Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-26300 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:07.406Z | |
| CVE-2026-26299 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:07.938Z | |
| CVE-2026-26302 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:06.462Z | |
| CVE-2026-26301 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:06.945Z | |
| CVE-2026-26303 |
N/A
|
Not used | N/A | N/A | 2026-02-14T03:55:05.907Z | |
| CVE-2025-55338 |
6.1 (3.1)
|
Windows BitLocker Security Feature Bypass Vulnerability |
Microsoft |
Windows 10 Version 1507 |
2025-10-14T17:00:16.093Z | 2026-02-13T23:13:12.160Z |
| CVE-2025-59213 |
8.8 (3.1)
|
Configuration Manager Elevation of Privilege Vulnerability |
Microsoft |
Microsoft Configuration Manager |
2025-10-14T17:01:35.025Z | 2026-02-13T23:13:11.649Z |
| CVE-2025-60711 |
6.3 (3.1)
|
Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2025-10-31T19:29:01.444Z | 2026-02-13T23:13:10.983Z |
| CVE-2025-59501 |
4.8 (3.1)
|
Microsoft Configuration Manager Spoofing Vulnerability |
Microsoft |
Microsoft Configuration Manager |
2025-10-31T16:45:40.699Z | 2026-02-13T23:13:10.291Z |
| CVE-2025-59503 |
10 (3.1)
|
Azure Compute Resource Provider Elevation of Privilege… |
Microsoft |
Azure Compute Resource Provider |
2025-10-23T21:18:06.047Z | 2026-02-13T23:13:09.086Z |
| CVE-2025-59500 |
7.7 (3.1)
|
Azure Notification Service Elevation of Privilege Vuln… |
Microsoft |
Azure Notification Service |
2025-10-23T21:07:30.428Z | 2026-02-13T23:13:09.724Z |
| CVE-2025-59273 |
7.3 (3.1)
|
Azure Event Grid System Elevation of Privilege Vulnerability |
Microsoft |
Azure Event Grid System |
2025-10-23T21:17:49.064Z | 2026-02-13T23:13:08.551Z |
| CVE-2025-59286 |
9.3 (3.1)
|
Copilot Information Disclosure Vulnerability |
Microsoft |
Microsoft 365 Copilot's Business Chat |
2025-10-09T21:04:15.392Z | 2026-02-13T23:13:07.989Z |
| CVE-2025-55321 |
9.3 (3.1)
|
Azure Monitor Log Analytics Spoofing Vulnerability |
Microsoft |
Azure Monitor |
2025-10-09T21:04:12.117Z | 2026-02-13T23:13:07.431Z |
| CVE-2025-59272 |
9.3 (3.1)
|
Copilot Information Disclosure Vulnerability |
Microsoft |
Microsoft 365 Copilot's Business Chat |
2025-10-09T21:04:14.254Z | 2026-02-13T23:13:06.977Z |
| CVE-2025-59271 |
8.7 (3.1)
|
Redis Enterprise Elevation of Privilege Vulnerability |
Microsoft |
Azure Cache for Redis Enterprise |
2025-10-09T21:04:13.580Z | 2026-02-13T23:13:06.345Z |
| CVE-2025-59252 |
9.3 (3.1)
|
M365 Copilot Information Disclosure Vulnerability |
Microsoft |
Microsoft 365 Word Copilot |
2025-10-09T21:04:12.988Z | 2026-02-13T23:13:05.787Z |
| CVE-2025-59247 |
8.8 (3.1)
|
Azure PlayFab Elevation of Privilege Vulnerability |
Microsoft |
Azure PlayFab |
2025-10-09T21:04:10.867Z | 2026-02-13T23:13:05.312Z |
| CVE-2025-59246 |
9.8 (3.1)
|
Azure Entra ID Elevation of Privilege Vulnerability |
Microsoft |
Microsoft Entra |
2025-10-09T21:04:09.291Z | 2026-02-13T23:13:04.759Z |
| CVE-2025-59218 |
9.6 (3.1)
|
Azure Entra ID Elevation of Privilege Vulnerability |
Microsoft |
Microsoft Entra |
2025-10-09T21:04:07.739Z | 2026-02-13T23:13:04.146Z |
| CVE-2025-59497 |
7 (3.1)
|
Microsoft Defender for Linux Denial of Service Vulnerability |
Microsoft |
Microsoft Defender for Endpoint for Linux |
2025-10-14T17:01:48.832Z | 2026-02-13T23:13:03.545Z |
| CVE-2025-59289 |
7 (3.1)
|
Windows Bluetooth Service Elevation of Privilege Vulne… |
Microsoft |
Windows 10 Version 21H2 |
2025-10-14T17:01:48.272Z | 2026-02-13T23:13:02.992Z |
| CVE-2025-59287 |
9.8 (3.1)
|
Windows Server Update Service (WSUS) Remote Code Execu… |
Microsoft |
Windows Server 2012 |
2025-10-14T17:01:47.629Z | 2026-02-13T23:13:02.410Z |
| CVE-2025-59285 |
7 (3.1)
|
Azure Monitor Agent Elevation of Privilege Vulnerability |
Microsoft |
Azure Monitor |
2025-10-14T17:01:46.994Z | 2026-02-13T23:13:01.760Z |
| CVE-2025-59278 |
7.8 (3.1)
|
Windows Authentication Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1507 |
2025-10-14T17:01:46.365Z | 2026-02-13T23:13:00.965Z |
| CVE-2025-59275 |
7.8 (3.1)
|
Windows Authentication Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1507 |
2025-10-14T17:01:45.803Z | 2026-02-13T23:13:00.405Z |
| CVE-2025-59261 |
7 (3.1)
|
Windows Graphics Component Elevation of Privilege Vuln… |
Microsoft |
Windows 11 version 22H2 |
2025-10-14T17:01:45.144Z | 2026-02-13T23:12:59.928Z |
| CVE-2025-59260 |
5.5 (3.1)
|
Microsoft Failover Cluster Virtual Driver Information … |
Microsoft |
Windows Server 2016 |
2025-10-14T17:01:44.497Z | 2026-02-13T23:12:59.368Z |
| CVE-2025-59253 |
5.5 (3.1)
|
Windows Search Service Denial of Service Vulnerability |
Microsoft |
Windows 10 Version 1507 |
2025-10-14T17:01:43.961Z | 2026-02-13T23:12:58.828Z |
| CVE-2025-59230 |
7.8 (3.1)
|
Windows Remote Access Connection Manager Elevation of … |
Microsoft |
Windows 10 Version 1507 |
2025-10-14T17:01:43.397Z | 2026-02-13T23:12:58.284Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-2000 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
DCN DCME-320 Web Management Backend bridge_cfg.php app… |
DCN |
DCME-320 |
2026-02-06T06:32:05.840Z | 2026-02-12T15:08:14.859Z |
| CVE-2026-2008 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
abhiphile fermat-mcp eqn_chart.py eqn_chart code injection |
abhiphile |
fermat-mcp |
2026-02-06T07:02:07.279Z | 2026-02-12T15:06:58.507Z |
| CVE-2026-2010 |
2.3 (4.0)
4.2 (3.1)
4.2 (3.0)
|
Sanluan PublicCMS Trade Payment TradePaymentService.ja… |
Sanluan |
PublicCMS |
2026-02-06T08:02:09.018Z | 2026-02-12T15:05:45.408Z |
| CVE-2026-2016 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
happyfish100 libfastcommon base64.c base64_decode stac… |
happyfish100 |
libfastcommon |
2026-02-06T11:02:08.107Z | 2026-02-06T13:08:43.137Z |
| CVE-2026-2017 |
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
|
IP-COM W30AP POST Request wx3auth R7WebsSecurityHandle… |
IP-COM |
W30AP |
2026-02-06T11:32:12.618Z | 2026-02-06T13:03:11.589Z |
| CVE-2026-2054 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
D-Link DIR-605L/DIR-619L Wifi Setting information disclosure |
D-Link |
DIR-605L |
2026-02-06T12:32:08.823Z | 2026-02-06T16:41:52.170Z |
| CVE-2026-2055 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
D-Link DIR-605L/DIR-619L DHCP Client Information infor… |
D-Link |
DIR-605L |
2026-02-06T13:02:08.052Z | 2026-02-06T16:46:35.413Z |
| CVE-2026-2056 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
D-Link DIR-605L/DIR-619L DHCP Connection Status wan_co… |
D-Link |
DIR-605L |
2026-02-06T14:02:09.758Z | 2026-02-06T16:48:10.195Z |
| CVE-2026-2058 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
mathurvishal CloudClassroom-PHP-Project Post Query Det… |
mathurvishal |
CloudClassroom-PHP-Project |
2026-02-06T16:32:08.195Z | 2026-02-06T16:54:07.152Z |
| CVE-2026-2074 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
O2OA HTTP POST Request check xml external entity reference |
n/a |
O2OA |
2026-02-07T04:02:06.652Z | 2026-02-10T15:24:44.981Z |
| CVE-2026-2146 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
guchengwuyue yshopmall co.yixiang.utils.FileUtil updat… |
guchengwuyue |
yshopmall |
2026-02-08T09:32:07.064Z | 2026-02-10T21:19:22.192Z |
| CVE-2024-23462 |
3.3 (3.1)
|
ZCC Mac validinstaller file integrity check missing |
Zscaler |
Client Connector |
2024-05-02T13:11:38.955Z | 2024-08-01T23:06:24.159Z |
| CVE-2026-2200 |
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
|
heyewei JFinalCMS API Endpoint save cross site scripting |
heyewei |
JFinalCMS |
2026-02-09T01:02:05.911Z | 2026-02-09T16:35:10.038Z |
| CVE-2026-1108 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
cijliu librtsp rtsp_rely_dumps buffer overflow |
cijliu |
librtsp |
2026-01-18T01:32:06.797Z | 2026-01-20T17:11:45.294Z |
| CVE-2026-1109 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
cijliu librtsp rtsp_parse_request buffer overflow |
cijliu |
librtsp |
2026-01-18T03:02:06.182Z | 2026-01-20T17:10:10.612Z |
| CVE-2025-15533 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
raysan5 raylib rtext.c GenImageFontAtlas heap-based overflow |
raysan5 |
raylib |
2026-01-18T05:02:08.672Z | 2026-01-21T18:53:31.970Z |
| CVE-2026-1452 |
N/A
|
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. | N/A | N/A | 2026-02-17T17:26:12.868Z | |
| CVE-2025-15534 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
raysan5 raylib rtext.c LoadFontData integer overflow |
raysan5 |
raylib |
2026-01-18T06:32:06.449Z | 2026-01-21T18:53:17.884Z |
| CVE-2026-24002 |
9.1 (3.1)
|
pyodide sandbox option is insecure |
gristlabs |
grist-core |
2026-01-22T02:26:28.765Z | 2026-01-22T12:54:32.232Z |
| CVE-2024-23459 |
7.1 (3.1)
|
Multiple Arbitrary Creates/Overwrites by link following |
Zscaler |
Client Connector |
2024-05-02T13:11:19.436Z | 2024-08-01T23:06:24.598Z |
| CVE-2023-28798 |
6.5 (3.1)
|
Out-of-bounds write to heap in pacparser |
Zscaler |
Client Connector |
2024-05-02T13:10:31.933Z | 2024-08-02T13:51:38.162Z |
| CVE-2026-24042 |
9.4 (3.1)
|
Appsmith public apps can execute unpublished actions (… |
appsmithorg |
appsmith |
2026-01-22T03:52:54.463Z | 2026-01-22T12:28:28.202Z |
| CVE-2026-24055 |
6.3 (4.0)
|
Langfuse Slack OAuth Installation Endpoint Lacks Authe… |
langfuse |
langfuse |
2026-01-22T03:07:03.784Z | 2026-01-22T12:40:42.009Z |
| CVE-2025-36058 |
5.5 (3.1)
|
Multiple security vulnerabilities are addressed in IBM… |
IBM |
Business Automation Workflow containers |
2026-01-20T15:09:07.082Z | 2026-01-20T15:53:20.326Z |
| CVE-2024-23461 |
4.2 (3.1)
|
ZCC macOS Upgrade ZIP Bomb DoS |
Zscaler |
Client Connector |
2024-05-02T13:11:29.433Z | 2024-08-01T23:06:24.232Z |
| CVE-2025-36059 |
4.7 (3.1)
|
Multiple security vulnerabilities are addressed in IBM… |
IBM |
Business Automation Workflow containers |
2026-01-20T15:07:46.448Z | 2026-01-20T15:54:41.357Z |
| CVE-2025-65924 |
4.1 (3.1)
|
ERPNext thru 15.88.1 does not sanitize or remove … |
n/a |
n/a |
2026-02-03T00:00:00.000Z | 2026-02-17T16:42:43.134Z |
| CVE-2025-13465 |
6.9 (4.0)
|
Prototype Pollution Vulnerability in Lodash _.unset an… |
Lodash |
Lodash |
2026-01-21T19:05:28.846Z | 2026-01-21T19:43:38.268Z |
| CVE-2026-23526 |
8.5 (4.0)
|
CVAT vulnerable to privilege escalation of users with … |
cvat-ai |
cvat |
2026-01-21T21:40:25.214Z | 2026-01-23T04:55:22.148Z |
| CVE-2026-23960 |
7.3 (4.0)
|
Argo Workflows affected by stored XSS in the artifact … |
argoproj |
argo-workflows |
2026-01-21T22:02:50.491Z | 2026-01-22T16:49:43.075Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2024-23461 | An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS … | 2024-05-02T13:23:06.567 | 2026-02-17T17:29:15.907 |
| fkie_cve-2025-36059 | IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 2… | 2026-01-20T16:16:02.920 | 2026-02-17T17:24:57.763 |
| fkie_cve-2025-65924 | ERPNext thru 15.88.1 does not sanitize or remove certain HTML tags specifically `<a>` hyperlinks in… | 2026-02-03T18:16:15.810 | 2026-02-17T17:21:04.173 |
| fkie_cve-2025-13465 | Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.om… | 2026-01-21T20:16:05.250 | 2026-02-17T17:10:07.520 |
| fkie_cve-2026-23526 | CVAT is an open source interactive video and image annotation tool for computer vision. In versions… | 2026-01-21T22:15:50.433 | 2026-02-17T17:08:52.683 |
| fkie_cve-2026-23960 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs o… | 2026-01-21T22:15:50.627 | 2026-02-17T16:56:21.320 |
| fkie_cve-2026-23630 | Docmost is open-source collaborative wiki and documentation software. In versions 0.3.0 through 0.2… | 2026-01-21T23:15:52.187 | 2026-02-17T16:50:10.463 |
| fkie_cve-2026-23951 | SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the va… | 2026-01-22T01:15:52.633 | 2026-02-17T16:48:48.433 |
| fkie_cve-2026-23946 | Tendenci is an open source content management system built for non-profits, associations and cause-… | 2026-01-22T01:15:52.467 | 2026-02-17T16:44:09.617 |
| fkie_cve-2026-23958 | Dataease is an open source data visualization analysis tool. Prior to version 2.10.19, DataEase use… | 2026-01-22T02:15:52.627 | 2026-02-17T16:28:47.743 |
| fkie_cve-2026-20682 | A logic issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPa… | 2026-02-11T23:16:10.557 | 2026-02-17T16:20:28.700 |
| fkie_cve-2026-20677 | A race condition was addressed with improved handling of symbolic links. This issue is fixed in mac… | 2026-02-11T23:16:10.107 | 2026-02-17T16:20:28.307 |
| fkie_cve-2026-20629 | A privacy issue was addressed with improved handling of temporary files. This issue is fixed in mac… | 2026-02-11T23:16:06.417 | 2026-02-17T16:20:27.980 |
| fkie_cve-2026-20601 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe … | 2026-02-11T23:16:03.907 | 2026-02-17T16:20:27.817 |
| fkie_cve-2026-23959 | CoreShop is a Pimcore enhanced eCommerce solution. An error-based SQL Injection vulnerability was i… | 2026-01-22T03:15:46.233 | 2026-02-17T16:13:17.520 |
| fkie_cve-2026-23687 | SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with norma… | 2026-02-10T04:16:03.180 | 2026-02-17T16:12:35.840 |
| fkie_cve-2026-2258 | A flaw has been found in aardappel lobster up to 2025.4. Affected by this vulnerability is the func… | 2026-02-10T00:16:06.523 | 2026-02-17T16:12:27.633 |
| fkie_cve-2026-0484 | Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an aut… | 2026-02-10T04:16:00.947 | 2026-02-17T16:12:08.050 |
| fkie_cve-2026-0485 | SAP BusinessObjects BI Platform allows an unauthenticated attacker to send specially crafted reques… | 2026-02-10T04:16:01.387 | 2026-02-17T16:11:42.843 |
| fkie_cve-2026-0486 | In ABAP based SAP systems a remote enabled function module does not perform necessary authorization… | 2026-02-10T04:16:01.550 | 2026-02-17T16:11:29.140 |
| fkie_cve-2026-23991 | go-tuf is a Go implementation of The Update Framework (TUF). Starting in version 2.0.0 and prior to… | 2026-01-22T03:15:47.317 | 2026-02-17T16:10:55.810 |
| fkie_cve-2026-25991 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists… | 2026-02-13T19:17:28.953 | 2026-02-17T16:10:27.940 |
| fkie_cve-2026-0488 | An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a g… | 2026-02-10T04:16:01.710 | 2026-02-17T16:10:03.600 |
| fkie_cve-2026-25964 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists… | 2026-02-13T19:17:28.810 | 2026-02-17T16:07:02.177 |
| fkie_cve-2026-0490 | SAP BusinessObjects BI Platform allows an unauthenticated attacker to craft a specific network requ… | 2026-02-10T04:16:01.873 | 2026-02-17T16:06:59.097 |
| fkie_cve-2026-0505 | The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters tha… | 2026-02-10T04:16:02.030 | 2026-02-17T16:06:27.080 |
| fkie_cve-2026-0508 | The SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker with high p… | 2026-02-10T04:16:02.187 | 2026-02-17T16:06:15.913 |
| fkie_cve-2026-0509 | SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged use… | 2026-02-10T04:16:02.357 | 2026-02-17T16:04:59.500 |
| fkie_cve-2026-23681 | Due to missing authorization check in a function module in SAP Support Tools Plug-In, an authentica… | 2026-02-10T04:16:02.520 | 2026-02-17T16:04:47.287 |
| fkie_cve-2026-23684 | A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker a… | 2026-02-10T04:16:02.683 | 2026-02-17T16:04:38.427 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-53wq-r63f-m33q |
9.1 (3.1)
|
The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memo… | 2022-05-24T19:08:56Z | 2026-02-13T21:31:31Z |
| ghsa-cgmm-x5ww-q5cr |
5.3 (4.0)
|
beautiful-mermaid contains an SVG attribute injection issue that can lead to cross-site scripting (XSS) | 2026-02-13T18:31:25Z | 2026-02-13T21:04:19Z |
| ghsa-w5cr-2qhr-jqc5 |
6.2 (4.0)
|
Cloudflare Agents has a Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground site | 2026-02-13T21:04:00Z | 2026-02-13T21:04:00Z |
| ghsa-p5vf-5754-x7p3 |
|
`polymarket-client-sdks` was removed from crates.io for malicious code | 2026-02-13T21:02:38Z | 2026-02-13T21:02:38Z |
| ghsa-9pj7-jh2r-87g8 |
4.3 (3.1)
|
Mattermost doesn't validate user permissions when creating Jira issues from Mattermost posts | 2026-02-13T12:31:21Z | 2026-02-13T20:56:15Z |
| ghsa-rp46-r563-jrc7 |
6.9 (4.0)
|
Apache Avro Java SDK is Vulnerable to Code Injection | 2026-02-13T12:31:21Z | 2026-02-13T20:56:03Z |
| ghsa-2xf7-hmf6-p64j |
3.1 (3.1)
|
Mattermost doesn't properly validate channel membership at the time of data retrieval | 2026-02-13T12:31:21Z | 2026-02-13T20:55:54Z |
| ghsa-c7ph-f7jm-xv4w |
6.3 (4.0)
|
rPGP's integrity protection of encrypted data was not always checked | 2026-02-13T20:55:20Z | 2026-02-13T20:55:20Z |
| ghsa-8h58-w33p-wq3g |
8.7 (4.0)
|
rPGP affected by crash in message handling for deeply nested messages | 2026-02-13T20:54:27Z | 2026-02-13T20:54:27Z |
| ghsa-7587-4wv6-m68m |
8.7 (4.0)
|
rPGP vulnerable to parser crash on crafted RSA secret key packets through CVE-2026-21895 | 2026-02-13T20:54:19Z | 2026-02-13T20:54:19Z |
| ghsa-8wc6-vgrq-x6cf |
5.5 (3.1)
|
Child processes spawned by Renovate incorrectly have full access to environment variables | 2026-02-13T20:53:58Z | 2026-02-13T20:53:58Z |
| ghsa-qhp6-6p8p-2rqh |
8.1 (3.1)
|
Wildfly Elytron integration susceptible to brute force attacks via CLI | 2026-02-13T20:52:26Z | 2026-02-13T20:52:26Z |
| ghsa-3jxr-23ph-c89g |
8.1 (3.1)
|
Duplicate Advisory: Wildfly Elytron integration susceptible to brute force attacks via CLI | 2025-03-04T18:33:43Z | 2026-02-13T20:52:09Z |
| ghsa-hcvw-475w-8g7p |
8.1 (3.1)
|
Keycloak affected by improper invitation token validation | 2026-02-09T21:31:03Z | 2026-02-13T20:32:01Z |
| ghsa-wv3h-x6c4-r867 |
6.5 (3.1)
|
Keycloak services allows the issuance of access and refresh tokens for disabled users | 2026-01-21T09:31:30Z | 2026-02-13T20:24:37Z |
| ghsa-g433-pq76-6cmf |
|
Bug fixes in hpke-rs, hpke-rs-rust-crypto | 2026-02-13T20:05:10Z | 2026-02-13T20:05:10Z |
| ghsa-cvhv-6xm6-c3v4 |
6.2 (4.0)
|
Cloudflare Agents is Vulnerable to Reflected Cross-Site Scripting in the AI Playground's OAuth call… | 2026-02-13T03:31:23Z | 2026-02-13T20:04:56Z |
| ghsa-38c4-r59v-3vqw |
5.3 (3.1)
5.5 (4.0)
|
markdown-it is has a Regular Expression Denial of Service (ReDoS) | 2026-02-12T06:30:13Z | 2026-02-13T20:04:39Z |
| ghsa-6426-9fv3-65x8 |
5.4 (3.1)
|
Django has an SQL Injection issue | 2026-02-03T15:30:24Z | 2026-02-13T19:55:25Z |
| ghsa-qvhc-9v3j-5rfw |
8.7 (4.0)
|
Microsoft Security Advisory CVE-2026-21218 | .NET Security Feature Bypass Vulnerability | 2026-02-10T21:32:18Z | 2026-02-13T19:43:22Z |
| ghsa-w7w9-2vjv-7r67 |
6.1 (3.1)
5.4 (4.0)
|
A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Wi… | 2026-02-13T18:31:25Z | 2026-02-13T18:31:25Z |
| ghsa-qqhc-37jx-7gh5 |
6.5 (3.1)
|
A cross-site scripting (XSS) vulnerability in the item management and sales invoice function of Ope… | 2026-02-13T18:31:25Z | 2026-02-13T18:31:25Z |
| ghsa-7v9f-f4qv-fcxh |
5.8 (4.0)
|
Local privilege escalation in Genetec Sipelia Plugin. An authenticated low-privileged Windows user … | 2026-02-13T18:31:25Z | 2026-02-13T18:31:25Z |
| ghsa-5wr5-vxhh-x7gm |
10.0 (4.0)
|
Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Servi… | 2026-02-13T18:31:25Z | 2026-02-13T18:31:25Z |
| ghsa-3669-8ww5-g35f |
6.5 (3.1)
|
A cross-site scripting (XSS) vulnerability in the Generate Item Barcode function of OpenSourcePOS v… | 2026-02-13T18:31:25Z | 2026-02-13T18:31:25Z |
| ghsa-xrqq-m9vv-pq36 |
5.5 (3.1)
|
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15… | 2026-02-12T00:31:04Z | 2026-02-13T18:31:24Z |
| ghsa-vwfj-gc28-j2fg |
6.5 (3.1)
|
A cross-site scripting (XSS) vulnerability in the Customers function of OpenSourcePOS v3.4.1 allows… | 2026-02-13T18:31:24Z | 2026-02-13T18:31:24Z |
| ghsa-p5cr-gq3j-93c4 |
6.1 (3.1)
|
lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting (XSS) exists in the /setting/ page where… | 2026-02-13T00:32:51Z | 2026-02-13T18:31:24Z |
| ghsa-p47v-wp9g-8362 |
4.4 (3.1)
|
The issue was addressed with improved memory handling. This issue is fixed in watchOS 26.3, tvOS 26… | 2026-02-12T00:31:04Z | 2026-02-13T18:31:24Z |
| ghsa-jhq4-533p-8p4c |
5.5 (3.1)
|
This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26.3… | 2026-02-12T00:31:03Z | 2026-02-13T18:31:24Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-153 |
6.1 (3.1)
|
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_u… | horizon | 2023-08-22T19:16:00+00:00 | 2023-08-30T18:28:45.068261+00:00 |
| pysec-2023-92 |
|
Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt. | langchain | 2023-06-20T15:15:00Z | 2023-08-29T18:59:00.000000Z |
| pysec-2023-145 |
9.8 (3.1)
|
An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via th… | langchain | 2023-08-15T17:15:00Z | 2023-08-29T18:47:00.000000Z |
| pysec-2023-152 |
8.1 (3.1)
|
Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be… | apache-airflow | 2023-08-23T16:15:00+00:00 | 2023-08-29T18:28:28.180958+00:00 |
| pysec-2023-109 |
|
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the… | langchain | 2023-07-06T14:15:00Z | 2023-08-29T16:42:00.000000Z |
| pysec-2023-98 |
|
An issue in langchain v.0.0.199 allows an attacker to execute arbitrary code via the PALC… | langchain | 2023-07-03T21:15:00Z | 2023-08-29T16:40:00.000000Z |
| pysec-2023-151 |
9.8 (3.1)
|
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via th… | langchain | 2023-08-22T19:16:00Z | 2023-08-29T15:11:37.047967Z |
| pysec-2023-91 |
|
Langchain 0.0.171 is vulnerable to Arbitrary Code Execution. | langchain | 2023-06-14T15:15:00Z | 2023-08-28T16:50:25.676144Z |
| pysec-2023-110 |
|
SQL injection vulnerability in langchain v.0.0.64 allows a remote attacker to obtain sens… | langchain | 2023-07-06T14:15:00Z | 2023-08-28T16:50:24.862628Z |
| pysec-2023-150 |
7.8 (3.1)
|
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 a… | exiv2 | 2023-08-22T19:15:00+00:00 | 2023-08-25T18:28:13.546911+00:00 |
| pysec-2023-149 |
|
The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabl… | json2xml | 2023-08-22T19:16:00+00:00 | 2023-08-22T20:23:14.541580+00:00 |
| pysec-2023-148 |
9.8 (3.1)
|
An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary… | llama-index | 2023-08-15T17:15:00+00:00 | 2023-08-22T18:27:29.213194+00:00 |
| pysec-2023-147 |
9.8 (3.1)
|
An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execu… | langchain | 2023-08-15T17:15:00+00:00 | 2023-08-22T18:27:28.580705+00:00 |
| pysec-2023-138 |
9.8 (3.1)
|
An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary co… | langchain | 2023-08-05T03:15:00Z | 2023-08-22T15:51:39.650271Z |
| pysec-2023-146 |
9.8 (3.1)
|
An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to exe… | langchain | 2023-08-15T17:15:00+00:00 | 2023-08-22T14:25:42.963301+00:00 |
| pysec-2023-112 |
|
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have c… | cryptography | 2023-07-14T20:15:00+00:00 | 2023-08-21T15:28:13.372385+00:00 |
| pysec-2023-102 |
|
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8… | scipy | 2023-07-05T17:15:00Z | 2023-08-17T13:32:44.929651Z |
| pysec-2023-144 |
8.8 (3.1)
|
Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.… | wger | 2023-08-08T16:15:00+00:00 | 2023-08-17T03:22:34.520767+00:00 |
| pysec-2023-143 |
5.4 (3.1)
|
Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows … | wger | 2023-08-08T16:15:00+00:00 | 2023-08-17T03:22:34.437974+00:00 |
| pysec-2023-142 |
5.9 (3.1)
|
Vyer is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In ver… | vyper | 2023-08-07T19:15:00+00:00 | 2023-08-17T03:22:33.953997+00:00 |
| pysec-2022-43058 |
7.5 (3.1)
|
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i… | pywasm3 | 2022-09-20T18:15:00+00:00 | 2023-08-17T03:22:33.607469+00:00 |
| pysec-2022-43057 |
5.5 (3.1)
|
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Mem… | pywasm3 | 2022-07-27T14:15:00+00:00 | 2023-08-17T03:22:33.522615+00:00 |
| pysec-2023-140 |
6.5 (3.1)
|
MindsDB's AI Virtual Database allows developers to connect any AI/ML model to any datasou… | mindsdb | 2023-08-04T18:15:00+00:00 | 2023-08-17T03:22:32.744229+00:00 |
| pysec-2023-139 |
5.3 (3.1)
|
Sydent is an identity server for the Matrix communications protocol. Prior to version 2.5… | matrix-sydent | 2023-08-04T16:15:00+00:00 | 2023-08-17T03:22:32.583512+00:00 |
| pysec-2023-137 |
|
GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from… | gitpython | 2023-08-11T07:15:00+00:00 | 2023-08-17T03:22:31.332731+00:00 |
| pysec-2022-43056 |
9.8 (3.1)
|
The keep for python, as distributed on PyPI, included a code-execution backdoor inserted … | keep | 2022-06-08T18:15:00+00:00 | 2023-08-17T03:22:31.636090+00:00 |
| pysec-2022-43055 |
7.5 (3.1)
|
Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by r… | hyperledger | 2022-11-12T20:15:00+00:00 | 2023-08-17T03:22:31.453589+00:00 |
| pysec-2022-43054 |
7.5 (3.1)
|
An access control issue in the component /ManageRoute/postRoute of FreeTAKServer v1.9.8 a… | freetakserver | 2022-03-11T00:15:00+00:00 | 2023-08-17T03:22:31.240214+00:00 |
| pysec-2023-136 |
|
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Dril… | apache-airflow | 2023-08-11T08:15:00+00:00 | 2023-08-17T03:22:30.530556+00:00 |
| pysec-2023-135 |
|
Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. These ar… | certifi | 2023-08-03T19:36:12+00:00 | 2023-08-07T05:41:30.977938+00:00 |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33283 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.630959Z |
| gsd-2024-33282 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.611885Z |
| gsd-2024-33281 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.648581Z |
| gsd-2024-33280 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.609399Z |
| gsd-2024-33279 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.616853Z |
| gsd-2024-33278 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.733959Z |
| gsd-2024-33277 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.745937Z |
| gsd-2024-33276 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.761165Z |
| gsd-2024-33275 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.756484Z |
| gsd-2024-33274 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.762400Z |
| gsd-2024-33273 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.759747Z |
| gsd-2024-33272 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.617526Z |
| gsd-2024-33271 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.694529Z |
| gsd-2024-33270 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.643212Z |
| gsd-2024-33269 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.732290Z |
| gsd-2024-33268 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.718577Z |
| gsd-2024-33267 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.738163Z |
| gsd-2024-33266 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.741026Z |
| gsd-2024-33265 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.633689Z |
| gsd-2024-33264 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.735849Z |
| gsd-2024-33263 | QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(… | 2024-04-24T05:02:09.681513Z |
| gsd-2024-33262 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.725480Z |
| gsd-2024-33261 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.722494Z |
| gsd-2024-33260 | Jerryscript commit cefd391 was discovered to contain a segmentation violation via the com… | 2024-04-24T05:02:09.630501Z |
| gsd-2024-33259 | Jerryscript commit cefd391 was discovered to contain a segmentation violation via the com… | 2024-04-24T05:02:09.609662Z |
| gsd-2024-33258 | Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the com… | 2024-04-24T05:02:09.753118Z |
| gsd-2024-33257 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.704832Z |
| gsd-2024-33256 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.691816Z |
| gsd-2024-33255 | Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMA_STRING… | 2024-04-24T05:02:09.756677Z |
| gsd-2024-33254 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.738567Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2026-584 | Malicious code in chai-as-extended (npm) | 2026-01-28T15:06:22Z | 2026-02-02T05:56:26Z |
| MAL-2026-565 | Malicious code in converse-rn-lib (npm) | 2026-01-28T07:50:39Z | 2026-02-02T05:56:26Z |
| MAL-2026-564 | Malicious code in chai-as-hashed (npm) | 2026-01-28T07:53:44Z | 2026-02-02T05:56:26Z |
| MAL-2026-555 | Malicious code in acuitymobileapp (npm) | 2026-01-28T07:13:15Z | 2026-02-02T05:56:26Z |
| MAL-2026-550 | Malicious code in cdnhost (npm) | 2026-01-28T03:21:37Z | 2026-02-02T05:56:26Z |
| MAL-2026-549 | Malicious code in blockchain-helper-lib (npm) | 2026-01-28T03:20:46Z | 2026-02-02T05:56:26Z |
| MAL-2026-508 | Malicious code in cartos-dds-ui (npm) | 2026-01-26T16:41:17Z | 2026-02-02T05:56:26Z |
| mal-2026-578 | Malicious code in @pukpuk1/somsodamsd (npm) | 2026-01-28T13:59:24Z | 2026-02-02T05:56:25Z |
| mal-2026-563 | Malicious code in @nayzak51/primebeem-db (npm) | 2026-01-28T07:27:26Z | 2026-02-02T05:56:25Z |
| mal-2026-528 | Malicious code in @shije/new-qs (npm) | 2026-01-27T07:55:42Z | 2026-02-02T05:56:25Z |
| mal-2026-527 | Malicious code in @santandergroup-uk/edgehome-components (npm) | 2026-01-27T08:16:51Z | 2026-02-02T05:56:25Z |
| mal-2026-526 | Malicious code in @row-components/pricing-embedded-sui (npm) | 2026-01-27T08:01:02Z | 2026-02-02T05:56:25Z |
| mal-2026-519 | Malicious code in @afg-ikea/ikea-modals (npm) | 2026-01-27T02:11:41Z | 2026-02-02T05:56:25Z |
| mal-2026-518 | Malicious code in @afg-ikea/ikea-kiosk-related-components (npm) | 2026-01-27T02:11:40Z | 2026-02-02T05:56:25Z |
| mal-2026-517 | Malicious code in @afg-ikea/ikea-family-registration-module (npm) | 2026-01-27T02:11:40Z | 2026-02-02T05:56:25Z |
| mal-2026-509 | Malicious code in @sommos/create-program-template-form-data (npm) | 2026-01-26T18:20:46Z | 2026-02-02T05:56:25Z |
| MAL-2026-578 | Malicious code in @pukpuk1/somsodamsd (npm) | 2026-01-28T13:59:24Z | 2026-02-02T05:56:25Z |
| MAL-2026-563 | Malicious code in @nayzak51/primebeem-db (npm) | 2026-01-28T07:27:26Z | 2026-02-02T05:56:25Z |
| MAL-2026-528 | Malicious code in @shije/new-qs (npm) | 2026-01-27T07:55:42Z | 2026-02-02T05:56:25Z |
| MAL-2026-527 | Malicious code in @santandergroup-uk/edgehome-components (npm) | 2026-01-27T08:16:51Z | 2026-02-02T05:56:25Z |
| MAL-2026-526 | Malicious code in @row-components/pricing-embedded-sui (npm) | 2026-01-27T08:01:02Z | 2026-02-02T05:56:25Z |
| MAL-2026-519 | Malicious code in @afg-ikea/ikea-modals (npm) | 2026-01-27T02:11:41Z | 2026-02-02T05:56:25Z |
| MAL-2026-518 | Malicious code in @afg-ikea/ikea-kiosk-related-components (npm) | 2026-01-27T02:11:40Z | 2026-02-02T05:56:25Z |
| MAL-2026-517 | Malicious code in @afg-ikea/ikea-family-registration-module (npm) | 2026-01-27T02:11:40Z | 2026-02-02T05:56:25Z |
| MAL-2026-509 | Malicious code in @sommos/create-program-template-form-data (npm) | 2026-01-26T18:20:46Z | 2026-02-02T05:56:25Z |
| mal-2026-635 | Malicious code in finnairshop (npm) | 2026-02-02T05:19:43Z | 2026-02-02T05:19:43Z |
| mal-2026-633 | Malicious code in cowsay-fancy (npm) | 2026-02-02T05:19:43Z | 2026-02-02T05:19:43Z |
| mal-2026-632 | Malicious code in cowsay-deluxe (npm) | 2026-02-02T05:19:43Z | 2026-02-02T05:19:43Z |
| mal-2026-631 | Malicious code in cowsay-caps (npm) | 2026-02-02T05:19:43Z | 2026-02-02T05:19:43Z |
| mal-2026-630 | Malicious code in cowsay-allcaps (npm) | 2026-02-02T05:19:43Z | 2026-02-02T05:19:43Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-0538 | Django: Schwachstelle ermöglicht Denial of Service | 2024-03-03T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2024-0511 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe | 2024-02-28T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2024-0306 | Django: Schwachstelle ermöglicht Denial of Service | 2024-02-06T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2023-2259 | Django: Schwachstelle ermöglicht Denial of Service | 2023-09-04T22:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2023-0847 | Nextcloud: Mehrere Schwachstellen ermöglichen Manipulation von Dateien | 2023-04-04T22:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2023-0352 | Django: Schwachstelle ermöglicht Denial of Service | 2023-02-13T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2023-0345 | Red Hat Update Infrastructure (RHUI): Mehrere Schwachstellen | 2023-02-13T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2023-0262 | Django: Schwachstelle ermöglicht Denial of Service | 2023-02-01T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2022-2183 | Nextcloud: Mehrere Schwachstellen | 2022-11-27T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2022-2008 | GNU libc: mehrere Schwachstellen | 2017-02-14T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2022-1220 | GNU libc: Mehrere Schwachstellen ermöglichen Codeausführung und Denial of Service | 2022-01-16T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2022-1206 | GNU libc: Mehrere Schwachstellen | 2022-01-24T23:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2022-0847 | Red Hat Enterprise Linux (Django): Schwachstelle ermöglicht Manipulation von Dateien | 2022-07-27T22:00:00.000+00:00 | 2025-09-17T22:00:00.000+00:00 |
| wid-sec-w-2025-2046 | cPanel cPanel/WHM: Schwachstelle ermöglicht Manipulation von Dateien | 2025-09-14T22:00:00.000+00:00 | 2025-09-15T22:00:00.000+00:00 |
| wid-sec-w-2024-3291 | Apple macOS: Mehrere Schwachstellen | 2024-10-28T23:00:00.000+00:00 | 2025-09-15T22:00:00.000+00:00 |
| wid-sec-w-2025-2044 | Microsoft Visual Studio Code: Schwachstelle ermöglicht Codeausführung | 2025-09-14T22:00:00.000+00:00 | 2025-09-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1861 | Liferay DXP und Portal: Mehrere Schwachstellen | 2025-08-18T22:00:00.000+00:00 | 2025-09-14T22:00:00.000+00:00 |
| wid-sec-w-2025-2015 | Google Chrome und Microsoft Edge: Mehrere Schwachstellen | 2025-09-09T22:00:00.000+00:00 | 2025-09-11T22:00:00.000+00:00 |
| wid-sec-w-2025-2004 | Microsoft Azure und Microsoft Entra: Mehrere Schwachstellen | 2025-09-09T22:00:00.000+00:00 | 2025-09-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1835 | Proxmox Virtual Environment und Backup Server: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2025-08-13T22:00:00.000+00:00 | 2025-09-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1986 | Apache Jackrabbit: Schwachstelle ermöglicht Codeausführung | 2025-09-07T22:00:00.000+00:00 | 2025-09-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1944 | Android Patchday September 2025: Multiple Vulnerabilities | 2025-09-02T22:00:00.000+00:00 | 2025-09-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1901 | Red Hat Enterprise Linux (aide): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-08-24T22:00:00.000+00:00 | 2025-09-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1703 | WebKitGTK: Mehrere Schwachstellen | 2025-08-03T22:00:00.000+00:00 | 2025-09-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1516 | Golang Go: Schwachstelle ermöglicht Codeausführung | 2025-07-08T22:00:00.000+00:00 | 2025-09-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1941 | TYPO3 Extension (Backup Plus): Schwachstelle ermöglicht Codeausführung | 2025-09-01T22:00:00.000+00:00 | 2025-09-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1937 | Samsung Exynos: Schwachstelle ermöglicht Denial of Service | 2025-08-31T22:00:00.000+00:00 | 2025-09-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1922 | Rancher: Schwachstelle ermöglicht Denial of Service | 2025-08-28T22:00:00.000+00:00 | 2025-09-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1913 | Google Chrome und Microsoft Edge: Schwachstelle ermöglicht Codeausführung | 2025-08-26T22:00:00.000+00:00 | 2025-09-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1815 | Foxit PDF Editor und Reader: Mehrere Schwachstellen | 2025-08-12T22:00:00.000+00:00 | 2025-09-02T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-997732 | SSA-997732: Modfem File Parsing Vulnerability in Simcenter Femap before V2021.2 | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-987403 | SSA-987403: Multiple Vulnerabilities in Teamcenter | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-944498 | SSA-944498: Buffer Overflow Vulnerability in Web Server of APOGEE and TALON Automation Devices | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-938030 | SSA-938030: DGN and PAR File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.2.0.2 | 2021-08-10T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-936080 | SSA-936080: Multiple Vulnerabilities in Third-Party Component libcurl | 2021-03-09T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-865327 | SSA-865327: Incorrect Authorization Vulnerability in Industrial Products | 2021-08-10T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-835377 | SSA-835377: Missing Authentication Vulnerability in SINEMA Server | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-830194 | SSA-830194: Missing Authentication Vulnerability in S7-1200 Devices | 2021-08-10T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-756744 | SSA-756744: OS Command Injection Vulnerability in SINEC NMS | 2021-08-10T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-692317 | SSA-692317: Authorization Bypass Vulnerability in Industrial Edge | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-535380 | SSA-535380: Command Injection Vulnerability in Siveillance OIS Affecting Several Building Management Systems | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-453715 | SSA-453715: Deserialization Vulnerability in CCOM Communication Component of Desigo CC Family | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-434536 | SSA-434536: Memory Protection Bypass Vulnerability in SINUMERIK ONE and SINUMERIK MC | 2021-07-13T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-434535 | SSA-434535: Memory Protection Bypass Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives | 2021-07-13T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-434534 | SSA-434534: Memory Protection Bypass Vulnerability in SIMATIC S7-1200 and S7-1500 CPU Families | 2021-05-28T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-428051 | SSA-428051: Privilege Escalation Vulnerability in TIA Administrator | 2021-02-09T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-413407 | SSA-413407: Path Traversal Vulnerability in Teamcenter Active Workspace | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-334944 | SSA-334944: Vulnerability in SINEMA Remote Connect Server | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-330339 | SSA-330339: Web Vulnerabilities in SINEC NMS | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-288459 | SSA-288459: Heap Overflow Vulnerability in RFID terminals | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-208530 | SSA-208530: File parsing vulnerabilities in IFC adapter in NX | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-187092 | SSA-187092: Several Buffer-Overflow Vulnerabilities in Web Server of SCALANCE X-200 | 2021-04-13T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-139628 | SSA-139628: Vulnerabilities in Web Server for Scalance X Products | 2021-01-12T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-109294 | SSA-109294: Scene File Parsing Vulnerability in Simcenter STAR-CCM+ Viewer | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-816035 | SSA-816035: Code Execution Vulnerability in SINEMA Remote Connect Client | 2021-08-19T00:00:00Z | 2021-08-19T00:00:00Z |
| ssa-818688 | SSA-818688: Multiple Vulnerabilities in Solid Edge before SE2021MP7 | 2021-08-10T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-752103 | SSA-752103: Telnet Authentication Vulnerability in SINAMICS Medium Voltage Products | 2021-05-11T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-553445 | SSA-553445: DNS "Name:Wreck" Vulnerabilities in Multiple Siemens Energy AGT and SGT solutions | 2021-08-10T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-365397 | SSA-365397: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.2.0.1 | 2021-08-10T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-286838 | SSA-286838: Multiple Vulnerabilities in SINAMICS Medium Voltage Products | 2021-05-11T00:00:00Z | 2021-08-10T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:3259 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2024-05-22T11:47:21+00:00 | 2026-02-18T19:36:56+00:00 |
| rhsa-2024:2988 | Red Hat Security Advisory: container-tools:rhel8 security update | 2024-05-22T09:48:55+00:00 | 2026-02-18T19:36:55+00:00 |
| rhsa-2024:2944 | Red Hat Security Advisory: AMQ Broker 7.12.0.OPR.1.GA Container Images release and security update | 2024-05-21T14:04:45+00:00 | 2026-02-18T19:36:55+00:00 |
| rhsa-2024:2892 | Red Hat Security Advisory: go-toolset-1.19-golang security update | 2024-05-20T10:31:07+00:00 | 2026-02-18T19:36:55+00:00 |
| rhsa-2024:2941 | Red Hat Security Advisory: RHACS 4.4 enhancement and security update | 2024-05-21T09:58:45+00:00 | 2026-02-18T19:36:54+00:00 |
| rhsa-2024:2936 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2024-05-21T10:06:56+00:00 | 2026-02-18T19:36:54+00:00 |
| rhsa-2024:2935 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2024-05-21T10:06:56+00:00 | 2026-02-18T19:36:54+00:00 |
| rhsa-2024:2933 | Red Hat Security Advisory: logging for Red Hat OpenShift security update | 2024-05-23T06:20:48+00:00 | 2026-02-18T19:36:53+00:00 |
| rhsa-2024:2932 | Red Hat Security Advisory: logging for Red Hat OpenShift security update | 2024-05-23T07:08:54+00:00 | 2026-02-18T19:36:53+00:00 |
| rhsa-2024:2929 | Red Hat Security Advisory: logging for Red Hat OpenShift security update | 2024-05-23T06:49:37+00:00 | 2026-02-18T19:36:52+00:00 |
| rhsa-2024:2901 | Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.12.1-394 Security Update | 2024-05-23T14:09:31+00:00 | 2026-02-18T19:36:51+00:00 |
| rhsa-2024:2875 | Red Hat Security Advisory: OpenShift Container Platform 4.13.42 bug fix and security update | 2024-05-23T18:10:59+00:00 | 2026-02-18T19:36:50+00:00 |
| rhsa-2024:2729 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (etcd) security update | 2024-05-22T20:41:23+00:00 | 2026-02-18T19:36:50+00:00 |
| rhsa-2024:2865 | Red Hat Security Advisory: OpenShift Container Platform 4.15.14 bug fix and security update | 2024-05-21T09:37:43+00:00 | 2026-02-18T19:36:49+00:00 |
| rhsa-2024:2782 | Red Hat Security Advisory: OpenShift Container Platform 4.12.57 security update | 2024-05-16T18:09:19+00:00 | 2026-02-18T19:36:49+00:00 |
| rhsa-2024:2773 | Red Hat Security Advisory: OpenShift Container Platform 4.15.13 bug fix and security update | 2024-05-15T18:40:53+00:00 | 2026-02-18T19:36:49+00:00 |
| rhsa-2024:2767 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (collectd-sensubility) security update | 2024-05-22T20:14:09+00:00 | 2026-02-18T19:36:49+00:00 |
| rhsa-2024:2730 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (collectd-sensubility) security update | 2024-05-22T20:41:27+00:00 | 2026-02-18T19:36:48+00:00 |
| rhsa-2024:2728 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 director Operator container images security update | 2024-05-29T19:50:12+00:00 | 2026-02-18T19:36:47+00:00 |
| rhsa-2024:2724 | Red Hat Security Advisory: git-lfs security update | 2024-05-07T10:45:42+00:00 | 2026-02-18T19:36:47+00:00 |
| rhsa-2024:2699 | Red Hat Security Advisory: git-lfs security update | 2024-05-06T06:57:12+00:00 | 2026-02-18T19:36:47+00:00 |
| rhsa-2024:2672 | Red Hat Security Advisory: OpenShift Container Platform 4.14.24 packages and security update | 2024-05-09T17:18:03+00:00 | 2026-02-18T19:36:47+00:00 |
| rhsa-2024:2671 | Red Hat Security Advisory: Red Hat build of MicroShift 4.14.24 security update | 2024-05-09T17:32:49+00:00 | 2026-02-18T19:36:46+00:00 |
| rhsa-2024:2668 | Red Hat Security Advisory: OpenShift Container Platform 4.14.24 bug fix and security update | 2024-05-09T16:49:07+00:00 | 2026-02-18T19:36:46+00:00 |
| rhsa-2024:2667 | Red Hat Security Advisory: Red Hat build of MicroShift 4.15.12 security update | 2024-05-09T14:38:13+00:00 | 2026-02-18T19:36:46+00:00 |
| rhsa-2024:2664 | Red Hat Security Advisory: OpenShift Container Platform 4.15.12 security update | 2024-05-09T13:53:31+00:00 | 2026-02-18T19:36:45+00:00 |
| rhsa-2024:2625 | Red Hat Security Advisory: rhc-worker-script security and enhancement update | 2024-04-30T19:47:52+00:00 | 2026-02-18T19:36:45+00:00 |
| rhsa-2024:2562 | Red Hat Security Advisory: golang security update | 2024-04-30T13:33:46+00:00 | 2026-02-18T19:36:45+00:00 |
| rhsa-2024:2272 | Red Hat Security Advisory: containernetworking-plugins security update | 2024-04-30T09:51:34+00:00 | 2026-02-18T19:36:45+00:00 |
| rhsa-2024:2245 | Red Hat Security Advisory: buildah security update | 2024-04-30T10:08:31+00:00 | 2026-02-18T19:36:44+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-15-097-01 | Moxa VPort ActiveX SDK Plus Stack-Based Buffer Overflow Vulnerability | 2015-01-08T07:00:00.000000Z | 2025-06-06T21:40:40.543597Z |
| icsa-15-092-01 | Schneider Electric VAMPSET Software Buffer Overflow Vulnerability | 2015-01-03T07:00:00.000000Z | 2025-06-06T21:40:34.059444Z |
| icsa-15-090-03 | Hospira MedNet Vulnerabilitie | 2015-01-01T07:00:00.000000Z | 2025-06-06T21:40:27.581727Z |
| icsa-15-090-02 | Ecava IntegraXor DLL Vulnerabilities | 2015-01-01T07:00:00.000000Z | 2025-06-06T21:40:21.136198Z |
| icsa-15-090-01 | Inductive Automation Ignition Vulnerabilities | 2015-01-01T07:00:00.000000Z | 2025-06-06T21:40:14.674541Z |
| icsa-15-085-01a | Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Vulnerabilities (Update A) | 2015-12-27T07:00:00.000000Z | 2025-06-06T21:40:08.191186Z |
| icsa-15-076-02 | Honeywell XL Web Controller Directory Traversal Vulnerability | 2015-12-18T07:00:00.000000Z | 2025-06-06T21:40:01.723578Z |
| icsa-15-076-01 | XZERES 442SR Wind Turbine Vulnerability | 2015-12-18T07:00:00.000000Z | 2025-06-06T21:39:55.283613Z |
| icsa-15-071-01 | Schneider Electric Pelco DS-NVs Buffer Overflow Vulnerability | 2015-12-13T07:00:00.000000Z | 2025-06-06T21:39:48.399594Z |
| icsa-15-027-02 | Schneider Electric Multiple Products Buffer Overflow Vulnerability | 2015-10-30T06:00:00.000000Z | 2025-06-06T18:47:40.171170Z |
| icsa-15-006-01 | Eaton Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Ethernet Vulnerability | 2015-10-09T06:00:00.000000Z | 2025-06-06T18:47:33.703835Z |
| icsa-14-353-01c | Network Time Protocol Vulnerabilities | 2014-09-21T06:00:00.000000Z | 2025-06-06T18:46:55.063437Z |
| icsa-14-273-01 | SchneiderWEB Server Directory Traversal Vulnerability | 2014-07-03T06:00:00.000000Z | 2025-06-06T18:46:48.565481Z |
| icsa-14-269-01a | Bash Command Injection Vulnerability | 2014-06-29T06:00:00.000000Z | 2025-06-06T18:46:41.883464Z |
| icsa-14-238-02 | Schneider Electric Wonderware Vulnerabilities | 2014-05-29T06:00:00.000000Z | 2025-06-06T18:46:09.707282Z |
| icsa-14-205-01 | Morpho Itemiser 3 Hard-Coded Credential | 2014-04-26T06:00:00.000000Z | 2025-06-06T18:46:03.252742Z |
| icsa-14-202-01a | OleumTech WIO Family Vulnerabilities | 2014-04-23T06:00:00.000000Z | 2025-06-06T18:45:43.946744Z |
| icsa-14-114-02 | Siemens SIMATIC S7-1200 CPU Web Vulnerabilities | 2014-01-25T07:00:00.000000Z | 2025-06-06T18:45:30.985803Z |
| icsa-14-114-01 | Certec atvise scada OpenSSL Heartbleed Vulnerability | 2014-01-25T07:00:00.000000Z | 2025-06-06T18:45:24.365433Z |
| icsa-14-107-02 | InduSoft Web Studio Directory Traversal Vulnerability | 2014-01-18T07:00:00.000000Z | 2025-06-06T18:45:17.946852Z |
| icsa-14-107-01 | Siemens SINEMA Vulnerabilities | 2014-01-18T07:00:00.000000Z | 2025-06-06T18:44:58.592001Z |
| icsa-14-016-01 | Ecava IntegraXor Buffer Overflow Vulnerability | 2014-10-19T06:00:00.000000Z | 2025-06-06T18:44:52.152987Z |
| icsa-14-014-01 | Schneider Electric ClearSCADA Uncontrolled Resource Consumption Vulnerability | 2014-10-17T06:00:00.000000Z | 2025-06-06T18:44:45.696445Z |
| icsa-14-010-01 | MatrikonOPC Improper Input Validation | 2014-10-13T06:00:00.000000Z | 2025-06-06T18:44:39.268482Z |
| icsa-14-008-01 | Ecava Sdn Bhd IntegraXor Project Directory Information Disclosure Vulnerability | 2014-10-11T06:00:00.000000Z | 2025-06-06T18:44:32.855266Z |
| icsa-14-007-01b | Sierra Wireless AirLink Raven X EV-DO Vulnerabilities (Update B) | 2014-10-10T06:00:00.000000Z | 2025-06-06T18:44:19.916379Z |
| icsa-14-006-01 | Schneider Electric Telvent SAGE RTU DNP3 Improper Input Validation Vulnerability | 2014-10-09T06:00:00.000000Z | 2025-06-06T18:44:13.497573Z |
| icsa-13-350-01a | Schneider Electric CitectSCADA Products Exception Handler Vulnerability (Update A) | 2013-09-18T06:00:00.000000Z | 2025-06-06T18:43:53.863083Z |
| icsa-13-347-01 | Siemens COMOS Privilege Escalation | 2013-09-15T06:00:00.000000Z | 2025-06-06T18:43:47.381681Z |
| icsa-13-346-02 | Cooper Power Systems Cybectec DNP3 Master OPC Server Improper Input Validation | 2013-09-14T06:00:00.000000Z | 2025-06-06T18:43:40.964007Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-vmanage-unauthapi-sphCLYPA | Cisco SD-WAN vManage Unauthenticated REST API Access Vulnerability | 2023-07-12T16:00:00+00:00 | 2024-03-12T18:21:23+00:00 |
| cisco-sa-esa-sma-wsa-xss-cp9duemq | Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities | 2023-06-21T16:00:00+00:00 | 2023-07-11T16:43:10+00:00 |
| cisco-sa-esa-sma-wsa-xss-cP9DuEmq | Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities | 2023-06-21T16:00:00+00:00 | 2023-07-11T16:43:10+00:00 |
| cisco-sa-aci-cloudsec-enc-vs5wn2sx | Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability | 2023-07-05T16:00:00+00:00 | 2023-07-08T14:43:43+00:00 |
| cisco-sa-aci-cloudsec-enc-Vs5Wn2sX | Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability | 2023-07-05T16:00:00+00:00 | 2023-07-08T14:43:43+00:00 |
| cisco-sa-duo-auth-info-jgkswblz | Cisco Duo Authentication Proxy Information Disclosure Vulnerability | 2023-07-05T16:00:00+00:00 | 2023-07-07T15:45:19+00:00 |
| cisco-sa-duo-auth-info-JgkSWBLz | Cisco Duo Authentication Proxy Information Disclosure Vulnerability | 2023-07-05T16:00:00+00:00 | 2023-07-07T15:45:19+00:00 |
| cisco-sa-ac-csc-privesc-wx4u4kw | Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows Privilege Escalation Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-07-05T16:20:46+00:00 |
| cisco-sa-ac-csc-privesc-wx4U4Kw | Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows Privilege Escalation Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-07-05T16:20:46+00:00 |
| cisco-sa-sxsscsrf-2l24bbx6 | Cisco Webex Meetings Web UI Vulnerabilities | 2023-07-05T16:00:00+00:00 | 2023-07-05T16:00:00+00:00 |
| cisco-sa-sxsscsrf-2L24bBx6 | Cisco Webex Meetings Web UI Vulnerabilities | 2023-07-05T16:00:00+00:00 | 2023-07-05T16:00:00+00:00 |
| cisco-sa-bw-privesc-yw4ekrxw | Cisco BroadWorks Privilege Escalation Vulnerability | 2023-07-05T16:00:00+00:00 | 2023-07-05T16:00:00+00:00 |
| cisco-sa-bw-privesc-yw4ekrXW | Cisco BroadWorks Privilege Escalation Vulnerability | 2023-07-05T16:00:00+00:00 | 2023-07-05T16:00:00+00:00 |
| cisco-sa-duo-replay-knunkd | Cisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-06-23T16:48:56+00:00 |
| cisco-sa-duo-replay-knuNKd | Cisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-06-23T16:48:56+00:00 |
| cisco-sa-duo-mac-bypass-oyzpvpnx | Cisco Duo Two-Factor Authentication for macOS Authentication Bypass Vulnerability | 2023-06-21T16:00:00+00:00 | 2023-06-21T16:00:00+00:00 |
| cisco-sa-duo-mac-bypass-OyZpVPnx | Cisco Duo Two-Factor Authentication for macOS Authentication Bypass Vulnerability | 2023-06-21T16:00:00+00:00 | 2023-06-21T16:00:00+00:00 |
| cisco-sa-sd-wan-fhqh8pkx | Cisco SD-WAN Software Information Disclosure Vulnerability | 2021-09-22T16:00:00+00:00 | 2023-06-16T19:11:51+00:00 |
| cisco-sa-sd-wan-Fhqh8pKX | Cisco SD-WAN Software Information Disclosure Vulnerability | 2021-09-22T16:00:00+00:00 | 2023-06-16T19:11:51+00:00 |
| cisco-sa-smb-sxss-opyjzume | Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Stored Cross-Site Scripting Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-smb-sxss-OPYJZUmE | Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Stored Cross-Site Scripting Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-expressway-priv-esc-ls2b9t7b | Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-expressway-priv-esc-Ls2B9t7b | Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-cucm-imp-dos-49gl7rzt | Cisco Unified Communications Manager IM & Presence Service Denial of Service Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-cucm-imp-dos-49GL7rzT | Cisco Unified Communications Manager IM & Presence Service Denial of Service Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-cucm-dos-4ag3ywbd | Cisco Unified Communications Manager Denial of Service Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-cucm-dos-4Ag3yWbD | Cisco Unified Communications Manager Denial of Service Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-csw-auth-openapi-ktndjdnx | Cisco Secure Workload Authenticated OpenAPI Privilege Escalation Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-csw-auth-openapi-kTndjdNX | Cisco Secure Workload Authenticated OpenAPI Privilege Escalation Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-iox-8whgn5dl | Cisco IOx Application Hosting Environment Command Injection Vulnerability | 2023-02-01T16:00:00+00:00 | 2023-06-01T15:34:21+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38204 | jfs: fix array-index-out-of-bounds read in add_missing_indices | 2025-07-02T00:00:00.000Z | 2026-02-18T02:17:53.000Z |
| msrc_cve-2025-49794 | Libxml: heap use after free (uaf) leads to denial of service (dos) | 2025-06-02T00:00:00.000Z | 2026-02-18T02:17:52.000Z |
| msrc_cve-2022-48893 | drm/i915/gt: Cleanup partial engine discovery failures | 2024-08-02T00:00:00.000Z | 2026-02-18T02:17:50.000Z |
| msrc_cve-2019-16276 | Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling. | 2019-09-02T00:00:00.000Z | 2026-02-18T02:17:46.000Z |
| msrc_cve-2024-57887 | drm: adv7511: Fix use-after-free in adv7533_attach_dsi() | 2025-01-02T00:00:00.000Z | 2026-02-18T02:17:42.000Z |
| msrc_cve-2022-35409 | An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function. | 2022-07-02T00:00:00.000Z | 2026-02-18T02:17:36.000Z |
| msrc_cve-2023-31484 | CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. | 2023-04-01T00:00:00.000Z | 2026-02-18T02:17:32.000Z |
| msrc_cve-2025-38351 | KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush | 2025-07-02T00:00:00.000Z | 2026-02-18T02:17:30.000Z |
| msrc_cve-2021-33198 | In Go before 1.15.13 and 1.16.x before 1.16.5 there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method. | 2021-08-02T00:00:00.000Z | 2026-02-18T02:17:26.000Z |
| msrc_cve-2025-37819 | irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() | 2025-05-02T00:00:00.000Z | 2026-02-18T02:17:24.000Z |
| msrc_cve-2025-32050 | Libsoup: integer overflow in append_param_quoted | 2025-04-02T00:00:00.000Z | 2026-02-18T02:17:07.000Z |
| msrc_cve-2024-42277 | iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en | 2024-08-02T00:00:00.000Z | 2026-02-18T02:17:03.000Z |
| msrc_cve-2025-68371 | scsi: smartpqi: Fix device resources accessed after device removal | 2025-12-02T00:00:00.000Z | 2026-02-18T02:17:01.000Z |
| msrc_cve-2025-38230 | jfs: validate AG parameters in dbMount() to prevent crashes | 2025-07-02T00:00:00.000Z | 2026-02-18T02:16:59.000Z |
| msrc_cve-2023-49295 | quic-go's path validation mechanism can cause denial of service | 2024-01-01T08:00:00.000Z | 2026-02-18T02:16:52.000Z |
| msrc_cve-2024-28863 | node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation | 2024-03-02T08:00:00.000Z | 2026-02-18T02:16:39.000Z |
| msrc_cve-2025-40913 | Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow | 2025-07-02T00:00:00.000Z | 2026-02-18T02:16:33.000Z |
| msrc_cve-2025-49796 | Libxml: type confusion leads to denial of service (dos) | 2025-06-02T00:00:00.000Z | 2026-02-18T02:16:31.000Z |
| msrc_cve-2019-16910 | Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.) | 2019-09-02T00:00:00.000Z | 2026-02-18T02:16:29.000Z |
| msrc_cve-2024-50038 | netfilter: xtables: avoid NFPROTO_UNSPEC where needed | 2024-10-01T07:00:00.000Z | 2026-02-18T02:16:28.000Z |
| msrc_cve-2025-37963 | arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users | 2025-05-02T00:00:00.000Z | 2026-02-18T02:16:24.000Z |
| msrc_cve-2025-22870 | HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net | 2025-03-02T00:00:00.000Z | 2026-02-18T02:16:11.000Z |
| msrc_cve-2024-42280 | mISDN: Fix a use after free in hfcmulti_tx() | 2024-08-02T00:00:00.000Z | 2026-02-18T02:16:05.000Z |
| msrc_cve-2018-10906 | In fuse before versions 2.9.8 and 3.x before 3.2.5 fusermount is vulnerable to a restriction bypass when SELinux is active. This allows non-root users to mount a FUSE file system with the 'allow_other' mount option regardless of whether 'user_allow_other' is set in the fuse configuration. An attacker may use this flaw to mount a FUSE file system accessible by other users and trick them into accessing files on that file system possibly causing Denial of Service or other unspecified effects. | 2018-07-02T00:00:00.000Z | 2026-02-18T02:16:05.000Z |
| msrc_cve-2020-25576 | An issue was discovered in the rand_core crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints. | 2020-09-02T00:00:00.000Z | 2026-02-18T02:16:00.000Z |
| msrc_cve-2025-38213 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2025-07-02T00:00:00.000Z | 2026-02-18T02:15:45.000Z |
| msrc_cve-2024-47670 | ocfs2: add bounds checking to ocfs2_xattr_find_entry() | 2024-10-01T07:00:00.000Z | 2026-02-18T02:15:43.000Z |
| msrc_cve-2024-21646 | Azure IoT Platform Device SDK Remote Code Execution Vulnerability | 2024-01-01T08:00:00.000Z | 2026-02-18T02:15:34.000Z |
| msrc_cve-2024-30261 | Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect | 2024-04-02T07:00:00.000Z | 2026-02-18T02:15:32.000Z |
| msrc_cve-2025-38575 | ksmbd: use aead_request_free to match aead_request_alloc | 2025-04-02T00:00:00.000Z | 2026-02-18T02:15:31.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15407-1 | python311-3.11.13-4.1 on GA media | 2025-08-04T00:00:00Z | 2025-08-04T00:00:00Z |
| opensuse-su-2025:15406-1 | kubeshark-cli-52.8.0-1.1 on GA media | 2025-08-04T00:00:00Z | 2025-08-04T00:00:00Z |
| opensuse-su-2025:15405-1 | govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media | 2025-08-04T00:00:00Z | 2025-08-04T00:00:00Z |
| opensuse-su-2025:15404-1 | python39-3.9.23-4.1 on GA media | 2025-08-03T00:00:00Z | 2025-08-03T00:00:00Z |
| opensuse-su-2025:15403-1 | python314-3.14.0~rc1-2.1 on GA media | 2025-08-03T00:00:00Z | 2025-08-03T00:00:00Z |
| opensuse-su-2025:15402-1 | python310-3.10.18-4.1 on GA media | 2025-08-03T00:00:00Z | 2025-08-03T00:00:00Z |
| opensuse-su-2025:15401-1 | liblua5_5-5-5.5.0~beta1-1.1 on GA media | 2025-08-03T00:00:00Z | 2025-08-03T00:00:00Z |
| opensuse-su-2025:15400-1 | grub2-2.12-56.1 on GA media | 2025-08-03T00:00:00Z | 2025-08-03T00:00:00Z |
| opensuse-su-2025:15399-1 | chromedriver-138.0.7204.183-1.1 on GA media | 2025-08-01T00:00:00Z | 2025-08-01T00:00:00Z |
| opensuse-su-2025:15398-1 | kwctl-1.27.1-1.1 on GA media | 2025-07-31T00:00:00Z | 2025-07-31T00:00:00Z |
| opensuse-su-2025:15397-1 | gdk-pixbuf-devel-2.42.12-4.1 on GA media | 2025-07-31T00:00:00Z | 2025-07-31T00:00:00Z |
| opensuse-su-2025:15396-1 | ffmpeg-7-7.1.1-8.1 on GA media | 2025-07-30T00:00:00Z | 2025-07-30T00:00:00Z |
| opensuse-su-2025:15395-1 | docker-28.3.3_ce-26.1 on GA media | 2025-07-30T00:00:00Z | 2025-07-30T00:00:00Z |
| opensuse-su-2025:15394-1 | libsuricata8_0_0-8.0.0-1.1 on GA media | 2025-07-28T00:00:00Z | 2025-07-28T00:00:00Z |
| opensuse-su-2025:15393-1 | java-21-openj9-21.0.8.0-1.1 on GA media | 2025-07-27T00:00:00Z | 2025-07-27T00:00:00Z |
| opensuse-su-2025:15392-1 | java-1_8_0-openj9-1.8.0.462-1.1 on GA media | 2025-07-27T00:00:00Z | 2025-07-27T00:00:00Z |
| opensuse-su-2025:15391-1 | java-17-openj9-17.0.16.0-1.1 on GA media | 2025-07-27T00:00:00Z | 2025-07-27T00:00:00Z |
| opensuse-su-2025:15390-1 | java-11-openj9-11.0.28.0-1.1 on GA media | 2025-07-27T00:00:00Z | 2025-07-27T00:00:00Z |
| opensuse-su-2025:15389-1 | forgejo-longterm-11.0.3-1.1 on GA media | 2025-07-27T00:00:00Z | 2025-07-27T00:00:00Z |
| opensuse-su-2025:15388-1 | rpi-imager-1.9.5-1.1 on GA media | 2025-07-26T00:00:00Z | 2025-07-26T00:00:00Z |
| opensuse-su-2025:15387-1 | libmozjs-128-0-128.13.0-1.1 on GA media | 2025-07-26T00:00:00Z | 2025-07-26T00:00:00Z |
| opensuse-su-2025:15386-1 | MozillaFirefox-141.0-1.1 on GA media | 2025-07-26T00:00:00Z | 2025-07-26T00:00:00Z |
| opensuse-su-2025:15385-1 | perl-Authen-SASL-2.180.0-2.1 on GA media | 2025-07-25T00:00:00Z | 2025-07-25T00:00:00Z |
| opensuse-su-2025:15384-1 | apache2-2.4.65-1.1 on GA media | 2025-07-25T00:00:00Z | 2025-07-25T00:00:00Z |
| opensuse-su-2025:15383-1 | MozillaThunderbird-140.1.0-1.1 on GA media | 2025-07-25T00:00:00Z | 2025-07-25T00:00:00Z |
| opensuse-su-2025:15382-1 | ruby3.4-rubygem-thor-1.4.0-1.1 on GA media | 2025-07-24T00:00:00Z | 2025-07-24T00:00:00Z |
| opensuse-su-2025:15381-1 | python311-starlette-0.47.2-1.1 on GA media | 2025-07-24T00:00:00Z | 2025-07-24T00:00:00Z |
| opensuse-su-2025:15380-1 | jupyter-nbdime-7.0.2-21.1 on GA media | 2025-07-24T00:00:00Z | 2025-07-24T00:00:00Z |
| opensuse-su-2025:15379-1 | minio-client-20250721T052808Z-1.1 on GA media | 2025-07-24T00:00:00Z | 2025-07-24T00:00:00Z |
| opensuse-su-2025:15378-1 | javamail-1.6.2-3.1 on GA media | 2025-07-24T00:00:00Z | 2025-07-24T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2023-1365 | Heap-use-after-free in xmlStaticCopyNode | 2023-12-28T00:07:29.258949Z | 2023-12-28T00:07:29.259296Z |
| osv-2023-1364 | Heap-buffer-overflow in processClientServerHello | 2023-12-28T00:01:38.624999Z | 2023-12-28T00:01:38.625414Z |
| osv-2023-1361 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2023-12-27T00:01:27.841254Z | 2023-12-27T00:01:27.841623Z |
| osv-2023-1360 | Heap-buffer-overflow in NetworkInterface::dissectPacket | 2023-12-27T00:00:10.846266Z | 2023-12-27T00:00:10.846829Z |
| osv-2023-1358 | Heap-buffer-overflow in js_free_function_def | 2023-12-26T00:04:18.300258Z | 2023-12-26T00:04:18.300779Z |
| osv-2023-1357 | Heap-buffer-overflow in processClientServerHello | 2023-12-25T00:13:45.414227Z | 2023-12-25T00:13:45.414669Z |
| osv-2023-1356 | Heap-buffer-overflow in rawspeed::DngDecoder::parseWhiteBalance | 2023-12-25T00:10:36.482844Z | 2023-12-25T00:10:36.483166Z |
| osv-2023-1354 | Heap-buffer-overflow in processClientServerHello | 2023-12-25T00:03:08.530303Z | 2023-12-25T00:03:08.530510Z |
| osv-2023-1353 | Security exception in org.apache.poi.ddf.EscherContainerRecord.fillFields | 2023-12-25T00:03:02.003193Z | 2023-12-25T00:03:02.003829Z |
| osv-2023-1352 | Heap-buffer-overflow in Flow::dissectMDNS | 2023-12-24T00:05:23.975196Z | 2023-12-24T00:05:23.975551Z |
| osv-2023-756 | Heap-buffer-overflow in rawspeed::DngDecoder::decodeMetaDataInternal | 2023-08-28T14:02:10.741602Z | 2023-12-23T14:16:41.470280Z |
| osv-2022-896 | Segv on unknown address in Sass::unifyComplex | 2022-09-15T00:02:01.621945Z | 2023-12-22T14:15:53.864807Z |
| osv-2021-508 | Segv on unknown address in Sass::CompoundSelector::resolve_parent_refs | 2021-03-09T00:02:18.581527Z | 2023-12-22T14:10:14.701082Z |
| osv-2020-1420 | Bad-cast to Sass::PreValue from Sass::Unary_Expression | 2020-07-28T00:00:14.887375Z | 2023-12-22T14:07:59.765838Z |
| osv-2020-862 | Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::Extension, std::__1::allocator<Sass::Ext | 2020-07-14T22:13:48.731457Z | 2023-12-22T14:06:49.113213Z |
| osv-2023-1343 | Heap-buffer-overflow in _libssh2_kex_agree_instr | 2023-12-22T00:10:36.346763Z | 2023-12-22T00:10:36.347283Z |
| osv-2023-276 | Heap-use-after-free in aiScene::~aiScene | 2023-04-04T14:01:47.666563Z | 2023-12-21T14:16:54.547364Z |
| osv-2023-736 | Heap-buffer-overflow in HeifContext::interpret_heif_file | 2023-08-25T14:00:14.487219Z | 2023-12-20T14:12:01.243209Z |
| osv-2023-1327 | Security exception in com.github.javaparser.CommentsInserter.insertComments | 2023-12-18T00:10:41.666920Z | 2023-12-18T00:10:41.667465Z |
| osv-2023-1325 | UNKNOWN WRITE in zero | 2023-12-18T00:04:49.365880Z | 2023-12-18T00:04:49.366308Z |
| osv-2023-1324 | Heap-use-after-free in memory_bclose | 2023-12-18T00:03:27.139777Z | 2023-12-18T00:03:27.140220Z |
| osv-2023-1320 | Heap-use-after-free in memory_bstat | 2023-12-17T00:12:41.223755Z | 2023-12-17T00:12:41.224161Z |
| osv-2023-1315 | Heap-use-after-free in htmlParseDocument | 2023-12-17T00:02:06.164794Z | 2023-12-17T00:02:06.165194Z |
| osv-2023-42 | Heap-buffer-overflow in bit_read_BB | 2023-02-02T13:00:40.999896Z | 2023-12-16T14:20:07.644053Z |
| osv-2023-1303 | Heap-use-after-free in htmlCurrentChar | 2023-12-15T00:00:06.313566Z | 2023-12-15T00:00:06.314002Z |
| osv-2023-1302 | Global-buffer-overflow in pcre_get_compiled_regex_cache_ex | 2023-12-14T00:13:52.791976Z | 2023-12-14T00:13:52.792479Z |
| osv-2023-1301 | Global-buffer-overflow in xmlDictLookupInternal | 2023-12-14T00:13:26.532719Z | 2023-12-14T00:13:26.533280Z |
| osv-2023-1300 | Security exception in com.fasterxml.jackson.core.JsonParser.currentName | 2023-12-14T00:13:10.208981Z | 2023-12-14T00:13:10.209415Z |
| osv-2023-1299 | Global-buffer-overflow in pcre_get_compiled_regex_cache_ex | 2023-12-14T00:12:13.097305Z | 2023-12-14T00:12:13.097842Z |
| osv-2023-1298 | Heap-buffer-overflow in loongarch_split_args_by_comma | 2023-12-14T00:10:40.133892Z | 2023-12-14T00:10:40.134313Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2022-0061 | Crate `parity-wasm` deprecated by the author | 2022-10-01T12:00:00Z | 2022-10-23T11:05:06Z |
| rustsec-2022-0060 | orbtk is Unmaintained | 2022-10-13T12:00:00Z | 2022-10-19T01:14:12Z |
| rustsec-2022-0058 | Library exclusively intended to inject UB into safe Rust. | 2022-09-28T12:00:00Z | 2022-10-11T10:32:22Z |
| rustsec-2022-0056 | clipboard is Unmaintained | 2022-06-25T12:00:00Z | 2022-09-24T11:52:27Z |
| rustsec-2021-0143 | kamadak-exif DoS with untrusted PNG data | 2021-01-04T12:00:00Z | 2022-09-08T10:52:02Z |
| rustsec-2021-0142 | dotenv is Unmaintained | 2021-12-24T12:00:00Z | 2022-08-30T19:40:13Z |
| rustsec-2021-0141 | dotenv is Unmaintained | 2021-12-24T12:00:00Z | 2022-08-30T19:40:13Z |
| rustsec-2020-0077 | memmap is unmaintained | 2020-12-02T12:00:00Z | 2022-08-25T07:09:30Z |
| rustsec-2022-0050 | Interledger is Unmaintained | 2022-08-04T12:00:00Z | 2022-08-19T05:34:11Z |
| rustsec-2020-0055 | Please see RUSTSEC-2018-0020 | 2020-10-21T12:00:00Z | 2022-08-16T02:38:08Z |
| rustsec-2020-0054 | directories is unmaintained, use directories-next instead | 2020-10-16T12:00:00Z | 2022-08-16T02:38:08Z |
| rustsec-2020-0053 | dirs is unmaintained, use dirs-next instead | 2020-10-16T12:00:00Z | 2022-08-16T02:38:08Z |
| rustsec-2019-0031 | spin is no longer actively maintained | 2019-11-21T12:00:00Z | 2022-08-16T02:38:08Z |
| rustsec-2021-0137 | sodiumoxide is deprecated | 2021-10-22T12:00:00Z | 2022-08-10T04:01:59Z |
| rustsec-2022-0037 | Denial of service on deeply nested fragment requests | 2022-07-21T12:00:00Z | 2022-08-06T06:41:24Z |
| rustsec-2020-0159 | Potential segfault in `localtime_r` invocations | 2020-11-10T12:00:00Z | 2022-08-04T19:52:46Z |
| rustsec-2022-0041 | Unsoundness of AtomicCell<*64> arithmetics on 32-bit targets that support Atomic*64 | 2022-02-05T12:00:00Z | 2022-08-04T13:56:30Z |
| rustsec-2022-0039 | project abandoned | 2022-01-17T12:00:00Z | 2022-08-02T18:15:56Z |
| rustsec-2022-0038 | Denial of service on deeply nested fragment requests | 2022-07-28T12:00:00Z | 2022-08-02T17:59:55Z |
| rustsec-2022-0036 | project abandoned | 2022-01-17T12:00:00Z | 2022-08-02T17:34:36Z |
| rustsec-2020-0163 | `term_size` is unmaintained; use `terminal_size` instead | 2020-11-03T12:00:00Z | 2022-08-02T14:03:23Z |
| rustsec-2022-0034 | Safety issues in `pkcs11` | 2022-07-22T12:00:00Z | 2022-07-25T17:19:15Z |
| rustsec-2022-0031 | Panic due to improper UTF-8 indexing | 2022-05-21T12:00:00Z | 2022-06-26T20:01:26Z |
| rustsec-2022-0030 | Stack overflow during recursive expression parsing | 2022-05-21T12:00:00Z | 2022-06-26T19:44:13Z |
| rustsec-2022-0024 | double-checked-cell is unmaintained | 2022-05-11T12:00:00Z | 2022-05-11T21:13:02Z |
| rustsec-2022-0023 | `static_type_map` has been renamed to `erased_set` | 2022-05-11T12:00:00Z | 2022-05-11T19:44:11Z |
| rustsec-2022-0015 | pty is unmaintained | 2022-03-22T12:00:00Z | 2022-03-22T14:52:42Z |
| rustsec-2021-0134 | rental is unmaintained, author has moved on | 2021-12-27T12:00:00Z | 2022-03-06T11:02:04Z |
| rustsec-2020-0162 | `tokio-proto` is deprecated/unmaintained | 2020-02-06T12:00:00Z | 2022-02-07T02:25:36Z |
| rustsec-2022-0005 | crate has been renamed to `ftdi-embedded-hal` | 2022-01-22T12:00:00Z | 2022-01-22T18:27:42Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-tensorflow-2025-55556 | 2025-10-05T23:59:42.019Z | 2025-10-06T00:06:00.502Z | |
| bit-pytorch-2025-55558 | 2025-10-05T23:47:59.108Z | 2025-10-06T00:06:00.502Z | |
| bit-pytorch-2025-55557 | 2025-10-05T23:47:57.792Z | 2025-10-06T00:06:00.502Z | |
| bit-pytorch-2025-55553 | 2025-10-05T23:47:55.078Z | 2025-10-06T00:06:00.502Z | |
| bit-pytorch-2025-46153 | 2025-10-05T23:47:50.900Z | 2025-10-06T00:06:00.502Z | |
| bit-pytorch-2025-46152 | 2025-10-05T23:47:49.619Z | 2025-10-06T00:06:00.502Z | |
| bit-pytorch-2025-46150 | 2025-10-05T23:47:48.186Z | 2025-10-06T00:06:00.502Z | |
| bit-pytorch-2025-46149 | 2025-10-05T23:47:46.869Z | 2025-10-06T00:06:00.502Z | |
| bit-pytorch-2025-46148 | 2025-10-05T23:47:45.481Z | 2025-10-06T00:06:00.502Z | |
| bit-mongoose-2025-23061 | 2025-09-25T08:46:40.232Z | 2025-10-06T00:06:00.502Z | |
| bit-mongodb-2025-7259 | Certain Queries with Duplicate _id Fields May Cause MongoDB Server to Crash | 2025-10-05T23:44:19.761Z | 2025-10-06T00:06:00.502Z |
| bit-mongodb-2025-6714 | Incorrect Handling of incomplete data may prevent mongoS from Accepting New Connections | 2025-10-05T23:44:18.162Z | 2025-10-06T00:06:00.502Z |
| bit-mongodb-2025-6713 | MongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage | 2025-10-05T23:44:16.574Z | 2025-10-06T00:06:00.502Z |
| bit-mongodb-2025-6712 | MongoDB Server may be susceptible to DoS due to Accumulated Memory Allocation | 2025-10-05T23:44:14.958Z | 2025-10-06T00:06:00.502Z |
| bit-mongodb-2025-6711 | Incomplete Redaction of Sensitive Information in MongoDB Server Logs | 2025-10-05T23:44:13.320Z | 2025-10-06T00:06:00.502Z |
| bit-django-2025-27556 | 2025-09-25T08:40:31.995Z | 2025-10-06T00:06:00.502Z | |
| bit-django-2024-56374 | 2025-03-10T08:13:20.368Z | 2025-10-06T00:06:00.502Z | |
| bit-discourse-2025-59337 | Discourse: Cross-Site Data Exposure via Backup Restore Metacommand Injection in Multisite Deployments | 2025-10-05T23:41:00.220Z | 2025-10-06T00:06:00.502Z |
| bit-redis-2025-46686 | 2025-09-25T08:52:27.726Z | 2025-10-03T15:12:57.579Z | |
| bit-powershell-2025-49734 | PowerShell Direct Elevation of Privilege Vulnerability | 2025-10-03T08:49:03.988Z | 2025-10-03T09:07:39.166Z |
| bit-kibana-2025-25014 | Kibana arbitrary code execution via prototype pollution | 2025-05-08T05:41:37.442Z | 2025-10-03T09:07:39.166Z |
| bit-kibana-2024-12556 | Kibana Prototype Pollution can lead to code injection | 2025-04-10T07:12:32.246Z | 2025-10-03T09:07:39.166Z |
| bit-elk-2025-25014 | Kibana arbitrary code execution via prototype pollution | 2025-05-08T05:37:10.649Z | 2025-10-03T09:07:39.166Z |
| bit-elk-2024-12556 | Kibana Prototype Pollution can lead to code injection | 2025-04-10T07:07:56.053Z | 2025-10-03T09:07:39.166Z |
| bit-elasticsearch-2024-52981 | 2025-04-10T07:10:18.243Z | 2025-10-03T09:07:39.166Z | |
| bit-elasticsearch-2024-52979 | Elasticsearch Uncontrolled Resource Consumption vulnerability | 2025-05-03T05:41:02.354Z | 2025-10-03T09:07:39.166Z |
| bit-django-2025-26699 | 2025-03-10T08:13:13.707Z | 2025-10-03T09:07:39.166Z | |
| bit-wordpress-2025-58674 | WordPress <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability | 2025-09-25T08:55:10.378Z | 2025-10-02T15:07:00.184Z |
| bit-wordpress-2025-58246 | WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability | 2025-09-25T08:55:08.592Z | 2025-10-02T15:07:00.184Z |
| bit-mongodb-2024-10921 | Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server | 2025-10-02T14:44:36.017Z | 2025-10-02T15:07:00.184Z |
| ID | Description | Updated |
|---|---|---|
| var-201806-1505 | System software utilizing Lazy FP state restore technique on systems using Intel Core-bas… | 2024-07-23T20:32:57.575000Z |
| var-201904-1410 | A use after free issue was addressed with improved memory management. This issue affected… | 2024-07-23T20:32:56.963000Z |
| var-200511-0062 | The Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe so… | 2024-07-23T20:32:56.794000Z |
| var-201506-0231 | The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 befor… | 2024-07-23T20:32:53.570000Z |
| var-201204-0111 | The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on… | 2024-07-23T20:32:19.934000Z |
| var-201912-0578 | A memory corruption issue was addressed with improved input validation. This issue is fix… | 2024-07-23T20:32:14.024000Z |
| var-201710-0928 | When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month fi… | 2024-07-23T20:32:14.616000Z |
| var-201707-1176 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari … | 2024-07-23T20:31:50.100000Z |
| var-201007-0320 | WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before… | 2024-07-23T20:31:44.088000Z |
| var-201006-1253 | WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari… | 2024-07-23T20:31:44.497000Z |
| var-200603-0276 | Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to r… | 2024-07-23T20:31:11.533000Z |
| var-201912-0477 | A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tv… | 2024-07-23T20:31:09.597000Z |
| var-202109-0758 | A vulnerability in the Protection Against Distributed Denial of Service Attacks feature o… | 2024-07-23T20:31:08.412000Z |
| var-201210-0155 | Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS … | 2024-07-23T20:31:08.483000Z |
| var-201302-0143 | Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.… | 2024-07-23T20:31:06.906000Z |
| var-202109-1330 | A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6,… | 2024-07-23T20:31:03.287000Z |
| var-201702-0878 | An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari … | 2024-07-23T20:31:03.199000Z |
| var-201102-0097 | Google Chrome before 9.0.597.94 does not properly handle anonymous blocks, which allows r… | 2024-07-23T20:31:03.455000Z |
| var-201903-0418 | A memory corruption issue was addressed with improved memory handling. This issue is fixe… | 2024-07-23T20:30:59.999000Z |
| var-200705-0681 | Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to… | 2024-07-23T20:30:59.378000Z |
| var-202212-1523 | The issue was addressed with improved memory handling. This issue is fixed in Safari 16.2… | 2024-07-23T20:30:57.804000Z |
| var-200704-0227 | Unspecified vulnerability in the CoreServices daemon in CarbonCore in Apple Mac OS X 10.4… | 2024-07-23T20:30:57.670000Z |
| var-201912-1378 | SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an… | 2024-07-23T20:30:53.083000Z |
| var-200704-0222 | URLMount in Apple Mac OS X 10.3.9 through 10.4.9 passes the username and password credent… | 2024-07-23T20:30:53.685000Z |
| var-200110-0214 | The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely cre… | 2024-07-23T20:30:53.499000Z |
| var-201007-0199 | The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 a… | 2024-07-23T20:30:52.504000Z |
| var-202112-2255 | In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has … | 2024-07-23T20:30:28.280000Z |
| var-201603-0244 | Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and… | 2024-07-23T20:30:28.935000Z |
| var-200712-0605 | Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_… | 2024-07-23T20:30:10.502000Z |
| var-201302-0234 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:29:38.152000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2022-000010 | Multiple vulnerabilities in multiple ELECOM LAN routers | 2022-02-08T16:13+09:00 | 2022-02-08T16:13+09:00 |
| jvndb-2016-008013 | Multiple ESET products for macOS vulnerable to improper server certificate verification | 2022-02-07T14:18+09:00 | 2022-02-07T14:18+09:00 |
| jvndb-2022-000007 | Multiple vulnerabilities in TransmitMail | 2022-01-25T15:31+09:00 | 2022-01-25T15:31+09:00 |
| jvndb-2022-001097 | Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux | 2022-01-25T13:35+09:00 | 2022-01-25T13:35+09:00 |
| jvndb-2022-001087 | GROWI vulnerable to authorization bypass through user-controlled key | 2022-01-24T14:07+09:00 | 2022-01-24T14:07+09:00 |
| jvndb-2022-000006 | Multiple cross-site scripting vulnerabilities in php_mailform | 2022-01-20T15:42+09:00 | 2022-01-20T15:42+09:00 |
| jvndb-2022-000001 | Canon laser printers and small office multifunctional printers vulnerable to cross-site scripting | 2022-01-19T14:00+09:00 | 2022-01-19T14:00+09:00 |
| jvndb-2022-000005 | PASSWORD MANAGER "MIRUPASS" PW10 / PW20 missing encryption | 2022-01-13T15:26+09:00 | 2022-01-13T15:26+09:00 |
| jvndb-2022-000004 | Label printers "TEPRA" PRO SR5900P / SR-R7900P vulnerable to insufficiently protected credentials | 2022-01-13T15:21+09:00 | 2022-01-13T15:21+09:00 |
| jvndb-2022-000003 | Jimoty App for Android uses a hard-coded API key for an external service | 2022-01-12T15:37+09:00 | 2022-01-12T15:37+09:00 |
| jvndb-2022-000002 | Multiple vulnerabilities in WordPress Plugin "Quiz And Survey Master" | 2022-01-12T15:33+09:00 | 2022-01-12T15:33+09:00 |
| jvndb-2021-006117 | Multiple vulnerabilities in IDEC PLCs | 2021-12-27T16:54+09:00 | 2022-01-11T16:36+09:00 |
| jvndb-2021-006146 | Multiple vulnerabilities in KONICA MINOLTA MFPs and printing systems | 2021-12-28T11:51+09:00 | 2021-12-28T11:51+09:00 |
| jvndb-2021-006026 | TP-Link TL-WR802N V4(JP) vulnerable to OS command injection | 2021-12-24T15:31+09:00 | 2021-12-24T15:31+09:00 |
| jvndb-2021-005998 | Multiple vulnerabilities in QNAP VioStar NVR | 2021-12-24T10:58+09:00 | 2021-12-24T10:58+09:00 |
| jvndb-2021-003929 | Multiple vulnerabilities in multiple Yamaha routers | 2021-12-24T10:51+09:00 | 2021-12-24T10:51+09:00 |
| jvndb-2021-000112 | Android Apps developed using Yappli fails to restrict custom URL schemes properly | 2021-12-22T15:07+09:00 | 2021-12-22T15:07+09:00 |
| jvndb-2021-000111 | Multiple vulnerabilities in GroupSession | 2021-12-20T14:53+09:00 | 2021-12-21T14:20+09:00 |
| jvndb-2021-000022 | Multiple vulnerabilities in Cybozu Office | 2021-03-15T15:56+09:00 | 2021-12-17T17:51+09:00 |
| jvndb-2021-000093 | Movable Type XMLRPC API vulnerable to OS command injection | 2021-10-20T17:38+09:00 | 2021-12-17T17:36+09:00 |
| jvndb-2021-000110 | UNIVERGE DT Series vulnerable to missing encryption of sensitive data | 2021-12-17T16:57+09:00 | 2021-12-17T16:57+09:00 |
| jvndb-2021-005174 | Multiple vulnerabilities in Trend Micro Security 2021 family (Consumer) | 2021-12-09T13:43+09:00 | 2021-12-09T13:43+09:00 |
| jvndb-2021-000107 | Wi-Fi STATION SH-52A vulnerable to cross-site scripting | 2021-11-30T14:49+09:00 | 2021-11-30T14:49+09:00 |
| jvndb-2021-004716 | Trend Micro Antivirus for MAC vulnerable to improper access controls | 2021-11-29T13:52+09:00 | 2021-11-29T13:52+09:00 |
| jvndb-2021-000106 | Multiple vulnerabilities in baserCMS | 2021-11-26T14:59+09:00 | 2021-11-26T14:59+09:00 |
| jvndb-2021-000104 | WordPress Plugin "Browser and Operating System Finder" vulnerable to cross-site request forgery | 2021-11-25T14:31+09:00 | 2021-11-25T14:31+09:00 |
| jvndb-2021-004432 | Multiple Vulnerabilities in JP1/Automatic Operation | 2021-11-22T16:10+09:00 | 2021-11-22T16:10+09:00 |
| jvndb-2021-000103 | WordPress Plugin "Push Notifications for WordPress (Lite)" vulnerable to cross-site request forgery | 2021-11-16T13:42+09:00 | 2021-11-16T13:42+09:00 |
| jvndb-2021-000102 | rwtxt vulnerable to cross-site scripting | 2021-11-16T13:38+09:00 | 2021-11-16T13:38+09:00 |
| jvndb-2021-000101 | Unlimited Sitemap Generator vulnerable to cross-site request forgery | 2021-11-12T15:07+09:00 | 2021-11-12T15:07+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:21067-1 | Security update for powerpc-utils | 2025-11-10T14:24:22Z | 2025-11-10T14:24:22Z |
| suse-su-2025:21054-1 | Security update for runc | 2025-11-10T14:24:22Z | 2025-11-10T14:24:22Z |
| suse-su-2025:4038-1 | Security update for java-1_8_0-openjdk | 2025-11-10T14:22:51Z | 2025-11-10T14:22:51Z |
| suse-su-2025:4036-1 | Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP4) | 2025-11-10T14:04:15Z | 2025-11-10T14:04:15Z |
| suse-su-2025:4035-1 | Security update for erlang26 | 2025-11-10T13:47:05Z | 2025-11-10T13:47:05Z |
| suse-su-2025:4029-1 | Security update for squid | 2025-11-10T11:44:34Z | 2025-11-10T11:44:34Z |
| suse-su-2025:4026-1 | Security update for squid | 2025-11-10T09:12:43Z | 2025-11-10T09:12:43Z |
| suse-su-2025:4024-1 | Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5) | 2025-11-10T08:14:25Z | 2025-11-10T08:14:25Z |
| suse-su-2025:4016-1 | Security update for the Linux Kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP3) | 2025-11-10T08:13:30Z | 2025-11-10T08:13:30Z |
| suse-su-2025:4031-1 | Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5) | 2025-11-10T08:12:19Z | 2025-11-10T08:12:19Z |
| suse-su-2025:4006-1 | Security update for MozillaThunderbird | 2025-11-10T08:00:18Z | 2025-11-10T08:00:18Z |
| suse-su-2025:4005-1 | Security update for java-1_8_0-openj9 | 2025-11-10T01:04:17Z | 2025-11-10T01:04:17Z |
| suse-su-2025:4004-1 | Security update for the Linux Kernel (Live Patch 61 for SLE 15 SP3) | 2025-11-09T07:03:51Z | 2025-11-09T07:03:51Z |
| suse-su-2025:4003-1 | Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP5) | 2025-11-09T05:04:13Z | 2025-11-09T05:04:13Z |
| suse-su-2025:4001-1 | Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP7) | 2025-11-09T01:33:43Z | 2025-11-09T01:33:43Z |
| suse-su-2025:4000-1 | Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6) | 2025-11-07T17:04:39Z | 2025-11-07T17:04:39Z |
| suse-su-2025:3998-1 | Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP7) | 2025-11-07T16:04:09Z | 2025-11-07T16:04:09Z |
| suse-su-2025:3997-1 | Security update for java-17-openjdk | 2025-11-07T15:50:20Z | 2025-11-07T15:50:20Z |
| suse-su-2025:3996-1 | Security update for java-11-openjdk | 2025-11-07T15:48:31Z | 2025-11-07T15:48:31Z |
| suse-su-2025:3995-1 | Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP7) | 2025-11-07T15:33:40Z | 2025-11-07T15:33:40Z |
| suse-su-2025:3989-1 | Security update for tiff | 2025-11-07T13:44:29Z | 2025-11-07T13:44:29Z |
| suse-su-2025:3987-1 | Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP7) | 2025-11-07T13:03:43Z | 2025-11-07T13:03:43Z |
| suse-su-2025:3986-1 | Security update for gpg2 | 2025-11-07T10:31:06Z | 2025-11-07T10:31:06Z |
| suse-su-2025:3985-1 | Security update for ImageMagick | 2025-11-07T10:30:54Z | 2025-11-07T10:30:54Z |
| suse-su-2025:3983-1 | Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP6) | 2025-11-06T21:33:47Z | 2025-11-06T21:33:47Z |
| suse-su-2025:20996-1 | Security update for the Linux Kernel | 2025-11-06T15:51:37Z | 2025-11-06T15:51:37Z |
| suse-su-2025:3978-1 | Security update for ImageMagick | 2025-11-06T15:43:10Z | 2025-11-06T15:43:10Z |
| suse-su-2025:20994-1 | Security update for the Linux Kernel | 2025-11-06T15:30:43Z | 2025-11-06T15:30:43Z |
| suse-su-2025:3976-1 | Security update for bind | 2025-11-06T13:14:37Z | 2025-11-06T13:14:37Z |
| suse-su-2025:3970-1 | Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP6) | 2025-11-06T12:03:46Z | 2025-11-06T12:03:46Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-03163 | Online Security Guards Hiring System edit-guard-detail.php文件SQL注入漏洞 | 2025-04-09 | 2026-01-14 |
| cnvd-2026-03162 | Online Security Guards Hiring System changeimage.php文件SQL注入漏洞 | 2025-04-09 | 2026-01-14 |
| cnvd-2026-03161 | Men Salon Management System search-invoices.php 文件SQL注入漏洞 | 2025-04-09 | 2026-01-14 |
| cnvd-2026-03160 | Men Salon Management System appointment.php文件SQL注入漏洞 | 2025-04-09 | 2026-01-14 |
| cnvd-2026-03159 | Men Salon Management System add-customer-services.php文件SQL注入漏洞 | 2025-04-09 | 2026-01-14 |
| cnvd-2026-03158 | Men Salon Management System add-customer.php文件SQL注入漏洞 | 2025-04-09 | 2026-01-14 |
| cnvd-2026-03157 | Men Salon Management System about-us.php文件SQL注入漏洞 | 2025-04-09 | 2026-01-14 |
| cnvd-2026-03156 | Men Salon Management System add-services.php文件SQL注入漏洞 | 2025-04-16 | 2026-01-14 |
| cnvd-2026-03155 | Men Salon Management System admin-profile.php文件SQL注入漏洞 | 2025-04-18 | 2026-01-14 |
| cnvd-2026-03154 | Men Salon Management System view-appointment.php文件SQL注入漏洞 | 2025-04-30 | 2026-01-14 |
| cnvd-2026-03153 | Men Salon Management System /search-appointment.php文件SQL注入漏洞 | 2025-04-30 | 2026-01-14 |
| cnvd-2026-03152 | Men Salon Management System sales-reports-detail.php文件SQL注入漏洞 | 2025-04-30 | 2026-01-14 |
| cnvd-2026-03151 | Men Salon Management System forgot-password.php文件SQL注入漏洞 | 2025-04-30 | 2026-01-14 |
| cnvd-2026-03150 | Men Salon Management System contact-us.php文件SQL注入漏洞 | 2025-04-30 | 2026-01-14 |
| cnvd-2026-03149 | Men Salon Management System change-password.php文件SQL注入漏洞 | 2025-05-14 | 2026-01-14 |
| cnvd-2026-03148 | Student Result Management System /editmyexp.php文件SQL注入漏洞 | 2025-06-06 | 2026-01-14 |
| cnvd-2026-03147 | Student Management System using PHP and MySQL password-recovery.php文件SQL注入漏洞 | 2025-06-06 | 2026-01-14 |
| cnvd-2026-03146 | Student Management System using PHP and MySQL SQL注入漏洞 | 2025-06-06 | 2026-01-14 |
| cnvd-2026-03084 | Huawei HarmonyOS/EMUI接口权限管控漏洞 | 2023-12-07 | 2026-01-14 |
| cnvd-2026-03058 | Google Android混淆代理漏洞 | 2025-12-10 | 2026-01-14 |
| cnvd-2026-05016 | UTT 520W formUser函数缓冲区溢出漏洞 | 2026-01-09 | 2026-01-13 |
| cnvd-2026-05015 | UTT 512W formConfigCliForEngineerOnly函数缓冲区溢出漏洞 | 2026-01-09 | 2026-01-13 |
| cnvd-2026-04543 | Tenda AC23缓冲区溢出漏洞 | 2026-01-09 | 2026-01-13 |
| cnvd-2026-03261 | Echo Specto CM跨站脚本漏洞 | 2026-01-09 | 2026-01-13 |
| cnvd-2026-03011 | Mozilla Firefox代码执行漏洞(CNVD-2026-03011) | 2025-12-25 | 2026-01-13 |
| cnvd-2026-02992 | Mozilla Firefox for iOS欺骗漏洞(CNVD-2026-02992) | 2025-12-25 | 2026-01-13 |
| cnvd-2026-02991 | Mozilla Firefox内存错误引用漏洞(CNVD-2026-02991) | 2025-12-25 | 2026-01-13 |
| cnvd-2026-02980 | WordPress插件Shortcodes and extra features for Phlox theme信息泄露漏洞 | 2026-01-09 | 2026-01-13 |
| cnvd-2026-02976 | Google Android权限提升漏洞(CNVD-2026-02976) | 2025-12-10 | 2026-01-13 |
| cnvd-2026-02975 | Google Android拒绝服务漏洞(CNVD-2026-02975) | 2025-12-10 | 2026-01-13 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0917 | Multiples vulnérabilités dans les produits Moxa | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0916 | Vulnérabilité dans le pilote MongoDB Pilote Atlas SQL ODBC | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0924 | Multiples vulnérabilités dans les produits IBM | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0923 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0922 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0921 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0920 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0919 | Multiples vulnérabilités dans Microsoft Azure | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0918 | Multiples vulnérabilités dans Liferay | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0917 | Multiples vulnérabilités dans les produits Moxa | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| CERTFR-2025-AVI-0916 | Vulnérabilité dans le pilote MongoDB Pilote Atlas SQL ODBC | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0915 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0914 | Multiples vulnérabilités dans les produits Centreon | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0913 | Multiples vulnérabilités dans ISC BIND | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| CERTFR-2025-AVI-0915 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| CERTFR-2025-AVI-0914 | Multiples vulnérabilités dans les produits Centreon | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| CERTFR-2025-AVI-0913 | Multiples vulnérabilités dans ISC BIND | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0912 | Vulnérabilité dans SolarWinds Observability | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0911 | Multiples vulnérabilités dans Oracle Weblogic | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0910 | Multiples vulnérabilités dans Oracle Virtualization | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0909 | Multiples vulnérabilités dans Oracle Systems | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0908 | Multiples vulnérabilités dans Oracle PeopleSoft | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0907 | Multiples vulnérabilités dans Oracle MySQL | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0906 | Multiples vulnérabilités dans Oracle Java SE | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0905 | Multiples vulnérabilités dans Oracle Database Server | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0904 | Multiples vulnérabilités dans GitLab | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0903 | Multiples vulnérabilités dans les produits Atlassian | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0902 | Multiples vulnérabilités dans Xen | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0901 | Vulnérabilité dans Google Chrome | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0900 | Multiples vulnérabilités dans Centreon Web | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |