Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2000-0005
N/A
HP-UX aserver program allows local users to gain … n/a
n/a
2000-02-04T05:00:00 2024-08-08T04:58:11.797Z
CVE-2000-0008
N/A
FTPPro allows local users to read sensitive infor… n/a
n/a
2000-02-04T05:00:00 2024-08-08T04:58:11.458Z
CVE-2000-0016
N/A
Buffer overflow in Internet Anywhere POP3 Mail Se… n/a
n/a
2000-02-04T05:00:00 2024-08-08T04:58:11.416Z
CVE-2000-0017
N/A
Buffer overflow in Linux linuxconf package allows… n/a
n/a
2000-02-04T05:00:00 2024-08-08T04:58:11.855Z
CVE-2000-0019
N/A
IMail POP3 daemon uses weak encryption, which all… n/a
n/a
2000-02-04T05:00:00 2024-08-08T04:58:11.412Z
CVE-2000-0021
N/A
Lotus Domino HTTP server allows remote attackers … n/a
n/a
2000-02-04T05:00:00 2024-08-08T04:58:11.587Z
CVE-2000-0028
N/A
Internet Explorer 5.0 and 5.01 allows remote atta… n/a
n/a
2000-02-04T05:00:00 2024-08-08T04:58:11.688Z
CVE-2000-0035
N/A
resend command in Majordomo allows local users to… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.647Z
CVE-2000-0038
N/A
glFtpD includes a default glftpd user account wit… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.654Z
CVE-2000-0046
N/A
Buffer overflow in ICQ 99b 1.1.1.1 client allows … n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.942Z
CVE-2000-0047
N/A
Buffer overflow in Yahoo Pager/Messenger client a… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.904Z
CVE-2000-0049
N/A
Buffer overflow in Winamp client allows remote at… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.791Z
CVE-2000-0054
N/A
search.cgi in the SolutionScripts Home Free packa… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.914Z
CVE-2000-0055
N/A
Buffer overflow in Solaris chkperm command allows… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.949Z
CVE-2000-0058
N/A
Network HotSync program in Handspring Visor does … n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.678Z
CVE-2000-0059
N/A
PHP3 with safe_mode enabled does not properly fil… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:54.163Z
CVE-2000-0061
N/A
Internet Explorer 5 does not modify the security … n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:52.954Z
CVE-2000-0066
N/A
WebSite Pro allows remote attackers to determine … n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.937Z
CVE-2000-0067
N/A
CyberCash Merchant Connection Kit (MCK) allows lo… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.972Z
CVE-2000-0068
N/A
daynad program in Intel InBusiness E-mail Station… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:52.987Z
CVE-2000-0069
N/A
The recover program in Solstice Backup allows loc… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.898Z
CVE-2000-0071
N/A
IIS 4.0 allows a remote attacker to obtain the re… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:54.101Z
CVE-2000-0074
N/A
PowerScripts PlusMail CGI program allows remote a… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.862Z
CVE-2000-0077
N/A
The October 1998 version of the HP-UX aserver pro… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.892Z
CVE-2000-0078
N/A
The June 1999 version of the HP-UX aserver progra… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.908Z
CVE-2000-0079
N/A
The W3C CERN httpd HTTP server allows remote atta… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.929Z
CVE-2000-0081
N/A
Hotmail does not properly filter JavaScript code … n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.974Z
CVE-2000-0082
N/A
WebTV email client allows remote attackers to for… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:52.722Z
CVE-2000-0084
N/A
CuteFTP uses weak encryption to store password in… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.915Z
CVE-2000-0085
N/A
Hotmail does not properly filter JavaScript code … n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.831Z
ID CVSS Description Vendor Product Published Updated
CVE-2000-0005
N/A
HP-UX aserver program allows local users to gain … n/a
n/a
2000-02-04T05:00:00 2024-08-08T04:58:11.797Z
CVE-2000-0008
N/A
FTPPro allows local users to read sensitive infor… n/a
n/a
2000-02-04T05:00:00 2024-08-08T04:58:11.458Z
CVE-2000-0016
N/A
Buffer overflow in Internet Anywhere POP3 Mail Se… n/a
n/a
2000-02-04T05:00:00 2024-08-08T04:58:11.416Z
CVE-2000-0017
N/A
Buffer overflow in Linux linuxconf package allows… n/a
n/a
2000-02-04T05:00:00 2024-08-08T04:58:11.855Z
CVE-2000-0019
N/A
IMail POP3 daemon uses weak encryption, which all… n/a
n/a
2000-02-04T05:00:00 2024-08-08T04:58:11.412Z
CVE-2000-0021
N/A
Lotus Domino HTTP server allows remote attackers … n/a
n/a
2000-02-04T05:00:00 2024-08-08T04:58:11.587Z
CVE-2000-0028
N/A
Internet Explorer 5.0 and 5.01 allows remote atta… n/a
n/a
2000-02-04T05:00:00 2024-08-08T04:58:11.688Z
CVE-2000-0035
N/A
resend command in Majordomo allows local users to… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.647Z
CVE-2000-0038
N/A
glFtpD includes a default glftpd user account wit… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.654Z
CVE-2000-0046
N/A
Buffer overflow in ICQ 99b 1.1.1.1 client allows … n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.942Z
CVE-2000-0047
N/A
Buffer overflow in Yahoo Pager/Messenger client a… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.904Z
CVE-2000-0049
N/A
Buffer overflow in Winamp client allows remote at… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.791Z
CVE-2000-0054
N/A
search.cgi in the SolutionScripts Home Free packa… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.914Z
CVE-2000-0055
N/A
Buffer overflow in Solaris chkperm command allows… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.949Z
CVE-2000-0058
N/A
Network HotSync program in Handspring Visor does … n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.678Z
CVE-2000-0059
N/A
PHP3 with safe_mode enabled does not properly fil… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:54.163Z
CVE-2000-0061
N/A
Internet Explorer 5 does not modify the security … n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:52.954Z
CVE-2000-0066
N/A
WebSite Pro allows remote attackers to determine … n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.937Z
CVE-2000-0067
N/A
CyberCash Merchant Connection Kit (MCK) allows lo… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.972Z
CVE-2000-0068
N/A
daynad program in Intel InBusiness E-mail Station… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:52.987Z
CVE-2000-0069
N/A
The recover program in Solstice Backup allows loc… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.898Z
CVE-2000-0071
N/A
IIS 4.0 allows a remote attacker to obtain the re… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:54.101Z
CVE-2000-0074
N/A
PowerScripts PlusMail CGI program allows remote a… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.862Z
CVE-2000-0077
N/A
The October 1998 version of the HP-UX aserver pro… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.892Z
CVE-2000-0078
N/A
The June 1999 version of the HP-UX aserver progra… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.908Z
CVE-2000-0079
N/A
The W3C CERN httpd HTTP server allows remote atta… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.929Z
CVE-2000-0081
N/A
Hotmail does not properly filter JavaScript code … n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.974Z
CVE-2000-0082
N/A
WebTV email client allows remote attackers to for… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:52.722Z
CVE-2000-0084
N/A
CuteFTP uses weak encryption to store password in… n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.915Z
CVE-2000-0085
N/A
Hotmail does not properly filter JavaScript code … n/a
n/a
2000-02-04T05:00:00 2024-08-08T05:05:53.831Z
ID Description Published Updated
fkie_cve-1999-1172 By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modif… 1999-01-14T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1376 Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers … 1999-01-14T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1538 When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which doe… 1999-01-14T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0457 Linux ftpwatch program allows local users to gain root privileges. 1999-01-17T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0678 A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows… 1999-01-17T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0119 Windows NT 4.0 beta allows users to read and delete shares. 1999-01-19T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0451 Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any no… 1999-01-19T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0121 Buffer overflow in dtaction command gives root access. 1999-01-21T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1264 WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has bee… 1999-01-21T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1544 Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attack… 1999-01-24T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0352 ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption. 1999-01-25T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0356 ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book. 1999-01-25T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0357 Windows 98 and other operating systems allows remote attackers to cause a denial of service via cra… 1999-01-25T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1458 Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a … 1999-01-25T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0347 Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" … 1999-01-26T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0400 Denial of service in Linux 2.2.0 running the ldd command on a core file. 1999-01-26T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0449 The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumptio… 1999-01-26T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0450 In IIS, an attacker could determine a real path using a request for a non-existent URL that would b… 1999-01-26T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0348 IIS ASP caching problem releases sensitive information when two virtual servers share the same phys… 1999-01-27T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0349 A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial o… 1999-01-27T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1450 Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, an… 1999-01-27T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0461 Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to i… 1999-01-28T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0952 Buffer overflow in Solaris lpstat via class argument allows local users to gain root access. 1999-01-28T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-1546 netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS… 1999-01-29T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-2000-0370 The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metac… 1999-01-29T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0360 MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web s… 1999-01-30T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0291 The WinGate proxy is installed without a password, which allows remote attackers to redirect connec… 1999-02-01T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0351 FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by… 1999-02-01T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0358 Digital Unix 4.0 has a buffer overflow in the inc program of the mh package. 1999-02-01T05:00:00.000 2025-04-03T01:03:51.193
fkie_cve-1999-0373 Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows loc… 1999-02-01T05:00:00.000 2025-04-03T01:03:51.193
ID Severity Description Published Updated
ghsa-872g-2h8h-362q
9.8 (3.1)
Jetty contains an alias issue that could allow unauthenticated remote code execution due to special… 2018-10-19T16:16:16Z 2022-09-14T01:07:09Z
ghsa-84q7-p226-4x5w
7.5 (3.1)
Jetty vulnerable to cache poisoning due to inconsistent HTTP request handling (HTTP Request Smuggling) 2018-10-19T16:16:27Z 2022-09-14T01:08:10Z
ghsa-6x9x-8qw9-9pp6
9.8 (3.1)
Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Sm… 2018-10-19T16:16:38Z 2022-09-14T01:09:24Z
ghsa-qv32-7r6p-xhhh
7.5 (3.1)
Moderate severity vulnerability that affects com.adobe.xmp:xmpcore 2018-10-19T16:39:29Z 2021-09-16T21:06:35Z
ghsa-jc7r-v6fg-2gpf
8.1 (3.1)
Apache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.* 2018-10-19T16:40:01Z 2025-05-29T17:42:39Z
ghsa-269m-695x-j34p
9.8 (3.1)
Apache Qpid Broker vulnerable to authentication port spoofing 2018-10-19T16:41:04Z 2023-08-28T10:49:23Z
ghsa-4r7g-7cpj-5jr7
7.5 (3.1)
Apache Qpid Broker-J vulnerable to Denial of Service (DoS) via uncontrolled resource consumption 2018-10-19T16:41:15Z 2023-08-28T10:50:19Z
ghsa-hrmr-f5m6-m9pq
5.5 (3.1)
Moderate severity vulnerability that affects org.apache.commons:commons-compress 2018-10-19T16:41:27Z 2024-06-05T17:11:42Z
ghsa-6w3v-66mj-2qm6
5.9 (3.1)
Moderate severity vulnerability that affects org.apache.qpid:apache-qpid-broker-j 2018-10-19T16:41:46Z 2021-09-02T18:30:03Z
ghsa-p99p-726h-c8v5
8.1 (3.1)
Apache juddi-client vulnerable to XML External Entity (XXE) 2018-10-19T16:42:15Z 2022-09-14T19:12:48Z
ghsa-m9w8-v359-9ffr
7.4 (3.1)
Improper Certificate Validation in Apache activemq-client 2018-10-19T16:42:27Z 2022-11-17T19:38:02Z
ghsa-q25j-gcmv-5qpp
6.1 (3.1)
Stored Cross Site Scripting in Grails Fields Plugin 2018-10-19T16:46:01Z 2024-11-18T18:21:20Z
ghsa-vgvf-9jh3-fg75
8.8 (3.1)
Deserialization of Untrusted Data in swagger-codegen 2018-10-19T16:46:30Z 2022-09-14T19:14:19Z
ghsa-q7pf-qr96-2vq5
8.8 (3.1)
Deserialization of Untrusted Data in swagger-parser 2018-10-19T16:46:41Z 2022-09-14T19:14:55Z
ghsa-g556-x5vx-qh59
7.8 (3.1)
Android SVG vulnerable to XML External Entity (XXE) 2018-10-19T16:50:33Z 2022-09-14T19:15:38Z
ghsa-93jq-624g-4p9p
7.5 (3.1)
Improper Input Validation in async-http-client 2018-10-19T16:50:50Z 2022-09-14T19:16:10Z
ghsa-qvxv-pmq9-4q7g
7.8 (3.1)
High severity vulnerability that affects org.scala-lang:scala-compiler 2018-10-19T16:51:11Z 2021-09-16T21:08:26Z
ghsa-h3wv-47xm-4mg6
7.4 (3.1)
Server Side Request Forgery in svgSalamander 2018-10-19T16:51:25Z 2022-09-14T19:16:41Z
ghsa-4m9r-5gqp-7j82
7.5 (3.1)
High severity vulnerability that affects org.dspace:dspace-xmlui 2018-10-19T16:52:06Z 2021-06-11T14:37:55Z
ghsa-568q-9fw5-28wf
Moderate severity vulnerability that affects org.postgresql:pgjdbc-aggregate 2018-10-19T16:53:33Z 2020-06-16T21:00:08Z
ghsa-6xq8-pvg4-3mf3
10.0 (3.1)
Eclipse RDF4j vulnerable to XML External Entity 2018-10-19T16:54:11Z 2025-10-15T16:43:16Z
ghsa-3x7h-5hfr-hvjm
7.5 (3.1)
Moderate severity vulnerability that affects io.undertow:undertow-core 2018-10-19T16:54:56Z 2021-08-31T21:36:39Z
ghsa-mcfm-h73v-635m
6.5 (3.1)
Undertow-core vulnerable to HTTP Request Smuggling 2018-10-19T16:55:14Z 2022-09-14T19:18:03Z
ghsa-fmr4-w67p-vh8x
5.5 (3.1)
Improper Input Validation in org.wildfly:wildfly-undertow 2018-10-19T16:55:35Z 2023-02-13T20:36:36Z
ghsa-76qr-mmh8-cp8f
5.3 (3.1)
Moderate severity vulnerability that affects com.sparkjava:spark-core 2018-10-19T16:56:00Z 2021-09-02T19:24:32Z
ghsa-6cw8-7j6c-hccp
Moderate severity vulnerability that affects io.vertx:vertx-core 2018-10-19T17:43:36Z 2020-06-16T21:18:56Z
ghsa-h8w4-qv99-f7vj
8.1 (3.1)
Authorization bypass in org.springframework.security.oauth:spring-security-oauth2 2018-10-19T22:00:28Z 2024-03-04T21:20:57Z
ghsa-4cj8-g9cp-v5wr
9.8 (3.1)
Unrestricted Upload of File with Dangerous Type in blueimp-file-upload 2018-10-22T18:53:56Z 2022-09-14T19:19:04Z
ghsa-9qgc-p27w-3hjg
7.5 (3.1)
High severity vulnerability that affects com.typesafe.akka:akka-http-core_2.11 and com.typesafe.akk… 2018-10-22T20:37:07Z 2021-09-08T20:46:55Z
ghsa-mr95-9rr4-668f
9.1 (3.1)
Cryptographically Weak Pseudo-Random Number Generator (PRNG) in akka-actor 2018-10-22T20:44:26Z 2022-09-14T19:20:04Z
ID Severity Description Package Published Updated
pysec-2019-3
A flaw was found in ansible 2.8.0 before 2.8.4. Fields managing sensitive data should be … ansible 2019-11-25T16:15:00Z 2020-04-13T00:15:00Z
pysec-2019-177
An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature … ecdsa 2019-11-26T13:15:00Z 2021-08-27T03:22:03.507805Z
pysec-2019-146
ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None ansible 2019-11-26T14:15:00Z 2021-07-02T02:41:34.512855Z
pysec-2019-130
typed_ast 1.3.0 and 1.3.1 has a handle_keywordonly_args out-of-bounds read. An attacker w… typed-ast 2019-11-26T15:15:00Z 2020-03-14T02:15:00Z
pysec-2019-131
typed_ast 1.3.0 and 1.3.1 has an ast_for_arguments out-of-bounds read. An attacker with t… typed-ast 2019-11-26T15:15:00Z 2020-03-14T02:15:00Z
pysec-2019-168
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4… ipa 2019-11-27T08:15:00Z 2021-08-25T04:30:10.435825Z
pysec-2019-22
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4… freeipa 2019-11-27T08:15:00Z 2020-02-05T00:15:00Z
pysec-2019-28
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4… ipa 2019-11-27T09:15:00Z 2020-02-05T00:15:00Z
pysec-2019-135
When using wagtail-2fa before 1.3.0, if someone gains access to someone's Wagtail login c… wagtail-2fa 2019-11-29T17:15:00Z 2020-10-09T13:27:00Z
pysec-2019-15
Django 2.1 before 2.1.15 and 2.2 before 2.2.8 allows unintended model editing. A Django m… django 2019-12-02T14:15:00Z 2020-05-01T02:15:00Z
pysec-2019-134
The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when vali… validators 2019-12-05T01:15:00Z 2020-08-24T17:37:00Z
pysec-2019-29
OpenStack Keystone 15.0.0 and 16.0.0 is affected by Data Leakage in the list credentials … keystone 2019-12-09T18:15:00Z 2019-12-20T00:15:00Z
pysec-2019-154
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which … pyrad 2019-12-09T21:15:00Z 2021-07-05T00:01:25.106986Z
pysec-2019-161
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass python-keystoneclient 2019-12-10T15:15:00Z 2021-07-25T23:34:52.007420Z
pysec-2019-197
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass python-keystoneclient 2019-12-10T15:15:00Z 2021-08-27T03:22:18.277308Z
pysec-2019-105
The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Inject… modoboa-dmarc 2019-12-10T20:15:00Z 2019-12-19T15:11:00Z
pysec-2019-251
7.5 (3.1)
The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Inject… modoboa 2019-12-10T20:15:00Z 2024-12-02T10:49:36.349040Z
pysec-2019-200
python-requests-Kerberos through 0.5 does not handle mutual authentication requests-kerberos 2019-12-15T22:15:00Z 2021-08-27T03:22:19.338890Z
pysec-2019-209
In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced w… tensorflow 2019-12-16T21:15:00Z 2021-08-27T03:22:22.453759Z
pysec-2019-227
In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced w… tensorflow-cpu 2019-12-16T21:15:00Z 2021-08-27T03:22:22.453759Z
pysec-2019-234
In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced w… tensorflow-gpu 2019-12-16T21:15:00Z 2021-12-09T06:35:11.891064Z
pysec-2019-172
In Apache Incubator Superset before 0.31 user could query database metadata information f… apache-superset 2019-12-16T22:15:00Z 2020-08-24T17:37:00Z
pysec-2019-173
In Apache Incubator Superset before 0.32, a user can view database names that he has no a… apache-superset 2019-12-16T22:15:00Z 2019-12-19T18:24:00Z
pysec-2019-254
6.5 (3.1)
In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote m… tautulli 2019-12-18T18:15:00Z 2025-01-12T05:34:20.505254Z
pysec-2019-16
Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A … django 2019-12-18T19:15:00Z 2020-01-08T04:15:00Z
pysec-2019-136
Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Alt… waitress 2019-12-20T23:15:00Z 2020-02-25T17:15:00Z
pysec-2019-137
Waitress through version 1.3.1 would parse the Transfer-Encoding header and only look for… waitress 2019-12-20T23:15:00Z 2020-02-25T17:15:00Z
pysec-2019-138
In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an inv… waitress 2019-12-26T17:15:00Z 2020-02-25T17:15:00Z
pysec-2019-112
In Archery before 1.3, inserting an XSS payload into a project name (either by creating a… pyarchery 2019-12-26T23:15:00Z 2020-01-02T14:27:00Z
pysec-2020-160
Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x befor… ansible 2020-01-02T15:15:00Z 2020-04-13T00:15:00Z
ID Description Updated
ID Description Published Updated
MAL-2022-2374 Malicious code in dd-opentracing-cpp (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:55Z
MAL-2022-2375 Malicious code in dd-sdk-reactnative-example (npm) 2022-06-20T07:27:54Z 2022-06-20T07:28:02Z
MAL-2022-2569 Malicious code in doom-workers (npm) 2022-06-20T07:27:54Z 2022-06-20T07:28:03Z
MAL-2022-3076 Malicious code in flipper-plugin-ribtree (npm) 2022-06-20T07:27:54Z 2022-06-20T07:28:01Z
MAL-2022-3217 Malicious code in frontegg (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:54Z
MAL-2022-3218 Malicious code in frontegg-angular (npm) 2022-06-20T07:27:54Z 2022-06-20T07:28:01Z
MAL-2022-3219 Malicious code in frontegg-template-app (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:54Z
MAL-2022-3864 Malicious code in intercom-react-native.podspec (npm) 2022-06-20T07:27:54Z 2022-06-20T07:28:02Z
MAL-2022-3925 Malicious code in io.intercom.cordova.sample (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:55Z
MAL-2022-4568 Malicious code in metadata-api-nodejs (npm) 2022-06-20T07:27:54Z 2022-06-20T07:28:01Z
MAL-2022-4599 Malicious code in minicom-node (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:55Z
MAL-2022-4841 Malicious code in nft-tutorial (npm) 2022-06-20T07:27:54Z 2022-06-20T07:28:01Z
MAL-2022-4904 Malicious code in nodejs-driver (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:55Z
MAL-2022-5098 Malicious code in opensea-creatures (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:55Z
MAL-2022-5099 Malicious code in opensea-erc1155 (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:55Z
MAL-2022-5100 Malicious code in opensea-ships-log (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:55Z
MAL-2022-5192 Malicious code in pagespeed-server (npm) 2022-06-20T07:27:54Z 2022-06-20T07:28:02Z
MAL-2022-5469 Malicious code in procore-sample-ror (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:55Z
MAL-2022-5518 Malicious code in pulsar-sink-docs (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:55Z
MAL-2022-5978 Malicious code in sdk_repl_app (npm) 2022-06-20T07:27:54Z 2022-06-20T07:28:01Z
MAL-2022-6294 Malicious code in stargate-docs (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:55Z
MAL-2022-6814 Malicious code in upload-dsyms-github-action (npm) 2022-06-20T07:27:54Z 2022-06-20T07:28:02Z
MAL-2022-7002 Malicious code in vuestic-admin (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:55Z
MAL-2022-7378 Malicious code in zcli-monorepo (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:54Z
MAL-2022-832 Malicious code in action-prebuildify (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:55Z
MAL-2022-855 Malicious code in adelphi-api (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:55Z
mal-2022-1072 Malicious code in appsec-event-rules-tools (npm) 2022-06-20T07:27:54Z 2022-06-20T07:28:01Z
mal-2022-1148 Malicious code in astrajs (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:55Z
mal-2022-14 Malicious code in 0x-fee-wrapper-contract (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:55Z
mal-2022-1853 Malicious code in cdcrep-docs (npm) 2022-06-20T07:27:54Z 2022-06-20T07:27:55Z
ID Description Published Updated
wid-sec-w-2022-1574 ImageMagick: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2021-04-06T22:00:00.000+00:00 2024-08-05T22:00:00.000+00:00
wid-sec-w-2022-2072 Linux Kernel: Mehrere Schwachstellen 2021-04-06T22:00:00.000+00:00 2024-07-02T22:00:00.000+00:00
wid-sec-w-2023-1418 Python: Schwachstelle ermöglicht Offenlegung von Informationen 2021-04-06T22:00:00.000+00:00 2024-12-01T23:00:00.000+00:00
wid-sec-w-2023-2523 wpa_supplicant: Schwachstelle ermöglicht Manipulation von Dateien 2021-04-06T22:00:00.000+00:00 2024-06-26T22:00:00.000+00:00
wid-sec-w-2022-1353 Ansible Tower: Schwachstelle ermöglicht Offenlegung von Informationen 2021-04-07T22:00:00.000+00:00 2024-01-23T23:00:00.000+00:00
wid-sec-w-2022-2164 ImageMagick: Schwachstelle ermöglicht Offenlegung von Informationen 2021-04-07T22:00:00.000+00:00 2024-08-05T22:00:00.000+00:00
wid-sec-w-2023-1359 Apache Commons: Schwachstelle ermöglicht Offenlegung von Informationen 2021-04-12T22:00:00.000+00:00 2024-08-06T22:00:00.000+00:00
wid-sec-w-2022-1302 OpenJPEG: Schwachstelle ermöglicht Denial of Service 2021-04-14T22:00:00.000+00:00 2025-04-01T22:00:00.000+00:00
wid-sec-w-2023-1986 NAME:WRECK: Mehrere Schwachstellen in TCP/IP Stacks 2021-04-15T22:00:00.000+00:00 2024-02-12T23:00:00.000+00:00
wid-sec-w-2022-2071 Linux Kernel: Mehrere Schwachstellen 2021-04-18T22:00:00.000+00:00 2024-08-19T22:00:00.000+00:00
wid-sec-w-2022-0419 QEMU: Schwachstelle ermöglicht Denial of Service 2021-04-19T22:00:00.000+00:00 2023-04-27T22:00:00.000+00:00
wid-sec-w-2022-1303 Oracle Java SE: Mehrere Schwachstellen 2021-04-20T22:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2023-0065 Oracle MySQL: Mehrere Schwachstellen 2021-04-20T22:00:00.000+00:00 2023-09-27T22:00:00.000+00:00
wid-sec-w-2022-2341 Nvidia GPU Display-Treiber: Mehrere Schwachstellen 2021-04-21T22:00:00.000+00:00 2023-10-03T22:00:00.000+00:00
wid-sec-w-2023-2844 SaltStack Salt: Schwachstelle ermöglicht Privilegieneskalation 2021-04-22T22:00:00.000+00:00 2023-11-06T23:00:00.000+00:00
wid-sec-w-2023-0098 Apache Maven: Schwachstelle ermöglicht Manipulation von Dateien oder Offenlegung von Informationen 2021-04-25T22:00:00.000+00:00 2025-02-02T23:00:00.000+00:00
wid-sec-w-2022-1660 systemd: Schwachstelle ermöglicht Denial of Service 2021-04-26T22:00:00.000+00:00 2025-02-17T23:00:00.000+00:00
wid-sec-w-2022-2340 Nvidia Treiber: Mehrere Schwachstellen 2021-04-26T22:00:00.000+00:00 2022-12-14T23:00:00.000+00:00
wid-sec-w-2023-1152 libxml2: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2021-04-27T22:00:00.000+00:00 2024-12-03T23:00:00.000+00:00
wid-sec-w-2022-1575 wget: Schwachstelle ermöglicht Offenlegung von Informationen 2021-04-28T22:00:00.000+00:00 2025-02-11T23:00:00.000+00:00
wid-sec-w-2023-0337 Mehrere Cisco Produkte: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2021-04-28T22:00:00.000+00:00 2023-02-12T23:00:00.000+00:00
wid-sec-w-2023-2980 Samba: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2021-04-28T22:00:00.000+00:00 2023-11-21T23:00:00.000+00:00
wid-sec-w-2022-1108 QEMU: Schwachstelle ermöglicht Denial of Service 2021-05-02T22:00:00.000+00:00 2024-09-02T22:00:00.000+00:00
wid-sec-w-2023-2461 Ruby: Schwachstelle ermöglicht Codeausführung 2021-05-02T22:00:00.000+00:00 2025-04-22T22:00:00.000+00:00
wid-sec-w-2024-1887 CUPS: Eine Schwachstelle ermöglicht Privilegieneskalation 2021-05-02T22:00:00.000+00:00 2024-08-20T22:00:00.000+00:00
wid-sec-w-2022-1109 binutils: Schwachstelle ermöglicht Denial of Service 2021-05-03T22:00:00.000+00:00 2022-11-29T23:00:00.000+00:00
wid-sec-w-2023-2460 Python: Schwachstelle ermöglicht Manipulation 2021-05-03T22:00:00.000+00:00 2024-12-01T23:00:00.000+00:00
wid-sec-w-2022-1354 Red Hat Enterprise Linux: Mehrere Schwachstellen 2021-05-04T22:00:00.000+00:00 2025-12-21T23:00:00.000+00:00
wid-sec-w-2022-1794 Xen: Schwachstelle ermöglicht Offenlegung von Informationen 2021-05-04T22:00:00.000+00:00 2022-11-28T23:00:00.000+00:00
wid-sec-w-2022-0341 Ruby on Rails: Mehrere Schwachstellen 2021-05-05T22:00:00.000+00:00 2022-12-08T23:00:00.000+00:00
ID Description Published Updated
rhba-2004:164 Red Hat Bug Fix Advisory: Updated vsftpd package fixes signal handling bug 2004-05-11T00:00:00+00:00 2025-11-21T17:20:45+00:00
rhba-2004_164 Red Hat Bug Fix Advisory: Updated vsftpd package fixes signal handling bug 2004-05-11T00:00:00+00:00 2024-11-21T23:01:38+00:00
rhsa-2004:188 Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 3 Update 2 2004-05-12T01:07:00+00:00 2026-01-08T09:18:09+00:00
rhsa-2004_188 Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 3 Update 2 2004-05-12T01:07:00+00:00 2024-11-21T23:03:13+00:00
rhsa-2004:165 Red Hat Security Advisory: ipsec-tools security update 2004-05-12T03:21:00+00:00 2025-11-21T17:27:17+00:00
rhsa-2004_165 Red Hat Security Advisory: ipsec-tools security update 2004-05-12T03:21:00+00:00 2024-11-21T23:02:18+00:00
rhsa-2004:222 Red Hat Security Advisory: kdelibs security update 2004-05-17T21:09:00+00:00 2025-11-21T17:27:24+00:00
rhsa-2004_222 Red Hat Security Advisory: kdelibs security update 2004-05-17T21:09:00+00:00 2024-11-21T23:03:53+00:00
rhsa-2004:190 Red Hat Security Advisory: cvs security update 2004-05-19T06:45:00+00:00 2025-11-21T17:27:21+00:00
rhsa-2004_190 Red Hat Security Advisory: cvs security update 2004-05-19T06:45:00+00:00 2024-11-21T23:03:19+00:00
rhsa-2004:191 Red Hat Security Advisory: cadaver security update 2004-05-19T06:46:00+00:00 2025-11-21T17:27:22+00:00
rhsa-2004_191 Red Hat Security Advisory: cadaver security update 2004-05-19T06:46:00+00:00 2024-11-21T23:03:21+00:00
rhsa-2004:192 Red Hat Security Advisory: rsync security update 2004-05-19T19:03:00+00:00 2025-11-21T17:27:22+00:00
rhsa-2004_192 Red Hat Security Advisory: rsync security update 2004-05-19T19:03:00+00:00 2024-11-21T23:03:35+00:00
rhsa-2004:172 Red Hat Security Advisory: mc security update 2004-05-19T19:04:00+00:00 2025-11-21T17:27:22+00:00
rhsa-2004_172 Red Hat Security Advisory: mc security update 2004-05-19T19:04:00+00:00 2024-11-21T23:02:05+00:00
rhsa-2004:180 Red Hat Security Advisory: libpng security update 2004-05-19T20:32:00+00:00 2025-11-21T17:27:19+00:00
rhsa-2004_180 Red Hat Security Advisory: libpng security update 2004-05-19T20:32:00+00:00 2024-11-21T23:02:53+00:00
rhsa-2004:174 Red Hat Security Advisory: utempter security update 2004-05-26T07:45:00+00:00 2025-11-21T17:27:18+00:00
rhsa-2004_174 Red Hat Security Advisory: utempter security update 2004-05-26T07:45:00+00:00 2024-11-21T23:02:29+00:00
rhsa-2004:178 Red Hat Security Advisory: lha security update 2004-05-26T07:46:00+00:00 2025-11-21T17:27:19+00:00
rhsa-2004_178 Red Hat Security Advisory: lha security update 2004-05-26T07:46:00+00:00 2024-11-21T23:02:47+00:00
rhsa-2004:219 Red Hat Security Advisory: tcpdump security update 2004-05-26T07:47:00+00:00 2025-11-21T17:27:23+00:00
rhsa-2004_219 Red Hat Security Advisory: tcpdump security update 2004-05-26T07:47:00+00:00 2024-11-21T23:03:43+00:00
rhsa-2004:234 Red Hat Security Advisory: ethereal security update 2004-06-09T12:50:00+00:00 2025-11-21T17:27:24+00:00
rhsa-2004_234 Red Hat Security Advisory: ethereal security update 2004-06-09T12:50:00+00:00 2024-11-21T23:04:15+00:00
rhsa-2004:242 Red Hat Security Advisory: squid security update 2004-06-09T12:52:00+00:00 2025-11-21T17:27:25+00:00
rhsa-2004_242 Red Hat Security Advisory: squid security update 2004-06-09T12:52:00+00:00 2024-11-21T23:05:18+00:00
rhsa-2004:236 Red Hat Security Advisory: krb5 security update 2004-06-09T12:55:00+00:00 2025-11-21T17:27:24+00:00
rhsa-2004_236 Red Hat Security Advisory: krb5 security update 2004-06-09T12:55:00+00:00 2024-11-21T23:04:50+00:00
ID Description Published Updated
icsa-18-137-03 Siemens SIMATIC S7-400 CPU (Update A) 2018-05-15T00:00:00.000000Z 2020-02-10T00:00:00.000000Z
icsa-18-137-01 GE PACSystems CPE305/310, CPE330, CPE400, RSTi-EP CPE 100, CPU320/CRU320, RXi 2018-05-17T00:00:00.000000Z 2018-05-17T00:00:00.000000Z
icsa-18-137-02 PHOENIX CONTACT FL SWITCH 3xxx/4xxx/48xx Series 2018-05-17T00:00:00.000000Z 2018-05-17T00:00:00.000000Z
icsa-18-137-04 Delta Electronics Delta Industrial Automation TPEditor (Update A) 2018-05-17T00:00:00.000000Z 2018-06-07T00:00:00.000000Z
icsma-18-137-01 Medtronic N'Vision Clinician Programmer (Update A) 2018-05-17T00:00:00.000000Z 2018-07-12T00:00:00.000000Z
icsma-18-137-02 Philips EncoreAnywhere 2018-05-17T06:00:00.000000Z 2018-05-17T06:00:00.000000Z
icsa-18-142-01 Martem TELEM-GW6/GWM (Update B) 2018-05-22T00:00:00.000000Z 2018-08-30T00:00:00.000000Z
icsma-18-142-01 BD Kiestra and InoquIA Systems (Update A) 2018-05-22T00:00:00.000000Z 2018-10-11T00:00:00.000000Z
icsa-18-144-01 Schneider Electric Floating License Manager 2018-05-24T00:00:00.000000Z 2018-05-24T00:00:00.000000Z
icsma-18-144-01 BeaconMedaes TotalAlert Scroll Medical Air Systems 2018-05-24T00:00:00.000000Z 2018-05-24T00:00:00.000000Z
icsa-18-151-01 ICSA-18-151-01_Delta Industrial Automation DOPSoft 2018-05-31T00:00:00.000000Z 2018-05-31T00:00:00.000000Z
icsa-18-151-02 GE MDS PulseNET and MDS PulseNET Enterprise 2018-05-31T00:00:00.000000Z 2018-05-31T00:00:00.000000Z
icsa-18-151-03 Yokogawa STARDOM Controllers (Update A) 2018-05-31T00:00:00.000000Z 2018-10-11T00:00:00.000000Z
icsa-18-156-01 ABB IP Gateway 2018-06-05T00:00:00.000000Z 2018-06-05T00:00:00.000000Z
icsma-18-156-01 Philips' IntelliVue Patient and Avalon Fetal Monitors 2018-06-05T00:00:00.000000Z 2018-06-05T00:00:00.000000Z
icsa-18-158-01 Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway 2018-06-07T00:00:00.000000Z 2018-06-07T00:00:00.000000Z
icsa-18-163-01 Schneider Electric U.motion Builder 2018-06-12T00:00:00.000000Z 2018-06-12T00:00:00.000000Z
icsa-18-163-02 Siemens SCALANCE X Switches (Update A) 2018-06-12T00:00:00.000000Z 2022-12-13T00:00:00.000000Z
icsa-18-165-01 Siemens SCALANCE X Switches, RUGGEDCOM WiMAX, RFID 181-EIP, and SIMATIC RF182C (Update D) 2018-06-14T00:00:00.000000Z 2020-12-08T00:00:00.000000Z
icsma-18-165-01 Natus Xltek NeuroWorks 2018-06-14T00:00:00.000000Z 2018-06-14T00:00:00.000000Z
icsa-18-172-01 Delta Electronics Delta Industrial Automation COMMGR 2018-06-21T00:00:00.000000Z 2018-06-21T00:00:00.000000Z
icsa-18-172-02 Rockwell Automation Allen-Bradley CompactLogix and Compact GuardLogix (Update A) 2018-06-21T00:00:00.000000Z 2018-07-17T00:00:00.000000Z
icsma-18-179-01 Medtronic MyCareLink Patient Monitor 2018-06-28T00:00:00.000000Z 2018-06-28T00:00:00.000000Z
icsa-18-184-01 Rockwell Automation Allen-Bradley Stratix 5950 2018-07-03T00:00:00.000000Z 2018-07-03T00:00:00.000000Z
icsa-18-191-01 Universal Robots Robot Controllers 2018-07-10T00:00:00.000000Z 2018-07-10T00:00:00.000000Z
icsa-18-191-02 Schweitzer Engineering Laboratories, Inc. Compass and AcSELerator Architect 2018-07-10T00:00:00.000000Z 2018-07-10T00:00:00.000000Z
icsa-18-191-03 Tridium Niagara 2018-07-10T00:00:00.000000Z 2018-08-16T00:00:00.000000Z
icsa-18-193-01 Eaton 9000X Drive 2018-07-12T00:00:00.000000Z 2018-07-12T00:00:00.000000Z
icsa-18-198-01 ABB Panel Builder 800 2018-07-17T00:00:00.000000Z 2018-07-17T00:00:00.000000Z
icsa-18-198-02 WAGO e!DISPLAY Web-Based-Management 2018-07-17T00:00:00.000000Z 2018-07-17T00:00:00.000000Z
ID Description Published Updated
cisco-sa-20190821-roomos-privesc Cisco RoomOS Software Privilege Escalation Vulnerability 2019-08-21T16:00:00+00:00 2019-08-21T16:00:00+00:00
cisco-sa-20190821-rphy Cisco Remote PHY Device Software Command Injection Vulnerability 2019-08-21T16:00:00+00:00 2019-08-21T16:00:00+00:00
cisco-sa-20190821-ucs-cimc Cisco Integrated Management Controller Command Injection Vulnerability 2019-08-21T16:00:00+00:00 2019-08-21T16:00:00+00:00
cisco-sa-20190821-ucs-imc-dos Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Denial of Service Vulnerability 2019-08-21T16:00:00+00:00 2019-08-21T16:00:00+00:00
cisco-sa-20190821-ucsd-authbypass Cisco UCS Director and Cisco UCS Director Express for Big Data API Authentication Bypass Vulnerability 2019-08-21T16:00:00+00:00 2019-08-21T16:00:00+00:00
cisco-sa-20190821-webex-ssl-cert Cisco Webex Meetings Mobile (iOS) SSL Certificate Validation Vulnerability 2019-08-21T16:00:00+00:00 2019-08-21T16:00:00+00:00
cisco-sa-20190828-fxnxos-snmp-dos Cisco FXOS and NX-OS Software Authenticated Simple Network Management Protocol Denial of Service Vulnerability 2019-08-28T16:00:00+00:00 2019-10-08T14:45:55+00:00
cisco-sa-20190828-iosxe-rest-auth-bypass Cisco REST API Container for IOS XE Software Authentication Bypass Vulnerability 2019-08-28T16:00:00+00:00 2019-10-18T16:08:02+00:00
cisco-sa-20190828-nexus-aci-dos Cisco Nexus 9000 Series Fabric Switches ACI Mode Border Leaf Endpoint Learning Vulnerability 2019-08-28T16:00:00+00:00 2019-08-28T16:00:00+00:00
cisco-sa-20190828-nxos-api-dos Cisco NX-OS Software NX-API Denial of Service Vulnerability 2019-08-28T16:00:00+00:00 2019-08-28T16:00:00+00:00
cisco-sa-20190828-nxos-fsip-dos Cisco NX-OS Software Cisco Fabric Services over IP Denial of Service Vulnerability 2019-08-28T16:00:00+00:00 2019-10-08T14:45:56+00:00
cisco-sa-20190828-nxos-ipv6-dos Cisco NX-OS Software IPv6 Denial of Service Vulnerability 2019-08-28T16:00:00+00:00 2019-08-28T16:00:00+00:00
cisco-sa-20190828-nxos-memleak-dos Cisco NX-OS Software Remote Management Memory Leak Denial of Service Vulnerability 2019-08-28T16:00:00+00:00 2019-10-08T14:45:53+00:00
cisco-sa-20190828-nxos-ntp-dos Cisco NX-OS Software Network Time Protocol Denial of Service Vulnerability 2019-08-28T16:00:00+00:00 2019-10-08T14:45:52+00:00
cisco-sa-20190828-nxos-snmp-bypass Cisco NX-OS Software SNMP Access Control List Configuration Name Bypass Vulnerability 2019-08-28T16:00:00+00:00 2019-08-28T16:00:00+00:00
cisco-sa-20190828-ucs-privescalation Cisco Unified Computing System Fabric Interconnect root Privilege Escalation Vulnerability 2019-08-28T16:00:00+00:00 2019-10-08T14:45:54+00:00
cisco-sa-20190904-finesse-ssrf Cisco Finesse Request Processing Server-Side Request Forgery Vulnerability 2019-09-04T16:00:00+00:00 2019-09-04T16:00:00+00:00
cisco-sa-20190904-ind Cisco Industrial Network Director Configuration Data Information Disclosure Vulnerability 2019-09-04T16:00:00+00:00 2019-09-04T16:00:00+00:00
cisco-sa-20190904-ise-xss Cisco Identity Services Engine Cross-Site Scripting Vulnerability 2019-09-04T16:00:00+00:00 2020-07-16T17:26:05+00:00
cisco-sa-20190904-jcf-codex Cisco Jabber Client Framework for Mac Code Execution Vulnerability 2019-09-04T16:00:00+00:00 2019-09-04T16:00:00+00:00
cisco-sa-20190904-sma-info-dis Cisco Content Security Management Appliance and Cisco Email Security Appliance Information Disclosure Vulnerability 2019-09-04T16:00:00+00:00 2020-09-21T18:29:00+00:00
cisco-sa-20190904-unified-ccx-ssrf Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability 2019-09-04T16:00:00+00:00 2019-09-04T16:00:00+00:00
cisco-sa-20190904-webex-teams Cisco Webex Teams Logging Feature Command Execution Vulnerability 2019-09-04T16:00:00+00:00 2019-09-04T16:00:00+00:00
cisco-sa-20190918-hyperflex-valinj Cisco HyperFlex Software Counter Value Injection Vulnerability 2019-09-18T16:00:00+00:00 2019-09-18T16:00:00+00:00
cisco-sa-20190918-hyperflex-xfs Cisco HyperFlex Software Cross-Frame Scripting Vulnerability 2019-09-18T16:00:00+00:00 2019-09-18T16:00:00+00:00
cisco-sa-20190925-awr Cisco IOS XE Software ASIC Register Write Vulnerability 2019-09-25T16:00:00+00:00 2019-09-25T16:00:00+00:00
cisco-sa-20190925-cat4000-tcp-dos Cisco Catalyst 4000 Series Switches TCP Denial of Service Vulnerability 2019-09-25T16:00:00+00:00 2019-09-25T16:00:00+00:00
cisco-sa-20190925-ctspac-dos Cisco IOS XE Software TrustSec Protected Access Credential Provisioning Denial of Service Vulnerability 2019-09-25T16:00:00+00:00 2019-09-25T16:00:00+00:00
cisco-sa-20190925-dt Cisco IOS XE Software Path Traversal Vulnerability 2019-09-25T16:00:00+00:00 2019-09-25T16:00:00+00:00
cisco-sa-20190925-ftp Cisco IOS XE Software FTP Application Layer Gateway for NAT, NAT64, and ZBFW Denial of Service Vulnerability 2019-09-25T16:00:00+00:00 2019-11-20T15:15:59+00:00
ID Description Published Updated
msrc_cve-2020-29534 An issue was discovered in the Linux kernel before 5.9.3. io_uring takes a non-refcounted reference to the files_struct of the process that submitted a request causing execve() to incorrectly optimize unshare_fd() aka CID-0f2122045b94. 2020-12-02T00:00:00.000Z 2020-12-08T00:00:00.000Z
msrc_cve-2020-29569 An issue was discovered in the Linux kernel through 5.10.1 as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to reset ring->xenblkd to NULL when stopped. However the handler may not have time to run if the frontend quickly toggles between the states connect and disconnect. As a consequence the block backend may re-use a pointer after it was freed. A misbehaving guest can trigger a dom0 crash by continuously connecting / disconnecting a block frontend. Privilege escalation and information leaks cannot be ruled out. This only affects systems with a Linux blkback. 2020-12-02T00:00:00.000Z 2020-12-19T00:00:00.000Z
msrc_cve-2020-29651 A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality. 2020-12-02T00:00:00.000Z 2020-12-21T00:00:00.000Z
msrc_cve-2020-29660 A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID aka CID-c8bcd9c5be24. 2020-12-02T00:00:00.000Z 2020-12-11T00:00:00.000Z
msrc_cve-2020-29661 A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP aka CID-54ffccbf053b. 2020-12-02T00:00:00.000Z 2020-12-11T00:00:00.000Z
msrc_cve-2020-35457 GNOME GLib before 2.65.3 has an integer overflow that might lead to an out-of-bounds write in g_option_group_add_entries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of calls to g_option_group_add_entries()." The researcher states that this pattern is undocumented 2020-12-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2020-8169 curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s). 2020-12-02T00:00:00.000Z 2020-12-15T00:00:00.000Z
msrc_cve-2020-8177 curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used. 2020-12-02T00:00:00.000Z 2020-12-15T00:00:00.000Z
msrc_cve-2020-8231 Due to use of a dangling pointer libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data. 2020-12-02T00:00:00.000Z 2020-12-17T00:00:00.000Z
msrc_cve-2020-8284 A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port and this way potentially make curl extract information about services that are otherwise private and not disclosed for example doing port scanning and service banner extractions. 2020-12-02T00:00:00.000Z 2020-12-16T00:00:00.000Z
msrc_cve-2020-8285 curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing. 2020-12-02T00:00:00.000Z 2020-12-15T00:00:00.000Z
msrc_cve-2020-8286 curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response. 2020-12-02T00:00:00.000Z 2020-12-15T00:00:00.000Z
msrc_cve-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager 2020-12-02T00:00:00.000Z 2020-12-09T00:00:00.000Z
msrc_cve-2020-8565 Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9 2020-12-02T00:00:00.000Z 2025-03-27T00:00:00.000Z
msrc_cve-2020-8908 Temp directory permission issue in Guava 2020-12-02T00:00:00.000Z 2023-04-07T00:00:00.000Z
msrc_cve-2019-25013 The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32 when processing invalid multi-byte input sequences in the EUC-KR encoding may have a buffer over-read. 2021-01-02T00:00:00.000Z 2021-01-07T00:00:00.000Z
msrc_cve-2020-17380 A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() routine in hw/sd/sdhci.c. A guest user or process could use this flaw to crash the QEMU process on the host resulting in a denial of service condition or potentially execute arbitrary code with privileges of the QEMU process on the host. 2021-01-02T00:00:00.000Z 2021-02-06T00:00:00.000Z
msrc_cve-2020-24025 Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path. 2021-01-02T00:00:00.000Z 2023-07-31T00:00:00.000Z
msrc_cve-2020-25657 A flaw was found in all released versions of m2crypto where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality. 2021-01-02T00:00:00.000Z 2024-06-30T07:00:00.000Z
msrc_cve-2020-25659 python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API via timed processing of valid PKCS#1 v1.5 ciphertext. 2021-01-02T00:00:00.000Z 2021-01-20T00:00:00.000Z
msrc_cve-2020-25681 A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network who can forge DNS replies such as that they are accepted as valid could use this flaw to cause a buffer overflow with arbitrary data in a heap memory segment possibly executing code on the machine. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. 2021-01-02T00:00:00.000Z 2021-01-29T00:00:00.000Z
msrc_cve-2020-25682 A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. An attacker on the network who can create valid DNS replies could use this flaw to cause an overflow with arbitrary data in a heap-allocated memory possibly executing code on the machine. The flaw is in the rfc1035.c:extract_name() function which writes data to the memory pointed by name assuming MAXDNAME*2 bytes are available in the buffer. However in some code execution paths it is possible extract_name() gets passed an offset from the base buffer thus reducing in practice the number of available bytes that can be written in the buffer. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. 2021-01-02T00:00:00.000Z 2021-01-29T00:00:00.000Z
msrc_cve-2020-25683 A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker who can create valid DNS replies could use this flaw to cause an overflow in a heap-allocated memory. This flaw is caused by the lack of length checks in rfc1035.c:extract_name() which could be abused to make the code execute memcpy() with a negative size in get_rdata() and cause a crash in dnsmasq resulting in a denial of service. The highest threat from this vulnerability is to system availability. 2021-01-02T00:00:00.000Z 2021-01-27T00:00:00.000Z
msrc_cve-2020-25684 A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is used by the pending forwarded queries. However it does not use the address/port to retrieve the exact forwarded query substantially reducing the number of attempts an attacker on the network would have to perform to forge a reply and get it accepted by dnsmasq. This issue contrasts with RFC5452 which specifies a query's attributes that all must be used to match a reply. This flaw allows an attacker to perform a DNS Cache Poisoning attack. If chained with CVE-2020-25685 or CVE-2020-25686 the attack complexity of a successful attack is reduced. The highest threat from this vulnerability is to data integrity. 2021-01-02T00:00:00.000Z 2021-01-29T00:00:00.000Z
msrc_cve-2020-25685 A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query dnsmasq checks in forward.c:reply_query() which is the forwarded query that matches the reply by only using a weak hash of the query name. Due to the weak hash (CRC32 when dnsmasq is compiled without DNSSEC SHA-1 when it is) this flaw allows an off-path attacker to find several different domains all having the same hash substantially reducing the number of attempts they would have to perform to forge a reply and get it accepted by dnsmasq. This is in contrast with RFC5452 which specifies that the query name is one of the attributes of a query that must be used to match a reply. This flaw could be abused to perform a DNS Cache Poisoning attack. If chained with CVE-2020-25684 the attack complexity of a successful attack is reduced. The highest threat from this vulnerability is to data integrity. 2021-01-02T00:00:00.000Z 2021-01-29T00:00:00.000Z
msrc_cve-2020-25686 A flaw was found in dnsmasq before version 2.83. When receiving a query dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default a maximum of 150 pending queries can be sent to upstream servers so there can be at most 150 queries for the same name. This flaw allows an off-path attacker on the network to substantially reduce the number of attempts that it would have to perform to forge a reply and have it accepted by dnsmasq. This issue is mentioned in the "Birthday Attacks" section of RFC5452. If chained with CVE-2020-25684 the attack complexity of a successful attack is reduced. The highest threat from this vulnerability is to data integrity. 2021-01-02T00:00:00.000Z 2021-01-27T00:00:00.000Z
msrc_cve-2020-25687 A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. This flaw allows a remote attacker who can create valid DNS replies to cause an overflow in a heap-allocated memory. This flaw is caused by the lack of length checks in rfc1035.c:extract_name() which could be abused to make the code execute memcpy() with a negative size in sort_rrset() and cause a crash in dnsmasq resulting in a denial of service. The highest threat from this vulnerability is to system availability. 2021-01-02T00:00:00.000Z 2021-01-27T00:00:00.000Z
msrc_cve-2020-27814 A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application. 2021-01-02T00:00:00.000Z 2024-07-23T00:00:00.000Z
msrc_cve-2020-27841 There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability. 2021-01-02T00:00:00.000Z 2024-07-23T00:00:00.000Z
msrc_cve-2020-27842 There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability. 2021-01-02T00:00:00.000Z 2024-07-23T00:00:00.000Z
ID Description Updated
var-201705-4200 Buffalo is a router made by an American company. The Buffalo routing product has a gener… 2022-05-04T09:17:31.900000Z
var-201703-1384 Wireless IP Camera (P2P) WIFICAM is a wireless IP camera. Wireless IP Camera (P2P) W… 2022-05-04T09:17:40.172000Z
var-201702-1105 TP-Link is a Chinese network equipment manufacturer such as routers and IOT equipment. Th… 2022-05-04T09:17:41.460000Z
var-201612-0647 HollySys, founded in 1993, is a provider of automation and information technology solutio… 2022-05-04T09:17:46.515000Z
var-201609-0696 ASUSRT-N10EWirelessRouter is a wireless router device developed by ASUS. A cross-site scr… 2022-05-04T09:17:47.868000Z
var-201601-0675 The user's password is generated using a simpler algorithm , The attacker can obtain the … 2022-05-04T09:17:57.487000Z
var-201507-0712 Tableau Server is enterprise intelligence software that provides browser-based analysis t… 2022-05-04T09:18:03.671000Z
var-201408-0478 Hikvision video network monitoring system iVMS-8100 is a set of video network monitoring … 2022-05-04T09:18:13.880000Z
var-201406-0507 XML link function of Hitachi COBOL2002 contains vulnerabilities to conduct information le… 2022-05-04T09:18:15.251000Z
var-201401-0739 The Appotech AX211 / AX215 is a microcontroller device. The Appotech AX211 / AX215 8-bit … 2022-05-04T09:18:21.619000Z
var-201312-0603 Alvarion BreezeACCESS VL is a wireless bridge device that is a flexible, proven point-to-… 2022-05-04T09:18:22.392000Z
var-201310-0804 The Netgear WNDR3700 is a router device. The Netgear WNDR3700 Router sprintf() function h… 2022-05-04T09:18:26.601000Z
var-201211-0603 NETGEAR NTV300 (NeoTV) is a set-top box device. NETGEAR NTV300 (NeoTV) has defects. The s… 2022-05-04T09:19:01.223000Z
var-201009-0313 YOPS (Your Own Personal [WEB] Server) is a Linux platform HTTP server written in C. The h… 2022-05-04T09:19:21.549000Z
var-201003-0532 Computer systems running the JP1/Cm2/Network Node Manager (NNM) Remote Console for Window… 2022-05-04T09:19:25.598000Z
var-201001-0329 Apache HTTP Server is a popular web server. The Apache server's mod_proxy module has an i… 2022-05-04T09:19:26.600000Z
var-200909-0584 Hitachi JP1/File Transmission Server/FTP contains multiple vulnerabilities that could all… 2022-05-04T09:19:31.130000Z
var-200811-0453 SpeedStream 5200 is an ADSL router for SMEs.  The authentication process of the SpeedStr… 2022-05-04T09:19:42.213000Z
var-200712-0453 Provided by Hitachi JP1/Cm2/Network Node Manager (NNM) Contains a cross-site scripting vu… 2022-05-04T09:19:57.162000Z
var-202112-1088 TOTOLINK EX1200T is a wireless signal booster. TOTOLINK EX1200T has an information di… 2022-05-04T09:21:11.424000Z
var-202111-1526 IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive info… 2022-05-04T09:21:12.415000Z
var-202110-1912 Huawei Technologies Co., Ltd. is the world's leading provider of information and communic… 2022-05-04T09:21:13.900000Z
var-202108-2306 Tenda AC9 is a wireless router with gigabit Ethernet port launched by Shenzhen Jixiang Te… 2022-05-04T09:21:16.485000Z
var-202108-2327 Pacom is a Swedish company. Pacom 8501 Input/Output Module has a weak password vulner… 2022-05-04T09:21:16.469000Z
var-202108-2369 MX-2314N is a printer of Sharp Trading (China) Co., Ltd. Sharp Trading (China) Co., L… 2022-05-04T09:21:16.458000Z
var-202108-2390 Fuji Xerox (China) Co., Ltd. was established on January 3, 1995. It is a wholly-owned hol… 2022-05-04T09:21:16.447000Z
var-202108-2411 HP Color LaserJet Pro M252n is a laser printer under Hewlett-Packard (HP). The HP Col… 2022-05-04T09:21:16.436000Z
var-202108-2432 Samsung (China) Investment Co., Ltd. is the headquarters of Samsung Group in China. As of… 2022-05-04T09:21:16.424000Z
var-202108-2453 SL-M4020ND is a laser printer of Samsung (China) Investment Co., Ltd. Samsung (China)… 2022-05-04T09:21:16.409000Z
var-202108-2474 Toshiba (China) Co., Ltd. is a company mainly engaged in Toshiba's four major business ar… 2022-05-04T09:21:16.397000Z
ID Description Published Updated
jvndb-2012-000111 Boat Browser / Boat Browser Mini vulnerable in the WebView class 2012-12-20T15:00+09:00 2012-12-20T15:00+09:00
jvndb-2012-000112 Opera Mini / Opera Mobile for Android vulnerable in the WebView class 2012-12-20T15:04+09:00 2012-12-28T16:13+09:00
jvndb-2012-000114 Loctouch for Android vulnerable in handling of implicit intents 2012-12-21T12:29+09:00 2012-12-21T12:29+09:00
jvndb-2012-000115 Loctouch for Android information management vulnerability 2012-12-21T12:37+09:00 2012-12-21T12:37+09:00
jvndb-2012-000113 concrete5 vulnerable to cross-site scripting 2012-12-21T12:41+09:00 2013-02-20T16:10+09:00
jvndb-2012-005827 Cross-site Scripting Vulnerability in Collaboration - Bulletin board in Multiple Hitachi Products 2012-12-28T16:43+09:00 2012-12-28T16:43+09:00
jvndb-2013-000001 Documents Pro (formerly Files HD) vulnerable to cross-site scripting 2013-01-18T13:36+09:00 2013-01-18T13:36+09:00
jvndb-2013-000002 Documents Pro (formerly Files HD) vulnerable to directory traversal 2013-01-18T13:39+09:00 2013-01-18T13:39+09:00
jvndb-2013-000003 myu-s / PHP WeblogSystem by netmania vulnerable to cross-site scripting 2013-01-22T15:22+09:00 2013-01-22T15:22+09:00
jvndb-2013-000004 WebSphere Application Server (WAS) vulnerable to cross-site scripting 2013-01-25T12:32+09:00 2013-01-25T12:32+09:00
jvndb-2013-000005 Weathernews Touch for Android stores location information in the system log file 2013-01-31T13:38+09:00 2013-01-31T13:38+09:00
jvndb-2013-000006 mora Downloader may insecurely load executable files 2013-02-07T14:00+09:00 2013-02-07T14:00+09:00
jvndb-2013-000008 Cybozu Garoon vulnerable to cross-site scripting 2013-02-08T13:53+09:00 2013-02-08T13:53+09:00
jvndb-2013-000007 Cybozu Garoon vulnerable to SQL injection 2013-02-08T13:58+09:00 2013-02-08T13:58+09:00
jvndb-2013-001321 User Authentication Vulnerability in Operational Management Function of Cosminexus 2013-02-12T14:24+09:00 2013-02-12T14:24+09:00
jvndb-2013-001470 Accela BizSearch Gateway Option for TeamWARE Spoofing Vulnerability 2013-02-13T16:47+09:00 2013-02-13T16:47+09:00
jvndb-2013-000009 imgboard vulnerable to cross-site scripting 2013-02-14T14:10+09:00 2013-02-14T14:10+09:00
jvndb-2013-000010 GREE for Android vulnerable to directory traversal 2013-02-14T14:15+09:00 2013-02-14T14:15+09:00
jvndb-2013-000011 3DM (3ware Disk Manager) vulnerable to directory traversal 2013-02-15T14:29+09:00 2013-02-15T14:29+09:00
jvndb-2013-000012 NEC Universal RAID Utility fails to restrict access permissions 2013-02-21T13:54+09:00 2013-03-01T11:34+09:00
jvndb-2013-001605 Multiple vulnerabilities in Hitachi Tuning Manager and JP1/Performance Management 2013-02-22T20:09+09:00 2013-02-22T20:09+09:00
jvndb-2013-000015 Multiple JustSystems products vulnerable to arbitrary code execution 2013-02-26T14:45+09:00 2013-02-26T14:45+09:00
jvndb-2013-000013 dopvCOMET* vulnerable to cross-site scripting 2013-02-28T13:37+09:00 2013-02-28T13:37+09:00
jvndb-2013-000014 dopvSTAR* vulnerable to cross-site scripting 2013-02-28T13:46+09:00 2013-02-28T13:46+09:00
jvndb-2013-000016 Kingsoft Writer vulnerable to buffer overflow 2013-03-01T14:47+09:00 2013-03-01T14:47+09:00
jvndb-2013-000017 Multiple Cisco products vulnerable to denial-of-service (DoS) 2013-03-07T14:13+09:00 2013-03-11T16:22+09:00
jvndb-2013-000020 VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability 2013-03-18T14:30+09:00 2013-06-25T18:01+09:00
jvndb-2013-000019 VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability 2013-03-18T14:32+09:00 2013-06-25T17:57+09:00
jvndb-2013-000018 VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability 2013-03-18T14:33+09:00 2013-06-25T17:54+09:00
jvndb-2013-000021 VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability 2013-03-18T14:38+09:00 2013-06-25T18:06+09:00
ID Description Updated
ID Description Published Updated
suse-su-2025:4143-1 Security update for grub2 2025-11-20T07:54:03Z 2025-11-20T07:54:03Z
suse-su-2025:4148-1 Security update for ghostscript 2025-11-20T10:14:20Z 2025-11-20T10:14:20Z
suse-su-2025:21050-1 Security update for unbound 2025-11-20T11:36:47Z 2025-11-20T11:36:47Z
suse-su-2025:21132-1 Security update for poppler 2025-11-20T13:33:08Z 2025-11-20T13:33:08Z
suse-su-2025:4149-1 Security update for the Linux Kernel 2025-11-20T15:41:46Z 2025-11-20T15:41:46Z
suse-su-2025:21072-1 Security update for runc 2025-11-20T16:43:58Z 2025-11-20T16:43:58Z
suse-su-2025:21136-1 Security update for runc 2025-11-20T16:43:58Z 2025-11-20T16:43:58Z
suse-su-2025:21137-1 Security update for alloy 2025-11-20T17:15:36Z 2025-11-20T17:15:36Z
suse-su-2025:4152-1 Security update for grub2 2025-11-21T09:10:39Z 2025-11-21T09:10:39Z
suse-su-2025:21062-1 Security update for grub2 2025-11-21T13:08:14Z 2025-11-21T13:08:14Z
suse-su-2025:21063-1 Security update for glib2 2025-11-21T13:14:32Z 2025-11-21T13:14:32Z
suse-su-2025:4156-1 Security update for podman 2025-11-21T14:29:28Z 2025-11-21T14:29:28Z
suse-su-2025:4157-1 Security update for podman 2025-11-21T14:30:17Z 2025-11-21T14:30:17Z
suse-su-2025:4158-1 Security update for cups-filters 2025-11-21T14:30:38Z 2025-11-21T14:30:38Z
suse-su-2025:4159-1 Security update for tomcat 2025-11-21T14:31:51Z 2025-11-21T14:31:51Z
suse-su-2025:4160-1 Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 15 SP6) 2025-11-22T07:34:28Z 2025-11-22T07:34:28Z
suse-su-2025:4161-1 Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 15 SP6) 2025-11-22T08:05:20Z 2025-11-22T08:05:20Z
suse-su-2025:4167-1 Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7) 2025-11-22T08:05:38Z 2025-11-22T08:05:38Z
suse-su-2025:4164-1 Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7) 2025-11-22T08:34:31Z 2025-11-22T08:34:31Z
suse-su-2025:4169-1 Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 15 SP7) 2025-11-22T08:34:35Z 2025-11-22T08:34:35Z
suse-su-2025:4170-1 Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5) 2025-11-23T11:34:32Z 2025-11-23T11:34:32Z
suse-su-2025:4171-1 Security update for the Linux Kernel (Live Patch 51 for SUSE Linux Enterprise 15 SP3) 2025-11-23T13:34:34Z 2025-11-23T13:34:34Z
suse-su-2025:4172-1 Security update for the Linux Kernel (Live Patch 60 for SUSE Linux Enterprise 15 SP3) 2025-11-23T20:04:58Z 2025-11-23T20:04:58Z
suse-su-2025:4073-2 Security update for runc 2025-11-24T02:49:00Z 2025-11-24T02:49:00Z
suse-su-2025:4173-1 Security update for MozillaFirefox 2025-11-24T02:50:06Z 2025-11-24T02:50:06Z
suse-su-2025:4174-1 Security update for MozillaFirefox 2025-11-24T02:51:09Z 2025-11-24T02:51:09Z
suse-su-2025:4180-1 Security update for curl 2025-11-24T07:54:49Z 2025-11-24T07:54:49Z
suse-su-2025:4181-1 Security update for sssd 2025-11-24T07:55:46Z 2025-11-24T07:55:46Z
suse-su-2025:4182-1 Security update for sssd 2025-11-24T07:56:25Z 2025-11-24T07:56:25Z
suse-su-2025:4183-1 Security update for sssd 2025-11-24T07:56:37Z 2025-11-24T07:56:37Z
ID Description Published Updated
cnvd-2015-00773 Apple MAC OS X Yosemite Thunderbolt设备固件修改漏洞 2015-01-30 2015-02-02
cnvd-2015-00774 Apple MAC OS X Yosemite SceneKit越界漏洞 2015-01-30 2015-02-02
cnvd-2015-00776 Apple MAC OS X Yosemite文件处理堆缓冲区溢出漏洞 2015-01-30 2015-02-02
cnvd-2015-00777 Apple MAC OS X Yosemite App Store日志信息泄露漏洞 2015-01-30 2015-02-02
cnvd-2015-00778 Apple MAC OS X Yosemite访问控制漏洞 2015-01-30 2015-01-31
cnvd-2015-00779 Apple MAC OS X Yosemite蓝牙驱动任意代码执行漏洞 2015-01-30 2015-01-31
cnvd-2015-00780 Apple MAC OS X Yosemite PDF文件信息泄露漏洞 2015-01-30 2015-02-02
cnvd-2015-00781 Apple MAC OS X Yosemite sysmond类型混淆漏洞 2015-01-30 2015-02-02
cnvd-2015-00782 Apple MAC OS X Yosemite沙盒绕过漏洞 2015-01-30 2015-01-31
cnvd-2015-00783 Apple MAC OS X Yosemite DF文件内存破坏漏洞 2015-01-30 2015-02-02
cnvd-2015-00784 Apple MAC OS X Yosemite IOBluetoothFamily整数溢出漏洞 2015-01-30 2015-02-02
cnvd-2015-00785 Apple MAC OS X Yosemite XPC消息处理类型混淆漏洞 2015-01-30 2015-02-02
cnvd-2015-00786 Apple MAC OS X Yosemite锁屏绕过漏洞 2015-01-30 2015-01-31
cnvd-2015-00787 Apple MAC OS X Yosemite IOHIDFamily驱动边界检查代码执行漏洞 2015-01-30 2015-02-02
cnvd-2015-00788 Apple MAC OS X Yosemite目录服务解析处理校验漏洞 2015-01-30 2015-02-02
cnvd-2015-00789 Apple MAC OS X Yosemite IODataQueue对象处理校验漏洞 2015-01-30 2015-02-02
cnvd-2015-00790 Apple MAC OS X Yosemite IOUSB控制器用户客户端函数内存访问漏洞 2015-01-30 2015-02-02
cnvd-2015-00791 Apple MAC OS X Yosemite Intel图像驱动代码执行漏洞(CNVD-2015-00791) 2015-01-30 2015-02-02
cnvd-2015-00792 Apple MAC OS X Yosemite Intel图像驱动代码执行漏洞(CNVD-2015-00792) 2015-01-30 2015-02-02
cnvd-2015-00793 Apple MAC OS X Yosemite Intel图像驱动代码执行漏洞(CNVD-2015-00793) 2015-01-30 2015-02-02
cnvd-2015-00794 WordPress插件Blubrry PowerPress Podcast 'admin.php'跨站脚本漏洞 2015-01-30 2015-02-02
cnvd-2015-00795 Privoxy存在多个内存破坏漏洞 2015-01-30 2015-02-02
cnvd-2015-00796 Privoxy远程拒绝服务漏洞(CNVD-2015-00796) 2015-01-30 2015-02-02
cnvd-2015-00797 Linux Kernel本地拒绝服务漏洞(CNVD-2015-00797) 2015-01-30 2015-02-02
cnvd-2015-00798 Linux Kernel 'fs/fhandle.c'本地竞争条件漏洞 2015-01-30 2015-02-02
cnvd-2015-00799 WordPress插件Geo Mashup跨站脚本漏洞 2015-01-30 2015-02-02
cnvd-2015-00800 Pexip Infinity中间人安全绕过漏洞 2015-01-30 2015-02-02
cnvd-2015-00801 Privoxy远程拒绝服务漏洞(CNVD-2015-00801) 2015-01-30 2015-02-02
cnvd-2015-00802 Libvirt信息泄露漏洞(CNVD-2015-00802) 2015-01-30 2015-02-02
cnvd-2015-00803 Xen拒绝服务漏洞(CNVD-2015-00803) 2015-01-30 2015-02-02
ID Description Published Updated
CERTA-2002-AVI-162 Multiples vulnérabilités dans OpenSSL 2002-07-31T00:00:00.000000 2002-09-26T00:00:00.000000
certa-2002-avi-160 Débordement de mémoire dans XSun sous Solaris 2002-07-31T00:00:00.000000 2002-07-31T00:00:00.000000
certa-2002-avi-161 Vulnérabilité du serveur TFTP dans CISCO IOS 2002-07-31T00:00:00.000000 2002-07-31T00:00:00.000000
certa-2002-avi-162 Multiples vulnérabilités dans OpenSSL 2002-07-31T00:00:00.000000 2002-09-26T00:00:00.000000
CERTA-2002-AVI-163 Vulnérabilité dans les Sun RPC 2002-08-01T00:00:00.000000 2002-11-21T00:00:00.000000
CERTA-2002-AVI-164 Débordement de mémoire dans MDAC pour Microsoft SQL Server 2002-08-01T00:00:00.000000 2002-08-01T00:00:00.000000
CERTA-2002-AVI-165 Vulnerabilité de la bibliothèque libmm 2002-08-01T00:00:00.000000 2002-08-01T00:00:00.000000
certa-2002-avi-163 Vulnérabilité dans les Sun RPC 2002-08-01T00:00:00.000000 2002-11-21T00:00:00.000000
certa-2002-avi-164 Débordement de mémoire dans MDAC pour Microsoft SQL Server 2002-08-01T00:00:00.000000 2002-08-01T00:00:00.000000
certa-2002-avi-165 Vulnerabilité de la bibliothèque libmm 2002-08-01T00:00:00.000000 2002-08-01T00:00:00.000000
CERTA-2002-AVI-166 Vulnérabilité dans la bibliotheque libpng 2002-08-02T00:00:00.000000 2002-08-20T00:00:00.000000
certa-2002-avi-166 Vulnérabilité dans la bibliotheque libpng 2002-08-02T00:00:00.000000 2002-08-20T00:00:00.000000
CERTA-2002-AVI-167 Problème de gestion des descripteurs de fichier sous BSD 2002-08-05T00:00:00.000000 2002-08-05T00:00:00.000000
certa-2002-avi-167 Problème de gestion des descripteurs de fichier sous BSD 2002-08-05T00:00:00.000000 2002-08-05T00:00:00.000000
CERTA-2002-AVI-168 Vulnérabilités dans Microsoft Content Manager Server 2001 2002-08-08T00:00:00.000000 2002-08-08T00:00:00.000000
CERTA-2002-AVI-169 Vulnérabilité sur VPN 5000 de CISCO 2002-08-08T00:00:00.000000 2002-08-08T00:00:00.000000
certa-2002-avi-168 Vulnérabilités dans Microsoft Content Manager Server 2001 2002-08-08T00:00:00.000000 2002-08-08T00:00:00.000000
certa-2002-avi-169 Vulnérabilité sur VPN 5000 de CISCO 2002-08-08T00:00:00.000000 2002-08-08T00:00:00.000000
CERTA-2002-AVI-170 Vulnérabilité de WS_FTP SERVER 2002-08-09T00:00:00.000000 2002-08-09T00:00:00.000000
CERTA-2002-AVI-171 Vulnérabilités dans Macromedia Flash Player 2002-08-09T00:00:00.000000 2002-08-09T00:00:00.000000
CERTA-2002-AVI-172 Multiples vulnérabilités sur les serveurs Web SunONE, iPlanet et Netscape 2002-08-09T00:00:00.000000 2002-08-09T00:00:00.000000
certa-2002-avi-170 Vulnérabilité de WS_FTP SERVER 2002-08-09T00:00:00.000000 2002-08-09T00:00:00.000000
certa-2002-avi-171 Vulnérabilités dans Macromedia Flash Player 2002-08-09T00:00:00.000000 2002-08-09T00:00:00.000000
certa-2002-avi-172 Multiples vulnérabilités sur les serveurs Web SunONE, iPlanet et Netscape 2002-08-09T00:00:00.000000 2002-08-09T00:00:00.000000
CERTA-2002-AVI-173 Vulnérabilité de ToolTalk 2002-08-13T00:00:00.000000 2002-09-17T00:00:00.000000
CERTA-2002-AVI-174 Vulnérabilité de l'agent SNMP de SunNet Manager 2002-08-13T00:00:00.000000 2002-08-13T00:00:00.000000
CERTA-2002-AVI-175 Vulnérabilité dans Bulk Data Service (BDS) sous Irix 2002-08-13T00:00:00.000000 2002-08-13T00:00:00.000000
CERTA-2002-AVI-176 Vulnérabilité du serveur Apache 2.0 2002-08-13T00:00:00.000000 2002-08-13T00:00:00.000000
certa-2002-avi-173 Vulnérabilité de ToolTalk 2002-08-13T00:00:00.000000 2002-09-17T00:00:00.000000
certa-2002-avi-174 Vulnérabilité de l'agent SNMP de SunNet Manager 2002-08-13T00:00:00.000000 2002-08-13T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated