-23T20:30:53.499000Z |
| var-201007-0199 | The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 a… | 2024-07-23T20:30:52.504000Z |
| var-202112-2255 | In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has … | 2024-07-23T20:30:28.280000Z |
| var-201603-0244 | Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and… | 2024-07-23T20:30:28.935000Z |
| var-200712-0605 | Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_… | 2024-07-23T20:30:10.502000Z |
| var-201302-0234 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:29:38.152000Z |