Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-24591 |
6.5 (3.1)
|
WordPress Turn Yoast SEO FAQ Block to Accordion plugin… |
yasir129 |
Turn Yoast SEO FAQ Block to Accordion |
2026-01-23T14:29:00.969Z | 2026-04-24T18:07:21.103Z |
| CVE-2026-24594 |
5.9 (3.1)
|
WordPress Livemesh Addons for WPBakery Page Builder pl… |
livemesh |
Livemesh Addons for WPBakery Page Builder |
2026-01-23T14:29:01.518Z | 2026-04-24T18:07:20.830Z |
| CVE-2026-24595 |
5.4 (3.1)
|
WordPress Zoho CRM Lead Magnet plugin <= 1.8.1.9 - Bro… |
zohocrm |
Zoho CRM Lead Magnet |
2026-01-23T14:29:01.997Z | 2026-04-24T18:07:20.593Z |
| CVE-2026-24596 |
4.3 (3.1)
|
WordPress Related Posts Thumbnails plugin for WordPres… |
marynixie |
Related Posts Thumbnails Plugin for WordPress |
2026-01-23T14:29:02.365Z | 2026-04-24T18:07:20.161Z |
| CVE-2026-24600 |
6.5 (3.1)
|
WordPress Penci Review plugin <= 3.5 - Cross Site Scri… |
PenciDesign |
Penci Review |
2026-01-23T14:29:02.944Z | 2026-04-24T18:07:19.989Z |
| CVE-2026-24601 |
6.5 (3.1)
|
WordPress Penci Pay Writer plugin <= 1.5 - Cross Site … |
PenciDesign |
Penci Pay Writer |
2026-01-23T14:29:03.210Z | 2026-04-24T18:07:19.815Z |
| CVE-2026-24607 |
5.3 (3.1)
|
WordPress Travel Monster theme <= 1.3.3 - Broken Acces… |
wptravelengine |
Travel Monster |
2026-01-23T14:29:04.281Z | 2026-04-24T18:07:19.644Z |
| CVE-2026-24612 |
5.3 (3.1)
|
WordPress Orchid Store theme <= 1.5.15 - Broken Access… |
themebeez |
Orchid Store |
2026-01-23T14:29:04.803Z | 2026-04-24T18:07:19.473Z |
| CVE-2026-24613 |
5.3 (3.1)
|
WordPress Ecwid Shopping Cart plugin <= 7.0.6 - Broken… |
Ecwid by Lightspeed Ecommerce Shopping Cart |
Ecwid Shopping Cart |
2026-01-23T14:29:04.954Z | 2026-04-24T18:07:19.279Z |
| CVE-2026-24615 |
5.3 (3.1)
|
WordPress Cream Magazine theme <= 2.1.10 - Broken Acce… |
themebeez |
Cream Magazine |
2026-01-23T14:29:05.288Z | 2026-04-24T18:07:19.114Z |
| CVE-2026-24619 |
5.3 (3.1)
|
WordPress PopCash.Net Code Integration Tool plugin <= … |
PopCash |
PopCash.Net Code Integration Tool |
2026-01-23T14:29:05.887Z | 2026-04-24T18:07:18.939Z |
| CVE-2026-24621 |
5.9 (3.1)
|
WordPress Terms descriptions plugin <= 3.4.9 - Cross S… |
Vladimir Statsenko |
Terms descriptions |
2026-01-23T14:29:06.520Z | 2026-04-24T18:07:18.750Z |
| CVE-2026-24622 |
5.4 (3.1)
|
WordPress Suggestion Toolkit plugin <= 5.0 - Broken Ac… |
Sergiy Dzysyak |
Suggestion Toolkit |
2026-01-23T14:29:06.858Z | 2026-04-24T18:07:18.573Z |
| CVE-2026-24623 |
7.1 (3.1)
|
WordPress Neoforum plugin <= 1.0 - Reflected Cross Sit… |
saeros1984 |
Neoforum |
2026-01-23T14:29:07.026Z | 2026-04-24T18:07:18.310Z |
| CVE-2026-24624 |
7.6 (3.1)
|
WordPress Neoforum plugin <= 1.0 - SQL Injection vulne… |
saeros1984 |
Neoforum |
2026-01-23T14:29:07.293Z | 2026-04-24T18:07:18.035Z |
| CVE-2026-24626 |
5.9 (3.1)
|
WordPress Logo Slider plugin <= 5.1.1 - Cross Site Scr… |
LogicHunt |
Logo Slider |
2026-01-23T14:29:07.664Z | 2026-04-24T18:07:17.845Z |
| CVE-2026-24627 |
4.3 (3.1)
|
WordPress Trusona for WordPress plugin <= 2.0.0 - Brok… |
Trusona |
Trusona for WordPress |
2026-01-23T14:29:07.850Z | 2026-04-24T18:07:17.681Z |
| CVE-2026-24630 |
6.5 (3.1)
|
WordPress Stylish Cost Calculator plugin <= 8.2.9 - Cr… |
Design |
Stylish Cost Calculator |
2026-01-23T14:29:08.236Z | 2026-04-24T18:07:17.506Z |
| CVE-2026-24631 |
5.4 (3.1)
|
WordPress Rosebud theme <= 1.4 - Insecure Direct Objec… |
Mikado-Themes |
Rosebud |
2026-01-23T14:29:08.452Z | 2026-04-24T18:07:17.215Z |
| CVE-2026-24633 |
5.3 (3.1)
|
WordPress Add Expires Headers & Optimized Minify plugi… |
Passionate Brains |
Add Expires Headers & Optimized Minify |
2026-01-23T14:29:08.810Z | 2026-04-24T18:07:17.042Z |
| CVE-2026-24636 |
4.3 (3.1)
|
WordPress Sugar Calendar (Lite) plugin <= 3.9.1 - Brok… |
Syed Balkhi |
Sugar Calendar (Lite) |
2026-01-23T14:29:09.318Z | 2026-04-24T18:07:16.863Z |
| CVE-2026-23543 |
5.3 (3.1)
|
WordPress Essential Addons for Elementor plugin <= 6.5… |
WPDeveloper |
Essential Addons for Elementor |
2026-02-19T08:26:48.831Z | 2026-04-24T18:07:16.657Z |
| CVE-2026-23548 |
5.3 (3.1)
|
WordPress DirectoryPress plugin <= 3.6.25 - Broken Acc… |
Designinvento |
DirectoryPress |
2026-02-19T08:26:49.731Z | 2026-04-24T18:07:16.499Z |
| CVE-2026-23803 |
7.2 (3.1)
|
WordPress Smart Auto Upload Images plugin <= 1.2.2 - S… |
Burhan Nasir |
Smart Auto Upload Images |
2026-02-19T08:26:50.148Z | 2026-04-24T18:07:16.319Z |
| CVE-2026-25004 |
5.9 (3.1)
|
WordPress CM Business Directory plugin <= 1.5.3 - Cros… |
CreativeMindsSolutions |
CM Business Directory |
2026-02-19T08:26:51.689Z | 2026-04-24T18:07:16.158Z |
| CVE-2026-25006 |
5.3 (3.1)
|
WordPress XStore theme <= 9.6.4 - Arbitrary Shortcode … |
8theme |
XStore |
2026-02-19T08:26:52.080Z | 2026-04-24T18:07:15.994Z |
| CVE-2026-25370 |
5.3 (3.1)
|
WordPress WP Compress plugin <= 6.60.28 - Broken Acces… |
AresIT |
WP Compress |
2026-02-19T08:27:00.225Z | 2026-04-24T18:07:15.809Z |
| CVE-2026-25387 |
4.3 (3.1)
|
WordPress Image Optimizer by Elementor plugin <= 1.7.1… |
Elementor |
Image Optimizer by Elementor |
2026-02-19T08:27:02.035Z | 2026-04-24T18:07:15.639Z |
| CVE-2026-25392 |
4.7 (3.1)
|
WordPress Update URLs – Quick and Easy way to search o… |
KaizenCoders |
Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress |
2026-02-19T08:27:02.858Z | 2026-04-24T18:07:15.433Z |
| CVE-2026-25441 |
5.3 (3.1)
|
WordPress LeadConnector plugin <= 3.0.21 - Broken Acce… |
varunvairavanlc |
LeadConnector |
2026-02-19T08:27:08.043Z | 2026-04-24T18:07:15.256Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2015-2794 |
N/A
|
The installation wizard in DotNetNuke (DNN) befor… |
n/a |
n/a |
2017-02-06T15:00:00.000Z | 2024-08-06T05:24:38.946Z |
| CVE-2015-1566 |
N/A
|
Cross-site scripting (XSS) vulnerability in DotNe… |
n/a |
n/a |
2015-02-09T17:00:00.000Z | 2024-09-16T20:51:57.895Z |
| CVE-2013-7335 |
N/A
|
Open redirect vulnerability in DotNetNuke (DNN) b… |
n/a |
n/a |
2014-03-12T14:00:00.000Z | 2024-09-16T20:07:52.523Z |
| CVE-2013-4649 |
N/A
|
Cross-site scripting (XSS) vulnerability in DotNe… |
n/a |
n/a |
2014-03-12T14:00:00.000Z | 2024-08-06T16:52:27.001Z |
| CVE-2013-3943 |
N/A
|
Cross-site scripting (XSS) vulnerability in DotNe… |
n/a |
n/a |
2014-03-12T14:00:00.000Z | 2024-08-06T16:30:49.078Z |
| CVE-2012-1036 |
N/A
|
Cross-site scripting (XSS) vulnerability in the t… |
n/a |
n/a |
2012-04-11T10:00:00.000Z | 2024-09-16T17:34:31.589Z |
| CVE-2012-1030 |
N/A
|
Cross-site scripting (XSS) vulnerability in DotNe… |
n/a |
n/a |
2012-04-11T10:00:00.000Z | 2024-09-16T20:47:55.661Z |
| CVE-2010-4514 |
N/A
|
Cross-site scripting (XSS) vulnerability in Insta… |
n/a |
n/a |
2010-12-09T20:00:00.000Z | 2024-09-17T04:09:35.053Z |
| CVE-2009-4110 |
N/A
|
Cross-site scripting (XSS) vulnerability in the s… |
n/a |
n/a |
2009-11-28T11:00:00.000Z | 2024-08-07T06:54:09.545Z |
| CVE-2009-4109 |
N/A
|
The install wizard in DotNetNuke 4.0 through 5.1.… |
n/a |
n/a |
2009-11-28T11:00:00.000Z | 2024-09-16T17:49:15.688Z |
| CVE-2009-1366 |
N/A
|
Cross-site scripting (XSS) vulnerability in Websi… |
n/a |
n/a |
2009-04-22T21:00:00.000Z | 2024-08-07T05:13:25.497Z |
| CVE-2008-7102 |
N/A
|
DotNetNuke 2.0 through 4.8.4 allows remote attack… |
n/a |
n/a |
2009-08-27T20:00:00.000Z | 2024-08-07T11:56:14.089Z |
| CVE-2008-7101 |
N/A
|
Unspecified vulnerability in DotNetNuke 4.0 throu… |
n/a |
n/a |
2009-08-27T20:00:00.000Z | 2024-08-07T11:56:14.440Z |
| CVE-2008-7100 |
N/A
|
Unspecified vulnerability in DotNetNuke 4.4.1 thr… |
n/a |
n/a |
2009-08-27T20:00:00.000Z | 2024-08-07T11:56:14.218Z |
| CVE-2008-6733 |
N/A
|
Cross-site scripting (XSS) vulnerability in the e… |
n/a |
n/a |
2009-04-21T18:07:00.000Z | 2024-08-07T11:41:59.916Z |
| CVE-2008-6732 |
N/A
|
Cross-site scripting (XSS) vulnerability in the L… |
n/a |
n/a |
2009-04-21T18:07:00.000Z | 2024-08-07T11:42:00.312Z |
| CVE-2008-6644 |
N/A
|
Cross-site scripting (XSS) vulnerability in Defau… |
n/a |
n/a |
2009-04-07T10:00:00.000Z | 2024-08-07T11:34:47.355Z |
| CVE-2008-6542 |
N/A
|
Unspecified vulnerability in the Skin Manager in … |
n/a |
n/a |
2009-03-30T01:00:00.000Z | 2024-08-07T11:34:46.925Z |
| CVE-2008-6541 |
N/A
|
Unrestricted file upload vulnerability in the fil… |
n/a |
n/a |
2009-03-30T01:00:00.000Z | 2024-08-07T11:34:47.050Z |
| CVE-2008-6540 |
N/A
|
DotNetNuke before 4.8.2, during installation or u… |
n/a |
n/a |
2009-03-30T01:00:00.000Z | 2024-08-07T11:34:46.939Z |
| CVE-2008-6399 |
N/A
|
Unspecified vulnerability in DotNetNuke 4.5.2 thr… |
n/a |
n/a |
2009-03-05T20:00:00.000Z | 2024-09-16T18:56:11.662Z |
| CVE-2006-4973 |
N/A
|
Cross-site scripting (XSS) vulnerability in Defau… |
n/a |
n/a |
2006-09-25T01:00:00.000Z | 2024-08-07T19:32:22.329Z |
| CVE-2006-3601 |
N/A
|
** UNVERIFIABLE ** Unspecified vulnerability in … |
n/a |
n/a |
2006-07-14T20:00:00.000Z | 2024-08-07T18:39:52.551Z |
| CVE-2005-0040 |
N/A
|
Multiple cross-site scripting (XSS) vulnerabiliti… |
n/a |
n/a |
2005-05-19T04:00:00.000Z | 2024-08-07T20:57:41.074Z |
| CVE-2004-2325 |
N/A
|
Cross-site scripting (XSS) vulnerability in EditM… |
n/a |
n/a |
2005-08-16T04:00:00.000Z | 2024-08-08T01:22:13.622Z |
| CVE-2004-2324 |
N/A
|
SQL injection vulnerability in DotNetNuke (former… |
n/a |
n/a |
2005-08-16T04:00:00.000Z | 2024-08-08T01:22:13.675Z |
| CVE-2004-2323 |
N/A
|
DotNetNuke (formerly IBuySpy Workshop) 1.0.6 thro… |
n/a |
n/a |
2005-08-16T04:00:00.000Z | 2024-08-08T01:22:13.627Z |
| CVE-2026-26169 |
6.1 (3.1)
|
Windows Kernel Memory Information Disclosure Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:58.532Z | 2026-04-24T12:50:33.359Z |
| CVE-2026-26170 |
7.8 (3.1)
|
PowerShell Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:59.294Z | 2026-04-24T12:50:34.029Z |
| CVE-2026-26172 |
7.8 (3.1)
|
Windows Push Notifications Elevation of Privilege Vuln… |
Microsoft |
Windows 10 Version 21H2 |
2026-04-14T16:58:00.062Z | 2026-04-24T12:50:34.879Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2015-2794 | The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the a… | 2017-02-06T15:59:00.137 | 2026-04-24T17:34:37.240 |
| fkie_cve-2015-1566 | Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers t… | 2015-02-09T17:59:10.687 | 2026-04-24T17:34:37.240 |
| fkie_cve-2013-7335 | Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote att… | 2014-03-12T14:55:30.740 | 2026-04-24T17:34:37.240 |
| fkie_cve-2013-4649 | Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allo… | 2014-03-12T14:55:30.677 | 2026-04-24T17:34:37.240 |
| fkie_cve-2013-3943 | Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allo… | 2014-03-12T14:55:30.647 | 2026-04-24T17:34:37.240 |
| fkie_cve-2012-1036 | Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and … | 2012-04-11T10:39:26.387 | 2026-04-24T17:34:37.240 |
| fkie_cve-2012-1030 | Cross-site scripting (XSS) vulnerability in DotNetNuke 6.x through 6.0.2 allows user-assisted remot… | 2012-04-11T10:39:26.340 | 2026-04-24T17:34:37.240 |
| fkie_cve-2010-4514 | Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.… | 2010-12-09T21:00:01.540 | 2026-04-24T17:34:37.240 |
| fkie_cve-2009-4110 | Cross-site scripting (XSS) vulnerability in the search functionality in DotNetNuke 4.8 through 5.1.… | 2009-11-29T13:08:29.640 | 2026-04-24T17:34:37.240 |
| fkie_cve-2009-4109 | The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing … | 2009-11-29T13:08:29.610 | 2026-04-24T17:34:37.240 |
| fkie_cve-2009-1366 | Cross-site scripting (XSS) vulnerability in Website\admin\Sales\paypalipn.aspx in DotNetNuke (DNN) … | 2009-04-22T21:30:13.127 | 2026-04-24T17:34:37.240 |
| fkie_cve-2008-7102 | DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and… | 2009-08-27T20:30:00.547 | 2026-04-24T17:34:37.240 |
| fkie_cve-2008-7101 | Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain… | 2009-08-27T20:30:00.530 | 2026-04-24T17:34:37.240 |
| fkie_cve-2008-7100 | Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to by… | 2009-08-27T20:30:00.500 | 2026-04-24T17:34:37.240 |
| fkie_cve-2008-6733 | Cross-site scripting (XSS) vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8… | 2009-04-21T18:30:00.250 | 2026-04-24T17:34:37.240 |
| fkie_cve-2008-6732 | Cross-site scripting (XSS) vulnerability in the Language skin object in DotNetNuke before 4.8.4 all… | 2009-04-21T18:30:00.217 | 2026-04-24T17:34:37.240 |
| fkie_cve-2008-6644 | Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows rem… | 2009-04-07T14:17:17.827 | 2026-04-24T17:34:37.240 |
| fkie_cve-2008-6542 | Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticate… | 2009-03-30T01:30:00.377 | 2026-04-24T17:34:37.240 |
| fkie_cve-2008-6541 | Unrestricted file upload vulnerability in the file manager module in DotNetNuke before 4.8.2 allows… | 2009-03-30T01:30:00.360 | 2026-04-24T17:34:37.240 |
| fkie_cve-2008-6540 | DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the d… | 2009-03-30T01:30:00.327 | 2026-04-24T17:34:37.240 |
| fkie_cve-2008-6399 | Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to "add additiona… | 2009-03-05T20:30:00.407 | 2026-04-24T17:34:37.240 |
| fkie_cve-2006-4973 | Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems Do… | 2006-09-25T01:07:00.000 | 2026-04-24T17:34:37.240 |
| fkie_cve-2006-3601 | ** UNVERIFIABLE ** Unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke (… | 2006-07-18T15:37:00.000 | 2026-04-24T17:34:37.240 |
| fkie_cve-2005-0040 | Multiple cross-site scripting (XSS) vulnerabilities in DotNetNuke before 3.0.12 allow remote attack… | 2005-05-19T04:00:00.000 | 2026-04-24T17:34:37.240 |
| fkie_cve-2004-2325 | Cross-site scripting (XSS) vulnerability in EditModule.aspx for DotNetNuke (formerly IBuySpy Worksh… | 2004-12-31T05:00:00.000 | 2026-04-24T17:34:37.240 |
| fkie_cve-2004-2324 | SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows … | 2004-12-31T05:00:00.000 | 2026-04-24T17:34:37.240 |
| fkie_cve-2004-2323 | DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to obtain sens… | 2004-12-31T05:00:00.000 | 2026-04-24T17:34:37.240 |
| fkie_cve-2026-26169 | Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally. | 2026-04-14T18:16:50.947 | 2026-04-24T17:33:18.793 |
| fkie_cve-2026-26170 | Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileg… | 2026-04-14T18:16:51.263 | 2026-04-24T17:22:19.390 |
| fkie_cve-2026-26172 | Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… | 2026-04-14T18:16:51.757 | 2026-04-24T17:21:20.450 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-mhhf-6vwh-c57m |
8.8 (3.1)
|
Missing Authorization vulnerability in ByConsole WooODT Lite allows Exploiting Incorrectly Configur… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:18Z |
| ghsa-c96j-rghc-r336 |
6.5 (3.1)
|
Missing Authorization vulnerability in XLPlugins Finale Lite allows Exploiting Incorrectly Configur… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:18Z |
| ghsa-5w7q-6wwr-8pjp |
5.3 (3.1)
|
Missing Authorization vulnerability in GiveWP GiveWP allows Exploiting Incorrectly Configured Acces… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:18Z |
| ghsa-rxj2-8fr9-hwcq |
5.3 (3.1)
|
Missing Authorization vulnerability in FeedbackWP kk Star Ratings allows Exploiting Incorrectly Con… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:17Z |
| ghsa-gqcq-9xjx-87r8 |
5.3 (3.1)
|
Missing Authorization vulnerability in Saurav Sharma Generate Dummy Posts allows Exploiting Incorre… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:17Z |
| ghsa-94gq-r8c9-7q4x |
6.5 (3.1)
|
Missing Authorization vulnerability in WP CTA PRO WordPress CTA allows Exploiting Incorrectly Confi… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:17Z |
| ghsa-v5jp-hvcv-p53f |
7.1 (3.1)
|
Missing Authorization vulnerability in David Cramer My Shortcodes allows Exploiting Incorrectly Con… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:16Z |
| ghsa-v3xg-ppxj-3hq6 |
5.4 (3.1)
|
Missing Authorization vulnerability in TCBarrett Glossary allows Exploiting Incorrectly Configured … | 2025-01-02T12:32:13Z | 2026-04-23T15:34:16Z |
| ghsa-pc38-jx4p-rvj5 |
5.3 (3.1)
|
Missing Authorization vulnerability in YITH YITH WooCommerce Product Add-Ons allows Exploiting Inco… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:16Z |
| ghsa-w7jw-mp2h-ch44 |
5.4 (3.1)
|
Missing Authorization vulnerability in WP iCal Availability WP iCal Availability allows Exploiting … | 2025-01-02T12:32:13Z | 2026-04-23T15:34:14Z |
| ghsa-rwvg-86h3-6xfg |
4.3 (3.1)
|
Missing Authorization vulnerability in RedLettuce Plugins WP Word Count allows Exploiting Incorrect… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:14Z |
| ghsa-rr83-cj5r-76xg |
4.3 (3.1)
|
Missing Authorization vulnerability in codedrafty Mediabay allows Exploiting Incorrectly Configured… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:14Z |
| ghsa-gv3f-5fhv-4rw6 |
6.5 (3.1)
|
Missing Authorization vulnerability in FeedFocal FeedFocal allows Exploiting Incorrectly Configured… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:14Z |
| ghsa-9qjp-447w-pcqv |
5.4 (3.1)
|
Missing Authorization vulnerability in NSquared Draw Attention allows Exploiting Incorrectly Config… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:14Z |
| ghsa-4gm4-x57g-4vgj |
5.3 (3.1)
|
Missing Authorization vulnerability in WPDO DoLogin Security allows Exploiting Incorrectly Configur… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:14Z |
| ghsa-4979-4xqf-m5vx |
5.3 (3.1)
|
Authentication Bypass by Primary Weakness vulnerability in yourownprogrammer YOP Poll allows Authen… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:14Z |
| ghsa-3ffq-9w3m-8f4c |
6.5 (3.1)
|
Missing Authorization vulnerability in RevenueHunt Product Recommendation Quiz for eCommerce allows… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:14Z |
| ghsa-35r5-j2wv-ff34 |
6.5 (3.1)
|
Missing Authorization vulnerability in quillforms.com Quill Forms allows Exploiting Incorrectly Con… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:14Z |
| ghsa-xggq-f45p-384m |
4.3 (3.1)
|
Missing Authorization vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:13Z |
| ghsa-x5w7-pqwc-pv6m |
4.3 (3.1)
|
Missing Authorization vulnerability in JustCoded / Alex Prokopenko Just Custom Fields allows Exploi… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:13Z |
| ghsa-wm2j-9vcx-h349 |
5.3 (3.1)
|
Missing Authorization vulnerability in Kali Forms Contact Form builder with drag & drop - Kali Form… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:13Z |
| ghsa-w4m2-8qxq-h2wj |
4.3 (3.1)
|
Missing Authorization vulnerability in Farhan Noor ApplyOnline – Application Form Builder and Manag… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:13Z |
| ghsa-v3p2-wr4v-2xm7 |
4.3 (3.1)
|
Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso allow… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:13Z |
| ghsa-mfvg-hp2g-pr6f |
5.3 (3.1)
|
Missing Authorization vulnerability in Cyberlord92 Broken Link Checker | Finder allows Exploiting I… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:13Z |
| ghsa-m4p9-jj4g-gvgx |
5.3 (3.1)
|
Missing Authorization vulnerability in AtomChat AtomChat allows Exploiting Incorrectly Configured A… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:13Z |
| ghsa-m2x6-ffx8-32q3 |
5.3 (3.1)
|
Missing Authorization vulnerability in websoudan MW WP Form allows Exploiting Incorrectly Configure… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:13Z |
| ghsa-g446-hq84-rcq2 |
5.3 (3.1)
|
Missing Authorization vulnerability in Ruslan Suhar Convertful – Your Ultimate On-Site Conversion T… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:13Z |
| ghsa-fvcj-q933-vff3 |
5.4 (3.1)
|
Missing Authorization vulnerability in WP Royal Ashe Extra allows Exploiting Incorrectly Configured… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:13Z |
| ghsa-cxw5-mxg9-j5x2 |
5.3 (3.1)
|
Missing Authorization vulnerability in nofearinc DX Delete Attached Media allows Exploiting Incorre… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:13Z |
| ghsa-4h5w-rfr3-39rp |
5.3 (3.1)
|
Missing Authorization vulnerability in gVectors Team wpDiscuz allows Exploiting Incorrectly Configu… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:13Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2022-43054 |
7.5 (3.1)
|
An access control issue in the component /ManageRoute/postRoute of FreeTAKServer v1.9.8 a… | freetakserver | 2022-03-11T00:15:00+00:00 | 2023-08-17T03:22:31.240214+00:00 |
| pysec-2023-136 |
|
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Dril… | apache-airflow | 2023-08-11T08:15:00+00:00 | 2023-08-17T03:22:30.530556+00:00 |
| pysec-2023-135 |
|
Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. These ar… | certifi | 2023-08-03T19:36:12+00:00 | 2023-08-07T05:41:30.977938+00:00 |
| pysec-2023-134 |
|
Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthor… | apache-airflow | 2023-08-05T07:15:00+00:00 | 2023-08-05T10:26:00.927631+00:00 |
| pysec-2023-133 |
5.3 (3.1)
|
Vyper is a Pythonic programming language that targets the Ethereum Virtual Machine (EVM).… | vyper | 2023-07-25T21:15:00+00:00 | 2023-08-03T18:27:50.332832+00:00 |
| pysec-2023-132 |
6.1 (3.1)
|
copyparty is file server software. Prior to version 1.8.7, the application contains a ref… | copyparty | 2023-07-25T22:15:00+00:00 | 2023-08-02T20:24:02.446410+00:00 |
| pysec-2023-131 |
7.5 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions… | vyper | 2023-04-24T22:15:00+00:00 | 2023-08-02T18:28:00.492615+00:00 |
| pysec-2022-43053 |
7.5 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions… | vyper | 2022-06-09T09:15:00+00:00 | 2023-08-02T18:28:00.437362+00:00 |
| pysec-2023-130 |
6.5 (3.1)
|
Sentry is an error tracking and performance monitoring platform. Starting in version 8.21… | sentry | 2023-07-25T19:15:00+00:00 | 2023-08-02T16:31:39.850029+00:00 |
| pysec-2023-129 |
5.4 (3.1)
|
Indico is an open source a general-purpose, web based event management tool. There is a C… | indico | 2023-07-21T19:15:00+00:00 | 2023-07-31T20:36:08.003610+00:00 |
| pysec-2023-128 |
2.8 (3.1)
|
A flaw was found in the keylime attestation verifier, which fails to flag a device's subm… | keylime | 2023-07-19T19:15:00+00:00 | 2023-07-28T16:31:09.279625+00:00 |
| pysec-2023-127 |
|
Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traver… | copyparty | 2023-07-14T20:15:00+00:00 | 2023-07-27T20:23:01.674307+00:00 |
| pysec-2023-126 |
|
PaddlePaddle before 2.5.0 has a command injection in fs.py. This resulted in the ability … | paddlepaddle | 2023-07-26T12:15:00+00:00 | 2023-07-26T14:25:58.775032+00:00 |
| pysec-2023-125 |
|
FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and… | paddlepaddle | 2023-07-26T12:15:00+00:00 | 2023-07-26T14:25:58.693754+00:00 |
| pysec-2023-124 |
|
Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to … | paddlepaddle | 2023-07-26T11:15:00+00:00 | 2023-07-26T12:51:10.139446+00:00 |
| pysec-2023-123 |
|
Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a … | paddlepaddle | 2023-07-26T11:15:00+00:00 | 2023-07-26T12:51:10.092120+00:00 |
| pysec-2023-122 |
|
Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potent… | paddlepaddle | 2023-07-26T10:15:00+00:00 | 2023-07-26T12:51:10.047714+00:00 |
| pysec-2021-13 |
|
The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, … | flask-caching | 2021-05-13T23:15:00Z | 2023-07-25T00:34:15.721702Z |
| pysec-2023-120 |
|
### Impact aiohttp v3.8.4 and earlier are [bundled with llhttp v6.0.6](https://github.co… | aiohttp | 2023-07-20T14:52:00+00:00 | 2023-07-24T14:58:05.562874+00:00 |
| pysec-2023-119 |
|
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unautho… | apache-airflow | 2023-07-12T10:15:00+00:00 | 2023-07-20T19:19:47.109731+00:00 |
| pysec-2023-118 |
|
RestrictedPython is a tool that helps to define a subset of the Python language which all… | restrictedpython | 2023-07-11T18:15:00+00:00 | 2023-07-19T20:24:12.944004+00:00 |
| pysec-2023-117 |
|
A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via … | pygments | 2023-07-19T15:15:00+00:00 | 2023-07-19T17:26:16.938508+00:00 |
| pysec-2023-116 |
|
xalpha v0.11.4 is vulnerable to Remote Command Execution (RCE). | xalpha | 2023-07-11T15:15:00+00:00 | 2023-07-18T16:37:19.127985+00:00 |
| pysec-2023-115 |
|
Sentry is an error tracking and performance monitoring platform. Starting in version 23.6… | sentry | 2023-07-06T23:15:00+00:00 | 2023-07-17T20:27:52.414117+00:00 |
| pysec-2023-114 |
|
** DISPUTED ** A use-after-free issue was discovered in Py_FindObjects() function in SciP… | scipy | 2023-07-06T21:15:00+00:00 | 2023-07-17T20:27:52.117232+00:00 |
| pysec-2023-113 |
|
Products.CMFCore are the key framework services for the Zope Content Management Framework… | products-cmfcore | 2023-07-03T17:15:00+00:00 | 2023-07-17T20:27:51.578279+00:00 |
| pysec-2023-111 |
|
SQLFluff is a SQL linter. Prior to version 2.1.2, in environments where untrusted users h… | sqlfluff | 2023-07-06T16:15:00+00:00 | 2023-07-13T21:23:24.026294+00:00 |
| pysec-2023-108 |
|
MechanicalSoup is a Python library for automating interaction with websites. Starting in … | mechanicalsoup | 2023-07-05T20:15:00+00:00 | 2023-07-12T18:32:48.148340+00:00 |
| pysec-2023-107 |
|
Fides is an open-source privacy engineering platform for managing the fulfillment of data… | ethyca-fides | 2023-07-05T22:15:00+00:00 | 2023-07-12T16:35:41.463418+00:00 |
| pysec-2023-106 |
|
Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user ca… | apache-airflow | 2023-07-12T10:15:00+00:00 | 2023-07-12T12:59:56.816194+00:00 |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33253 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.606354Z |
| gsd-2024-33252 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.638622Z |
| gsd-2024-33251 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.755000Z |
| gsd-2024-33250 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.741217Z |
| gsd-2024-33249 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.744741Z |
| gsd-2024-33248 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.747603Z |
| gsd-2024-33247 | Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via ad… | 2024-04-24T05:02:09.612320Z |
| gsd-2024-33246 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.707963Z |
| gsd-2024-33245 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.654902Z |
| gsd-2024-33244 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.708588Z |
| gsd-2024-33243 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.709233Z |
| gsd-2024-33242 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.632369Z |
| gsd-2024-33241 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.612131Z |
| gsd-2024-33240 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.644562Z |
| gsd-2024-33239 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.683200Z |
| gsd-2024-33238 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.747012Z |
| gsd-2024-33237 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.743713Z |
| gsd-2024-33236 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.705030Z |
| gsd-2024-33235 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.612913Z |
| gsd-2024-33234 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.721580Z |
| gsd-2024-33233 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.664185Z |
| gsd-2024-33232 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.710450Z |
| gsd-2024-33231 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.702080Z |
| gsd-2024-33230 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.761978Z |
| gsd-2024-33229 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.752692Z |
| gsd-2024-33228 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.693921Z |
| gsd-2024-33227 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.761572Z |
| gsd-2024-33226 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.700419Z |
| gsd-2024-33225 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.733514Z |
| gsd-2024-33224 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.603732Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-2336 | Malicious code in cdnjavacss (npm) | 2026-03-24T15:39:45Z | 2026-04-07T14:41:20Z |
| mal-2026-2335 | Malicious code in azurestack-common (npm) | 2026-03-24T15:38:26Z | 2026-04-07T14:41:20Z |
| mal-2026-2334 | Malicious code in argon-node (npm) | 2026-03-24T15:37:43Z | 2026-04-07T14:41:20Z |
| mal-2026-2333 | Malicious code in @pansycareful/github-helper (npm) | 2026-03-24T15:30:17Z | 2026-04-07T14:41:20Z |
| mal-2026-2322 | Malicious code in bs58-basic (npm) | 2026-04-01T09:11:09Z | 2026-04-07T14:41:20Z |
| mal-2026-2321 | Malicious code in base58-engine (npm) | 2026-04-01T09:10:18Z | 2026-04-07T14:41:20Z |
| mal-2026-2320 | Malicious code in base-x-64 (npm) | 2026-04-01T09:11:08Z | 2026-04-07T14:41:20Z |
| mal-2026-2319 | Malicious code in base-or-engine (npm) | 2026-04-01T09:10:18Z | 2026-04-07T14:41:20Z |
| mal-2026-2307 | Malicious code in axios (npm) | 2026-03-31T03:15:49Z | 2026-04-07T14:41:20Z |
| mal-2026-2446 | Malicious code in @corpweb-ui/wmkt-library (npm) | 2026-04-03T08:18:07Z | 2026-04-07T14:41:19Z |
| mal-2026-2435 | Malicious code in 4xperss (npm) | 2026-04-02T15:12:23Z | 2026-04-07T14:41:19Z |
| mal-2026-2434 | Malicious code in 4exepreds (npm) | 2026-04-02T15:12:19Z | 2026-04-07T14:41:19Z |
| mal-2026-2420 | Malicious code in @_wnpm/wnpm-cli (npm) | 2026-04-02T09:53:07Z | 2026-04-07T14:41:19Z |
| mal-2026-2408 | Malicious code in @cloudsop/hmoment (npm) | 2026-03-24T09:03:56Z | 2026-04-07T14:41:19Z |
| mal-2026-2407 | Malicious code in @ceeferenderer/itg-renderer-sdk (npm) | 2026-03-24T09:03:48Z | 2026-04-07T14:41:19Z |
| mal-2026-2406 | Malicious code in @ceeferenderer/fe-renderer-sdk (npm) | 2026-03-24T09:03:41Z | 2026-04-07T14:41:19Z |
| mal-2026-2332 | Malicious code in @hsbc-mfe/host (npm) | 2026-03-24T15:28:47Z | 2026-04-07T14:41:19Z |
| mal-2026-2330 | Malicious code in @fyxer-ai/shared (npm) | 2026-03-24T15:28:28Z | 2026-04-07T14:41:19Z |
| mal-2026-2329 | Malicious code in @abi-labs-frontend/standards (npm) | 2026-03-24T15:23:58Z | 2026-04-07T14:41:19Z |
| mal-2026-2318 | Malicious code in @logcore/pino-pretty-logger (npm) | 2026-04-01T09:10:18Z | 2026-04-07T14:41:19Z |
| mal-2026-2314 | Malicious code in @c8o/nimbus-core (npm) | 2026-03-31T18:13:08Z | 2026-04-07T14:41:19Z |
| mal-2026-2503 | Malicious code in genesis-1p-tools-rpm-bundle (PyPI) | 2026-04-07T09:41:03Z | 2026-04-07T09:41:03Z |
| mal-2026-2488 | Malicious code in photo-extractor (PyPI) | 2026-04-04T16:41:48Z | 2026-04-04T16:41:48Z |
| mal-2026-2487 | Malicious code in discord-request (PyPI) | 2026-04-04T12:56:18Z | 2026-04-04T12:56:18Z |
| mal-2026-2486 | Malicious code in gangomodule (PyPI) | 2026-04-04T12:01:55Z | 2026-04-04T12:01:55Z |
| mal-2026-2448 | Malicious code in supervisors (PyPI) | 2026-04-03T11:40:59Z | 2026-04-03T11:40:59Z |
| mal-2026-2432 | Malicious code in nwin64tls (PyPI) | 2026-04-02T20:28:37Z | 2026-04-02T20:28:37Z |
| mal-2026-2431 | Malicious code in nwin32tls (PyPI) | 2026-04-02T20:26:19Z | 2026-04-02T20:26:19Z |
| mal-2026-2405 | Malicious code in eht-account (PyPI) | 2026-04-01T17:49:00Z | 2026-04-01T17:49:00Z |
| mal-2026-2404 | Malicious code in ether-account (PyPI) | 2026-04-01T16:32:11Z | 2026-04-01T16:32:11Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-0995 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2024-04-29T22:00:00.000+00:00 | 2025-11-17T23:00:00.000+00:00 |
| wid-sec-w-2025-2603 | Fortinet FortiWeb: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-11-13T23:00:00.000+00:00 | 2025-11-16T23:00:00.000+00:00 |
| wid-sec-w-2025-0708 | pgAdmin: Mehrere Schwachstellen | 2025-04-03T22:00:00.000+00:00 | 2025-11-11T23:00:00.000+00:00 |
| wid-sec-w-2023-1431 | Siemens SICAM: Mehrere Schwachstellen | 2023-06-12T22:00:00.000+00:00 | 2025-11-11T23:00:00.000+00:00 |
| wid-sec-w-2025-1962 | Google Cloud Platform Looker Studio: Mehrere Schwachstellen | 2025-09-03T22:00:00.000+00:00 | 2025-11-10T23:00:00.000+00:00 |
| wid-sec-w-2025-2109 | Autodesk Produkte: Schwachstelle ermöglicht Codeausführung | 2025-09-22T22:00:00.000+00:00 | 2025-11-09T23:00:00.000+00:00 |
| wid-sec-w-2025-2307 | Microsoft Windows: Mehrere Schwachstellen | 2025-10-14T22:00:00.000+00:00 | 2025-11-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2416 | Proxmox Backup Server: Mehrere Schwachstellen | 2025-10-26T23:00:00.000+00:00 | 2025-11-04T23:00:00.000+00:00 |
| wid-sec-w-2025-2058 | Apple Safari: Mehrere Schwachstellen | 2025-09-15T22:00:00.000+00:00 | 2025-11-03T23:00:00.000+00:00 |
| wid-sec-w-2025-2445 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-10-29T23:00:00.000+00:00 | 2025-11-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2334 | Squid: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Offenlegung von Informationen | 2025-10-16T22:00:00.000+00:00 | 2025-11-02T23:00:00.000+00:00 |
| wid-sec-w-2025-2444 | Dell Secure Connect Gateway: Mehrere Schwachstellen | 2025-10-29T23:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2427 | strongSwan (eap-mschapv2 plugin): Schwachstelle ermöglicht Codeausführung und DoS | 2025-10-27T23:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2403 | Ubiquiti UniFi: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-10-23T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2398 | Moxa Switch: Mehrere Schwachstellen | 2025-10-23T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2375 | Google Chrome: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-10-21T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2344 | Checkmk: Schwachstelle ermöglicht Cross-Site Scripting | 2025-10-20T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2339 | ImageMagick (BMP decoder): Schwachstelle ermöglicht Denial of Service | 2025-10-19T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2317 | Ubiquiti UniFi: Schwachstelle ermöglicht Ausführung von Debug-Funktionen | 2025-10-15T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2274 | Veeam Backup & Replication: Mehrere Schwachstellen | 2025-10-13T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2247 | Nvidia GPU Display Treiber: Mehrere Schwachstellen | 2025-10-08T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2132 | Linux Kernel: Mehrere Schwachstellen | 2025-09-24T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2114 | Dell PowerEdge BIOS und iDRAC9: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-23T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-1921 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2025-08-27T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2440 | Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2015-11-22T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2395 | Rancher Manager: Mehrere Schwachstellen | 2025-10-23T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2390 | PowerDNS Recursor: Mehrere Schwachstellen ermöglichen Manipulation von Dateien | 2025-10-22T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2385 | Drupal Module: Mehrere Schwachstellen | 2025-10-22T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2275 | Mozilla Firefox: Mehrere Schwachstellen | 2025-10-14T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2126 | Drupal Module: Mehrere Schwachstellen | 2025-09-24T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-15-069-04a | Elipse E3 Process Control Vulnerability (Update A) | 2015-12-11T07:00:00.000000Z | 2025-06-06T22:37:18.082701Z |
| icsa-15-069-04 | Elipse E3 Process Control Vulnerability | 2015-12-11T07:00:00.000000Z | 2025-06-06T22:37:11.175255Z |
| icsa-15-069-03 | SCADA Engine BACnet OPC Server Vulnerabilities | 2015-12-11T07:00:00.000000Z | 2025-06-06T22:36:51.449296Z |
| icsa-15-069-02 | ABB HART Device DTM Vulnerability | 2015-12-11T07:00:00.000000Z | 2025-06-06T22:36:45.007018Z |
| icsa-15-069-01 | Cimon CmnView DLL Hijacking Vulnerability | 2015-12-11T07:00:00.000000Z | 2025-06-06T22:36:38.524138Z |
| icsa-15-064-04 | Siemens SIMATIC S7-300 CPU Denial-of-Service Vulnerability | 2015-12-06T07:00:00.000000Z | 2025-06-06T22:36:32.046323Z |
| icsa-15-064-02a | Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths (Update A) | 2015-12-06T07:00:00.000000Z | 2025-06-06T22:36:19.130527Z |
| icsa-15-064-02 | Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths | 2015-12-06T07:00:00.000000Z | 2025-06-06T22:36:12.657259Z |
| icsa-15-064-01a | Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability (Update A) | 2015-12-06T07:00:00.000000Z | 2025-06-06T22:36:06.004237Z |
| icsa-15-064-01 | Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability | 2015-12-06T07:00:00.000000Z | 2025-06-06T22:35:59.487016Z |
| icsa-15-062-01 | MICROSYS PROMOTIC Stack Buffer Overflow | 2015-12-04T07:00:00.000000Z | 2025-06-06T22:35:46.482417Z |
| icsa-15-057-01 | Network Vision IntraVue Code Injection Vulnerability | 2015-11-29T07:00:00.000000Z | 2025-06-06T22:35:40.053299Z |
| icsa-15-055-03 | Schneider Electric Invensys Positioner Buffer Overflow Vulnerability | 2015-11-27T07:00:00.000000Z | 2025-06-06T22:35:33.492544Z |
| icsa-15-055-02 | Kepware Resource Exhaustion Vulnerability | 2015-11-27T07:00:00.000000Z | 2025-06-06T22:35:27.000975Z |
| icsa-15-055-01 | Software Toolbox Top Server Resource Exhaustion Vulnerability | 2015-11-27T07:00:00.000000Z | 2025-06-06T22:35:20.530492Z |
| icsa-15-050-01a | Siemens SIMATIC STEP 7 TIA Portal Vulnerabilities (Update A) | 2015-11-22T07:00:00.000000Z | 2025-06-06T22:35:07.394617Z |
| icsa-15-048-03 | Yokogawa HART Device DTM Vulnerability | 2015-11-20T07:00:00.000000Z | 2025-06-06T22:35:00.882056Z |
| icsa-15-048-02 | Siemens SIMATIC WinCC TIA Portal Vulnerabilities | 2015-11-20T07:00:00.000000Z | 2025-06-06T22:34:47.839959Z |
| icsa-15-048-01 | Siemens SIMATIC STEP 7 TIA Portal Vulnerabilities | 2015-11-20T07:00:00.000000Z | 2025-06-06T22:34:34.894563Z |
| icsa-15-041-02 | GE Hydran M2 Predictable TCP Initial Sequence Vulnerability | 2015-11-13T07:00:00.000000Z | 2025-06-06T22:34:28.440832Z |
| icsa-15-036-02 | Pepperl+Fuchs Hart Device DTM Vulnerability | 2015-11-08T07:00:00.000000Z | 2025-06-06T22:34:21.972701Z |
| icsa-15-036-01a | GE and MACTek HART Device DTM Vulnerability (Update A) | 2015-11-08T07:00:00.000000Z | 2025-06-06T22:34:15.524601Z |
| icsa-15-034-02 | Siemens Ruggedcom WIN Vulnerability | 2015-11-06T07:00:00.000000Z | 2025-06-06T22:33:56.150269Z |
| icsa-15-029-01 | Honeywell HART DTM Vulnerability | 2015-11-01T06:00:00.000000Z | 2025-06-06T22:33:43.213614Z |
| icsa-15-027-01 | Magnetrol HART DTM Vulnerability | 2015-10-30T06:00:00.000000Z | 2025-06-06T22:33:36.757982Z |
| icsa-15-022-01 | Siemens SIMATIC S7-1200 CPU Web Vulnerability | 2015-10-25T06:00:00.000000Z | 2025-06-06T22:33:30.307653Z |
| icsa-15-020-02 | Schneider Electric ETG3000 FactoryCast HMI Gateway Vulnerabilities | 2015-10-23T06:00:00.000000Z | 2025-06-06T22:33:17.373978Z |
| icsa-15-020-01 | Siemens SCALANCE X-300/X408 Switch Family DOS Vulnerabilities | 2015-10-23T06:00:00.000000Z | 2025-06-06T22:33:04.402280Z |
| icsa-15-013-04a | GE Multilink Switch Vulnerabilities (Update A) | 2015-10-16T06:00:00.000000Z | 2025-06-06T22:32:44.963520Z |
| icsa-15-013-03 | Phoenix Contact Software ProConOs and MultiProg Authentication Vulnerability | 2015-10-16T06:00:00.000000Z | 2025-06-06T22:32:38.508014Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-umbrella-tunnel-gjw5thge | Cisco Umbrella Virtual Appliance Undocumented Support Tunnel Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-umbrella-tunnel-gJw5thgE | Cisco Umbrella Virtual Appliance Undocumented Support Tunnel Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-uccx-wcp-jjeqdt3s | Cisco Unified Contact Center Express Finesse Portal Web Cache Poisoning Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-uccx-wcp-JJeqDT3S | Cisco Unified Contact Center Express Finesse Portal Web Cache Poisoning Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-pi-epnm-storedxss-ttjo62r | Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-pi-epnm-storedxss-tTjO62r | Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-pi-epnm-bfjsrjp5 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerabilities | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-pi-epnm-BFjSRJP5 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerabilities | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ivpa-cmdinj-c5xrbboy | Cisco Intersight Private Virtual Appliance Command Injection Vulnerabilities | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ivpa-cmdinj-C5XRbbOy | Cisco Intersight Private Virtual Appliance Command Injection Vulnerabilities | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ise-credentials-tkto3h3 | Cisco Identity Services Engine Device Credential Information Disclosure Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ise-credentials-tkTO3h3 | Cisco Identity Services Engine Device Credential Information Disclosure Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ipphone-csrf-hocmxw2c | Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ipphone-csrf-HOCmXW2c | Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-intersight-forward-c45ncgqb | Cisco Intersight Virtual Appliance Unauthenticated Port Forwarding Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-intersight-forward-C45ncgqb | Cisco Intersight Virtual Appliance Unauthenticated Port Forwarding Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-expressway-injection-x475ebtq | Cisco Expressway Series and Cisco TelePresence Video Communication Server Command Injection Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-expressway-injection-X475EbTQ | Cisco Expressway Series and Cisco TelePresence Video Communication Server Command Injection Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-duo-dha-filewrite-xpmbmzak | Cisco Duo Device Health Application for Windows Arbitrary File Write Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-duo-dha-filewrite-xPMBMZAK | Cisco Duo Device Health Application for Windows Arbitrary File Write Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-cucm-injection-g6mbwh2 | Cisco Unified Communications Manager SQL Injection Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-cucm-injection-g6MbwH2 | Cisco Unified Communications Manager SQL Injection Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-cucm-imp-xss-qtt4vdsk | Cisco Unified Communications Products Cross-Site Scripting Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-cucm-imp-xss-QtT4VdsK | Cisco Unified Communications Products Cross-Site Scripting Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-clamav-dos-ftkhqmwz | ClamAV AutoIt Module Denial of Service Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-clamav-dos-FTkhqMWZ | ClamAV AutoIt Module Denial of Service Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ac-leak-sew6g2kd | Bypassing Tunnels: Leaking VPN Client Traffic by Abusing Routing Tables Affecting Cisco AnyConnect Secure Mobility Client and Cisco Secure Client | 2023-08-08T15:00:00+00:00 | 2023-08-08T15:00:00+00:00 |
| cisco-sa-ac-leak-Sew6g2kd | Bypassing Tunnels: Leaking VPN Client Traffic by Abusing Routing Tables Affecting Cisco AnyConnect Secure Mobility Client and Cisco Secure Client | 2023-08-08T15:00:00+00:00 | 2023-08-08T15:00:00+00:00 |
| cisco-sa-ucm-file-read-h8h4hej3 | Cisco Unified Communications Products Arbitrary File Read Vulnerability | 2022-04-20T16:00:00+00:00 | 2023-08-02T20:18:45+00:00 |
| cisco-sa-ucm-file-read-h8h4HEJ3 | Cisco Unified Communications Products Arbitrary File Read Vulnerability | 2022-04-20T16:00:00+00:00 | 2023-08-02T20:18:45+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-40969 | f2fs: don't set RO when shutting down f2fs | 2024-07-01T07:00:00.000Z | 2026-03-31T15:06:28.000Z |
| msrc_cve-2024-35799 | drm/amd/display: Prevent crash when disable stream | 2024-05-02T07:00:00.000Z | 2026-03-31T15:06:28.000Z |
| msrc_cve-2024-49987 | bpftool: Fix undefined behavior in qsort(NULL 0 ...) | 2024-10-01T07:00:00.000Z | 2026-03-31T15:06:26.000Z |
| msrc_cve-2025-38665 | can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode | 2025-08-02T00:00:00.000Z | 2026-03-31T15:06:25.000Z |
| msrc_cve-2025-37877 | iommu: Clear iommu-dma ops on cleanup | 2025-05-02T00:00:00.000Z | 2026-03-31T15:06:14.000Z |
| msrc_cve-2025-21786 | workqueue: Put the pwq after detaching the rescuer from the pool | 2025-02-02T00:00:00.000Z | 2026-03-31T15:06:09.000Z |
| msrc_cve-2026-23276 | net: add xmit recursion limit to tunnel xmit functions | 2026-03-02T00:00:00.000Z | 2026-03-31T15:06:06.000Z |
| msrc_cve-2025-23141 | KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses | 2025-05-02T00:00:00.000Z | 2026-03-31T15:06:05.000Z |
| msrc_cve-2024-40973 | media: mtk-vcodec: potential null pointer deference in SCP | 2024-07-01T07:00:00.000Z | 2026-03-31T15:06:05.000Z |
| msrc_cve-2024-27435 | nvme: fix reconnection fail due to reserved tag allocation | 2024-05-02T07:00:00.000Z | 2026-03-31T15:06:04.000Z |
| msrc_cve-2025-38520 | drm/amdkfd: Don't call mmput from MMU notifier callback | 2025-08-02T00:00:00.000Z | 2026-03-31T15:06:02.000Z |
| msrc_cve-2025-39764 | netfilter: ctnetlink: remove refcounting in expectation dumpers | 2025-09-02T00:00:00.000Z | 2026-03-31T15:05:59.000Z |
| msrc_cve-2024-36478 | null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' | 2024-06-02T07:00:00.000Z | 2026-03-31T15:05:45.000Z |
| msrc_cve-2025-39859 | ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog | 2025-09-02T00:00:00.000Z | 2026-03-31T15:05:42.000Z |
| msrc_cve-2025-22103 | net: fix NULL pointer dereference in l3mdev_l3_rcv | 2025-04-02T00:00:00.000Z | 2026-03-31T15:05:41.000Z |
| msrc_cve-2025-38644 | wifi: mac80211: reject TDLS operations when station is not associated | 2025-08-02T00:00:00.000Z | 2026-03-31T15:05:39.000Z |
| msrc_cve-2024-39478 | crypto: starfive - Do not free stack buffer | 2024-07-01T07:00:00.000Z | 2026-03-31T15:05:38.000Z |
| msrc_cve-2025-39763 | ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered | 2025-09-02T00:00:00.000Z | 2026-03-31T15:05:35.000Z |
| msrc_cve-2022-49218 | drm/dp: Fix OOB read when handling Post Cursor2 register | 2025-02-02T00:00:00.000Z | 2026-03-31T15:05:31.000Z |
| msrc_cve-2024-49991 | drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer | 2024-10-01T07:00:00.000Z | 2026-03-31T15:05:27.000Z |
| msrc_cve-2026-23272 | netfilter: nf_tables: unconditionally bump set->nelems before insertion | 2026-03-02T00:00:00.000Z | 2026-03-31T15:05:26.000Z |
| msrc_cve-2024-40977 | wifi: mt76: mt7921s: fix potential hung tasks during chip recovery | 2024-07-01T07:00:00.000Z | 2026-03-31T15:05:23.000Z |
| msrc_cve-2025-23135 | RISC-V: KVM: Teardown riscv specific bits after kvm_exit | 2025-04-02T00:00:00.000Z | 2026-03-31T15:05:18.000Z |
| msrc_cve-2025-39850 | vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects | 2025-09-02T00:00:00.000Z | 2026-03-31T15:05:16.000Z |
| msrc_cve-2025-38491 | mptcp: make fallback action and fallback decision atomic | 2025-07-02T00:00:00.000Z | 2026-03-31T15:05:15.000Z |
| msrc_cve-2024-46754 | bpf: Remove tst_run from lwt_seg6local_prog_ops. | 2024-09-01T07:00:00.000Z | 2026-03-31T15:05:14.000Z |
| msrc_cve-2025-39748 | bpf: Forget ranges when refining tnum after JSET | 2025-09-02T00:00:00.000Z | 2026-03-31T15:05:11.000Z |
| msrc_cve-2025-2309 | HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow | 2025-03-02T00:00:00.000Z | 2026-03-31T15:05:08.000Z |
| msrc_cve-2026-23278 | netfilter: nf_tables: always walk all pending catchall elements | 2026-03-02T00:00:00.000Z | 2026-03-31T15:05:04.000Z |
| msrc_cve-2024-50014 | ext4: fix access to uninitialised lock in fc replay path | 2024-10-01T07:00:00.000Z | 2026-03-31T15:05:04.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15854-1 | kepler-0.11.3-1.1 on GA media | 2025-12-31T00:00:00Z | 2025-12-31T00:00:00Z |
| opensuse-su-2025:20130-1 | Security update for bash-git-prompt | 2025-12-30T17:08:26Z | 2025-12-30T17:08:26Z |
| opensuse-su-2025:20121-1 | Security update for redis | 2025-12-30T17:05:45Z | 2025-12-30T17:05:45Z |
| opensuse-su-2025:20155-1 | Security update for exim | 2025-12-30T17:02:44Z | 2025-12-30T17:02:44Z |
| opensuse-su-2025:20128-1 | Security update for shadowsocks-v2ray-plugin, v2ray-core | 2025-12-30T17:02:04Z | 2025-12-30T17:02:04Z |
| opensuse-su-2025:20097-1 | Security update for helmfile | 2025-12-30T17:00:02Z | 2025-12-30T17:00:02Z |
| opensuse-su-2025:20178-1 | Security update for chromium | 2025-12-30T16:56:53Z | 2025-12-30T16:56:53Z |
| opensuse-su-2025:15853-1 | weblate-5.14.3-2.1 on GA media | 2025-12-30T00:00:00Z | 2025-12-30T00:00:00Z |
| opensuse-su-2025:15852-1 | trivy-0.68.2-1.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15851-1 | python313-3.13.11-1.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15850-1 | python312-3.12.12-4.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15849-1 | python311-3.11.14-3.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15848-1 | python311-openapi-core-0.22.0-1.1 on GA media | 2025-12-28T00:00:00Z | 2025-12-28T00:00:00Z |
| opensuse-su-2025:15847-1 | anubis-1.24.0-1.1 on GA media | 2025-12-28T00:00:00Z | 2025-12-28T00:00:00Z |
| opensuse-su-2025:15846-1 | python39-3.9.25-2.1 on GA media | 2025-12-24T00:00:00Z | 2025-12-24T00:00:00Z |
| opensuse-su-2025:15845-1 | podman-5.7.1-1.1 on GA media | 2025-12-24T00:00:00Z | 2025-12-24T00:00:00Z |
| opensuse-su-2025:15844-1 | cpp-httplib-devel-0.28.0-1.1 on GA media | 2025-12-24T00:00:00Z | 2025-12-24T00:00:00Z |
| opensuse-su-2025:15843-1 | buildah-1.42.2-1.1 on GA media | 2025-12-24T00:00:00Z | 2025-12-24T00:00:00Z |
| opensuse-su-2026:20000-1 | Security update for salt | 2025-12-23T09:11:50Z | 2025-12-23T09:11:50Z |
| opensuse-su-2025:15842-1 | libnbd-1.24.0-2.1 on GA media | 2025-12-23T00:00:00Z | 2025-12-23T00:00:00Z |
| opensuse-su-2025:20175-1 | Security update for mariadb | 2025-12-22T11:44:04Z | 2025-12-22T11:44:04Z |
| opensuse-su-2025:20174-1 | Security update for fontforge | 2025-12-22T10:04:31Z | 2025-12-22T10:04:31Z |
| opensuse-su-2025:15841-1 | zk-0.15.2-1.1 on GA media | 2025-12-22T00:00:00Z | 2025-12-22T00:00:00Z |
| opensuse-su-2025:15840-1 | python315-3.15.0~a3-1.1 on GA media | 2025-12-22T00:00:00Z | 2025-12-22T00:00:00Z |
| opensuse-su-2025:15839-1 | python310-3.10.19-3.1 on GA media | 2025-12-22T00:00:00Z | 2025-12-22T00:00:00Z |
| opensuse-su-2025:15838-1 | python311-tornado6-6.5.4-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15837-1 | php8-8.4.16-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15836-1 | kernel-devel-6.18.2-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15835-1 | duc-1.4.6-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15834-1 | busybox-1.37.0-8.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:6220 | Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.10.1 security update | 2023-10-31T18:22:09+00:00 | 2026-04-25T07:43:42+00:00 |
| rhsa-2023:6217 | Red Hat Security Advisory: Red Hat OpenShift Enterprise security update | 2023-10-31T14:40:40+00:00 | 2026-04-25T07:43:42+00:00 |
| rhsa-2023:6202 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.8 security and bug fix updates | 2023-10-30T20:13:48+00:00 | 2026-04-25T07:43:41+00:00 |
| rhsa-2023:6200 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.1.9 security updates and bug fixes | 2023-10-30T18:15:21+00:00 | 2026-04-25T07:43:41+00:00 |
| rhsa-2023:6154 | Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.2.0 | 2023-11-01T00:30:41+00:00 | 2026-04-25T07:43:41+00:00 |
| rhsa-2023:6179 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update | 2023-10-30T13:03:06+00:00 | 2026-04-25T07:43:40+00:00 |
| rhsa-2023:6172 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update | 2023-10-30T11:24:00+00:00 | 2026-04-25T07:43:40+00:00 |
| rhsa-2023:6171 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.11 Openshift Jenkins security update | 2023-10-30T11:10:10+00:00 | 2026-04-25T07:43:39+00:00 |
| rhsa-2023:6165 | Red Hat Security Advisory: skupper-cli and skupper-router security update | 2023-10-30T08:22:15+00:00 | 2026-04-25T07:43:38+00:00 |
| rhsa-2023:6143 | Red Hat Security Advisory: OpenShift Container Platform 4.14.0 CNF vRAN extras security update | 2023-10-26T16:29:51+00:00 | 2026-04-25T07:43:38+00:00 |
| rhsa-2023:6161 | Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.14 security and bug fix update | 2023-10-30T02:16:18+00:00 | 2026-04-25T07:43:37+00:00 |
| rhsa-2023:6156 | Red Hat Security Advisory: Red Hat OpenShift support for Windows Containers 8.1.0 security update | 2023-10-30T00:25:10+00:00 | 2026-04-25T07:43:37+00:00 |
| rhsa-2023:6130 | Red Hat Security Advisory: OpenShift Container Platform 4.13.19 bug fix and security update | 2023-10-30T13:49:24+00:00 | 2026-04-25T07:43:36+00:00 |
| rhsa-2023:6129 | Red Hat Security Advisory: OpenShift Container Platform 4.13.19 security and extras update | 2023-10-30T12:59:18+00:00 | 2026-04-25T07:43:35+00:00 |
| rhsa-2023:6077 | Red Hat Security Advisory: toolbox security update | 2023-10-24T12:18:38+00:00 | 2026-04-25T07:43:35+00:00 |
| rhsa-2023:6126 | Red Hat Security Advisory: OpenShift Container Platform 4.12.41 bug fix and security update | 2023-11-01T11:07:20+00:00 | 2026-04-25T07:43:34+00:00 |
| rhsa-2023:6125 | Red Hat Security Advisory: OpenShift Container Platform 4.12.41 security and extras update | 2023-11-01T10:27:35+00:00 | 2026-04-25T07:43:34+00:00 |
| rhsa-2023:6121 | Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.8.1 security and bug fix update | 2023-10-25T15:56:00+00:00 | 2026-04-25T07:43:34+00:00 |
| rhsa-2023:6118 | Red Hat Security Advisory: OpenShift API for Data Protection security update | 2023-10-25T14:23:36+00:00 | 2026-04-25T07:43:33+00:00 |
| rhsa-2023:6059 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.12.1 release and security update | 2023-10-23T21:20:26+00:00 | 2026-04-25T07:43:33+00:00 |
| rhsa-2023:6116 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.14 security and bug fix update | 2023-10-25T14:16:47+00:00 | 2026-04-25T07:43:32+00:00 |
| rhsa-2023:6115 | Red Hat Security Advisory: OpenShift API for Data Protection security update | 2023-10-25T14:01:58+00:00 | 2026-04-25T07:43:31+00:00 |
| rhsa-2023:6085 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing security update | 2023-10-24T15:32:35+00:00 | 2026-04-25T07:43:31+00:00 |
| rhsa-2023:6084 | Red Hat Security Advisory: RHACS 3.74 enhancement and security update | 2023-10-24T14:57:00+00:00 | 2026-04-25T07:43:31+00:00 |
| rhsa-2023:6039 | Red Hat Security Advisory: Node Maintenance Operator 5.0.1 security update | 2023-10-23T18:30:46+00:00 | 2026-04-25T07:43:30+00:00 |
| rhsa-2023:6071 | Red Hat Security Advisory: RHACS 4.0 enhancement and security update | 2023-10-24T09:41:00+00:00 | 2026-04-25T07:43:29+00:00 |
| rhsa-2023:6061 | Red Hat Security Advisory: Red Hat OpenShift Pipelines 1.12.1 release and security update | 2023-10-23T21:57:37+00:00 | 2026-04-25T07:43:28+00:00 |
| rhsa-2023:6057 | Red Hat Security Advisory: toolbox security update | 2023-10-23T21:13:36+00:00 | 2026-04-25T07:43:28+00:00 |
| rhsa-2023:6048 | Red Hat Security Advisory: ACS 4.2 enhancement and security update | 2023-10-23T20:24:48+00:00 | 2026-04-25T07:43:28+00:00 |
| rhsa-2023:6042 | Red Hat Security Advisory: Self Node Remediation Operator 0.5.1 security update | 2023-10-23T18:39:36+00:00 | 2026-04-25T07:43:28+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-413407 | SSA-413407: Path Traversal Vulnerability in Teamcenter Active Workspace | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-334944 | SSA-334944: Vulnerability in SINEMA Remote Connect Server | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-330339 | SSA-330339: Web Vulnerabilities in SINEC NMS | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-288459 | SSA-288459: Heap Overflow Vulnerability in RFID terminals | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-208530 | SSA-208530: File parsing vulnerabilities in IFC adapter in NX | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-187092 | SSA-187092: Several Buffer-Overflow Vulnerabilities in Web Server of SCALANCE X-200 | 2021-04-13T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-139628 | SSA-139628: Vulnerabilities in Web Server for Scalance X Products | 2021-01-12T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-109294 | SSA-109294: Scene File Parsing Vulnerability in Simcenter STAR-CCM+ Viewer | 2021-09-14T00:00:00Z | 2021-09-14T00:00:00Z |
| ssa-816035 | SSA-816035: Code Execution Vulnerability in SINEMA Remote Connect Client | 2021-08-19T00:00:00Z | 2021-08-19T00:00:00Z |
| ssa-818688 | SSA-818688: Multiple Vulnerabilities in Solid Edge before SE2021MP7 | 2021-08-10T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-752103 | SSA-752103: Telnet Authentication Vulnerability in SINAMICS Medium Voltage Products | 2021-05-11T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-553445 | SSA-553445: DNS "Name:Wreck" Vulnerabilities in Multiple Siemens Energy AGT and SGT solutions | 2021-08-10T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-365397 | SSA-365397: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.2.0.1 | 2021-08-10T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-286838 | SSA-286838: Multiple Vulnerabilities in SINAMICS Medium Voltage Products | 2021-05-11T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-158827 | SSA-158827: Denial-of-Service Vulnerability in Automation License Manager | 2021-08-10T00:00:00Z | 2021-08-10T00:00:00Z |
| ssa-729965 | SSA-729965: TLS Certificate Validation Vulnerability in SINUMERIK Integrate Operate Client | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-641963 | SSA-641963: Remote Code Execution Vulnerability in Multiple SIMATIC Software Products | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-622535 | SSA-622535: Multiple Vulnerabilities in Teamcenter Active Workspace | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-483182 | SSA-483182: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.2 | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-448291 | SSA-448291: Denial-of-Service Vulnerability in ARP Protocol of RWG Universal Controllers | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-352521 | SSA-352521: Access Check Bypass Vulnerability in Mendix | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-209268 | SSA-209268: Multiple JT File Parsing Vulnerabilities in JT Utilities before V13.0.2.0 | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-203306 | SSA-203306: Password Vulnerabilities in SIPROTEC 4 and SIPROTEC Compact Relay Families | 2018-03-08T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-173615 | SSA-173615: Multiple PAR and ASM File Parsing Vulnerabilities in Solid Edge | 2021-07-13T00:00:00Z | 2021-07-13T00:00:00Z |
| ssa-645530 | SSA-645530: TIFF File Parsing Vulnerability in JT2Go and Teamcenter Visualization before V13.1.0.3 | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-574442 | SSA-574442: Multiple PAR and DFT File Parsing Vulnerabilities in Solid Edge | 2021-04-13T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-542525 | SSA-542525: Authentication Vulnerabilities in SIMATIC HMI Products | 2020-09-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-522654 | SSA-522654: Privilege Escalation Vulnerability in Mendix SAML Module | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-419820 | SSA-419820: Denial-of-Service Vulnerability in TIM 1531 IRC | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-208356 | SSA-208356: DFT File Parsing Vulnerabilities in Solid Edge | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0870-1 | Security update for ImageMagick | 2026-03-11T16:45:31Z | 2026-03-11T16:45:31Z |
| suse-su-2026:20720-1 | Security update for the Linux Kernel | 2026-03-11T16:03:14Z | 2026-03-11T16:03:14Z |
| suse-su-2026:20667-1 | Security update for the Linux Kernel | 2026-03-11T15:14:55Z | 2026-03-11T15:14:55Z |
| suse-su-2026:20719-1 | Security update for kernel-livepatch-MICRO-6-0_Update_17 | 2026-03-11T14:11:48Z | 2026-03-11T14:11:48Z |
| suse-su-2026:20676-1 | Security update for kernel-livepatch-MICRO-6-0_Update_17 | 2026-03-11T14:11:48Z | 2026-03-11T14:11:48Z |
| suse-su-2026:20666-1 | Security update for qemu | 2026-03-11T11:28:39Z | 2026-03-11T11:28:39Z |
| suse-su-2026:20717-1 | Security update for vim | 2026-03-11T11:16:01Z | 2026-03-11T11:16:01Z |
| suse-su-2026:0862-1 | Security update for gnutls | 2026-03-11T10:00:03Z | 2026-03-11T10:00:03Z |
| suse-su-2026:20665-1 | Security update for python311 | 2026-03-10T18:54:29Z | 2026-03-10T18:54:29Z |
| suse-su-2026:20664-1 | Security update for util-linux | 2026-03-10T18:35:27Z | 2026-03-10T18:35:27Z |
| suse-su-2026:20662-1 | Security update for openssh | 2026-03-10T18:35:27Z | 2026-03-10T18:35:27Z |
| suse-su-2026:20661-1 | Security update for virtiofsd | 2026-03-10T18:35:27Z | 2026-03-10T18:35:27Z |
| suse-su-2026:20716-1 | Security update for qemu | 2026-03-10T18:34:11Z | 2026-03-10T18:34:11Z |
| suse-su-2026:0860-1 | Security update for python-maturin | 2026-03-10T16:46:52Z | 2026-03-10T16:46:52Z |
| suse-su-2026:0859-1 | Security update for python-aiohttp | 2026-03-10T16:05:00Z | 2026-03-10T16:05:00Z |
| suse-su-2026:0858-1 | Security update for python-aiohttp | 2026-03-10T12:38:39Z | 2026-03-10T12:38:39Z |
| suse-su-2026:0857-1 | Security update for util-linux | 2026-03-10T11:01:32Z | 2026-03-10T11:01:32Z |
| suse-su-2026:20714-1 | Security update for util-linux | 2026-03-10T08:40:03Z | 2026-03-10T08:40:03Z |
| suse-su-2026:0856-1 | Security update for util-linux | 2026-03-10T08:35:29Z | 2026-03-10T08:35:29Z |
| suse-su-2026:0855-1 | Security update for c3p0 and mchange-commons | 2026-03-10T05:06:36Z | 2026-03-10T05:06:36Z |
| suse-su-2026:0854-1 | Security update for ImageMagick | 2026-03-09T15:34:51Z | 2026-03-09T15:34:51Z |
| suse-su-2026:0853-1 | Security update for ImageMagick | 2026-03-09T15:34:27Z | 2026-03-09T15:34:27Z |
| suse-su-2026:0852-1 | Security update for ImageMagick | 2026-03-09T15:32:56Z | 2026-03-09T15:32:56Z |
| suse-su-2026:0851-1 | Security update for ImageMagick | 2026-03-09T15:32:14Z | 2026-03-09T15:32:14Z |
| suse-su-2026:20710-1 | Security update for python311 | 2026-03-09T10:51:06Z | 2026-03-09T10:51:06Z |
| suse-su-2026:20688-1 | Security update for cockpit-podman | 2026-03-09T10:46:42Z | 2026-03-09T10:46:42Z |
| suse-su-2026:20659-1 | Security update for zlib | 2026-03-09T10:23:42Z | 2026-03-09T10:23:42Z |
| suse-su-2026:0849-1 | Security update for python-Flask | 2026-03-09T10:13:40Z | 2026-03-09T10:13:40Z |
| suse-su-2026:20709-1 | Security update for zlib | 2026-03-09T09:54:57Z | 2026-03-09T09:54:57Z |
| suse-su-2026:0848-1 | Security update for valkey | 2026-03-07T18:18:45Z | 2026-03-07T18:18:45Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2025:11747 | Important: firefox security update | 2025-07-24T00:00:00Z | 2025-07-30T09:15:51Z |
| alsa-2025:11428 | Important: kernel security update | 2025-07-21T00:00:00Z | 2025-07-30T08:22:07Z |
| alsa-2025:11851 | Moderate: kernel-rt security update | 2025-07-28T00:00:00Z | 2025-07-30T08:18:29Z |
| alsa-2025:12083 | Moderate: icu security update | 2025-07-29T00:00:00Z | 2025-07-30T08:16:08Z |
| alsa-2025:12006 | Important: redis:6 security update | 2025-07-28T00:00:00Z | 2025-07-30T08:13:36Z |
| alsa-2025:12064 | Important: unbound security update | 2025-07-29T00:00:00Z | 2025-07-30T08:10:45Z |
| alsa-2025:12008 | Important: redis:7 security update | 2025-07-28T00:00:00Z | 2025-07-29T10:55:40Z |
| alsa-2025:11992 | Important: sqlite security update | 2025-07-28T00:00:00Z | 2025-07-29T09:25:46Z |
| alsa-2025:12010 | Important: sqlite security update | 2025-07-28T00:00:00Z | 2025-07-29T09:23:05Z |
| alsa-2025:11888 | Moderate: icu security update | 2025-07-28T00:00:00Z | 2025-07-28T19:46:22Z |
| alsa-2025:11933 | Important: sqlite security update | 2025-07-28T00:00:00Z | 2025-07-28T19:45:16Z |
| alsa-2025:11401 | Important: valkey security update | 2025-07-21T00:00:00Z | 2025-07-28T15:46:39Z |
| alsa-2025:7592 | Important: yggdrasil security update | 2025-05-14T00:00:00Z | 2025-07-28T15:43:17Z |
| alsa-2025:8135 | Important: python-tornado security update | 2025-05-26T00:00:00Z | 2025-07-28T15:42:10Z |
| alsa-2025:8666 | Moderate: grafana security update | 2025-06-09T00:00:00Z | 2025-07-28T14:55:22Z |
| alsa-2025:11803 | Important: nodejs:22 security update | 2025-07-28T00:00:00Z | 2025-07-28T14:53:46Z |
| alsa-2025:11849 | Important: unbound security update | 2025-07-28T00:00:00Z | 2025-07-28T14:51:11Z |
| alsa-2025:11884 | Important: unbound security update | 2025-07-28T00:00:00Z | 2025-07-28T14:37:14Z |
| alsa-2025:11805 | Moderate: perl security update | 2025-07-28T00:00:00Z | 2025-07-28T09:38:48Z |
| alsa-2025:9121 | Moderate: wireshark security update | 2025-06-16T00:00:00Z | 2025-07-28T08:49:32Z |
| alsa-2025:8915 | Moderate: grafana-pcp security update | 2025-06-11T00:00:00Z | 2025-07-28T08:45:49Z |
| alsa-2025:9063 | Moderate: git-lfs security update | 2025-06-16T00:00:00Z | 2025-07-28T08:43:27Z |
| alsa-2025:9120 | Important: libvpx security update | 2025-06-16T00:00:00Z | 2025-07-28T08:40:48Z |
| alsa-2025:9156 | Moderate: golang-github-openprinting-ipp-usb security update | 2025-06-17T00:00:00Z | 2025-07-28T08:38:30Z |
| alsa-2025:9486 | Moderate: qt6-qtbase security update | 2025-06-24T00:00:00Z | 2025-07-28T08:35:47Z |
| alsa-2025:9623 | Moderate: osbuild-composer security update | 2025-06-25T00:00:00Z | 2025-07-28T08:31:22Z |
| alsa-2025:9190 | Important: ipa security update | 2025-06-17T00:00:00Z | 2025-07-28T08:29:33Z |
| alsa-2025:9307 | Moderate: freerdp security update | 2025-06-23T00:00:00Z | 2025-07-28T08:25:45Z |
| alsa-2025:9418 | Moderate: krb5 security update | 2025-06-24T00:00:00Z | 2025-07-28T08:23:55Z |
| alsa-2025:9421 | Moderate: iputils security update | 2025-06-24T00:00:00Z | 2025-07-28T08:22:41Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2024-6 | Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char> | 2024-01-06T00:11:05.929725Z | 2024-03-08T14:19:24.750958Z |
| osv-2024-120 | Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer | 2024-02-21T00:00:31.892843Z | 2024-02-21T00:00:31.893273Z |
| osv-2024-117 | Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer | 2024-02-19T00:05:05.793082Z | 2024-02-19T00:05:05.793781Z |
| osv-2024-104 | Heap-buffer-overflow in mrb_memsearch | 2024-02-15T00:00:54.473735Z | 2024-02-15T00:00:54.474295Z |
| osv-2024-103 | Heap-use-after-free in xmlRemoveID | 2024-02-15T00:00:51.271367Z | 2024-02-15T00:00:51.271973Z |
| osv-2024-102 | Heap-buffer-overflow in mrb_memsearch | 2024-02-15T00:00:47.674187Z | 2024-02-15T00:00:47.674761Z |
| osv-2024-66 | Heap-buffer-overflow in mrb_memsearch | 2024-02-01T00:13:20.152510Z | 2024-02-14T14:19:50.489803Z |
| osv-2024-65 | Heap-buffer-overflow in mrb_memsearch | 2024-02-01T00:12:19.091201Z | 2024-02-14T14:19:46.707491Z |
| osv-2024-30 | Heap-buffer-overflow in mrb_memsearch | 2024-01-22T00:05:20.803259Z | 2024-02-14T14:19:17.217387Z |
| osv-2024-29 | Heap-buffer-overflow in mrb_memsearch | 2024-01-22T00:01:33.424797Z | 2024-02-14T14:18:57.560129Z |
| osv-2024-96 | Heap-buffer-overflow in mrb_memsearch | 2024-02-11T00:00:45.699847Z | 2024-02-14T14:17:20.000446Z |
| osv-2024-88 | Heap-use-after-free in fuzzer_execute_ex | 2024-02-09T00:02:29.396272Z | 2024-02-09T00:02:29.396615Z |
| osv-2024-82 | Heap-use-after-free in xmlValidatePopElement | 2024-02-08T00:02:35.342535Z | 2024-02-08T00:02:35.343044Z |
| osv-2024-81 | Heap-use-after-free in xmlRemoveID | 2024-02-08T00:02:18.078478Z | 2024-02-08T00:02:18.079086Z |
| osv-2024-79 | Heap-double-free in supported_features | 2024-02-07T00:03:00.459996Z | 2024-02-07T00:03:00.460359Z |
| osv-2024-64 | Global-buffer-overflow in ReadVariantArrayBuiltInType | 2024-02-01T00:03:55.790847Z | 2024-02-06T14:18:25.113400Z |
| osv-2024-77 | Heap-use-after-free in xmlRemoveID | 2024-02-06T00:06:09.284671Z | 2024-02-06T00:06:09.285249Z |
| osv-2024-72 | UNKNOWN READ in LLVMFuzzerRunDriver | 2024-02-03T00:04:56.169161Z | 2024-02-03T00:04:56.169853Z |
| osv-2024-36 | Heap-use-after-free in LLVMFuzzerRunDriver | 2024-01-24T00:12:37.499127Z | 2024-01-24T00:12:37.499641Z |
| osv-2020-828 | Heap-use-after-free in draco::Metadata::AddSubMetadata | 2020-07-14T05:37:49.784283Z | 2024-01-18T14:11:45.334998Z |
| osv-2020-778 | Heap-use-after-free in void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocat | 2020-07-14T05:37:30.449855Z | 2024-01-18T14:11:43.087585Z |
| osv-2020-824 | UNKNOWN READ in std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_trait | 2020-07-14T05:37:49.054851Z | 2024-01-18T14:11:41.842226Z |
| osv-2020-800 | UNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c | 2020-07-14T05:37:39.527741Z | 2024-01-18T14:11:40.439013Z |
| osv-2021-1082 | UNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c | 2021-08-01T00:00:48.182181Z | 2024-01-18T14:06:40.887686Z |
| osv-2024-7 | Heap-buffer-overflow in icu_75::Locale::Locale | 2024-01-07T00:11:45.064745Z | 2024-01-07T00:11:45.065397Z |
| osv-2023-1382 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2024-01-01T00:12:36.633204Z | 2024-01-01T00:12:36.633589Z |
| osv-2023-1381 | Heap-buffer-overflow in NetworkInterface::processPacket | 2024-01-01T00:03:49.670656Z | 2024-01-01T00:03:49.671160Z |
| osv-2023-1375 | Heap-buffer-overflow in IEC104Stats::processPacket | 2023-12-31T00:10:56.069235Z | 2023-12-31T00:10:56.069852Z |
| osv-2023-1373 | Heap-use-after-free in xmlRemoveID | 2023-12-31T00:01:26.816109Z | 2023-12-31T00:01:26.816606Z |
| osv-2023-1372 | Heap-use-after-free in JS_NewObjectFromShape | 2023-12-30T00:04:10.276049Z | 2023-12-30T00:04:10.276482Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2020-0001 | Stack overflow when resolving additional records from MX or SRV null targets | 2020-01-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0039 | typemap is Unmaintained | 2019-04-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0038 | Fix for UB in failure to catch panics crossing FFI boundaries | 2019-03-10T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0037 | Compiler optimisation for next_with_timeout in pnet::transport::IcmpTransportChannelIterator flaws to SEGFAULT | 2019-06-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0036 | Type confusion if __private_get_type_id__ is overridden | 2019-11-13T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0034 | HeaderMap::Drain API is unsound | 2019-11-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0033 | Integer Overflow in HeaderMap::reserve() can cause Denial of Service | 2019-11-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0029 | ChaCha20 counter overflow can expose repetitions in the keystream | 2019-10-22T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0028 | Unsound `impl Follow for bool` | 2019-10-20T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0027 | Flaw in Scalar::check_overflow allows side-channel timing attack | 2019-10-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0026 | generichash::Digest::eq always return true | 2019-10-11T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0025 | Flaw in CBOR deserializer allows stack overflow | 2019-10-03T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0023 | Cloned interners may read already dropped strings | 2019-08-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0022 | Stream callback function is not unwind safe | 2019-09-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0021 | `Matrix::zip_elements` causes double free | 2019-09-14T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0020 | fix unsound APIs that could lead to UB | 2019-09-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0019 | HMAC-BLAKE2 algorithms compute incorrect results | 2019-08-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0018 | Internally mutating methods take immutable ref self | 2019-09-02T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0017 | Panic during initialization of Lazy<T> might trigger undefined behavior | 2019-09-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0016 | Use-after-free in buffer conversion implementation | 2019-09-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0015 | Flaw in generativity allows out-of-bounds access | 2019-05-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0014 | Flaw in interface may drop uninitialized instance of arbitrary types | 2019-08-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0013 | Wrong memory orderings in RwLock potentially violates mutual exclusion | 2019-08-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0012 | Memory corruption in SmallVec::grow() | 2019-07-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0011 | Flaw in offset_of and span_of causes SIGILL, drops uninitialized memory of arbitrary type on panic in client code | 2019-07-16T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0010 | MultiDecoder::read() drops uninitialized memory of arbitrary type on panic in client code | 2019-07-04T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0009 | Double-free and use-after-free in SmallVec::grow() | 2019-06-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0008 | Flaw in string parsing can lead to crashes due to invalid memory access. | 2019-06-24T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0007 | Processing of maliciously crafted length fields causes memory allocation SIGABRTs | 2019-06-13T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0006 | Buffer overflow and format vulnerabilities in functions exposed without unsafe | 2019-06-15T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2025-6454 | Server-Side Request Forgery (SSRF) in GitLab | 2025-09-16T09:08:45.357Z | 2026-01-26T15:09:56.435Z |
| bit-gitlab-2025-13772 | Missing Authorization in GitLab | 2026-01-13T09:07:21.509Z | 2026-01-26T15:09:56.435Z |
| bit-gitlab-2025-13761 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2026-01-13T09:07:19.725Z | 2026-01-26T15:09:56.435Z |
| bit-crossplane-2023-38495 | Crossplane vulnerable to possible image tampering from missing image validation for Packages | 2026-01-26T14:36:56.233Z | 2026-01-26T15:09:56.435Z |
| bit-crossplane-2023-37900 | Crossplane vulnerable to denial of service from large image | 2026-01-26T14:36:54.817Z | 2026-01-26T15:09:56.435Z |
| bit-gitlab-2025-11224 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2026-01-16T09:05:53.033Z | 2026-01-22T09:11:07.452Z |
| bit-appsmith-2026-22794 | Account Takeover Vulnerability in Appsmith | 2026-01-14T08:37:00.092Z | 2026-01-22T09:11:07.452Z |
| bit-gradle-2026-22865 | Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts | 2026-01-21T08:41:11.981Z | 2026-01-21T09:22:22.325Z |
| bit-gradle-2026-22816 | Gradle fails to disable repositories which can expose builds to malicious artifacts | 2026-01-21T08:41:10.153Z | 2026-01-21T09:22:22.325Z |
| bit-airflow-2025-68438 | Apache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncated | 2026-01-21T08:39:22.633Z | 2026-01-21T09:22:22.325Z |
| bit-kibana-2026-0543 | Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation | 2026-01-16T08:42:18.049Z | 2026-01-16T09:10:29.256Z |
| bit-kibana-2026-0532 | External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector | 2026-01-16T08:42:16.599Z | 2026-01-16T09:10:29.256Z |
| bit-kibana-2026-0531 | Allocation of Resources Without Limits or Throttling in Kibana Fleet | 2026-01-16T08:42:14.963Z | 2026-01-16T09:10:29.256Z |
| bit-kibana-2026-0530 | Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation | 2026-01-16T08:42:13.351Z | 2026-01-16T09:10:29.256Z |
| bit-ghost-2026-22596 | Ghost has SQL Injection in Members Activity Feed | 2026-01-13T08:40:25.592Z | 2026-01-16T09:10:29.256Z |
| bit-elk-2026-0543 | Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation | 2026-01-16T08:39:07.127Z | 2026-01-16T09:10:29.256Z |
| bit-elk-2026-0532 | External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector | 2026-01-16T08:39:05.407Z | 2026-01-16T09:10:29.256Z |
| bit-elk-2026-0531 | Allocation of Resources Without Limits or Throttling in Kibana Fleet | 2026-01-16T08:39:03.612Z | 2026-01-16T09:10:29.256Z |
| bit-elk-2026-0530 | Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation | 2026-01-16T08:39:01.662Z | 2026-01-16T09:10:29.256Z |
| bit-mastodon-2026-22245 | Mastodon has SSRF Protection bypass | 2026-01-13T11:27:28.319Z | 2026-01-13T12:01:00.363Z |
| bit-virtualenv-2026-22702 | virtualenv Has TOCTOU Vulnerabilities in Directory Creation | 2026-01-13T08:53:06.703Z | 2026-01-13T09:11:00.781Z |
| bit-gitlab-2025-3950 | Exposure of Private Personal Information to an Unauthorized Actor in GitLab | 2026-01-13T09:08:23.763Z | 2026-01-13T09:11:00.781Z |
| bit-gitlab-2025-13781 | Missing Authorization in GitLab | 2026-01-13T09:07:23.273Z | 2026-01-13T09:11:00.781Z |
| bit-gitlab-2025-11246 | Insufficient Granularity of Access Control in GitLab | 2026-01-13T09:06:35.458Z | 2026-01-13T09:11:00.781Z |
| bit-gitlab-2025-10569 | Allocation of Resources Without Limits or Throttling in GitLab | 2026-01-13T09:06:21.471Z | 2026-01-13T09:11:00.781Z |
| bit-ghost-2026-22597 | Ghost has SSRF via External Media Inliner | 2026-01-13T08:40:27.429Z | 2026-01-13T09:11:00.781Z |
| bit-ghost-2026-22595 | Ghost has Staff Token permission bypass | 2026-01-13T08:40:23.758Z | 2026-01-13T09:11:00.781Z |
| bit-ghost-2026-22594 | Ghost has Staff 2FA bypass | 2026-01-13T08:40:22.071Z | 2026-01-13T09:11:00.781Z |
| bit-cosign-2026-22703 | Cosign verification accepts any valid Rekor entry under certain conditions | 2026-01-13T08:37:37.120Z | 2026-01-13T09:11:00.781Z |
| bit-drupal-2025-13083 | Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008 | 2025-11-25T17:56:46.824Z | 2026-01-10T12:08:11.327Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-1063 | Multiples vulnérabilités dans les produits Splunk | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| CERTFR-2025-AVI-1062 | Multiples vulnérabilités dans Wireshark | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| CERTFR-2025-AVI-1061 | Vulnérabilité dans PostgreSQL PgBouncer | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| CERTFR-2024-AVI-1090 | Multiples vulnérabilités dans Synacor Zimbra Collaboration | 2024-12-18T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2025-avi-1060 | Multiples vulnérabilités dans Python | 2025-12-03T00:00:00.000000 | 2025-12-03T00:00:00.000000 |
| certfr-2025-avi-1059 | Multiples vulnérabilités dans Google Pixel | 2025-12-03T00:00:00.000000 | 2025-12-03T00:00:00.000000 |
| certfr-2025-avi-1058 | Multiples vulnérabilités dans Google Chrome | 2025-12-03T00:00:00.000000 | 2025-12-03T00:00:00.000000 |
| CERTFR-2025-AVI-1060 | Multiples vulnérabilités dans Python | 2025-12-03T00:00:00.000000 | 2025-12-03T00:00:00.000000 |
| CERTFR-2025-AVI-1059 | Multiples vulnérabilités dans Google Pixel | 2025-12-03T00:00:00.000000 | 2025-12-03T00:00:00.000000 |
| CERTFR-2025-AVI-1058 | Multiples vulnérabilités dans Google Chrome | 2025-12-03T00:00:00.000000 | 2025-12-03T00:00:00.000000 |
| certfr-2025-avi-1057 | Multiples vulnérabilités dans les produits VMware | 2025-12-02T00:00:00.000000 | 2025-12-02T00:00:00.000000 |
| certfr-2025-avi-1056 | Multiples vulnérabilités dans Google Android | 2025-12-02T00:00:00.000000 | 2025-12-02T00:00:00.000000 |
| CERTFR-2025-AVI-1057 | Multiples vulnérabilités dans les produits VMware | 2025-12-02T00:00:00.000000 | 2025-12-02T00:00:00.000000 |
| CERTFR-2025-AVI-1056 | Multiples vulnérabilités dans Google Android | 2025-12-02T00:00:00.000000 | 2025-12-02T00:00:00.000000 |
| certfr-2025-avi-1055 | Multiples vulnérabilités dans Zabbix | 2025-12-01T00:00:00.000000 | 2025-12-01T00:00:00.000000 |
| certfr-2025-avi-1054 | Multiples vulnérabilités dans les produits VMware | 2025-12-01T00:00:00.000000 | 2025-12-01T00:00:00.000000 |
| certfr-2025-avi-1053 | Vulnérabilité dans Stormshield Network VPN Client | 2025-12-01T00:00:00.000000 | 2025-12-01T00:00:00.000000 |
| certfr-2025-avi-1052 | Vulnérabilité dans Mattermost Server | 2025-12-01T00:00:00.000000 | 2025-12-01T00:00:00.000000 |
| certfr-2025-avi-0936 | Multiples vulnérabilités dans Mattermost Server | 2025-10-29T00:00:00.000000 | 2025-12-01T00:00:00.000000 |
| CERTFR-2025-AVI-1055 | Multiples vulnérabilités dans Zabbix | 2025-12-01T00:00:00.000000 | 2025-12-01T00:00:00.000000 |
| CERTFR-2025-AVI-1054 | Multiples vulnérabilités dans les produits VMware | 2025-12-01T00:00:00.000000 | 2025-12-01T00:00:00.000000 |
| CERTFR-2025-AVI-1053 | Vulnérabilité dans Stormshield Network VPN Client | 2025-12-01T00:00:00.000000 | 2025-12-01T00:00:00.000000 |
| CERTFR-2025-AVI-1052 | Vulnérabilité dans Mattermost Server | 2025-12-01T00:00:00.000000 | 2025-12-01T00:00:00.000000 |
| CERTFR-2025-AVI-0936 | Multiples vulnérabilités dans Mattermost Server | 2025-10-29T00:00:00.000000 | 2025-12-01T00:00:00.000000 |
| certfr-2025-avi-1051 | Multiples vulnérabilités dans les produits IBM | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1050 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1049 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1048 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1047 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1046 | Multiples vulnérabilités dans les produits Moxa | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2016-000112 | Apache Struts vulnerable to validation bypass in Getter method | 2016-06-20T17:19+09:00 | 2022-08-09T14:08+09:00 |
| jvndb-2016-000111 | Apache Struts vulnerable to cross-site request forgery | 2016-06-20T17:18+09:00 | 2022-08-09T14:05+09:00 |
| jvndb-2020-000055 | Apache Struts 2 vulnerable to denial-of-service (DoS) | 2020-08-25T13:59+09:00 | 2022-08-09T13:57+09:00 |
| jvndb-2020-000084 | Apache Struts 2 vulnerable to remote code execution (S2-061) | 2020-12-11T15:09+09:00 | 2022-08-09T13:55+09:00 |
| jvndb-2022-000062 | Kaitai Struct: compiler vulnerable to denial-of-service (DoS) | 2022-08-04T15:14+09:00 | 2022-08-04T15:14+09:00 |
| jvndb-2022-002143 | Information Disclosure Vulnerability in Hitachi Automation Director and Hitachi Ops Center Automator | 2022-08-01T17:10+09:00 | 2022-08-01T17:10+09:00 |
| jvndb-2022-000061 | "JustSystems JUST Online Update for J-License" starts a program with an unquoted file path | 2022-07-28T13:40+09:00 | 2022-07-28T13:40+09:00 |
| jvndb-2021-000007 | OS command injection vulnerability in multiple Infoscience Corporation log management tools | 2021-01-27T18:31+09:00 | 2022-07-26T15:53+09:00 |
| jvndb-2022-001953 | Growi vulnerable to weak password requirements | 2022-06-15T17:47+09:00 | 2022-06-15T17:47+09:00 |
| jvndb-2021-000073 | Multiple vulnerabilities in Cybozu Garoon | 2021-08-02T16:42+09:00 | 2022-05-24T15:16+09:00 |
| jvndb-2022-001800 | Installer of Trend Micro HouseCall for Home Networks may insecurely load Dynamic Link Libraries | 2022-05-13T16:24+09:00 | 2022-05-13T16:24+09:00 |
| jvndb-2021-000097 | Multiple vulnerabilities in CLUSTERPRO X and EXPRESSCLUSTER X | 2021-10-29T15:22+09:00 | 2022-04-20T14:03+09:00 |
| jvndb-2022-001526 | Trend Micro Antivirus for Mac vulnerable to privilege escalation | 2022-04-07T16:58+09:00 | 2022-04-07T16:58+09:00 |
| jvndb-2017-000174 | Self-Extracting Encrypted Files created by AttacheCase may insecurely load Dynamic Link Libraries | 2017-07-14T13:38+09:00 | 2022-03-31T17:43+09:00 |
| jvndb-2022-001494 | Trend Micro Apex Central and Trend Micro Apex Central as a Service vulnerable to improper check for file contents | 2022-03-31T17:25+09:00 | 2022-03-31T17:25+09:00 |
| jvndb-2021-004912 | Multiple vulnerabilities in multiple ELECOM routers | 2021-12-02T17:16+09:00 | 2022-03-30T16:11+09:00 |
| jvndb-2021-000108 | Multiple vulnerabilities in multiple ELECOM LAN routers | 2021-11-30T16:23+09:00 | 2022-03-29T16:18+09:00 |
| jvndb-2022-001477 | Netcommunity OG410X and OG810X VoIP gateway/Hikari VoIP adapter for business offices vulnerable to OS command injection | 2022-03-23T12:08+09:00 | 2022-03-23T12:08+09:00 |
| jvndb-2022-000021 | Multiple vulnerabilities in KINGSOFT "WPS Office" and "KINGSOFT Internet Security" | 2022-03-16T14:46+09:00 | 2022-03-16T14:46+09:00 |
| jvndb-2021-008345 | Installer of Trend Micro Portable Security may insecurely load Dynamic Link Libraries | 2022-03-14T16:43+09:00 | 2022-03-14T16:43+09:00 |
| jvndb-2022-001404 | Installer of Trend Micro Password Manager may insecurely load Dynamic Link Libraries | 2022-03-11T15:55+09:00 | 2022-03-11T15:55+09:00 |
| jvndb-2022-000016 | UNIVERGE WA Series vulnerable to OS command injection | 2022-03-10T14:31+09:00 | 2022-03-10T14:31+09:00 |
| jvndb-2022-001383 | Directory Permission Vulnerability in Hitachi Ops Center Viewpoint | 2022-03-07T15:45+09:00 | 2022-03-07T15:45+09:00 |
| jvndb-2022-001382 | File Permission Vulnerability in Hitachi Command Suite | 2022-03-07T15:35+09:00 | 2022-03-07T15:35+09:00 |
| jvndb-2022-000008 | i-FILTER vulnerable to improper check for certificate revocation | 2022-03-04T14:12+09:00 | 2022-03-04T14:12+09:00 |
| jvndb-2022-000017 | Norton Security for Mac improperly processes ICMP packets | 2022-03-03T14:32+09:00 | 2022-03-03T14:32+09:00 |
| jvndb-2022-001380 | Multiples security updates for Trend Micro Endpoint security products for enterprises (March 2022) | 2022-03-02T17:07+09:00 | 2022-03-02T17:07+09:00 |
| jvndb-2021-000109 | Multiple missing authorization vulnerabilities in WordPress Plugin "Advanced Custom Fields" | 2021-12-02T15:02+09:00 | 2022-02-18T16:18+09:00 |
| jvndb-2022-000014 | Multiple vulnerabilities in a-blog cms | 2022-02-18T15:55+09:00 | 2022-02-18T15:55+09:00 |
| jvndb-2022-000012 | Multiple vulnerabilities in phpUploader | 2022-02-17T15:20+09:00 | 2022-02-17T15:20+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-13145 | Google Android权限提升漏洞(CNVD-2026-13145) | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13144 | Google Android权限提升漏洞(CNVD-2026-13144) | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13143 | Google Android存在未明漏洞(CNVD-2026-13143) | 2026-03-09 | 2026-03-10 |
| cnvd-2026-13142 | Google Android信息泄露漏洞(CNVD-2026-13142) | 2026-03-09 | 2026-03-10 |
| cnvd-2026-12911 | Microsoft Windows Admin Center授权问题漏洞 | 2026-03-04 | 2026-03-09 |
| cnvd-2026-12910 | Microsoft Teams访问控制错误漏洞 | 2026-03-04 | 2026-03-09 |
| cnvd-2026-12909 | Microsoft Semantic Kernel代码注入漏洞 | 2026-03-06 | 2026-03-09 |
| cnvd-2026-12908 | Microsoft Azure Arc访问控制错误漏洞 | 2026-03-06 | 2026-03-09 |
| cnvd-2026-12907 | Microsoft Azure Functions信息泄露漏洞 | 2026-03-06 | 2026-03-09 |
| cnvd-2026-12906 | Microsoft Azure Front Door访问控制错误漏洞 | 2026-03-06 | 2026-03-09 |
| cnvd-2026-12905 | Microsoft ACI Confidential Containers特权提升漏洞 | 2026-03-09 | 2026-03-09 |
| cnvd-2026-12904 | Microsoft ACI Confidential Containers信息泄露漏洞 | 2026-03-09 | 2026-03-09 |
| cnvd-2026-12903 | Microsoft Payment Orchestrator Service访问控制错误漏洞 | 2026-03-09 | 2026-03-09 |
| cnvd-2026-12902 | Microsoft Devices Pricing Program代码问题漏洞 | 2026-03-09 | 2026-03-09 |
| cnvd-2026-12875 | Adobe Substance3D Designer缓冲区溢出漏洞(CNVD-2026-12875) | 2026-02-24 | 2026-03-09 |
| cnvd-2026-12874 | Adobe Substance3D Designer代码问题漏洞 | 2026-02-24 | 2026-03-09 |
| cnvd-2026-12873 | Adobe Audition缓冲区溢出漏洞 | 2026-02-24 | 2026-03-09 |
| cnvd-2026-12872 | Adobe Substance3D Designer缓冲区溢出漏洞(CNVD-2026-12872) | 2026-02-24 | 2026-03-09 |
| cnvd-2026-12871 | Adobe DNG SDK缓冲区溢出漏洞 | 2026-02-25 | 2026-03-09 |
| cnvd-2026-12870 | Adobe After Effects缓冲区溢出漏洞(CNVD-2026-12870) | 2026-02-25 | 2026-03-09 |
| cnvd-2026-12869 | Adobe After Effects资源管理错误漏洞(CNVD-2026-12869) | 2026-02-25 | 2026-03-09 |
| cnvd-2026-12868 | Adobe After Effects资源管理错误漏洞(CNVD-2026-12868) | 2026-02-25 | 2026-03-09 |
| cnvd-2026-12867 | Adobe After Effects资源管理错误漏洞 | 2026-02-25 | 2026-03-09 |
| cnvd-2026-12866 | Adobe After Effects输入验证错误漏洞(CNVD-2026-12866) | 2026-02-25 | 2026-03-09 |
| cnvd-2026-12865 | Adobe After Effects类型混淆漏洞 | 2026-02-25 | 2026-03-09 |
| cnvd-2026-12897 | Apache Traffic Server(ATS)环境问题漏洞 | 2025-05-08 | 2026-03-06 |
| cnvd-2026-12778 | Fiber安全特征问题漏洞 | 2026-03-04 | 2026-03-06 |
| cnvd-2026-12777 | FreeRDP缓冲区溢出漏洞(CNVD-2026-12777) | 2026-03-06 | 2026-03-06 |
| cnvd-2026-12776 | Textream资源管理错误漏洞 | 2026-03-06 | 2026-03-06 |
| cnvd-2026-12773 | WordPress插件New User Approve信息泄露漏洞 | 2025-11-21 | 2026-03-06 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-08792 | Уязвимость функции virtqueue_enable_cb_delayed() модуля drivers/virtio/virtio_ring.c ядра… | 22.07.2025 | 16.02.2026 |
| bdu:2025-08789 | Уязвимость модуля drivers/net/vxlan/vxlan_core.c ядра операционных систем Linux, позволяю… | 22.07.2025 | 16.02.2026 |
| bdu:2025-08788 | Уязвимость функции btrfs_prelim_ref() модуля include/trace/events/btrfs.h ядра операционн… | 07.08.2025 | 16.02.2026 |
| bdu:2025-08786 | Уязвимость компонента Aggregate Term Handler системы управления базами данных SQLite, поз… | 22.07.2025 | 16.02.2026 |
| bdu:2025-08706 | Уязвимость компонента bus ядра операционной системы Linux, позволяющая нарушителю оказать… | 28.07.2025 | 16.02.2026 |
| bdu:2025-08696 | Уязвимость функции mod_ssl веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать… | 21.07.2025 | 16.02.2026 |
| bdu:2025-08695 | Уязвимость функции mod_proxy_http2 веб-сервера Apache HTTP Server, позволяющая нарушителю… | 21.07.2025 | 16.02.2026 |
| bdu:2025-08694 | Уязвимость функции in _gnutls_figure_common_ciphersuite() библиотеки GnuTLS, позволяющая … | 21.07.2025 | 16.02.2026 |
| bdu:2025-08622 | Уязвимость модуля kernel/trace/bpf_trace.c подсистемы BPF ядра операционной системы Linux… | 17.07.2025 | 16.02.2026 |
| bdu:2025-08604 | Уязвимость библиотеки упрощения упаковки проектов setuptools, связанная с неверным ограни… | 17.07.2025 | 16.02.2026 |
| bdu:2025-08510 | Уязвимость функции sun8i_ce_cipher_prepare() модуля drivers/crypto/allwinner/sun8i-ce/sun… | 15.07.2025 | 16.02.2026 |
| bdu:2025-08509 | Уязвимость функции ath11k_core_halt() модуля drivers/net/wireless/ath/ath11k/core.c ядра … | 15.07.2025 | 16.02.2026 |
| bdu:2025-08361 | Уязвимость компонента multipart/form-data веб-фреймворка и асинхронной сетевой библиотеки… | 11.07.2025 | 16.02.2026 |
| bdu:2025-08356 | Уязвимость программы системного администрирования Sudo, связанная с недостатками механизм… | 11.07.2025 | 16.02.2026 |
| bdu:2025-08271 | Уязвимость функции tb_cfg_request_dequeue() модуля drivers/thunderbolt/ctl.c ядра операци… | 09.07.2025 | 16.02.2026 |
| bdu:2025-08099 | Уязвимость компонента nft_tunnel ядра операционной системы Linux, позволяющая нарушителю … | 07.07.2025 | 16.02.2026 |
| bdu:2025-07578 | Уязвимость микропрограммного обеспечения процессоров Intel, связанная с раскрытием информ… | 25.06.2025 | 16.02.2026 |
| bdu:2025-07500 | Уязвимость функции iocg_pay_debt() модуля block/blk-iocost.c поддержки блочного уровня яд… | 25.06.2025 | 16.02.2026 |
| bdu:2025-07485 | Уязвимость функции tcf_mirred_to_dev() модуля net/sched/act_mirred.c подсистемы управлени… | 25.06.2025 | 16.02.2026 |
| bdu:2025-07455 | Уязвимость функции vmbus_connect() модуля drivers/hv/connection.c - драйвера поддержки го… | 25.06.2025 | 16.02.2026 |
| bdu:2025-07426 | Уязвимость интерфейса модуля Rack интерпретатора языка программирования Ruby, позволяющая… | 23.06.2025 | 16.02.2026 |
| bdu:2025-07244 | Уязвимость функции __do_sys_rtas() модуля arch/powerpc/kernel/rtas.c ядра операционной си… | 23.06.2025 | 16.02.2026 |
| bdu:2025-07219 | Уязвимость функции ucsi_ccg_sync_control() модуля drivers/us ядра операционной системы Li… | 23.06.2025 | 16.02.2026 |
| bdu:2025-07164 | Уязвимость сервера универсальной системы мониторинга Zabbix, позволяющая нарушителю получ… | 20.06.2025 | 16.02.2026 |
| bdu:2025-07144 | Уязвимость функции xmlBuildQName библиотеки Libxml2, позволяющая нарушителю вызвать отказ… | 20.06.2025 | 16.02.2026 |
| bdu:2025-07137 | Уязвимость функции g_string_insert_unichar() файла glib/gstring.c библиотеки Glib, позвол… | 20.06.2025 | 16.02.2026 |
| bdu:2025-07126 | Уязвимость компонента reiserfs загрузчика операционных систем Grub2, позволяющая нарушите… | 20.06.2025 | 16.02.2026 |
| bdu:2025-07125 | Уязвимость функции grub_udf_read_block загрузчика операционных систем Grub2, позволяющая … | 20.06.2025 | 16.02.2026 |
| bdu:2025-07124 | Уязвимость компонента UFS загрузчика операционных систем Grub2, позволяющая нарушителю вы… | 20.06.2025 | 16.02.2026 |
| bdu:2025-07123 | Уязвимость загрузчика операционных систем Grub2, связанная с записью за пределами границ,… | 20.06.2025 | 16.02.2026 |
| ID | Description | Updated |
|---|---|---|
| var-202205-0881 | Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.49… | 2024-07-23T20:29:37.848000Z |
| var-201302-0305 | Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … | 2024-07-23T20:29:37.668000Z |
| var-201912-0646 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:29:33.187000Z |
| var-200512-0634 | passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 al… | 2024-07-23T20:29:02.384000Z |
| var-202010-1512 | An input validation issue was addressed with improved input validation. This issue is fix… | 2024-07-23T20:29:01.717000Z |
| var-202006-0222 | libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C sub… | 2024-07-23T20:28:59.964000Z |
| var-200102-0007 | WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood… | 2024-07-23T20:28:59.862000Z |
| var-201403-0514 | The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certa… | 2024-07-23T20:28:55.089000Z |
| var-200701-0014 | Integer overflow in the ffs_mountfs function in Mac OS X 10.4.8 and FreeBSD 6.1 allows lo… | 2024-07-23T20:28:55.996000Z |
| var-200112-0223 | Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (… | 2024-07-23T20:28:55.223000Z |
| var-201311-0379 | The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not pro… | 2024-07-23T20:27:48.646000Z |
| var-201006-1142 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 throug… | 2024-07-23T20:27:48.807000Z |
| var-200904-0794 | Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows rem… | 2024-07-23T20:27:48.713000Z |
| var-200708-0604 | The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and late… | 2024-07-23T20:27:48.307000Z |
| var-201601-0495 | Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x bef… | 2024-07-23T20:27:47.728000Z |
| var-200701-0340 | The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428… | 2024-07-23T20:27:11.499000Z |
| var-201912-0647 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:26:07.934000Z |
| var-201912-0542 | This issue was addressed with improved checks. This issue is fixed in iOS 12.2, macOS Moj… | 2024-07-23T20:26:04.490000Z |
| var-200309-0035 | A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may… | 2024-07-23T20:26:04.438000Z |
| var-202110-1512 | This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS… | 2024-07-23T20:26:00.417000Z |
| var-200807-0062 | JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not pr… | 2024-07-23T20:26:00.063000Z |
| var-202210-1528 | A type confusion issue was addressed with improved memory handling. This issue is fixed i… | 2024-07-23T20:25:59.725000Z |
| var-202106-1921 | A security issue in nginx resolver was identified, which might allow an attacker who is a… | 2024-07-23T20:25:59.461000Z |
| var-202004-0983 | Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager… | 2024-07-23T20:25:59.004000Z |
| var-202201-0370 | storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. The… | 2024-07-23T20:25:58.764000Z |
| var-202104-1571 | A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lea… | 2024-07-23T20:25:58.423000Z |
| var-201405-0543 | Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filter… | 2024-07-23T20:25:58.247000Z |
| var-200703-0025 | The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not suffici… | 2024-07-23T20:25:58.189000Z |
| var-202006-1838 | Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested… | 2024-07-23T20:25:57.515000Z |
| var-201304-0381 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:25:24.023000Z |