Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2026-35215
7.5 (3.1)
Firebird: DoS via malicious slice descriptor in slice packet FirebirdSQL
 firebird
 2026-04-17T18:59:23.663Z 2026-04-17T18:59:23.663Z
CVE-2026-34232
7.5 (3.1)
Firebird: DoS via `op_response` packet from client FirebirdSQL
 firebird
 2026-04-17T18:52:11.693Z 2026-04-17T18:52:11.693Z
CVE-2026-27890
8.2 (3.1)
Firebird has Pre-Auth DOS when Processing Out of Order… FirebirdSQL
 firebird
 2026-04-17T18:14:29.433Z 2026-04-17T18:50:22.134Z
CVE-2026-6443
9.8 (3.1)
Accordion and Accordion Slider 1.4.6 - Injected Backdoor essentialplugin
 Accordion and Accordion Slider
 2026-04-17T06:44:49.128Z 2026-04-17T18:49:42.999Z
CVE-2026-5427
5.3 (3.1)
Kubio AI Page Builder <= 2.7.2 - Missing Authorization… extendthemes
 Kubio AI Page Builder
 2026-04-17T03:36:44.993Z 2026-04-17T18:48:57.774Z
CVE-2026-5162
6.4 (3.1)
Royal Addons for Elementor <= 1.7.1056 - Authenticated… wproyal
 Royal Addons for Elementor – Addons and Templates Kit for Elementor
 2026-04-17T01:24:36.629Z 2026-04-17T18:48:24.671Z
CVE-2026-33122
8.6 (4.0)
DataEase has SQL Injection via Datasource Management dataease
 dataease
 2026-04-16T19:24:03.195Z 2026-04-17T18:47:44.791Z
CVE-2026-40901
7.5 (4.0)
DataEase: Quartz Deserialization → Remote Code Execution dataease
 dataease
 2026-04-16T20:57:45.978Z 2026-04-17T18:47:00.448Z
CVE-2026-39313
8.7 (4.0)
MCP-Framework: Unbounded memory allocation in readRequ… QuantGeekDev
 mcp-framework
 2026-04-16T21:24:27.328Z 2026-04-17T18:46:07.726Z
CVE-2026-40247
8.7 (4.0)
free5gc UDR improper path validation allows unauthenti… free5gc
 free5gc
 2026-04-16T21:54:04.151Z 2026-04-17T18:44:09.831Z
CVE-2026-40255
6.1 (3.1)
@adonisjs/http-server has an Open Redirect vulnerability adonisjs
 http-server
 2026-04-16T22:25:38.155Z 2026-04-17T18:43:10.697Z
CVE-2026-40260
6.9 (4.0)
pypdf: Manipulated XMP metadata entity declarations ca… py-pdf
 pypdf
 2026-04-16T23:18:26.687Z 2026-04-17T18:42:05.059Z
CVE-2026-40265
5.9 (3.1)
Note Mark has Broken Access Control on Asset Download enchant97
 note-mark
 2026-04-16T23:56:02.961Z 2026-04-17T18:40:45.157Z
CVE-2026-6497
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
prasathmani TinyFileManager File Upload filemanager.ph… prasathmani
 TinyFileManager
 2026-04-17T15:30:12.319Z 2026-04-17T18:39:49.310Z
CVE-2026-4817
6.5 (3.1)
MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+… stylemix
 MasterStudy LMS WordPress Plugin – for Online Courses and Education
 2026-04-17T01:24:37.193Z 2026-04-17T18:39:48.201Z
CVE-2026-5234
5.3 (3.1)
LatePoint <= 5.3.2 - Insecure Direct Object Reference … latepoint
 LatePoint – Calendar Booking Plugin for Appointments and Events
 2026-04-17T03:36:44.618Z 2026-04-17T18:38:40.183Z
CVE-2026-3464
8.8 (3.1)
WP Customer Area <= 8.3.4 - Authenticated (Subscriber+… aguilatechnologies
 WP Customer Area
 2026-04-17T16:26:50.576Z 2026-04-17T18:37:36.472Z
CVE-2026-6421
7.3 (4.0)
7 (3.1)
7 (3.0)
Mobatek MobaXterm Home Edition msimg32.dll uncontrolle… Mobatek
 MobaXterm Home Edition
 2026-04-17T05:45:11.921Z 2026-04-17T18:37:21.676Z
CVE-2026-40518
7.1 (4.0)
7.1 (3.1)
ByteDance DeerFlow Path Traversal and Arbitrary File W… bytedance
 deer-flow
 2026-04-17T16:43:42.387Z 2026-04-17T18:35:51.128Z
CVE-2026-28214
6 (4.0)
Firebird server hangs when using specific clumplet on … FirebirdSQL
 firebird
 2026-04-17T18:35:46.974Z 2026-04-17T18:35:46.974Z
CVE-2026-5718
8.1 (3.1)
Drag and Drop Multiple File Upload for Contact Form 7 … glenwpcoder
 Drag and Drop Multiple File Upload for Contact Form 7
 2026-04-17T17:25:55.466Z 2026-04-17T18:34:48.917Z
CVE-2025-11374
6.5 (3.1)
Consul's KV endpoint is vulnerable to denial of service HashiCorp
 Consul
 2025-10-28T20:19:05.292Z 2026-04-17T18:34:14.829Z
CVE-2026-33815
9.8 (3.1)
CVE-2026-33815 in github.com/jackc/pgx github.com/jackc/pgx/v5
 github.com/jackc/pgx/v5/pgproto3
 2026-04-07T15:19:24.344Z 2026-04-17T18:30:29.157Z
CVE-2025-65104
7.9 (3.1)
Firebird: Information leak vulnerability in firebird3 … FirebirdSQL
 firebird
 2026-04-17T17:47:42.109Z 2026-04-17T18:25:11.941Z
CVE-2026-40525
9.1 (4.0)
9.1 (3.1)
OpenViking Authentication Bypass via VikingBot OpenAPI volcengine
 OpenViking
 2026-04-17T18:19:12.315Z 2026-04-17T18:19:12.315Z
CVE-2026-40170
7.5 (3.1)
ngtcp2 has a qlog transport parameter serialization st… ngtcp2
 ngtcp2
 2026-04-16T21:34:07.610Z 2026-04-17T18:17:35.758Z
CVE-2026-28212
7.5 (3.1)
Firebird has potential server crash via null pointer d… FirebirdSQL
 firebird
 2026-04-17T18:05:25.854Z 2026-04-17T18:10:29.394Z
CVE-2025-13357
7.4 (3.1)
Vault Terraform Provider Applied Incorrect Defaults fo… HashiCorp
 Tooling
 2025-11-21T15:02:27.081Z 2026-04-17T17:57:56.094Z
CVE-2026-0969
8.8 (3.1)
Arbitrary code execution in React server-side renderin… HashiCorp
 Shared library
 2026-02-12T01:35:06.231Z 2026-04-17T17:57:55.801Z
CVE-2026-2808
6.8 (3.1)
Consul vulnerable to arbitrary file reads through the … HashiCorp
 Consul
 2026-03-11T23:08:32.414Z 2026-04-17T17:57:55.646Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-33689
8.7 (4.0)
xrdp: Pre-authentication out-of-bounds reads in channe… neutrinolabs
 xrdp
 2026-04-17T20:16:31.248Z 2026-04-17T20:16:31.248Z
CVE-2026-33436
3.1 (3.1)
Stirling-PDF: Reflected XSS through crafted filename i… Stirling-Tools
 Stirling-PDF
 2026-04-17T20:29:43.262Z 2026-04-17T20:29:43.262Z
CVE-2026-33145
6.3 (3.1)
xrdp: Authenticated RCE via unsanitized AlternateShell… neutrinolabs
 xrdp
 2026-04-17T20:14:14.048Z 2026-04-17T20:15:20.525Z
CVE-2026-23500
9.4 (4.0)
Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_P… Dolibarr
 dolibarr
 2026-04-17T20:25:49.843Z 2026-04-17T20:25:49.843Z
CVE-2026-33549
6.7 (3.1)
SPIP 4.4.10 through 4.4.12 before 4.4.13 allows u… SPIP
 SPIP
 2026-03-22T02:03:47.629Z 2026-04-02T17:58:46.498Z
CVE-2026-32766
1.7 (4.0)
astral-tokio-tar insufficiently validates PAX extensio… astral-sh
 tokio-tar
 2026-03-20T00:07:36.444Z 2026-03-20T18:09:06.340Z
CVE-2026-33060
5.3 (3.1)
CKAN MCP Server: SSRF via base_url allows access to in… ondata
 ckan-mcp-server
 2026-03-20T07:21:30.897Z 2026-03-24T01:56:33.169Z
CVE-2025-65734
5.4 (3.1)
An authenticated arbitrary file upload vulnerabil… n/a
 n/a
 2026-03-16T00:00:00.000Z 2026-03-16T17:24:36.260Z
CVE-2026-1776
6 (4.0)
Camaleon CMS AWS Uploader Authenticated Path Traversal… owen2345
 Camaleon CMS
 2026-03-09T21:08:06.600Z 2026-03-23T15:44:08.805Z
CVE-2026-0846
8.6 (3.0)
Arbitrary File Read via Absolute Path Input in nltk.ut… nltk
 nltk/nltk
 2026-03-09T19:19:09.464Z 2026-03-12T14:48:25.181Z
CVE-2026-33273
4.7 (3.0)
5.1 (4.0)
Unrestricted upload of file with dangerous type i… ICZ Corporation
 MATCHA INVOICE
 2026-04-08T05:11:03.549Z 2026-04-08T15:05:25.194Z
CVE-2026-33901
7.5 (3.1)
ImageMagick has a Heap Buffer Overflow via MVG decoder ImageMagick
 ImageMagick
 2026-04-13T20:56:12.307Z 2026-04-14T13:51:00.488Z
CVE-2026-33902
5.5 (3.1)
ImageMagick: Stack Overflow via Recursive FX Expressio… ImageMagick
 ImageMagick
 2026-04-13T20:59:47.120Z 2026-04-14T15:51:26.551Z
CVE-2026-33905
5.5 (3.1)
ImageMagick has an Out-of-Bounds read via -sample operation ImageMagick
 ImageMagick
 2026-04-13T21:02:58.121Z 2026-04-16T13:26:40.363Z
CVE-2026-33908
7.5 (3.1)
ImageMagick is vulnerable to Stack Overflow in Destroy… ImageMagick
 ImageMagick
 2026-04-13T21:06:42.682Z 2026-04-14T16:28:36.167Z
CVE-2026-40169
6.2 (3.1)
ImageMagick: Heap buffer overflow (WRITE) in the YAML … ImageMagick
 ImageMagick
 2026-04-13T21:25:56.317Z 2026-04-14T15:52:31.799Z
CVE-2026-40183
5.5 (3.1)
ImageMagick: Heap buffer overflow when encoding JXL im… ImageMagick
 ImageMagick
 2026-04-13T21:28:20.797Z 2026-04-14T19:27:39.187Z
CVE-2026-40310
5.5 (3.1)
ImageMagick: Heap out-of-bounds write in JP2 encoder ImageMagick
 ImageMagick
 2026-04-13T21:32:53.361Z 2026-04-14T16:28:25.315Z
CVE-2026-24913
8.8 (3.0)
8.7 (4.0)
SQL Injection vulnerability exists in MATCHA INVO… ICZ Corporation
 MATCHA INVOICE
 2026-04-08T05:10:12.155Z 2026-04-08T15:06:29.082Z
CVE-2026-40311
5.5 (3.1)
ImageMagick: Heap-use-after-free via XMP profile could… ImageMagick
 ImageMagick
 2026-04-13T21:36:44.262Z 2026-04-14T15:48:36.521Z
CVE-2026-27787
5.4 (3.0)
5.1 (4.0)
Cross-site scripting vulnerability exists in MATC… ICZ Corporation
 MATCHA SNS
 2026-04-08T05:11:11.154Z 2026-04-08T13:55:07.158Z
CVE-2026-40312
6.2 (3.1)
ImageMagick: Off-by-One in MSL decoder could result in crash ImageMagick
 ImageMagick
 2026-04-13T21:43:28.416Z 2026-04-14T19:27:39.053Z
CVE-2026-33810
7.5 (3.1)
Case-sensitive excludedSubtrees name constraints cause… Go standard library
 crypto/x509
 2026-04-08T01:06:56.546Z 2026-04-13T18:20:37.411Z
CVE-2026-39880
5 (3.1)
Remnawave Backend has a race condition in HWID device … remnawave
 backend
 2026-04-08T20:01:21.673Z 2026-04-10T20:48:07.233Z
CVE-2026-35523
7.5 (3.1)
Authentication bypass in strawberry-graphql via legacy… strawberry-graphql
 strawberry
 2026-04-07T15:58:17.694Z 2026-04-09T16:18:51.112Z
CVE-2026-35526
7.5 (3.1)
Strawberry GraphQL affected by a Denial of Service via… strawberry-graphql
 strawberry
 2026-04-07T15:23:36.548Z 2026-04-08T14:55:58.026Z
CVE-2026-35515
6.3 (4.0)
@nestjs/core Improperly Neutralizes Special Elements i… nestjs
 nest
 2026-04-07T15:06:10.619Z 2026-04-07T15:58:37.067Z
CVE-2026-34582
8.7 (4.0)
Botan has a TLS 1.3 certificate authentication bypass randombit
 botan
 2026-04-07T21:13:49.281Z 2026-04-08T15:41:21.671Z
CVE-2026-24661
3.7 (3.1)
Unbounded Request Body Read in MS Teams Plugin {{/chan… Mattermost
 Mattermost
 2026-04-09T10:12:45.340Z 2026-04-09T11:44:35.023Z
CVE-2026-34580
9.3 (4.0)
Botan has a certificate authentication bypass due to t… randombit
 botan
 2026-04-07T21:12:09.604Z 2026-04-09T03:56:10.769Z
ID Description Published Updated
fkie_cve-2026-27787 Cross-site scripting vulnerability exists in MATCHA SNS 1.3.9 and earlier. If this vulnerability is… 2026-04-08T06:16:28.480 2026-04-17T20:43:36.217
fkie_cve-2026-40312 ImageMagick is free and open-source software used for editing and manipulating digital images. In v… 2026-04-13T22:16:30.113 2026-04-17T20:42:40.860
fkie_cve-2026-33810 When verifying a certificate chain containing excluded DNS constraints, these constraints are not c… 2026-04-08T02:16:03.950 2026-04-17T20:41:13.890
fkie_cve-2026-39880 Remnawave Backend is the backend for the Remnawave proxy and user management solution. Prior to 2.7… 2026-04-08T20:16:26.850 2026-04-17T20:38:20.587
fkie_cve-2026-35523 Strawberry GraphQL is a library for creating GraphQL APIs. Strawberry up until version 0.312.3 is v… 2026-04-07T17:16:31.583 2026-04-17T20:37:20.757
fkie_cve-2026-35526 Strawberry GraphQL is a library for creating GraphQL APIs. Prior to 0.312.3, Strawberry GraphQL's W… 2026-04-07T16:16:28.843 2026-04-17T20:37:10.447
fkie_cve-2026-35515 Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.18, SseSt… 2026-04-07T16:16:27.773 2026-04-17T20:36:10.247
fkie_cve-2026-34582 Botan is a C++ cryptography library. Prior to version 3.11.1, the TLS 1.3 implementation allowed Ap… 2026-04-07T22:16:22.810 2026-04-17T20:31:27.753
fkie_cve-2026-24661 Mattermost Plugins versions <=2.1.3.0 fail to limit the request body size on the {{/changes}} webho… 2026-04-09T11:16:21.047 2026-04-17T20:31:03.873
fkie_cve-2026-34580 Botan is a C++ cryptography library. In 3.11.0, the function Certificate_Store::certificate_known h… 2026-04-07T22:16:22.647 2026-04-17T20:30:02.877
fkie_cve-2026-34079 Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the caching … 2026-04-07T22:16:22.080 2026-04-17T20:26:32.860
fkie_cve-2026-21388 Mattermost Plugins versions <=2.3.1 fail to limit the request body size on the {{/lifecycle}} webho… 2026-04-09T11:16:20.897 2026-04-17T20:20:21.860
fkie_cve-2025-15480 In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during cr… 2026-04-09T16:16:25.250 2026-04-17T20:18:08.243
fkie_cve-2025-14551 In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. … 2026-04-09T16:16:23.890 2026-04-17T20:17:02.457
fkie_cve-2026-40461 Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings … 2026-04-17T20:16:36.217 2026-04-17T20:16:36.217
fkie_cve-2026-40434 Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP pack… 2026-04-17T20:16:36.083 2026-04-17T20:16:36.083
fkie_cve-2026-40342 Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7… 2026-04-17T20:16:35.930 2026-04-17T20:16:35.930
fkie_cve-2026-40283 WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Sit… 2026-04-17T20:16:35.793 2026-04-17T20:16:35.793
fkie_cve-2026-40066 Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded. The devi… 2026-04-17T20:16:35.637 2026-04-17T20:16:35.637
fkie_cve-2026-35682 Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that e… 2026-04-17T20:16:35.510 2026-04-17T20:16:35.510
fkie_cve-2026-35546 Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted arc… 2026-04-17T20:16:35.380 2026-04-17T20:16:35.380
fkie_cve-2026-35215 Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7… 2026-04-17T20:16:35.240 2026-04-17T20:16:35.240
fkie_cve-2026-35061 Anviz CX7 Firmware is vulnerable to the most recently captured test photo that can be retrieved wi… 2026-04-17T20:16:35.117 2026-04-17T20:16:35.117
fkie_cve-2026-34232 Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7… 2026-04-17T20:16:34.977 2026-04-17T20:16:34.977
fkie_cve-2026-33569 Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to snif… 2026-04-17T20:16:34.847 2026-04-17T20:16:34.847
fkie_cve-2026-33516 xrdp is an open source RDP server. Versions through 0.10.5 contain an out-of-bounds read vulnerabil… 2026-04-17T20:16:34.723 2026-04-17T20:16:34.723
fkie_cve-2026-33093 Anviz CX7 Firmware is vulnerable to an unauthenticated POST to the device that captures a photo wi… 2026-04-17T20:16:34.493 2026-04-17T20:16:34.493
fkie_cve-2026-32650 Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable e… 2026-04-17T20:16:34.360 2026-04-17T20:16:34.360
fkie_cve-2026-32648 Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration… 2026-04-17T20:16:34.220 2026-04-17T20:16:34.220
fkie_cve-2026-32624 xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vul… 2026-04-17T20:16:34.087 2026-04-17T20:16:34.087
ID Severity Description Published Updated
ghsa-5j27-2fpm-q949
8.8 (3.1)
Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that e… 2026-04-17T21:31:47Z 2026-04-17T21:31:47Z
ghsa-q6pr-mghj-3fjx
7.5 (3.1)
Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable e… 2026-04-17T21:31:46Z 2026-04-17T21:31:46Z
ghsa-p7jp-59qp-fjf3
5.3 (3.1)
Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration… 2026-04-17T21:31:46Z 2026-04-17T21:31:46Z
ghsa-jgq2-vq69-gr6h
9.1 (3.1)
9.1 (4.0)
OpenViking prior to commit c7bb167 contains an authentication bypass vulnerability in the VikingBot… 2026-04-17T21:31:46Z 2026-04-17T21:31:46Z
ghsa-fwx6-6883-xr45
4.9 (3.1)
Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to ove… 2026-04-17T21:31:46Z 2026-04-17T21:31:46Z
ghsa-6625-m396-m7cp
7.7 (3.1)
Anviz CX7 Firmware is  vulnerable because the application embeds reusable certificate/key material… 2026-04-17T21:31:46Z 2026-04-17T21:31:46Z
ghsa-f3fr-gvgx-x9gh
9.1 (3.1)
10.0 (4.0)
Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnera… 2026-04-13T09:31:33Z 2026-04-17T21:31:43Z
ghsa-5p47-92qw-3767
8.1 (3.1)
2.7 (4.0)
In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. … 2026-04-09T18:31:26Z 2026-04-17T21:31:42Z
ghsa-24q9-g4p7-45qp
9.1 (3.1)
2.7 (4.0)
In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during cr… 2026-04-09T18:31:26Z 2026-04-17T21:31:42Z
ghsa-x3cv-r3g3-fpg9
2.3 (4.0)
Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures 2026-04-17T21:30:50Z 2026-04-17T21:30:50Z
ghsa-ggmg-cqg6-j45g
9.1 (3.1)
Sentry: Improper authentication on SAML SSO process allows user identity linking 2026-04-17T21:25:37Z 2026-04-17T21:25:37Z
ghsa-w5j3-8fcr-h87w
9.4 (4.0)
Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration 2026-04-17T21:24:48Z 2026-04-17T21:24:48Z
ghsa-92jp-89mq-4374
6.9 (4.0)
OpenClaw: Sandbox noVNC helper route exposed interactive browser session credentials 2026-04-17T20:08:01Z 2026-04-17T20:08:01Z
ghsa-6wpv-cj6x-v3jw
5.9 (3.1)
http vulnerable to Exposure of Sensitive Information to an Unauthorized Actor 2018-03-13T16:15:57Z 2026-04-17T19:00:58Z
ghsa-xj7v-jqv6-v48w
8.1 (3.1)
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arb… 2026-04-17T18:31:54Z 2026-04-17T18:31:54Z
ghsa-j54c-rr2x-ff86
7.5 (3.1)
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Pat… 2026-04-17T18:31:53Z 2026-04-17T18:31:53Z
ghsa-785m-9q28-jp3m
8.3 (3.1)
7.8 (4.0)
OpenHarness before commit bd4df81 contains a server-side request forgery vulnerability in the web_f… 2026-04-17T18:31:53Z 2026-04-17T18:31:53Z
ghsa-54pv-34f9-m4mq
7.1 (3.1)
7.1 (4.0)
ByteDance DeerFlow before commit 2176b2b contains a path traversal and arbitrary file write vulnera… 2026-04-17T18:31:53Z 2026-04-17T18:31:53Z
ghsa-cx3p-49rf-9534
6.3 (3.1)
2.1 (4.0)
A vulnerability was determined in prasathmani TinyFileManager up to 2.6. Affected by this vulnerabi… 2026-04-17T18:31:51Z 2026-04-17T18:31:52Z
ghsa-9gpm-2v37-f3mp
7.5 (3.1)
8.7 (4.0)
OpenHarness before commit bd4df81 contains a permission bypass vulnerability that allows attackers … 2026-04-17T18:31:52Z 2026-04-17T18:31:52Z
ghsa-9859-fqhx-279v
8.8 (3.1)
The WP Customer Area plugin for WordPress is vulnerable to arbitrary file read and deletion due to … 2026-04-17T18:31:52Z 2026-04-17T18:31:52Z
ghsa-4h67-fm2h-4qrp
7.3 (3.1)
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain w… 2026-04-17T18:31:52Z 2026-04-17T18:31:52Z
ghsa-v446-j5j2-jvvp
A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Si… 2026-04-17T18:31:51Z 2026-04-17T18:31:51Z
ghsa-r9f4-h79v-5p47
9.1 (3.1)
9.3 (4.0)
An attacker with network access to the PLC is able to brute force discover passwords to gain unauth… 2026-04-17T18:31:51Z 2026-04-17T18:31:51Z
ghsa-h6m6-2qjp-9v82
9.8 (3.1)
A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote u… 2026-04-17T15:31:18Z 2026-04-17T18:31:51Z
ghsa-w2qc-5jvx-3g3v
5.4 (3.1)
4.8 (4.0)
Stored cross-site scripting vulnerability exists in GROWI v7.4.6 and earlier. If this vulnerability… 2026-04-17T18:31:50Z 2026-04-17T18:31:50Z
ghsa-p93r-85wp-75v3
10.0 (4.0)
Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core m… 2026-04-17T18:31:50Z 2026-04-17T18:31:50Z
ghsa-hj44-m5xv-x75q
3.3 (3.1)
4.8 (4.0)
MuPDF mutool does not sanitize PDF metadata fields before writing them to terminal output, allowing… 2026-04-16T03:31:06Z 2026-04-17T18:31:50Z
ghsa-cj8j-37rh-8475
8.7 (4.0)
Allocation of resources without limits or throttling vulnerability in Legion of the Bouncy Castle I… 2026-04-17T18:31:50Z 2026-04-17T18:31:50Z
ghsa-c3fc-8qff-9hwx
5.5 (4.0)
Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability … 2026-04-17T18:31:50Z 2026-04-17T18:31:50Z
ID Severity Description Package Published Updated
pysec-2025-36
9.8 (3.1)
Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/valida… langflow 2025-04-07T15:15:44+00:00 2025-05-07T19:22:44.993642+00:00
pysec-2024-246
5.3 (3.1)
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Starting in… vyper 2024-04-25T17:15:50+00:00 2025-05-05T19:21:20.899426+00:00
pysec-2024-111
9.1 (3.1)
A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langcha… langchain 2024-10-29T13:15:00Z 2025-05-02T18:39:47.588215Z
pysec-2024-245
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated user… apache-airflow 2024-02-29T11:15:08+00:00 2025-05-01T21:22:38.598048+00:00
pysec-2025-35
7.5 (3.1)
Weblate is a web based localization tool. Prior to version 5.11, when creating a new comp… weblate 2025-04-15T21:16:04+00:00 2025-04-30T17:22:51.467257+00:00
pysec-2025-34
The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_… picklescan 2025-04-24T01:15:49+00:00 2025-04-24T03:08:15.436691+00:00
pysec-2025-33
7.5 (3.1)
Vyper is a Pythonic Smart Contract Language for the EVM. When the Vyper Compiler uses the… vyper 2025-01-14T18:16:05+00:00 2025-04-23T21:23:01.322686+00:00
pysec-2025-32
9.8 (3.1)
BentoML is a Python library for building online serving systems optimized for AI apps and… bentoml 2025-04-09T16:15:25+00:00 2025-04-22T19:21:34.073355+00:00
pysec-2025-31
vyper is a Pythonic Smart Contract Language for the EVM. Vyper handles AugAssign statemen… vyper 2025-02-21T22:15:13+00:00 2025-04-09T17:27:28.116292+00:00
pysec-2025-30
vyper is a Pythonic Smart Contract Language for the EVM. Multiple evaluation of a single … vyper 2025-02-21T22:15:13+00:00 2025-04-09T17:27:28.064106+00:00
pysec-2025-29
vyper is a Pythonic Smart Contract Language for the EVM. Vyper `sqrt()` builtin uses the … vyper 2025-02-21T22:15:13+00:00 2025-04-09T17:27:28.005382+00:00
pysec-2025-28
The Snowflake Connector for Python provides an interface for developing Python applicatio… snowflake-connector-python 2025-01-29T21:15:21+00:00 2025-04-09T17:27:27.772920+00:00
pysec-2025-27
The Snowflake Connector for Python provides an interface for developing Python applicatio… snowflake-connector-python 2025-01-29T21:15:21+00:00 2025-04-09T17:27:27.711157+00:00
pysec-2025-26
The Snowflake Connector for Python provides an interface for developing Python applicatio… snowflake-connector-python 2025-01-29T21:15:21+00:00 2025-04-09T17:27:27.645758+00:00
pysec-2025-25
6.5 (3.1)
Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the CORS middle… rembg 2025-03-03T17:15:14+00:00 2025-04-09T17:27:27.532849+00:00
pysec-2025-24
7.5 (3.1)
Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove… rembg 2025-03-03T17:15:14+00:00 2025-04-09T17:27:27.486485+00:00
pysec-2025-23
Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Inform… ray 2025-03-06T05:15:16+00:00 2025-04-09T17:27:27.434099+00:00
pysec-2025-22
9.8 (3.1)
A vulnerability, that could result in Remote Code Execution (RCE), has been found in Plot… plotai 2025-03-10T14:15:24+00:00 2025-04-09T17:27:27.203714+00:00
pysec-2025-21
9.8 (3.1)
picklescan before 0.0.23 fails to detect malicious pickle files inside PyTorch model arch… picklescan 2025-03-10T12:15:12+00:00 2025-04-09T17:27:27.016747+00:00
pysec-2023-311
5.4 (3.1)
plone.namedfile allows users to handle `File` and `Image` fields targeting, but not depen… plone-namedfile 2023-09-21T15:15:10+00:00 2025-04-09T17:27:27.153848+00:00
pysec-2022-43179
7.3 (3.1)
Poetry is a dependency manager for Python. To handle dependencies that come from a Git re… poetry 2022-09-07T19:15:08+00:00 2025-04-09T17:27:27.255151+00:00
pysec-2021-891
7.8 (3.1)
CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 S… salt 2021-03-03T10:15:13+00:00 2025-04-09T17:27:27.582884+00:00
pysec-2025-20
6.5 (3.1)
picklescan before 0.0.23 is vulnerable to a ZIP archive manipulation attack that causes i… picklescan 2025-03-10T12:15:10+00:00 2025-04-09T17:27:26.966215+00:00
pysec-2025-19
9.8 (3.1)
picklescan before 0.0.22 only considers standard pickle file extensions in the scope for … picklescan 2025-03-03T19:15:34+00:00 2025-04-09T17:27:26.916350+00:00
pysec-2025-18
picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craf… picklescan 2025-02-26T15:15:24+00:00 2025-04-09T17:27:26.867210+00:00
pysec-2025-17
5.5 (3.1)
In mlflow/mlflow version 2.18, an admin is able to create a new user account without sett… mlflow 2025-03-20T10:15:54+00:00 2025-04-09T17:27:26.322333+00:00
pysec-2023-310
7.5 (3.1)
Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions. NO… mobsf 2023-09-21T22:15:11+00:00 2025-04-09T17:27:26.663665+00:00
pysec-2023-309
8.8 (3.1)
Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2. mlflow 2023-12-13T00:15:07+00:00 2025-04-09T17:27:26.271200+00:00
pysec-2023-308
10.0 (3.1)
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. mlflow 2023-07-19T01:15:10+00:00 2025-04-09T17:27:26.223213+00:00
pysec-2025-16
7.5 (3.1)
LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vu… lnbits 2025-04-06T20:15:15+00:00 2025-04-09T17:27:25.872691+00:00
ID Description Updated
gsd-2024-33851 phpecc, as used in paragonie/phpecc before 2.0.1, has a branch-based timing leak in Point… 2024-04-28T05:02:07.732559Z
gsd-2024-33850 The format of the source doesn't require a description, click on the link for more details. 2024-04-28T05:02:07.952536Z
gsd-2024-33849 The format of the source doesn't require a description, click on the link for more details. 2024-04-28T05:02:07.924449Z
gsd-2024-4295 The format of the source doesn't require a description, click on the link for more details. 2024-04-28T05:02:06.068263Z
gsd-2024-4294 A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Ap… 2024-04-28T05:02:06.079201Z
gsd-2024-4293 A vulnerability classified as problematic was found in PHPGurukul Doctor Appointment Mana… 2024-04-28T05:02:06.052534Z
gsd-2024-4292 A vulnerability classified as critical has been found in Contemporary Controls BASrouter … 2024-04-28T05:02:06.073286Z
gsd-2024-4291 A vulnerability was found in Tenda A301 15.13.08.12_multi_TDE01. It has been rated as cri… 2024-04-28T05:02:06.058388Z
gsd-2023-52722 An issue was discovered in Artifex Ghostscript through 10.01.0. psi/zmisc1.c, when SAFER … 2024-04-28T05:01:28.746814Z
gsd-2022-48685 The format of the source doesn't require a description, click on the link for more details. 2024-04-28T05:00:27.870720Z
gsd-2022-48684 The format of the source doesn't require a description, click on the link for more details. 2024-04-28T05:00:27.715598Z
gsd-2024-24777 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:24.547536Z
gsd-2024-28875 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:20.401696Z
gsd-2024-33846 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.353086Z
gsd-2024-33845 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.569462Z
gsd-2024-33844 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.384822Z
gsd-2024-33843 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.393431Z
gsd-2024-33842 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.286185Z
gsd-2024-33841 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.393169Z
gsd-2024-33840 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.586722Z
gsd-2024-33839 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.579161Z
gsd-2024-33838 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.585807Z
gsd-2024-33837 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.377806Z
gsd-2024-33836 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.309729Z
gsd-2024-33835 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.550838Z
gsd-2024-33834 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.333945Z
gsd-2024-33833 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.551960Z
gsd-2024-33832 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.298682Z
gsd-2024-33831 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.326184Z
gsd-2024-33830 The format of the source doesn't require a description, click on the link for more details. 2024-04-27T05:02:18.395389Z
ID Description Published Updated
mal-2025-1994 Malicious code in requesttss (PyPI) 2025-01-25T16:53:01Z 2026-04-16T15:42:11Z
mal-2025-1984 Malicious code in nflx-metaflow (PyPI) 2025-02-05T22:04:22Z 2026-04-16T15:42:11Z
mal-2025-1980 Malicious code in mlc-ai-nightly (PyPI) 2025-01-21T18:27:56Z 2026-04-16T15:42:11Z
mal-2025-192914 Malicious code in queenbee-plugin (RubyGems) 2025-12-23T08:41:05Z 2026-04-16T15:42:11Z
mal-2025-191631 Malicious code in hexdecpy (PyPI) 2025-10-24T21:59:02Z 2026-04-16T15:42:11Z
mal-2025-191630 Malicious code in hexdecli (PyPI) 2025-10-25T16:03:26Z 2026-04-16T15:42:11Z
mal-2026-2661 Malicious code in vip-landing (npm) 2026-04-14T11:47:12Z 2026-04-16T15:42:10Z
mal-2026-2660 Malicious code in use-feature-flags-plugin (npm) 2026-04-14T11:47:12Z 2026-04-16T15:42:10Z
mal-2026-2659 Malicious code in ui-utils-udhay-alerts (npm) 2026-04-14T11:47:49Z 2026-04-16T15:42:10Z
mal-2026-2251 Malicious code in testtestsharp (npm) 2026-03-27T03:07:31Z 2026-04-16T15:42:10Z
mal-2026-2250 Malicious code in test1sharp (npm) 2026-03-27T03:07:31Z 2026-04-16T15:42:10Z
mal-2026-2196 Malicious code in tailwind-compile (npm) 2026-03-25T14:20:59Z 2026-04-16T15:42:10Z
mal-2026-1973 Malicious code in woltpickerapp (npm) 2026-03-20T04:48:44Z 2026-04-16T15:42:10Z
mal-2026-1968 Malicious code in safe-json-parsex (npm) 2026-03-20T04:41:13Z 2026-04-16T15:42:10Z
mal-2026-1926 Malicious code in tokenshower (npm) 2026-03-19T15:16:36Z 2026-04-16T15:42:10Z
mal-2026-1839 Malicious code in react-state-optimizer-core (npm) 2026-03-18T13:07:12Z 2026-04-16T15:42:10Z
mal-2026-1836 Malicious code in react-performance-suite (npm) 2026-03-18T13:07:05Z 2026-04-16T15:42:10Z
mal-2026-1835 Malicious code in react-fast-utilsa (npm) 2026-03-18T13:06:09Z 2026-04-16T15:42:10Z
mal-2026-1405 Malicious code in whatsapp-fastdesk-utils-drzak (npm) 2026-03-13T06:47:06Z 2026-04-16T15:42:10Z
mal-2026-1404 Malicious code in whatsapp-core-auth-drzak (npm) 2026-03-13T06:47:07Z 2026-04-16T15:42:10Z
mal-2026-1403 Malicious code in tradepmr-fusion-core-drzak (npm) 2026-03-13T06:47:06Z 2026-04-16T15:42:10Z
mal-2026-1402 Malicious code in tradepmr-api-utils-drzak (npm) 2026-03-13T06:47:06Z 2026-04-16T15:42:10Z
mal-2026-1374 Malicious code in spectral-corsair-my-backdoor (npm) 2026-03-12T18:09:11Z 2026-04-16T15:42:10Z
mal-2025-5063 Malicious code in universal-media-player (npm) 2025-06-13T01:40:04Z 2026-04-16T15:42:10Z
mal-2025-5060 Malicious code in sitewidesearch-client (npm) 2025-06-13T00:55:54Z 2026-04-16T15:42:10Z
mal-2025-5058 Malicious code in secure-lib (npm) 2025-06-13T02:06:14Z 2026-04-16T15:42:10Z
mal-2025-5051 Malicious code in react-expiry-date (npm) 2025-06-13T01:31:54Z 2026-04-16T15:42:10Z
mal-2025-34723 Malicious code in terminalcolor256 (npm) 2025-08-14T18:52:04Z 2026-04-16T15:42:10Z
mal-2025-2895 Malicious code in shopmacher-mollie-application (npm) 2025-03-28T12:58:40Z 2026-04-16T15:42:10Z
mal-2024-9888 Malicious code in typescript-operations (npm) 2024-10-16T13:26:54Z 2026-04-16T15:42:10Z
ID Description Published Updated
ID Description Published Updated
wid-sec-w-2026-0164 Oracle Java SE: Mehrere Schwachstellen 2026-01-20T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2026-0145 FreeRDP: Mehrere Schwachstellen ermöglichen DoS und Codeausführung 2026-01-19T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2026-0129 Golang Go: Mehrere Schwachstellen 2026-01-15T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2026-0119 Linux Kernel: Mehrere Schwachstellen 2026-01-14T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2026-0111 FreeRDP: Mehrere Schwachstellen 2026-01-13T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2026-0086 Linux Kernel: Mehrere Schwachstellen 2026-01-13T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2026-0009 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2026-01-04T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2941 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-12-30T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2929 Linux Kernel: Mehrere Schwachstellen 2025-12-28T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2920 Linux Kernel: Mehrere Schwachstellen 2025-12-23T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2915 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-12-23T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2914 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-12-22T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2904 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-12-18T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2868 Linux Kernel: Mehrere Schwachstellen 2025-12-16T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2765 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-12-08T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2756 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-12-07T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2747 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-12-04T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2658 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-11-20T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2651 GnuTLS: Schwachstelle ermöglicht nicht spezifizierten Angriff 2025-11-19T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2637 Rsync: Schwachstelle ermöglicht nicht spezifizierten Angriff 2025-11-18T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2600 PostgreSQL: Mehrere Schwachstellen ermöglichen Denial of Service 2025-11-13T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2595 Linux Kernel: Mehrere Schwachstellen 2025-11-12T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2579 Linux Kernel: Mehrere Schwachstellen 2025-11-11T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2568 Red Hat Enterprise Linux (kea): Mehrere Schwachstellen ermöglichen Denial of Service 2025-11-11T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2531 Linux Kernel: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2025-11-09T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2483 Linux Kernel: Schwachstelle ermöglicht Denial of Service 2025-11-03T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2450 Linux Kernel: Mehrere Schwachstellen 2025-10-29T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2441 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service 2025-10-29T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2431 Linux Kernel: Mehrere Schwachstellen 2025-10-28T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
wid-sec-w-2025-2430 Linux Kernel: Mehrere Schwachstellen 2025-10-27T23:00:00.000+00:00 2026-04-09T22:00:00.000+00:00
ID Description Published Updated
icsa-26-071-06 Inductive Automation Ignition Software 2026-03-12T06:00:00.000000Z 2026-03-13T06:00:00.000000Z
icsa-26-071-05 Siemens Heliox EV Chargers 2026-03-10T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-26-071-04 Siemens SIMATIC 2026-03-10T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-26-071-03 Siemens SIDIS Prime 2026-03-10T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-26-071-02 Siemens RUGGEDCOM APE1808 Devices 2026-03-10T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-26-071-01 Trane Tracer SC, Tracer SC+, and Tracer Concierge 2026-03-12T06:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-26-048-04 Honeywell HIB2PI CCTV Camera (Update B) 2026-02-17T07:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-26-043-08 Siemens NX 2026-02-10T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-26-043-03 Siemens COMOS 2025-12-09T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-345-05 Siemens Advanced Licensing (SALT) Toolkit 2025-12-09T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-345-04 Siemens IAM Client 2025-12-09T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-254-03 Siemens SINAMICS Drives 2025-09-09T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-231-02 Siemens Mendix SAML Module 2025-08-14T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-226-22 Siemens Web Installer 2025-08-12T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-162-05 Siemens SIMATIC S7-1500 CPU Family 2025-06-10T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-162-02 Siemens RUGGEDCOM APE1808 2025-06-10T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-25-044-06 Siemens RUGGEDCOM APE1808 2025-02-11T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-24-284-06 Siemens SINEC Security Monitor 2024-10-08T00:00:00.000000Z 2026-03-12T06:00:00.000000Z
icsa-26-069-03 Honeywell IQ4x BMS Controller 2026-03-10T06:00:00.000000Z 2026-03-10T06:00:00.000000Z
icsa-26-069-02 Lantronix EDS3000PS and EDS5000 2026-03-10T06:00:00.000000Z 2026-03-10T06:00:00.000000Z
icsa-26-069-01 Apeman Cameras 2026-03-10T06:00:00.000000Z 2026-03-10T06:00:00.000000Z
icsa-26-069-04 Ceragon Siklu MultiHaul and EtherHaul Series 2026-03-10T05:00:00.000000Z 2026-03-10T05:00:00.000000Z
icsa-26-064-01 Delta Electronics CNCSoft-G2 2026-03-05T07:00:00.000000Z 2026-03-05T07:00:00.000000Z
icsa-25-350-02 Johnson Controls PowerG, IQPanel and IQHub (Update A) 2025-12-16T07:00:00.000000Z 2026-03-05T07:00:00.000000Z
icsa-25-343-01 Universal Boot Loader (U-Boot) (Update A) 2025-12-09T07:00:00.000000Z 2026-03-05T07:00:00.000000Z
icsa-22-020-01 Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric HMI SCADA (Update B) 2022-01-20T07:00:00.000000Z 2026-03-05T07:00:00.000000Z
va-25-297-01 IBM DOORS Next Generation multiple vulnerabilities 2025-10-22T18:45:47Z 2026-03-04T00:00:00Z
icsa-26-062-05 Labkotec LID-3300IP 2026-03-03T07:00:00.000000Z 2026-03-03T07:00:00.000000Z
icsa-26-062-04 Portwell Engineering Toolkits 2026-03-03T07:00:00.000000Z 2026-03-03T07:00:00.000000Z
icsa-26-062-03 Hitachi Energy RTU500 Product 2026-02-24T00:00:00.000000Z 2026-03-03T07:00:00.000000Z
ID Description Published Updated
cisco-sa-ucsciv-wgytc78q Cisco FXOS and UCS Manager Software Command Injection Vulnerability 2026-02-25T16:00:00+00:00 2026-02-25T16:00:00+00:00
cisco-sa-nxos-ether-dos-kv8ynwz4 Cisco Nexus 3600 and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability 2026-02-25T16:00:00+00:00 2026-02-25T16:00:00+00:00
cisco-sa-nxos-dsnmp-cnn39uh Cisco Nexus 9000 Series Fabric Switches in ACI Mode SNMP Denial of Service Vulnerability 2026-02-25T16:00:00+00:00 2026-02-25T16:00:00+00:00
cisco-sa-nxos-cpdos-qlsv6pfd Cisco Nexus 9000 Series Fabric Switches in ACI Mode Denial of Service Vulnerability 2026-02-25T16:00:00+00:00 2026-02-25T16:00:00+00:00
cisco-sa-n3kn9k_aci_lldp_dos-ndgrrra3 Cisco NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability 2026-02-25T16:00:00+00:00 2026-02-25T16:00:00+00:00
cisco-sa-apic-dos-rnus8efw Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability 2026-02-25T16:00:00+00:00 2026-02-25T16:00:00+00:00
cisco-sa-wsa-archive-bypass-scx2e8zf Cisco Secure Web Appliance Real-Time Scanning Archive File Bypass Vulnerability 2026-02-04T16:00:00+00:00 2026-02-20T21:08:47+00:00
cisco-sa-voice-rce-morhqy4b Cisco Unified Communications Products Remote Code Execution Vulnerability 2026-01-21T16:00:00+00:00 2026-02-13T15:21:01+00:00
cisco-sa-snort3-mime-vulns-ttl8pgvh Multiple Cisco Products Snort 3 MIME Denial of Service Vulnerabilities 2025-10-15T16:00:00+00:00 2026-02-12T18:38:13+00:00
cisco-sa-tce-roomos-dos-9v9jrc2q Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service Vulnerability 2026-02-04T16:00:00+00:00 2026-02-12T17:37:39+00:00
cisco-sa-snort3-dcerpc-vulns-j9hnf4th Multiple Cisco Products Snort 3 Distributed Computing Environment/Remote Procedure Call Vulnerabilities 2026-01-07T16:00:00+00:00 2026-02-10T20:42:07+00:00
cisco-sa-pi-xss-byevkcd Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability 2026-02-04T16:00:00+00:00 2026-02-04T16:00:00+00:00
cisco-sa-epnm-pi-redirect-6sx82dn Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Open Redirect Vulnerability 2026-02-04T16:00:00+00:00 2026-02-04T16:00:00+00:00
cisco-sa-cmm-file-up-ky47n8kk Cisco Meeting Management Arbitrary File Upload Vulnerability 2026-02-04T16:00:00+00:00 2026-02-04T16:00:00+00:00
cisco-sa-ucce-pcce-xss-2jvyg3ud Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities 2026-01-21T16:00:00+00:00 2026-01-21T16:00:00+00:00
cisco-sa-intersight-privesc-p6tbm6jk Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability 2026-01-21T16:00:00+00:00 2026-01-21T16:00:00+00:00
cisco-sa-iec6400-pem5uq7v Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability 2026-01-21T16:00:00+00:00 2026-01-21T16:00:00+00:00
cisco-sa-sma-attack-n9bf4 Reports About Cyberattacks Against Cisco Secure Email Gateway And Cisco Secure Email and Web Manager 2025-12-17T16:00:00+00:00 2026-01-15T16:01:43+00:00
cisco-sa-ise-xss-9tdh2kx Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability 2026-01-15T16:00:00+00:00 2026-01-15T16:00:00+00:00
cisco-sa-ise-xss-964cdxw5 Cisco Identity Services Engine Cross-Site Scripting Vulnerability 2026-01-15T16:00:00+00:00 2026-01-15T16:00:00+00:00
cisco-sa-epnm-pi-stored-xss-gekx8ywk Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability 2026-01-15T16:00:00+00:00 2026-01-15T16:00:00+00:00
cisco-sa-ise-xxe-jwsbsdkt Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability 2026-01-07T16:00:00+00:00 2026-01-07T16:00:00+00:00
cisco-sa-react-flight-tyw32ddb Remote Code Execution Vulnerability in React and Next.js Frameworks: December 2025 2025-12-04T16:00:00+00:00 2025-12-17T22:37:17+00:00
cisco-sa-ise-multiple-vulns-o9beswjh Cisco Identity Services Engine Reflected Cross-Site Scripting and Information Disclosure Vulnerabilities 2025-11-05T16:00:00+00:00 2025-12-04T14:23:54+00:00
cisco-sa-cc-mult-vuln-gk4tfxsn Multiple Cisco Contact Center Products Vulnerabilities 2025-11-05T16:00:00+00:00 2025-11-18T14:49:09+00:00
cisco-sa-privesc-catc-ryjreelu Cisco Catalyst Center Privilege Escalation Vulnerability 2025-11-13T16:00:00+00:00 2025-11-13T16:00:00+00:00
cisco-sa-dnac-xss-wextvz59 Cisco Catalyst Center Cross-Site Scripting Vulnerability 2025-11-13T16:00:00+00:00 2025-11-13T16:00:00+00:00
cisco-sa-dnac-ci-zwlqvswt Cisco Catalyst Center REST API Command Injection Vulnerability 2025-11-13T16:00:00+00:00 2025-11-13T16:00:00+00:00
cisco-sa-catc-priv-esc-vs8eecux Cisco Catalyst Center Virtual Appliance Privilege Escalation Vulnerability 2025-11-13T16:00:00+00:00 2025-11-13T16:00:00+00:00
cisco-sa-catc-open-redirect-3w5bk3je Cisco Catalyst Center Virtual Appliance HTTP Open Redirect Vulnerability 2025-11-13T16:00:00+00:00 2025-11-13T16:00:00+00:00
ID Description Published Updated
msrc_cve-2026-33896 Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation) 2026-03-02T00:00:00.000Z 2026-04-15T01:39:04.000Z
msrc_cve-2026-33895 Forge has signature forgery in Ed25519 due to missing S > L check 2026-03-02T00:00:00.000Z 2026-04-15T01:38:56.000Z
msrc_cve-2025-1220 Null byte termination in hostnames 2025-07-02T00:00:00.000Z 2026-04-15T01:38:32.000Z
msrc_cve-2026-1519 Excessive NSEC3 iterations cause high CPU load during insecure delegation validation 2026-03-02T00:00:00.000Z 2026-04-15T01:38:23.000Z
msrc_cve-2026-33636 LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64 2026-03-02T00:00:00.000Z 2026-04-15T01:38:17.000Z
msrc_cve-2026-33416 LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` 2026-03-02T00:00:00.000Z 2026-04-15T01:38:06.000Z
msrc_cve-2025-30258 In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS." 2025-03-02T00:00:00.000Z 2026-04-15T01:37:50.000Z
msrc_cve-2025-62718 Axios has a NO_PROXY Hostname Normalization Bypass Leads to SSRF 2026-04-02T00:00:00.000Z 2026-04-15T01:05:34.000Z
msrc_cve-2026-40175 Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain 2026-04-02T00:00:00.000Z 2026-04-15T01:05:29.000Z
msrc_cve-2026-34480 Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters 2026-04-02T00:00:00.000Z 2026-04-15T01:05:23.000Z
msrc_cve-2026-34479 Apache Log4j 1 to Log4j 2 bridge: Silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden characters 2026-04-02T00:00:00.000Z 2026-04-15T01:05:18.000Z
msrc_cve-2026-34481 Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout 2026-04-02T00:00:00.000Z 2026-04-15T01:05:12.000Z
msrc_cve-2026-1502 HTTP client proxy tunnel headers not validated for CR/LF 2026-04-02T00:00:00.000Z 2026-04-15T01:04:59.000Z
msrc_cve-2026-5446 wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse 2026-04-02T00:00:00.000Z 2026-04-15T01:04:48.000Z
msrc_cve-2026-5392 wolfSSL heap OOB read in PKCS7 SignedData streaming 2026-04-02T00:00:00.000Z 2026-04-15T01:04:39.000Z
msrc_cve-2026-5263 URI nameConstraints not enforced in ConfirmNameConstraints() 2026-04-02T00:00:00.000Z 2026-04-15T01:04:31.000Z
msrc_cve-2026-5460 Heap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3 2026-04-02T00:00:00.000Z 2026-04-15T01:04:23.000Z
msrc_cve-2026-5772 MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation 2026-04-02T00:00:00.000Z 2026-04-15T01:04:15.000Z
msrc_cve-2026-5447 Heap buffer overflow in CertFromX509() via AuthorityKeyIdentifier 2026-04-02T00:00:00.000Z 2026-04-15T01:04:06.000Z
msrc_cve-2026-5778 Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path. 2026-04-02T00:00:00.000Z 2026-04-15T01:03:58.000Z
msrc_cve-2026-5188 Integer underflow in X.509 SAN parsing in wolfSSL 2026-04-02T00:00:00.000Z 2026-04-15T01:03:50.000Z
msrc_cve-2026-5295 Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID 2026-04-02T00:00:00.000Z 2026-04-15T01:03:41.000Z
msrc_cve-2026-5264 DTLS 1.3 ACK heap buffer overflow 2026-04-02T00:00:00.000Z 2026-04-15T01:03:33.000Z
msrc_cve-2026-5503 out-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicName 2026-04-02T00:00:00.000Z 2026-04-15T01:03:24.000Z
msrc_cve-2026-5479 wolfSSL EVP ChaCha20-Poly1305 AEAD authentication tag 2026-04-02T00:00:00.000Z 2026-04-15T01:03:16.000Z
msrc_cve-2026-5477 Prefix-substitution forgery via integer overflow in wolfCrypt CMAC 2026-04-02T00:00:00.000Z 2026-04-15T01:03:08.000Z
msrc_cve-2026-5448 1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore 2026-04-02T00:00:00.000Z 2026-04-15T01:02:59.000Z
msrc_cve-2026-5507 Session Cache Restore — Arbitrary Free via Deserialized Pointer 2026-04-02T00:00:00.000Z 2026-04-15T01:02:51.000Z
msrc_cve-2026-5501 Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates 2026-04-02T00:00:00.000Z 2026-04-15T01:02:42.000Z
msrc_cve-2026-5194 wolfSSL ECDSA Certificate Verification 2026-04-02T00:00:00.000Z 2026-04-15T01:02:34.000Z
ID Description Published Updated
ncsc-2026-0043 Zeroday-kwetsbaarheden verholpen in Ivanti Endpoint Manager Mobile 2026-01-29T19:15:04.575371Z 2026-02-20T14:47:02.047999Z
ncsc-2026-0067 Kwetsbaarheden verholpen in GitHub Enterprise Server 2026-02-20T10:13:39.540778Z 2026-02-20T10:13:39.540778Z
ncsc-2026-0066 Kwetsbaarheid verholpen in Google Chrome 2026-02-19T08:29:30.712590Z 2026-02-19T08:29:30.712590Z
ncsc-2026-0065 Kwetsbaarheid verholpen in Dell RecoverPoint for Virtual Machines 2026-02-18T13:18:23.815384Z 2026-02-18T13:18:23.815384Z
ncsc-2026-0064 Kwetsbaarheden verholpen in Apple iOS en iPadOS 2026-02-13T13:35:03.870920Z 2026-02-13T13:35:03.870920Z
ncsc-2026-0063 Kwetsbaarheden verholpen in Apple macOS 2026-02-13T13:24:06.433550Z 2026-02-13T13:24:06.433550Z
ncsc-2026-0048 Kwetsbaarheid verholpen in BeyondTrust Remote Support 2026-02-09T10:27:57.867529Z 2026-02-13T12:54:32.614217Z
ncsc-2026-0062 Kwetsbaarheden verholpen in GitLab CE/EE 2026-02-11T11:45:05.986313Z 2026-02-11T11:45:05.986313Z
ncsc-2026-0061 Kwetsbaarheden verholpen in Fortinet FortiOS 2026-02-11T11:34:50.888067Z 2026-02-11T11:34:50.888067Z
ncsc-2026-0060 Kwetsbaarheden verholpen in Fortinet FortiSandbox, FortiAuthenticator en FortiClient 2026-02-11T11:34:36.684955Z 2026-02-11T11:34:36.684955Z
ncsc-2026-0058 Kwetsbaarheden verholpen in Microsoft Office 2026-02-10T19:11:42.825147Z 2026-02-10T19:11:42.825147Z
ncsc-2026-0057 Kwetsbaarheden verholpen in Microsoft Azure 2026-02-10T19:08:27.878305Z 2026-02-10T19:08:27.878305Z
ncsc-2026-0056 Kwetsbaarheden verholpen in Microsoft Developer Tools 2026-02-10T19:07:16.028511Z 2026-02-10T19:07:16.028511Z
ncsc-2026-0055 Kwetsbaarheid verholpen in Microsoft SQL Server 2026-02-10T19:05:45.729972Z 2026-02-10T19:05:45.729972Z
ncsc-2026-0054 Kwetsbaarheid verholpen in Microsoft Exchange 2026-02-10T19:04:51.366294Z 2026-02-10T19:04:51.366294Z
ncsc-2026-0053 Kwetsbaarheden verholpen in Microsoft Windows 2026-02-10T19:01:45.561771Z 2026-02-10T19:01:45.561771Z
ncsc-2026-0052 Kwetsbaarheden verholpen in SAP producten 2026-02-10T12:28:40.531069Z 2026-02-10T12:28:40.531069Z
ncsc-2026-0051 Kwetsbaarheden verholpen in Siemens producten 2026-02-10T12:27:40.637581Z 2026-02-10T12:27:40.637581Z
ncsc-2026-0050 Kwetsbaarheid verholpen in PEAR 2026-02-09T10:41:43.856342Z 2026-02-09T10:41:43.856342Z
ncsc-2026-0049 Kwetsbaarheden verholpen in n8n 2026-02-09T10:39:40.792744Z 2026-02-09T10:39:40.792744Z
ncsc-2026-0046 Kwetsbaarheden verholpen in Samsung mobile 2026-02-09T07:48:28.751473Z 2026-02-09T07:48:28.751473Z
ncsc-2026-0040 Kwetsbaarheid verholpen in SmarterTools SmarterMail 2026-01-27T10:51:39.476320Z 2026-02-06T09:25:57.008166Z
ncsc-2026-0045 Kwetsbaarheid verholpen in Cisco Meeting Management 2026-02-06T09:22:16.831778Z 2026-02-06T09:22:16.831778Z
ncsc-2026-0044 Kwetsbaarheid verholpen in Cisco TelePresence Collaboration Endpoint 2026-02-06T09:20:11.629058Z 2026-02-06T09:20:11.629058Z
ncsc-2026-0042 Kwetsbaarheden verholpen in SolarWinds Web Help Desk 2026-01-28T16:37:21.114054Z 2026-02-02T09:47:54.857445Z
ncsc-2025-0386 Kwetsbaarheden verholpen in Fortinet producten 2025-12-10T09:51:34.918202Z 2026-01-28T15:46:10.814803Z
ncsc-2026-0041 Kwetsbaarheid verholpen in Fortinet producten 2026-01-28T09:32:41.752905Z 2026-01-28T09:32:41.752905Z
ncsc-2026-0039 ZeroDay kwetsbaarheid verholpen in Microsoft Office 2026-01-27T07:27:52.867415Z 2026-01-27T07:27:52.867415Z
ncsc-2026-0038 Kwetsbaarheid verholpen in BIND 9 2026-01-23T08:54:43.506215Z 2026-01-23T08:54:43.506215Z
ncsc-2026-0037 Kwetsbaarheden verholpen in GitLab Community Edition en Enterprise Edition 2026-01-22T12:35:30.505659Z 2026-01-22T12:35:30.505659Z
ID Description Published Updated
nn-2019_2-01 CSV Injection on node label 2019-11-11T11:00:00.000Z 2023-11-16T11:00:00.000Z
nn-2019_1-01 Stored XSS in field name data model 2019-11-11T11:00:00.000Z 2023-11-16T11:00:00.000Z
nn-2019:2-01 CSV Injection on node label 2019-11-11T11:00:00.000Z 2023-11-16T11:00:00.000Z
nn-2019:1-01 Stored XSS in field name data model 2019-11-11T11:00:00.000Z 2023-11-16T11:00:00.000Z
ID Description Published Updated
opensuse-su-2026:10494-1 SDL2_image-devel-2.8.10-1.1 on GA media 2026-04-07T00:00:00Z 2026-04-07T00:00:00Z
opensuse-su-2026:20464-1 Security update for cockpit-repos 2026-04-05T02:50:21Z 2026-04-05T02:50:21Z
opensuse-su-2026:10493-1 SDL3_image-devel-3.4.2-1.1 on GA media 2026-04-05T00:00:00Z 2026-04-05T00:00:00Z
opensuse-su-2026:10492-1 liblzma5-32bit-5.8.3-1.1 on GA media 2026-04-04T00:00:00Z 2026-04-04T00:00:00Z
opensuse-su-2026:10491-1 python311-scitokens-1.8.1-2.1 on GA media 2026-04-04T00:00:00Z 2026-04-04T00:00:00Z
opensuse-su-2026:10490-1 python311-aiohttp-3.13.5-2.1 on GA media 2026-04-04T00:00:00Z 2026-04-04T00:00:00Z
opensuse-su-2026:10489-1 libinput-devel-1.31.1-1.1 on GA media 2026-04-04T00:00:00Z 2026-04-04T00:00:00Z
opensuse-su-2026:10488-1 corosync-3.1.10-4.1 on GA media 2026-04-04T00:00:00Z 2026-04-04T00:00:00Z
opensuse-su-2026:10487-1 chromedriver-146.0.7680.177-1.1 on GA media 2026-04-04T00:00:00Z 2026-04-04T00:00:00Z
opensuse-su-2026:10486-1 amazon-ssm-agent-3.3.4121.0-1.1 on GA media 2026-04-04T00:00:00Z 2026-04-04T00:00:00Z
opensuse-su-2026:20460-1 Security update for chromium 2026-04-03T06:09:23Z 2026-04-03T06:09:23Z
opensuse-su-2026:10485-1 python311-Flask-Cors-6.0.2-1.1 on GA media 2026-04-03T00:00:00Z 2026-04-03T00:00:00Z
opensuse-su-2026:10484-1 k6-1.7.1-1.1 on GA media 2026-04-03T00:00:00Z 2026-04-03T00:00:00Z
opensuse-su-2026:10483-1 himmelblau-2.3.9+git0.a9fd29b-1.1 on GA media 2026-04-03T00:00:00Z 2026-04-03T00:00:00Z
opensuse-su-2026:20461-1 Security update for dnsdist 2026-04-02T09:11:51Z 2026-04-02T09:11:51Z
opensuse-su-2026:10482-1 osslsigncode-2.13-1.1 on GA media 2026-04-02T00:00:00Z 2026-04-02T00:00:00Z
opensuse-su-2026:20459-1 Security update for perl-XML-Parser 2026-04-01T16:23:38Z 2026-04-01T16:23:38Z
opensuse-su-2026:20456-1 Security update for tinyproxy 2026-04-01T16:15:06Z 2026-04-01T16:15:06Z
opensuse-su-2026:20458-1 Security update for python-Pillow 2026-04-01T14:57:29Z 2026-04-01T14:57:29Z
opensuse-su-2026:20452-1 Security update for kea 2026-04-01T09:24:21Z 2026-04-01T09:24:21Z
opensuse-su-2026:10481-1 python314-3.14.3-4.1 on GA media 2026-04-01T00:00:00Z 2026-04-01T00:00:00Z
opensuse-su-2026:10480-1 python313-3.13.12-3.1 on GA media 2026-04-01T00:00:00Z 2026-04-01T00:00:00Z
opensuse-su-2026:10479-1 python312-3.12.13-4.1 on GA media 2026-04-01T00:00:00Z 2026-04-01T00:00:00Z
opensuse-su-2026:10478-1 python311-3.11.15-4.1 on GA media 2026-04-01T00:00:00Z 2026-04-01T00:00:00Z
opensuse-su-2026:10477-1 python310-3.10.20-3.1 on GA media 2026-04-01T00:00:00Z 2026-04-01T00:00:00Z
opensuse-su-2026:10476-1 python311-Pygments-2.20.0-2.1 on GA media 2026-04-01T00:00:00Z 2026-04-01T00:00:00Z
opensuse-su-2026:10475-1 opensc-0.27.1-1.1 on GA media 2026-04-01T00:00:00Z 2026-04-01T00:00:00Z
opensuse-su-2026:10474-1 ignition-2.26.0-3.1 on GA media 2026-04-01T00:00:00Z 2026-04-01T00:00:00Z
opensuse-su-2026:10473-1 dnsdist-2.0.3-1.1 on GA media 2026-04-01T00:00:00Z 2026-04-01T00:00:00Z
opensuse-su-2026:10472-1 conftest-0.67.1-2.1 on GA media 2026-04-01T00:00:00Z 2026-04-01T00:00:00Z
ID Description Published Updated
ID Description Published Updated
rhsa-2026:3471 Red Hat Security Advisory: go-toolset:rhel8 security update 2026-03-02T01:35:05+00:00 2026-04-17T21:46:45+00:00
rhsa-2026:3469 Red Hat Security Advisory: golang security update 2026-03-02T01:34:30+00:00 2026-04-17T21:46:45+00:00
rhsa-2026:3337 Red Hat Security Advisory: podman security update 2026-02-25T11:48:26+00:00 2026-04-17T21:46:45+00:00
rhsa-2026:3336 Red Hat Security Advisory: podman security update 2026-02-25T11:30:01+00:00 2026-04-17T21:46:44+00:00
rhsa-2026:3193 Red Hat Security Advisory: golang security update 2026-02-24T12:01:01+00:00 2026-04-17T21:46:44+00:00
rhsa-2026:3192 Red Hat Security Advisory: golang security update 2026-02-24T12:06:46+00:00 2026-04-17T21:46:43+00:00
rhsa-2026:3188 Red Hat Security Advisory: grafana security update 2026-02-24T11:39:36+00:00 2026-04-17T21:46:43+00:00
rhsa-2026:3186 Red Hat Security Advisory: Red Hat build of Cryostat 4.1.1: new RHEL 9 container image security update 2026-02-26T02:56:36+00:00 2026-04-17T21:46:41+00:00
rhsa-2026:2920 Red Hat Security Advisory: grafana security update 2026-02-18T12:55:46+00:00 2026-04-17T21:46:40+00:00
rhsa-2026:2914 Red Hat Security Advisory: grafana security update 2026-02-18T11:31:17+00:00 2026-04-17T21:46:40+00:00
rhsa-2026:2709 Red Hat Security Advisory: golang security update 2026-02-16T10:32:31+00:00 2026-04-17T21:46:40+00:00
rhsa-2026:2708 Red Hat Security Advisory: go-toolset:rhel8 security update 2026-02-16T10:08:41+00:00 2026-04-17T21:46:40+00:00
rhsa-2026:2706 Red Hat Security Advisory: golang security update 2026-02-16T09:40:31+00:00 2026-04-17T21:46:40+00:00
rhsa-2026:8509 Red Hat Security Advisory: Red Hat AMQ Broker 7.14.0 release and security update 2026-04-16T15:32:09+00:00 2026-04-17T21:38:11+00:00
rhsa-2026:8159 Red Hat Security Advisory: Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 update is now available (RHBQ 3.27.3.GA) 2026-04-14T17:20:53+00:00 2026-04-17T21:38:11+00:00
rhsa-2026:7380 Red Hat Security Advisory: Red Hat build of Quarkus 3.27.3 release and security update 2026-04-14T14:45:52+00:00 2026-04-17T21:38:11+00:00
rhsa-2026:7109 Red Hat Security Advisory: Red Hat build of Quarkus 3.20.6 release and security update 2026-04-14T17:18:52+00:00 2026-04-17T21:38:11+00:00
rhsa-2026:8433 Red Hat Security Advisory: OpenShift Compliance Operator bug fix and enhancement update 2026-04-16T10:06:55+00:00 2026-04-17T20:29:17+00:00
rhsa-2026:8338 Red Hat Security Advisory: Red Hat Web Terminal Operator 1.13.0 release. 2026-04-15T18:17:16+00:00 2026-04-17T20:29:16+00:00
rhsa-2026:8337 Red Hat Security Advisory: Red Hat Web Terminal Operator 1.14.0 release. 2026-04-15T18:11:57+00:00 2026-04-17T20:29:13+00:00
rhsa-2026:8167 Red Hat Security Advisory: Red Hat Web Terminal Operator 1.15.0 release. 2026-04-14T18:58:52+00:00 2026-04-17T20:29:12+00:00
rhsa-2026:7942 Red Hat Security Advisory: HawtIO 4.3.1 for Red Hat build of Apache Camel 4 Release and security update. 2026-04-13T21:59:31+00:00 2026-04-17T20:29:11+00:00
rhsa-2026:7676 Red Hat Security Advisory: rhc security update 2026-04-13T02:21:56+00:00 2026-04-17T20:29:09+00:00
rhsa-2026:6277 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update 2026-03-31T16:12:45+00:00 2026-04-17T20:29:09+00:00
rhsa-2026:7052 Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.14 2026-04-08T12:26:52+00:00 2026-04-17T20:29:08+00:00
rhsa-2026:6278 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update 2026-03-31T16:23:06+00:00 2026-04-17T20:29:05+00:00
rhsa-2026:5853 Red Hat Security Advisory: osbuild-composer security update 2026-03-26T01:05:19+00:00 2026-04-17T20:29:05+00:00
rhsa-2026:5649 Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release 2026-03-24T16:17:51+00:00 2026-04-17T20:29:04+00:00
rhsa-2026:6184 Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.13 security, enhancement & bug fix update 2026-03-30T13:41:49+00:00 2026-04-17T20:29:03+00:00
rhsa-2026:5968 Red Hat Security Advisory: Satellite 6.18.4 Async Update 2026-03-26T19:47:53+00:00 2026-04-17T20:29:03+00:00
ID Description Published Updated
sevd-2025-014-09 EcoStruxure™ Power Build Rapsody 2025-01-14T00:00:00.000Z 2025-05-13T04:00:00.000Z
sevd-2024-282-05 EcoStruxure™ Power Monitoring Expert (PME) 2024-10-08T04:00:00.000Z 2025-05-13T04:00:00.000Z
sevd-2025-098-02 Trio™ Q Licensed Data Radios 2025-04-08T04:00:00.000Z 2025-04-08T04:00:00.000Z
sevd-2025-014-01 Modicon M580 PLCs, BMENOR2200H and EVLink Pro AC 2025-01-14T05:00:00.000Z 2025-04-08T04:00:00.000Z
sevd-2025-070-03 WebHMI Component For EcoStruxure™ Power Automation System User Interface and EcoStruxure™ Microgrid Operation Large 2025-03-11T04:00:00.000Z 2025-03-11T04:00:00.000Z
sevd-2025-070-02 EPAS-UI & EcoSUI 2025-03-11T04:00:00.000Z 2025-03-11T04:00:00.000Z
sevd-2025-070-01 EcoStruxure™ Panel Server 2025-03-11T04:00:00.000Z 2025-03-11T04:00:00.000Z
sevd-2025-042-04 Enerlin'X IFE and eIFE 2025-02-11T06:00:00.000Z 2025-02-11T06:00:00.000Z
sevd-2025-042-03 EcoStruxure™ Process Expert, EcoStruxure™ Process Expert for AVEVA System Platform 2025-02-11T06:00:00.000Z 2025-02-11T06:00:00.000Z
sevd-2025-042-01 ASCO 5310 / 5350 Remote Annunciator 2025-02-11T06:00:00.000Z 2025-02-11T06:00:00.000Z
sevd-2025-014-08 Power Logic HDPM6000 High-Density Metering System 2025-01-14T00:00:00.000Z 2025-01-14T00:00:00.000Z
sevd-2025-014-04 Web Designer for Modicon Communication Modules 2025-01-14T00:00:00.000Z 2025-01-14T00:00:00.000Z
sevd-2024-345-02 Harmony HMI and Pro-face HMI products 2024-12-10T00:00:00.000Z 2024-12-10T00:00:00.000Z
sevd-2024-345-01 PowerChute Serial Shutdown 2024-12-10T00:00:00.000Z 2024-12-10T00:00:00.000Z
sevd-2024-317-04 EcoStruxure™ IT Gateway 2024-11-12T00:00:00.000Z 2024-11-12T00:00:00.000Z
sevd-2024-317-01 PowerLogic PM5300 Series 2024-11-12T00:00:00.000Z 2024-11-12T00:00:00.000Z
sevd-2021-159-02 PowerLogic PM5500 and PowerLogic PM8ECC 2021-06-08T00:00:00.000Z 2024-11-12T00:00:00.000Z
sevd-2024-282-08 EcoStruxure EV Charging Expert 2024-10-08T00:00:00.000Z 2024-10-08T00:00:00.000Z
sevd-2024-282-07 System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs 2024-10-08T00:00:00.000Z 2024-10-08T00:00:00.000Z
sevd-2024-282-06 Zelio Soft 2 2024-10-08T00:00:00.000Z 2024-10-08T00:00:00.000Z
sevd-2024-282-04 EVlink Home Smart and Schneider Charge 2024-10-08T00:00:00.000Z 2024-10-08T00:00:00.000Z
sevd-2024-282-03 Easergy Studio 2024-10-08T00:00:00.000Z 2024-10-08T00:00:00.000Z
sevd-2024-282-02 Harmony iPC – HMIBSC IIoT Edge Box Core 2024-10-08T00:00:00.000Z 2024-10-08T00:00:00.000Z
sevd-2024-282-01 Data Center Expert 2024-10-08T00:00:00.000Z 2024-10-08T00:00:00.000Z
sevd-2022-102-02 Modicon M340 Controller and Communication Modules 2022-04-12T00:00:00.000Z 2024-10-08T00:00:00.000Z
sevd-2024-254-02 EcoStruxure™ Power Monitoring Expert and EcoStruxure™ Power Operation or EcoStruxure™ Power SCADA Operation with Advanced Reporting and Dashboards 2024-09-10T00:00:00.000Z 2024-09-10T00:00:00.000Z
sevd-2024-163-02 PowerLogic P5 2024-06-11T00:00:00.000Z 2024-09-10T00:00:00.000Z
sevd-2023-073-01 EcoStruxure™ Power Monitoring Expert 2023-03-14T00:00:00.000Z 2024-09-10T00:00:00.000Z
sevd-2023-192-02 ​​EcoStruxure™ OPC UA Server Expert​ 2023-07-11T07:01:56.000Z 2024-08-13T07:00:00.000Z
sevd-2024-226-02 EcoStruxure™ Machine SCADA Expert / BLUE Open Studio 2024-08-13T00:00:00.000Z 2024-08-13T00:00:00.000Z
ID Description Published Updated
sca-2022-0002 PwnKit vulnerability affects multiple SICK IPCs 2022-02-23T16:00:00.000Z 2022-02-23T16:00:00.000Z
sca-2022-0001 Vulnerability in SICK FieldEcho 2022-02-17T16:00:00.000Z 2022-02-17T16:00:00.000Z
sca-2021-0003 SICK Security Advisory for Apache Log4j (CVE-2021-44228) 2021-12-14T17:00:00.000Z 2021-12-17T12:00:00.000Z
sca-2021-0004 Vulnerabilities in SICK SOPAS ET 2021-12-16T08:00:00.000Z 2021-12-17T08:00:00.000Z
sca-2021-0002 MEAC affected by Windows SMBv1 vulnerability 2021-08-04T10:00:00.000Z 2021-08-04T10:00:00.000Z
sca-2021-0001 Inadequate SSH configuration in SICK Visionary-S CX 2021-06-25T10:00:00.000Z 2021-06-25T10:00:00.000Z
sca-2020-0005 Package Analytics affected by Windows TCP/IP vulnerability 2020-10-29T11:00:00.000Z 2020-10-29T11:00:00.000Z
sca-2020-0004 Vulnerability in Platform Mechanism AutoIP 2020-08-31T10:00:00.000Z 2020-08-31T10:00:00.000Z
sca-2020-0003 MEAC affected by Windows SMBv3 vulnerability 2020-08-07T10:00:00.000Z 2020-08-07T10:00:00.000Z
sca-2020-0002 Vulnerabilities in SICK Package Analytics 2020-08-07T10:00:00.000Z 2020-07-28T10:00:00.000Z
sca-2020-0001 Security Information Regarding "Profile Programming" 2020-05-31T10:00:00.000Z 2020-05-31T10:00:00.000Z
sca-2019-0002 Vulnerability in SICK FX0-GENT00000 and SICK FX0-GPNT00000 2019-09-20T10:00:00.000Z 2019-09-20T10:00:00.000Z
sca-2019-0001 MSC800 affected by hard-coded credentials vulnerability 2019-06-21T10:00:00.000Z 2019-06-21T10:00:00.000Z
ID Description Published Updated
ssa-365200 SSA-365200: Google Chrome Type Confusion Vulnerability in Siemens Products 2025-10-14T00:00:00Z 2026-01-13T00:00:00Z
ssa-364175 SSA-364175: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.4-h1 2024-07-09T00:00:00Z 2026-01-13T00:00:00Z
ssa-192617 SSA-192617: Local Privilege Escalation Vulnerability in TeleControl Server Basic Before V3.1.2.4 2026-01-13T00:00:00Z 2026-01-13T00:00:00Z
ssa-014678 SSA-014678: Authorization Bypass Vulnerability in Industrial Edge Device Kit 2026-01-13T00:00:00Z 2026-01-13T00:00:00Z
ssa-001536 SSA-001536: Authorization Bypass Vulnerability in Siemens Industrial Edge Devices 2026-01-13T00:00:00Z 2026-01-13T00:00:00Z
ssa-512988 SSA-512988: File Parsing Vulnerability in Simcenter Femap Before V2512 2025-12-12T00:00:00Z 2025-12-12T00:00:00Z
ssa-915282 SSA-915282: Denial of service Vulnerability in Interniche IP-Stack based Industrial Devices 2025-12-09T00:00:00Z 2025-12-09T00:00:00Z
ssa-882673 SSA-882673: Multiple Vulnerabilities in SINEC Security Monitor before V4.10.0 2025-12-09T00:00:00Z 2025-12-09T00:00:00Z
ssa-800126 SSA-800126: Deserialization Vulnerability in Siemens Engineering Platforms before V20 2024-12-10T00:00:00Z 2025-12-09T00:00:00Z
ssa-763474 SSA-763474: Denial of Service Vulnerability in Ruggedcom ROS devices before V5.10.1 2025-12-09T00:00:00Z 2025-12-09T00:00:00Z
ssa-734261 SSA-734261: Authentication Bypass Vulnerability in Energy Services Using Elspec G5DFR 2025-12-09T00:00:00Z 2025-12-09T00:00:00Z
ssa-723487 SSA-723487: RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SCALANCE, RUGGEDCOM and Related Products 2024-07-09T00:00:00Z 2025-12-09T00:00:00Z
ssa-693808 SSA-693808: Deserialization Vulnerability in Siemens Engineering Platforms 2025-08-12T00:00:00Z 2025-12-09T00:00:00Z
ssa-673996 SSA-673996: Buffer Overflow Vulnerability in Third-Party Component in SICAM and SITIPE Products 2024-09-10T00:00:00Z 2025-12-09T00:00:00Z
ssa-626856 SSA-626856: Multiple Vulnerabilities in SINEMA Remote Connect Sever Before V3.2 SP4 2025-12-09T00:00:00Z 2025-12-09T00:00:00Z
ssa-493396 SSA-493396: Deserialization Vulnerability in Siemens Engineering Platforms 2025-08-12T00:00:00Z 2025-12-09T00:00:00Z
ssa-471761 SSA-471761: Multiple Vulnerabilities in SICAM T Before V3.0 2025-12-09T00:00:00Z 2025-12-09T00:00:00Z
ssa-420375 SSA-420375: Improper Integrity Check of Firmware Updates in Building X - Security Manager Edge Controller (ACC-AP) 2025-12-09T00:00:00Z 2025-12-09T00:00:00Z
ssa-416652 SSA-416652: Multiple Vulnerabilities in SIMATIC CN 4100 Before V4.0.1 2025-12-09T00:00:00Z 2025-12-09T00:00:00Z
ssa-392859 SSA-392859: Local Arbitrary Code Execution Vulnerability in Siemens Engineering Platforms before V20 2024-12-10T00:00:00Z 2025-12-09T00:00:00Z
ssa-356310 SSA-356310: Multiple Vulnerabilities in Gridscale X Prepay 2025-12-09T00:00:00Z 2025-12-09T00:00:00Z
ssa-202008 SSA-202008: Multiple Vulnerabilities in Ruggedcom Rox Before V2.17.0 2025-12-09T00:00:00Z 2025-12-09T00:00:00Z
ssa-241605 SSA-241605: Out of Bounds Read in PS/IGES Parasolid Translator Component Before V29.0.258 2025-11-17T00:00:00Z 2025-11-17T00:00:00Z
ssa-190588 SSA-190588: Cross-Site Scripting Vulnerability in Mendix Rich Text Widget 2025-11-17T00:00:00Z 2025-11-17T00:00:00Z
ssa-794185 SSA-794185: RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SIPROTEC, SICAM and Related Products 2025-05-13T00:00:00Z 2025-11-11T00:00:00Z
ssa-750499 SSA-750499: Weak Encryption Vulnerability in SIPROTEC 5 Devices 2024-07-09T00:00:00Z 2025-11-11T00:00:00Z
ssa-711309 SSA-711309: Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products 2023-09-12T00:00:00Z 2025-11-11T00:00:00Z
ssa-687955 SSA-687955: Accessible Development Shell via Physical Interface in SIPROTEC 5 2025-02-11T00:00:00Z 2025-11-11T00:00:00Z
ssa-682326 SSA-682326: Multiple Vulnerabilities in COMOS before V10.4.5 2025-11-11T00:00:00Z 2025-11-11T00:00:00Z
ssa-631336 SSA-631336: Multiple Web Server Vulnerabilities in SICAM GridEdge Before V2.6.6 2022-06-14T00:00:00Z 2025-11-11T00:00:00Z
ID Description Published Updated
suse-su-2026:1324-1 Security update for clamav 2026-04-14T13:15:31Z 2026-04-14T13:15:31Z
suse-su-2026:1323-1 Security update for libpng16 2026-04-14T13:11:55Z 2026-04-14T13:11:55Z
suse-su-2026:1322-1 Security update for MozillaFirefox 2026-04-14T12:42:11Z 2026-04-14T12:42:11Z
suse-su-2026:1321-1 Security update for go1.25 2026-04-14T12:40:53Z 2026-04-14T12:40:53Z
suse-su-2026:1320-1 Security update for go1.26 2026-04-14T12:39:43Z 2026-04-14T12:39:43Z
suse-su-2026:21111-1 Security update for cockpit-subscriptions 2026-04-14T12:16:29Z 2026-04-14T12:16:29Z
suse-su-2026:1314-1 Security update for ignition 2026-04-14T11:07:12Z 2026-04-14T11:07:12Z
suse-su-2026:1313-1 Security update for freerdp2 2026-04-14T10:47:31Z 2026-04-14T10:47:31Z
suse-su-2026:1312-1 Security update for bind 2026-04-14T10:46:32Z 2026-04-14T10:46:32Z
suse-su-2026:1311-1 Security update for libpng16 2026-04-14T10:44:51Z 2026-04-14T10:44:51Z
suse-su-2026:1310-1 Security update for libssh 2026-04-14T10:42:14Z 2026-04-14T10:42:14Z
suse-su-2026:1309-1 Security update for sudo 2026-04-14T10:39:38Z 2026-04-14T10:39:38Z
suse-su-2026:1308-1 Security update for sudo 2026-04-14T10:38:01Z 2026-04-14T10:38:01Z
suse-su-2026:1307-1 Security update for strongswan 2026-04-14T10:35:42Z 2026-04-14T10:35:42Z
suse-su-2026:1305-1 Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5) 2026-04-13T18:34:02Z 2026-04-13T18:34:02Z
suse-su-2026:1304-1 Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5) 2026-04-13T16:04:42Z 2026-04-13T16:04:42Z
suse-su-2026:1303-1 Security update for tigervnc 2026-04-13T16:02:59Z 2026-04-13T16:02:59Z
suse-su-2026:1302-1 Security update for tigervnc 2026-04-13T16:02:16Z 2026-04-13T16:02:16Z
suse-su-2026:1301-1 Security update for tigervnc 2026-04-13T16:01:23Z 2026-04-13T16:01:23Z
suse-su-2026:1300-1 Security update for GraphicsMagick 2026-04-13T15:58:01Z 2026-04-13T15:58:01Z
suse-su-2026:1299-1 Security update for nodejs24 2026-04-13T15:54:45Z 2026-04-13T15:54:45Z
suse-su-2026:21107-1 Security update for openssl-3 2026-04-13T15:48:01Z 2026-04-13T15:48:01Z
suse-su-2026:1298-1 Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5) 2026-04-13T15:04:44Z 2026-04-13T15:04:44Z
suse-su-2026:21106-1 Security update for cockpit 2026-04-13T14:11:34Z 2026-04-13T14:11:34Z
suse-su-2026:1297-1 Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5) 2026-04-13T12:42:14Z 2026-04-13T12:42:14Z
suse-su-2026:1296-1 Security update for python39 2026-04-13T12:32:48Z 2026-04-13T12:32:48Z
suse-su-2026:21104-1 Security update for python313 2026-04-13T09:49:38Z 2026-04-13T09:49:38Z
suse-su-2026:1294-1 Security update for the Linux Kernel (Live Patch 77 for SUSE Linux Enterprise 12 SP5) 2026-04-13T09:04:33Z 2026-04-13T09:04:33Z
suse-su-2026:21102-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) 2026-04-13T09:00:51Z 2026-04-13T09:00:51Z
suse-su-2026:1293-1 Security update for the Linux Kernel (Live Patch 75 for SUSE Linux Enterprise 12 SP5) 2026-04-13T08:35:44Z 2026-04-13T08:35:44Z
ID Description Published Updated
alsa-2025:3388 Important: python-jinja2 security update 2025-03-31T00:00:00Z 2026-04-09T18:19:12Z
alsa-2025:4048 Moderate: xmlrpc-c security update 2025-04-22T00:00:00Z 2026-04-09T18:11:53Z
alsa-2025:4049 Moderate: libtasn1 security update 2025-04-22T00:00:00Z 2026-04-09T18:00:49Z
alsa-2025:8254 Important: pcs security update 2025-05-28T00:00:00Z 2026-04-09T17:52:37Z
alsa-2025:4063 Moderate: ruby:3.1 security update 2025-04-22T00:00:00Z 2026-04-09T17:45:54Z
alsa-2025:11047 Moderate: pcs security update 2025-07-15T00:00:00Z 2026-04-09T15:41:47Z
alsa-2025:12527 Moderate: virt:rhel and virt-devel:rhel security update 2025-08-04T00:00:00Z 2026-04-09T15:30:58Z
alsa-2026:6750 Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update 2026-04-07T00:00:00Z 2026-04-09T12:29:46Z
alsa-2026:6949 Important: go-toolset:rhel8 security update 2026-04-08T00:00:00Z 2026-04-09T12:17:43Z
alsa-2026:6915 Important: vim security update 2026-04-07T00:00:00Z 2026-04-09T11:41:21Z
alsa-2026:6906 Important: nginx security update 2026-04-07T00:00:00Z 2026-04-09T11:12:05Z
alsa-2026:6918 Important: freerdp security update 2026-04-07T00:00:00Z 2026-04-09T10:20:55Z
alsa-2026:6391 Moderate: mysql:8.4 security update 2026-04-01T00:00:00Z 2026-04-09T10:00:41Z
alsa-2026:6435 Moderate: mariadb:10.11 security update 2026-04-02T00:00:00Z 2026-04-09T09:01:32Z
alsa-2026:6463 Important: openssh security update 2026-04-02T00:00:00Z 2026-04-09T08:50:06Z
alsa-2026:6462 Important: openssh security update 2026-04-02T00:00:00Z 2026-04-09T08:39:22Z
alsa-2026:6461 Important: openssh security update 2026-04-02T00:00:00Z 2026-04-09T08:28:49Z
alsa-2026:7080 Important: nodejs22 security update 2026-04-08T00:00:00Z 2026-04-09T02:15:49Z
alsa-2026:7081 Moderate: libtiff security update 2026-04-08T00:00:00Z 2026-04-09T02:00:14Z
alsa-2026:6628 Important: fontforge security update 2026-04-06T00:00:00Z 2026-04-08T23:11:48Z
alsa-2026:6631 Important: fontforge security update 2026-04-06T00:00:00Z 2026-04-08T20:50:37Z
alsa-2026:6572 Moderate: kernel-rt security update 2026-04-06T00:00:00Z 2026-04-06T09:38:16Z
alsa-2026:6571 Moderate: kernel security update 2026-04-06T00:00:00Z 2026-04-06T09:27:57Z
alsa-2026:6621 Moderate: crun security update 2026-04-06T00:00:00Z 2026-04-06T08:42:59Z
alsa-2026:6622 Moderate: crun security update 2026-04-06T00:00:00Z 2026-04-06T08:36:15Z
alsa-2026:6300 Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update 2026-03-31T00:00:00Z 2026-04-03T17:13:38Z
alsa-2026:6436 Moderate: rsync security update 2026-04-02T00:00:00Z 2026-04-03T12:29:15Z
alsa-2026:6439 Important: libpng15 security update 2026-04-02T00:00:00Z 2026-04-03T12:19:53Z
alsa-2026:6445 Important: libpng12 security update 2026-04-02T00:00:00Z 2026-04-03T12:13:28Z
alsa-2026:6470 Important: perl-YAML-Syck security update 2026-04-02T00:00:00Z 2026-04-03T12:07:59Z
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
osv-2024-696 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr 2024-07-31T00:03:10.056663Z 2026-03-30T14:18:48.684167Z
osv-2024-400 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr 2024-05-02T00:03:16.309384Z 2026-03-30T14:18:22.305458Z
osv-2024-641 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr 2024-07-14T00:06:37.034414Z 2026-03-30T14:18:20.625772Z
osv-2024-278 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr 2024-04-19T00:12:11.684954Z 2026-03-30T14:17:53.191446Z
osv-2022-776 Heap-buffer-overflow in do_job 2022-08-24T00:00:48.440951Z 2026-03-28T14:13:55.545096Z
osv-2025-312 Heap-buffer-overflow in ZSTD_decompressMultiFrame 2025-05-02T00:14:14.459388Z 2026-03-27T14:26:26.446866Z
osv-2023-606 Heap-buffer-overflow in ZSTD_decompressMultiFrame 2023-07-23T14:01:02.159160Z 2026-03-27T14:21:24.837066Z
osv-2023-319 Heap-buffer-overflow in ZSTD_decompressSequencesLong_bmi2 2023-04-16T14:01:58.406534Z 2026-03-27T14:20:54.241339Z
osv-2022-675 Heap-buffer-overflow in void RDKit::ParseV3000AtomProps<std::__1::vector<std::__1::basic_string_view<cha 2022-08-06T00:00:51.363676Z 2026-03-27T14:20:04.040838Z
osv-2021-1672 Heap-buffer-overflow in blosc_d 2021-12-12T00:01:29.747137Z 2026-03-27T14:18:17.523662Z
osv-2022-1288 Stack-buffer-overflow in bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*> 2024-11-04T00:16:22.516312Z 2026-03-27T14:17:53.064285Z
osv-2023-1350 Heap-buffer-overflow in inflate 2023-12-23T00:12:38.562149Z 2026-03-27T14:16:43.884162Z
osv-2022-1134 Heap-buffer-overflow in ndlz8_decompress 2022-11-04T00:02:11.463429Z 2026-03-27T14:15:56.573716Z
osv-2021-1070 Heap-buffer-overflow in ZSTD_decompressBlock_internal 2021-07-29T00:01:10.187569Z 2026-03-27T14:15:27.197578Z
osv-2026-461 UNKNOWN READ in XRef::constructObjectEntry 2026-03-26T00:17:47.551046Z 2026-03-26T00:17:47.551361Z
osv-2026-455 UNKNOWN READ in mkv::matroska_segment_c::TrackInit 2026-03-25T00:20:51.448743Z 2026-03-25T00:20:51.449185Z
osv-2023-216 Heap-buffer-overflow in H5G__node_cmp3 2023-03-23T13:00:48.081705Z 2026-03-24T16:17:49.377032Z
osv-2023-76 Heap-buffer-overflow in H5SM_delete 2023-02-18T13:00:50.471845Z 2026-03-24T15:56:21.323480Z
osv-2023-359 Heap-buffer-overflow in H5MM_memcpy 2023-05-01T14:02:33.841821Z 2026-03-24T15:52:15.056909Z
osv-2023-392 Negative-size-param in H5MM_memcpy 2023-05-13T14:00:26.093088Z 2026-03-24T15:13:27.688997Z
osv-2023-370 Heap-buffer-overflow in H5FS__sect_link 2023-05-06T14:01:04.165113Z 2026-03-24T15:11:55.539963Z
osv-2024-387 Heap-buffer-overflow in H5F_addr_encode 2024-04-30T00:13:39.184262Z 2026-03-24T15:11:37.246096Z
osv-2023-381 UNKNOWN READ in H5FL__blk_gc_list 2023-05-08T14:02:04.934252Z 2026-03-24T15:11:28.111319Z
osv-2023-133 Heap-buffer-overflow in H5L__extern_traverse 2023-03-02T13:02:08.499899Z 2026-03-24T15:07:47.335644Z
osv-2023-89 Heap-buffer-overflow in H5O__mtime_new_encode 2023-02-21T13:00:30.347876Z 2026-03-24T14:48:44.199364Z
osv-2023-430 Heap-buffer-overflow in H5MM_xstrdup 2023-05-26T14:00:26.078002Z 2026-03-24T14:48:04.919113Z
osv-2026-437 Heap-use-after-free in tf::Executor::_invoke 2026-03-23T00:02:28.277984Z 2026-03-23T14:25:41.819255Z
osv-2025-169 Stack-buffer-overflow in utf8_in2 2025-02-27T00:07:08.029075Z 2026-03-21T14:18:54.197384Z
osv-2023-1328 Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames 2023-12-18T00:13:09.643640Z 2026-03-18T19:49:20.841276Z
osv-2024-728 Negative-size-param in pdf_resize_resource_arrays 2024-08-08T00:09:33.935595Z 2026-03-18T14:32:58.071449Z
ID Description Published Updated
rustsec-2026-0049 CRLs not considered authoritative by Distribution Point due to faulty matching logic 2026-03-20T12:00:00Z 2026-03-24T08:22:29Z
rustsec-2026-0072 Missing Check for All-Zero X25519 Shared Secret 2026-02-04T12:00:00Z 2026-03-24T08:16:07Z
rustsec-2026-0071 Nonce Reuse in HPKE Context 2026-02-05T12:00:00Z 2026-03-24T08:16:07Z
rustsec-2026-0070 Panic When Opening or Sealing on Export-Only Context 2026-02-11T12:00:00Z 2026-03-24T08:16:07Z
rustsec-2026-0069 Incorrect Length Encoding on KDF Export 2026-02-11T12:00:00Z 2026-03-24T08:16:07Z
rustsec-2026-0068 tar-rs incorrectly ignores PAX size headers if header size is nonzero 2026-03-19T12:00:00Z 2026-03-23T09:31:59Z
rustsec-2026-0067 `unpack_in` can chmod arbitrary directories by following symlinks 2026-03-19T12:00:00Z 2026-03-23T09:31:59Z
rustsec-2026-0066 Insufficient validation of PAX extensions during extraction 2026-03-17T12:00:00Z 2026-03-23T09:31:59Z
rustsec-2026-0047 PKCS7_verify Signature Validation Bypass in AWS-LC 2026-03-02T12:00:00Z 2026-03-21T06:45:35Z
rustsec-2026-0046 PKCS7_verify Certificate Chain Validation Bypass in AWS-LC 2026-03-02T12:00:00Z 2026-03-21T06:45:35Z
rustsec-2026-0045 Timing Side-Channel in AES-CCM Tag Verification in AWS-LC 2026-03-02T12:00:00Z 2026-03-21T06:45:35Z
rustsec-2026-0043 Timing Side-Channel in AES-CCM Tag Verification in AWS-LC 2026-03-02T12:00:00Z 2026-03-21T06:45:35Z
rustsec-2026-0065 `tokio-signal` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0064 `tokio-udp` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0063 `tokio-executor` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0062 `tokio-compat` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0061 `tokio-fs` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0060 `tokio-timer` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0059 `tokio-tcp` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0058 `tokio-io` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0057 `tokio-reactor` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0056 `tokio-codec` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0055 `tokio-process` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0054 `tokio-current-thread` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0053 `tokio-tls` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0052 `tokio-sync` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0051 `tokio-threadpool` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0050 `tokio-uds` is unmaintained 2026-03-20T12:00:00Z 2026-03-20T22:26:59Z
rustsec-2026-0048 CRL Distribution Point Scope Check Logic Error in AWS-LC 2026-03-19T12:00:00Z 2026-03-20T17:11:58Z
rustsec-2026-0044 AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN 2026-03-19T12:00:00Z 2026-03-20T17:11:58Z
ID Description Published Updated
bit-authentik-2023-48228 OAuth2: PKCE can be fully circumvented 2026-04-16T23:36:07.745Z 2026-04-17T00:10:47.507Z
bit-authentik-2023-46249 authentik potential installation takeover when default admin user is deleted 2026-04-16T23:36:06.215Z 2026-04-17T00:10:47.507Z
bit-authentik-2023-39522 Username enumeration attack in goauthentik 2026-04-16T23:36:04.816Z 2026-04-17T00:10:47.507Z
bit-authentik-2023-36456 Authentik lacks Proxy IP headers validation 2026-04-16T23:36:03.215Z 2026-04-17T00:10:47.507Z
bit-authentik-2023-26481 Insufficient user check in FlowTokens by Email stage 2026-04-16T23:36:01.864Z 2026-04-17T00:10:47.507Z
bit-authentik-2022-46172 authentik allows existing authenticated users to create arbitrary accounts 2026-04-16T23:36:00.542Z 2026-04-17T00:10:47.507Z
bit-authentik-2022-46145 authentik vulnerable to unauthorized user creation and potential account takeover 2026-04-16T23:35:59.036Z 2026-04-17T00:10:47.507Z
bit-authentik-2022-23555 authentik vulnerable to Improper Authentication via invitation URL token reuse 2026-04-16T23:35:57.484Z 2026-04-17T00:10:47.507Z
bit-apisix-2026-31924 Apache APISIX: Plugin tencent-cloud-cls log export uses plaintext HTTP 2026-04-16T23:36:06.924Z 2026-04-17T00:10:47.507Z
bit-apisix-2026-31923 Apache APISIX: Openid-connect `tls_verify` field is disabled by default 2026-04-16T23:36:05.480Z 2026-04-17T00:10:47.507Z
bit-airflow-2026-33858 Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom API 2026-04-16T23:38:09.491Z 2026-04-17T00:10:47.507Z
bit-airflow-2025-66236 Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI 2026-04-16T23:37:55.116Z 2026-04-17T00:10:47.507Z
bit-activemq-2026-39304 Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incorrect handling of TLSv1.3 KeyUpdate can be exploited to cause DoS via OOM 2026-04-16T23:36:26.790Z 2026-04-17T00:10:47.507Z
bit-wiremock-2023-41329 Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio 2026-04-13T16:00:00.480Z 2026-04-13T16:23:32.396Z
bit-wiremock-2023-41327 Controlled SSRF through URL in the WireMock 2026-04-13T15:59:58.176Z 2026-04-13T16:23:32.396Z
bit-tomcat-2026-29146 Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default 2026-04-13T16:01:34.700Z 2026-04-13T16:23:32.396Z
bit-nifi-2024-45477 Apache NiFi: Improper Neutralization of Input in Parameter Description 2026-04-13T14:17:18.796Z 2026-04-13T14:44:23.860Z
bit-wiremock-2023-50069 2026-04-13T11:50:15.583Z 2026-04-13T12:09:46.643Z
bit-tomcat-2026-34500 Apache Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled 2026-04-13T10:20:02.205Z 2026-04-13T10:42:00.723Z
bit-tomcat-2026-34487 Apache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token 2026-04-13T10:20:00.791Z 2026-04-13T10:42:00.723Z
bit-tomcat-2026-34483 Apache Tomcat: Incomplete escaping of JSON access logs 2026-04-13T10:19:58.030Z 2026-04-13T10:42:00.723Z
bit-tomcat-2026-29145 Apache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled 2026-04-13T10:19:53.698Z 2026-04-13T10:42:00.723Z
bit-tomcat-2026-25854 Apache Tomcat: Occasionally open redirect 2026-04-13T10:19:50.972Z 2026-04-13T10:42:00.723Z
bit-tomcat-2026-24880 Apache Tomcat: Request smuggling via invalid chunk extension 2026-04-13T10:19:49.629Z 2026-04-13T10:42:00.723Z
bit-mongodb-2026-4148 ExpressionContext use-after-free in classic engine $lookup and $graphLookup aggregation operators 2026-04-13T10:13:07.402Z 2026-04-13T10:42:00.723Z
bit-mongodb-2026-4147 Stack memory disclosure in filemd5 command 2026-04-13T10:13:04.983Z 2026-04-13T10:42:00.723Z
bit-minio-2026-39414 MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing 2026-04-13T10:10:51.384Z 2026-04-13T10:42:00.723Z
bit-tomcat-2026-34486 Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor 2026-04-13T05:53:08.595Z 2026-04-13T06:11:47.324Z
bit-tomcat-2026-32990 Apache Tomcat: Fix for CVE-2025-66614 is incomplete 2026-04-13T05:53:05.369Z 2026-04-13T06:11:47.324Z
bit-tomcat-2026-29129 Apache Tomcat: TLS cipher order is not preserved 2026-04-13T05:53:00.617Z 2026-04-13T06:11:47.324Z
ID Description Published Updated
cleanstart-2026-ot38160 url 2026-04-09T00:55:38.018075Z 2026-04-08T07:36:24Z
cleanstart-2026-ba09462 OpenTelemetry-Go is the Go implementation of OpenTelemetry 2026-04-09T00:57:38.077873Z 2026-04-08T07:00:07Z
cleanstart-2026-mw52739 Security fixes for ghsa-72hv-8253-57qq, ghsa-qqpg-mvqg-649v applied in versions: 3.9.4-r0, 3.9.4-r6 2026-04-09T00:59:39.080550Z 2026-04-08T06:46:14Z
cleanstart-2026-ki25096 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.8.6-r0 2026-04-09T00:59:38.592849Z 2026-04-08T06:46:14Z
cleanstart-2026-ij23041 In libexpat before 2 2026-04-09T01:01:38.269615Z 2026-04-08T06:46:14Z
cleanstart-2026-gy86690 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4 2026-04-09T00:57:57.606656Z 2026-04-08T06:46:14Z
cleanstart-2026-pd43534 In libexpat before 2 2026-04-08T00:39:47.879615Z 2026-04-07T05:54:38Z
cleanstart-2026-mp09743 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.8.6-r0 2026-04-08T00:37:59.326932Z 2026-04-07T05:54:38Z
cleanstart-2026-bb02574 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4 2026-04-08T00:37:58.971684Z 2026-04-07T05:54:38Z
cleanstart-2026-af52025 In libexpat before 2 2026-04-08T00:39:48.013620Z 2026-04-07T05:54:38Z
cleanstart-2026-hx94762 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing 2026-04-07T00:45:34.962189Z 2026-04-06T13:01:42Z
cleanstart-2026-gg94489 go-retryablehttp prior to 0 2026-04-07T00:41:33.578433Z 2026-04-06T13:01:42Z
cleanstart-2026-fu47971 protojson 2026-04-07T00:47:07.546790Z 2026-04-06T13:01:42Z
cleanstart-2026-ej93145 attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames 2026-04-07T00:44:04.086276Z 2026-04-06T13:01:42Z
cleanstart-2026-bk17545 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing 2026-04-07T00:38:33.362093Z 2026-04-06T13:01:42Z
cleanstart-2026-aj47488 When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11 2026-04-07T00:40:03.631106Z 2026-04-06T13:01:42Z
cleanstart-2026-fe32006 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.8.6-r0 2026-04-07T00:41:34.518345Z 2026-04-06T06:37:58Z
cleanstart-2026-dp59378 In libexpat before 2 2026-04-07T00:42:33.537935Z 2026-04-06T06:37:58Z
cleanstart-2026-ob18608 Security fixes for ghsa-72hv-8253-57qq, ghsa-qqpg-mvqg-649v applied in versions: 3.9.4-r0, 3.9.4-r6 2026-04-06T06:19:25.639311Z 2026-04-06T04:56:02Z
cleanstart-2026-kf75900 In libexpat before 2 2026-04-06T06:20:25.150640Z 2026-04-06T04:56:02Z
cleanstart-2026-jl41223 In libexpat before 2 2026-04-06T06:19:55.229801Z 2026-04-06T04:56:02Z
cleanstart-2026-jg79570 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.8.6-r0 2026-04-06T06:19:24.747052Z 2026-04-06T04:56:02Z
cleanstart-2026-dz75075 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4 2026-04-06T06:19:24.775093Z 2026-04-06T04:56:02Z
cleanstart-2026-nu19941 Security fixes for ghsa-72hv-8253-57qq applied in versions: 5.19.3-r1 2026-04-06T02:44:20.354882Z 2026-04-03T13:09:27Z
cleanstart-2026-kt07616 Security fixes for CVE-2026-22735, CVE-2026-22737 applied in versions: 6.2.3-r0 2026-04-06T02:44:27.120329Z 2026-04-03T13:09:27Z
cleanstart-2026-kt25851 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.87.0-r0, 0.87.0-r1, 0.88.0-r1 2026-04-06T02:44:54.790204Z 2026-04-03T08:04:33Z
cleanstart-2026-dq17669 Security fixes for CVE-2026-24051, CVE-2026-25934, CVE-2026-26958, CVE-2026-32287, CVE-2026-33186, CVE-2026-33762, CVE-2026-34165, ghsa-37cx-329c-33x3, ghsa-6g7g-w4f8-9c9x, ghsa-fw7p-63qq-7hpr applied in versions: 1.13.2-r0, 1.14.1-r0, 1.14.1-r1 2026-04-06T02:45:34.659600Z 2026-04-03T07:13:53Z
cleanstart-2026-ml41879 Security fixes for CVE-2026-1229, CVE-2026-24051, CVE-2026-25934, CVE-2026-26958, CVE-2026-32287, CVE-2026-33186, CVE-2026-33762, CVE-2026-34165, ghsa-37cx-329c-33x3, ghsa-6g7g-w4f8-9c9x, ghsa-fw7p-63qq-7hpr applied in versions: 1.13.2-r0, 1.14.0-r0, 1.14.0-r1, 1.14.1-r0 2026-04-06T02:45:36.057138Z 2026-04-03T07:11:16Z
cleanstart-2026-nd57973 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.8.6-r0 2026-04-06T02:45:57.693609Z 2026-04-03T07:10:19Z
cleanstart-2026-lr09759 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4 2026-04-06T02:46:06.138686Z 2026-04-03T07:10:19Z
ID Description Published Updated
ID Description Updated
ID Description Published Updated
CERTFR-2024-ALE-001 [MàJ] Multiples vulnérabilités dans Ivanti Connect Secure et Policy Secure Gateways 2024-01-11T00:00:00.000000 2024-04-15T00:00:00.000000
certfr-2024-ale-002 [MàJ] Multiples Vulnérabilités dans GitLab 2024-01-12T00:00:00.000000 2024-02-22T00:00:00.000000
CERTFR-2024-ALE-002 [MàJ] Multiples Vulnérabilités dans GitLab 2024-01-12T00:00:00.000000 2024-02-22T00:00:00.000000
certfr-2023-ale-013 Vulnérabilité dans Apache Struts 2 2023-12-13T00:00:00.000000 2024-02-16T00:00:00.000000
certfr-2023-ale-012 [MàJ] Vulnérabilité dans Citrix NetScaler ADC et NetScaler Gateway 2023-10-23T00:00:00.000000 2024-02-16T00:00:00.000000
certfr-2023-ale-011 [MàJ] Multiples vulnérabilités dans Cisco IOS XE 2023-10-17T00:00:00.000000 2024-02-16T00:00:00.000000
certfr-2023-ale-010 Multiples vulnérabilités dans Exim 2023-10-02T00:00:00.000000 2024-02-16T00:00:00.000000
CERTFR-2023-ALE-013 Vulnérabilité dans Apache Struts 2 2023-12-13T00:00:00.000000 2024-02-16T00:00:00.000000
CERTFR-2023-ALE-012 [MàJ] Vulnérabilité dans Citrix NetScaler ADC et NetScaler Gateway 2023-10-23T00:00:00.000000 2024-02-16T00:00:00.000000
CERTFR-2023-ALE-011 [MàJ] Multiples vulnérabilités dans Cisco IOS XE 2023-10-17T00:00:00.000000 2024-02-16T00:00:00.000000
CERTFR-2023-ALE-010 Multiples vulnérabilités dans Exim 2023-10-02T00:00:00.000000 2024-02-16T00:00:00.000000
certfr-2023-ale-008 [MàJ] Vulnérabilité dans Citrix NetScaler ADC et NetScaler Gateway 2023-07-19T00:00:00.000000 2024-01-02T00:00:00.000000
certfr-2023-ale-007 [MàJ] Vulnérabilité dans Zimbra Collaboration Suite 2023-07-17T00:00:00.000000 2024-01-02T00:00:00.000000
CERTFR-2023-ALE-008 [MàJ] Vulnérabilité dans Citrix NetScaler ADC et NetScaler Gateway 2023-07-19T00:00:00.000000 2024-01-02T00:00:00.000000
CERTFR-2023-ALE-007 [MàJ] Vulnérabilité dans Zimbra Collaboration Suite 2023-07-17T00:00:00.000000 2024-01-02T00:00:00.000000
certfr-2023-ale-006 Vulnérabilité dans les produits Microsoft 2023-12-12T00:00:00.000000 2023-07-12T00:00:00.000000
CERTFR-2023-ALE-006 Vulnérabilité dans les produits Microsoft 2023-12-12T00:00:00.000000 2023-07-12T00:00:00.000000
certfr-2023-ale-009 [MàJ] Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile 2023-07-26T00:00:00.000000 2023-09-15T00:00:00.000000
CERTFR-2023-ALE-009 [MàJ] Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile 2023-07-26T00:00:00.000000 2023-09-15T00:00:00.000000
certfr-2023-ale-005 Synthèse sur l'exploitation d'une vulnérabilité dans MOVEit Transfer 2023-07-05T00:00:00.000000 2023-09-11T00:00:00.000000
certfr-2023-ale-004 Vulnérabilité dans les produits Fortinet 2023-06-13T00:00:00.000000 2023-09-11T00:00:00.000000
certfr-2022-ale-014 Multiples vulnérabilités dans AMI MegaRAC 2022-12-16T00:00:00.000000 2023-09-11T00:00:00.000000
CERTFR-2023-ALE-005 Synthèse sur l'exploitation d'une vulnérabilité dans MOVEit Transfer 2023-07-05T00:00:00.000000 2023-09-11T00:00:00.000000
CERTFR-2023-ALE-004 Vulnérabilité dans les produits Fortinet 2023-06-13T00:00:00.000000 2023-09-11T00:00:00.000000
CERTFR-2022-ALE-014 Multiples vulnérabilités dans AMI MegaRAC 2022-12-16T00:00:00.000000 2023-09-11T00:00:00.000000
certfr-2023-ale-002 [MàJ] Vulnérabilité dans Microsoft Outlook 2023-03-15T00:00:00.000000 2023-05-11T00:00:00.000000
CERTFR-2023-ALE-002 [MàJ] Vulnérabilité dans Microsoft Outlook 2023-03-15T00:00:00.000000 2023-05-11T00:00:00.000000
certfr-2023-ale-003 [MàJ] Compromission de l'application 3CX Desktop App 2023-03-31T00:00:00.000000 2023-04-12T00:00:00.000000
CERTFR-2023-ALE-003 [MàJ] Compromission de l'application 3CX Desktop App 2023-03-31T00:00:00.000000 2023-04-12T00:00:00.000000
certfr-2023-ale-015 [MàJ] Campagne d'exploitation d'une vulnérabilité affectant VMware ESXi 2023-02-03T00:00:00.000000 2023-03-14T00:00:00.000000
ID Description Published Updated
certfr-2026-avi-0398 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-04-03T00:00:00.000000 2026-04-03T00:00:00.000000
certfr-2026-avi-0397 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2026-04-03T00:00:00.000000 2026-04-03T00:00:00.000000
certfr-2026-avi-0396 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-04-03T00:00:00.000000 2026-04-03T00:00:00.000000
certfr-2026-avi-0395 Multiples vulnérabilités dans les produits IBM 2026-04-03T00:00:00.000000 2026-04-03T00:00:00.000000
certfr-2026-avi-0394 Multiples vulnérabilités dans VMware Tanzu 2026-04-03T00:00:00.000000 2026-04-03T00:00:00.000000
certfr-2026-avi-0393 Vulnérabilité dans Synology Mail Station 2026-04-03T00:00:00.000000 2026-04-03T00:00:00.000000
certfr-2026-avi-0392 Multiples vulnérabilités dans Microsoft Edge 2026-04-03T00:00:00.000000 2026-04-03T00:00:00.000000
certfr-2026-avi-0391 Multiples vulnérabilités dans OpenSSH 2026-04-02T00:00:00.000000 2026-04-02T00:00:00.000000
certfr-2026-avi-0390 Multiples vulnérabilités dans Belden NetModule Router Software 2026-04-02T00:00:00.000000 2026-04-02T00:00:00.000000
certfr-2026-avi-0389 Vulnérabilité dans Microsoft Azure Linux 2026-04-02T00:00:00.000000 2026-04-02T00:00:00.000000
certfr-2026-avi-0388 Multiples vulnérabilités dans les produits Cisco 2026-04-02T00:00:00.000000 2026-04-02T00:00:00.000000
certfr-2026-avi-0387 Multiples vulnérabilités dans les produits Netgate 2026-04-02T00:00:00.000000 2026-04-02T00:00:00.000000
certfr-2026-avi-0386 Multiples vulnérabilités dans les produits Microsoft 2026-04-01T00:00:00.000000 2026-04-01T00:00:00.000000
certfr-2026-avi-0385 Multiples vulnérabilités dans Google Chrome 2026-04-01T00:00:00.000000 2026-04-01T00:00:00.000000
certfr-2026-avi-0384 Multiples vulnérabilités dans Joomla! 2026-04-01T00:00:00.000000 2026-04-01T00:00:00.000000
certfr-2026-avi-0383 Multiples vulnérabilités dans Sonicwall Email Security 2026-04-01T00:00:00.000000 2026-04-01T00:00:00.000000
certfr-2026-avi-0382 Multiples vulnérabilités dans les produits FoxIT 2026-03-31T00:00:00.000000 2026-03-31T00:00:00.000000
certfr-2026-avi-0381 Multiples vulnérabilités dans les produits Microsoft 2026-03-31T00:00:00.000000 2026-03-31T00:00:00.000000
certfr-2026-avi-0380 Multiples vulnérabilités dans Microsoft Edge 2026-03-31T00:00:00.000000 2026-03-31T00:00:00.000000
certfr-2026-avi-0379 Vulnérabilité dans Elastic OpenTelemetry Java 2026-03-31T00:00:00.000000 2026-03-31T00:00:00.000000
certfr-2026-avi-0378 Vulnérabilité dans Symantec Data Loss Prevention (DLP) 2026-03-31T00:00:00.000000 2026-03-31T00:00:00.000000
certfr-2026-avi-0377 Multiples vulnérabilités dans Papercut 2026-03-31T00:00:00.000000 2026-03-31T00:00:00.000000
certfr-2026-avi-0376 Multiples vulnérabilités dans les produits Microsoft 2026-03-30T00:00:00.000000 2026-03-30T00:00:00.000000
certfr-2026-avi-0375 Multiples vulnérabilités dans Microsoft Edge 2026-03-30T00:00:00.000000 2026-03-30T00:00:00.000000
certfr-2026-avi-0374 Vulnérabilité dans Docker Desktop 2026-03-30T00:00:00.000000 2026-03-30T00:00:00.000000
certfr-2026-avi-0372 Multiples vulnérabilités dans les produits IBM 2026-03-27T00:00:00.000000 2026-03-27T00:00:00.000000
certfr-2026-avi-0371 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2026-03-27T00:00:00.000000 2026-03-27T00:00:00.000000
certfr-2026-avi-0370 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-03-27T00:00:00.000000 2026-03-27T00:00:00.000000
certfr-2026-avi-0369 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-03-27T00:00:00.000000 2026-03-27T00:00:00.000000
certfr-2026-avi-0368 Vulnérabilité dans les produits Microsoft 2026-03-27T00:00:00.000000 2026-03-27T00:00:00.000000
ID Description Published Updated
jvndb-2026-003905 Multiple Vulnerabilities in Cosminexus HTTP Server and Hitachi Web Server 2026-02-17T20:46+09:00 2026-02-17T20:46+09:00
jvndb-2026-000025 Joomla! CMS vulnerable to cross-site scripting 2026-02-17T12:46+09:00 2026-02-17T12:46+09:00
jvndb-2026-000023 FileZen vulnerable to OS command injection 2026-02-13T16:51+09:00 2026-02-13T17:08+09:00
jvndb-2026-000024 Installer of M-Audio M-Track Duo HD may insecurely load Dynamic Link Libraries 2026-02-12T13:32+09:00 2026-02-12T13:32+09:00
jvndb-2026-000022 Oki Electric Industry products and OEM products register Windows services with unquoted file paths 2026-02-09T15:21+09:00 2026-02-09T15:21+09:00
jvndb-2026-000021 web2py vulnerable to open redirect 2026-02-05T15:01+09:00 2026-02-05T15:01+09:00
jvndb-2026-000017 Improper file access permission settings in Mitsubishi Small-Capacity UPS Shutdown Software FREQSHIP-mini for Windows 2026-02-03T14:57+09:00 2026-02-05T14:41+09:00
jvndb-2026-000020 Multiple vulnerabilities in Movable Type 2026-02-04T16:15+09:00 2026-02-04T16:15+09:00
jvndb-2026-000016 Installer for Roland Cloud Manager may insecurely load Dynamic Link Libraries 2026-02-03T14:57+09:00 2026-02-04T12:39+09:00
jvndb-2024-002831 ELECOM wireless LAN routers vulnerable to OS command injection 2024-02-22T08:15+09:00 2026-02-04T12:02+09:00
jvndb-2025-000041 Multiple vulnerabilities in ELECOM wireless LAN routers 2025-06-24T14:50+09:00 2026-02-03T15:35+09:00
jvndb-2024-000078 Multiple vulnerabilities in ELECOM wireless LAN routers 2024-07-30T15:34+09:00 2026-02-03T15:35+09:00
jvndb-2026-000019 Multiple vulnerabilities in ELECOM wireless LAN products 2026-02-03T14:57+09:00 2026-02-03T14:57+09:00
jvndb-2026-000015 Sonatype Nexus Repository vulnerable to server-side request forgery 2026-02-02T15:18+09:00 2026-02-02T15:18+09:00
jvndb-2026-000014 OS command injection in raspap-webgui 2026-02-02T15:18+09:00 2026-02-02T15:18+09:00
jvndb-2026-000013 Multiple Microsoft Office products vulnerable to untrusted search path 2026-02-02T15:18+09:00 2026-02-02T15:18+09:00
jvndb-2026-000012 Multiple vulnerabilities in Cybozu Garoon 2026-02-02T15:18+09:00 2026-02-02T15:18+09:00
jvndb-2026-000018 Undocumented "TelnetEnable" functionality of End of Service NETGEAR products 2026-01-30T14:23+09:00 2026-01-30T14:23+09:00
jvndb-2026-002119 Multiple vulnerabilities in BROTHER MFPs (multifunction printers) 2026-01-30T11:26+09:00 2026-01-30T11:26+09:00
jvndb-2026-002030 Multiple Vulnerabilities in Cosminexus 2026-01-29T10:32+09:00 2026-01-29T10:32+09:00
jvndb-2026-001972 Archer MR600 vulnerable to OS command injection 2026-01-28T10:41+09:00 2026-01-28T10:41+09:00
jvndb-2026-000011 beat-access for Windows may insecurely load Dynamic Link Libraries 2026-01-27T18:22+09:00 2026-01-27T18:22+09:00
jvndb-2026-001732 Multiple Brother software installers may insecurely load Dynamic Link Libraries 2026-01-26T16:04+09:00 2026-01-26T16:04+09:00
jvndb-2026-000010 Command injection vulnerability in ASUS routers 2026-01-23T15:22+09:00 2026-01-23T15:22+09:00
jvndb-2026-001663 "iRMC S5/S6" implemented in PRIMERGY vulnerable to incorrect authorization 2026-01-23T11:29+09:00 2026-01-23T11:29+09:00
jvndb-2026-001662 Multiple vulnerabilities in Trend Micro Apex Central (January 2026) 2026-01-23T11:29+09:00 2026-01-23T11:29+09:00
jvndb-2026-000009 Installer of Fujitsu ServerView Agents for Windows may insecurely load Dynamic Link Libraries 2026-01-21T15:17+09:00 2026-01-21T15:17+09:00
jvndb-2026-000008 Ruijie Networks AP180 series vulnerable to OS command injection 2026-01-21T15:17+09:00 2026-01-21T15:17+09:00
jvndb-2026-001582 Security information for Hitachi Disk Array Systems 2026-01-21T12:11+09:00 2026-01-21T12:11+09:00
jvndb-2026-001578 ETERNUS SF vulnerable to insertion of sensitive information into maintenance data 2026-01-20T20:00+09:00 2026-01-20T20:00+09:00
ID Description Published Updated
cnvd-2026-15854 Canva Affinity越界读取漏洞（CNVD-2026-15854） 2026-03-26 2026-04-02
cnvd-2026-15853 Canva Affinity越界读取漏洞（CNVD-2026-15853） 2026-03-26 2026-04-02
cnvd-2026-15852 Canva Affinity越界写入漏洞 2026-03-26 2026-04-02
cnvd-2026-15851 Canva Affinity越界读取漏洞（CNVD-2026-15851） 2026-03-26 2026-04-02
cnvd-2026-15850 Canva Affinity越界读取漏洞（CNVD-2026-15850） 2026-03-26 2026-04-02
cnvd-2026-15849 Canva Affinity越界读取漏洞（CNVD-2026-15849） 2026-03-26 2026-04-02
cnvd-2026-15848 Canva Affinity越界读取漏洞（CNVD-2026-15848） 2026-03-26 2026-04-02
cnvd-2026-15847 Canva Affinity越界读取漏洞（CNVD-2026-15847） 2026-03-26 2026-04-02
cnvd-2026-15846 Canva Affinity越界读取漏洞（CNVD-2026-15846） 2026-03-26 2026-04-02
cnvd-2026-15845 Canva Affinity越界读取漏洞（CNVD-2026-15845） 2026-03-26 2026-04-02
cnvd-2026-15844 Canva Affinity越界读取漏洞 2026-03-26 2026-04-01
cnvd-2026-15843 WordPress插件Abandoned Cart Recovery for WooCommerce跨站脚本漏洞 2026-03-31 2026-04-01
cnvd-2026-15842 HCL Traveler存在未明漏洞 2026-03-31 2026-04-01
cnvd-2026-15841 HCL Aftermarket DPC硬编码漏洞 2026-03-31 2026-04-01
cnvd-2026-15840 HCL Aftermarket DPC文件上传漏洞 2026-03-31 2026-04-01
cnvd-2026-15839 HCL Aftermarket DPC跨站脚本漏洞 2026-03-31 2026-04-01
cnvd-2026-15838 HCL Aftermarket DPC访问控制错误漏洞 2026-03-31 2026-04-01
cnvd-2026-15837 HCL Aftermarket DPC存在未明漏洞（CNVD-2026-15837） 2026-03-31 2026-04-01
cnvd-2026-15836 HCL Aftermarket DPC输入验证错误漏洞 2026-03-31 2026-04-01
cnvd-2026-15835 HCL Aftermarket DPC存在未明漏洞（CNVD-2026-15835） 2026-03-31 2026-04-01
cnvd-2026-15834 HCL Aftermarket DPC存在未明漏洞（CNVD-2026-15834） 2026-03-31 2026-04-01
cnvd-2026-15833 HCL Aftermarket DPC存在未明漏洞（CNVD-2026-15833） 2026-03-31 2026-04-01
cnvd-2026-15832 HCL Aftermarket DPC存在未明漏洞（CNVD-2026-15832） 2026-03-31 2026-04-01
cnvd-2026-15831 HCL Aftermarket DPC会话固定漏洞 2026-03-31 2026-04-01
cnvd-2026-15830 HCL Aftermarket DPC存在未明漏洞（CNVD-2026-15830） 2026-03-31 2026-04-01
cnvd-2026-15829 HCL Aftermarket DPC存在未明漏洞（CNVD-2026-15829） 2026-03-31 2026-04-01
cnvd-2026-15828 HCL Aftermarket DPC存在未明漏洞（CNVD-2026-15828） 2026-03-31 2026-04-01
cnvd-2026-15827 HCL Aftermarket DPC存在未明漏洞 2026-03-31 2026-04-01
cnvd-2026-15826 HCL Aftermarket DPC跨源资源共享漏洞 2026-03-31 2026-04-01
cnvd-2026-15825 HCL Aftermarket DPC SQL注入漏洞 2026-03-31 2026-04-01
ID Description Published Updated
bdu:2025-15829 Уязвимость системы управления базами данных MySQL и MariaDB, связанная с раскрытием инфор… 15.12.2025 16.02.2026
bdu:2025-15825 Уязвимость компонентов mm ядра операционной системы Linux, позволяющая нарушителю получит… 15.12.2025 16.02.2026
bdu:2025-15824 Уязвимость компонента hugetlb.c ядра операционной системы Linux, позволяющая нарушителю п… 15.12.2025 16.02.2026
bdu:2025-15822 Уязвимость ядра операционной системы Linux, связанная с неправильной проверкой возвращаем… 15.12.2025 16.02.2026
bdu:2025-15821 Уязвимость компонента drm/sched ядра операционной системы Linux, позволяющая нарушителю в… 15.12.2025 16.02.2026
bdu:2025-15820 Уязвимость компонента pinctrl-msm ядра операционной системы Linux, позволяющая нарушителю… 15.12.2025 16.02.2026
bdu:2025-15816 Уязвимость компонента smb ядра операционной системы Linux, позволяющая нарушителю нарушит… 15.12.2025 16.02.2026
bdu:2025-15815 Уязвимость ядра операционной системы Linux, связанная с чтением за допустимыми границами … 15.12.2025 16.02.2026
bdu:2025-15814 Уязвимость ядра операционной системы Linux, связанная с чтением за границами буфера данны… 15.12.2025 16.02.2026
bdu:2025-15811 Уязвимость компонента xusb ядра операционной системы Linux, позволяющая нарушителю вызват… 15.12.2025 16.02.2026
bdu:2025-15810 Уязвимость ядра операционной системы Linux, связанная с одновременным выполнением с испол… 15.12.2025 16.02.2026
bdu:2025-15809 Уязвимость компонента appletalk ядра операционной системы Linux, позволяющая нарушителю н… 15.12.2025 16.02.2026
bdu:2025-15808 Уязвимость компонента drm/tegra ядра операционной системы Linux, позволяющая нарушителю в… 15.12.2025 16.02.2026
bdu:2025-15806 Уязвимость компонента atm ядра операционной системы Linux, позволяющая нарушителю вызвать… 15.12.2025 16.02.2026
bdu:2025-15804 Уязвимость компонента mcast ядра операционной системы Linux, позволяющая нарушителю вызва… 15.12.2025 16.02.2026
bdu:2025-15803 Уязвимость компонентов tmptcp ядра операционной системы Linux, позволяющая нарушителю пол… 15.12.2025 16.02.2026
bdu:2025-15802 Уязвимость компонента perf/core ядра операционной системы Linux, позволяющая нарушителю в… 15.12.2025 16.02.2026
bdu:2025-15800 Уязвимость компонента mm/vmalloc.c ядра операционной системы Linux, позволяющая нарушител… 15.12.2025 16.02.2026
bdu:2025-15799 Уязвимость модуля powerpc/eeh ядра операционной системы Linux, позволяющая нарушителю выз… 15.12.2025 16.02.2026
bdu:2025-15798 Уязвимость компонента crypto ядра операционной системы Linux, позволяющая нарушителю вызв… 15.12.2025 16.02.2026
bdu:2025-15797 Уязвимость компонента xilinx ядра операционной системы Linux, позволяющая нарушителю вызв… 15.12.2025 16.02.2026
bdu:2025-15796 Уязвимость компонента iwlwifi ядра операционной системы Linux, позволяющая нарушителю выз… 15.12.2025 16.02.2026
bdu:2025-15795 Уязвимость ядра операционной системы Linux, связанная с ошибками разыменования указателя,… 15.12.2025 16.02.2026
bdu:2025-15794 Уязвимость компонента dtpm_cpu ядра операционной системы Linux, позволяющая нарушителю вы… 15.12.2025 16.02.2026
bdu:2025-15793 Уязвимость компонента fbtft ядра операционной системы Linux, позволяющая нарушителю вызва… 15.12.2025 16.02.2026
bdu:2025-15792 Уязвимость компонента net/tls ядра операционной системы Linux, позволяющая нарушителю выз… 15.12.2025 16.02.2026
bdu:2025-15791 Уязвимость компонента net/packet/af_packet.c ядра операционной системы Linux, позволяющая… 15.12.2025 16.02.2026
bdu:2025-15790 Уязвимость компонента net ядра операционной системы Linux, позволяющая нарушителю вызвать… 15.12.2025 16.02.2026
bdu:2025-15789 Уязвимость компонента pnv_php операционной системы Linux, позволяющая нарушителю вызвать … 15.12.2025 16.02.2026
bdu:2025-15788 Уязвимость компонента pnv_php ядра операционной системы Linux, позволяющая нарушителю выз… 15.12.2025 16.02.2026
ID Description Updated
var-201402-0026 Buffer overflow in the process_ra function in the router advertisement daemon (radvd) bef… 2024-07-23T22:25:48.682000Z
var-201805-1144 In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and pr… 2024-07-23T22:25:33.529000Z
var-201805-1143 In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and pr… 2024-07-23T22:25:33.635000Z
var-202005-0008 Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple heap-based buf… 2024-07-23T22:25:28.455000Z
var-202407-0704 A vulnerability has been identified in CPCI85 Central Processing/Communication (All versi… 2024-07-23T22:25:01.735000Z
var-200107-0035 slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cau… 2024-07-23T22:24:58.858000Z
var-200512-0643 Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to exe… 2024-07-23T22:24:53.371000Z
var-200512-0611 Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and… 2024-07-23T22:24:53.455000Z
var-200512-0300 Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to exe… 2024-07-23T22:24:53.297000Z
var-200512-0297 Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbit… 2024-07-23T22:24:53.525000Z
var-200512-0294 Buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitr… 2024-07-23T22:24:53.234000Z
var-201407-0233 Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote atta… 2024-07-23T22:22:21.013000Z
var-201601-0038 Multiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote atta… 2024-07-23T22:22:04.421000Z
var-201801-0394 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbi… 2024-07-23T22:21:46.499000Z
var-201904-0181 Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple stack-based buffer overflow… 2024-07-23T22:21:36.530000Z
var-202108-1160 Description: A permissions issue was addressed with improved validation. This issue is fi… 2024-07-23T22:20:46.081000Z
var-202305-0218 D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution… 2024-07-23T22:20:18.349000Z
var-202305-0217 D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerabi… 2024-07-23T22:20:18.369000Z
var-202305-0216 D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vul… 2024-07-23T22:20:18.413000Z
var-202305-0177 D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability. … 2024-07-23T22:20:18.434000Z
var-202305-0176 D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vu… 2024-07-23T22:20:18.458000Z
var-202305-0166 D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulner… 2024-07-23T22:20:18.326000Z
var-202305-0154 D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulner… 2024-07-23T22:20:18.503000Z
var-202305-0153 D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerab… 2024-07-23T22:20:18.392000Z
var-202305-0071 D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability. T… 2024-07-23T22:20:18.481000Z
var-202305-0070 D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execut… 2024-07-23T22:20:18.303000Z
var-202308-3323 D-Link DAP-2622 DDP Change ID Password Auth Username Stack-based Buffer Overflow Remote C… 2024-07-23T22:20:12.387000Z
var-202308-3185 D-Link DAP-2622 DDP Configuration Backup Filename Stack-based Buffer Overflow Remote Code… 2024-07-23T22:20:12.455000Z
var-202308-3131 D-Link DAP-2622 DDP Reset Factory Auth Password Stack-based Buffer Overflow Remote Code E… 2024-07-23T22:20:12.487000Z
var-202308-3130 D-Link DAP-2622 DDP Configuration Restore Auth Username Stack-based Buffer Overflow Remot… 2024-07-23T22:20:12.431000Z
ID Description Published Updated
ID Description Published Updated
vde-2024-067 Phoenix Contact: Multiple Vulnerabilities in PLCnext Engineer 2024-10-08T12:00:00.000Z 2025-05-14T13:00:14.000Z
vde-2024-052 Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors. 2024-09-10T10:00:00.000Z 2025-05-14T13:00:14.000Z
vde-2024-051 Phoenix Contact: Multiple mGuard devices are vulnerable to a remote code injection due to SSH 2024-09-10T10:00:00.000Z 2025-05-14T13:00:14.000Z
vde-2023-010 PHOENIX CONTACT: FL MGUARD affected by two vulnerabilities 2023-06-13T06:00:00.000Z 2025-05-14T13:00:14.000Z
vde-2022-001 PHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment 2022-01-25T08:05:00.000Z 2025-05-14T13:00:14.000Z
vde-2021-019 PHOENIX CONTACT: Security Advisory for ILC1x1 Industrial controllers 2021-06-23T12:16:00.000Z 2025-05-14T13:00:14.000Z
vde-2019-003 PHOENIX CONTACT: Multiple Vulnerabilities in MEVIEW3 2019-03-05T10:35:00.000Z 2025-05-14T13:00:14.000Z
vde-2017-006 PHOENIX CONTACT: FL SWITCH 3xxx/4xxx/48xx series web-service authentication bypass 2018-01-10T09:36:00.000Z 2025-05-14T13:00:14.000Z
vde-2025-029 Phoenix Contact: Security Advisory for AXL F BK and IL BK bus couplers 2025-05-13T09:00:00.000Z 2025-05-14T12:28:19.000Z
vde-2021-036 PHOENIX CONTACT: Products utilizing WIBU SYSTEMS CodeMeter components in versions prior to V7.21a 2021-08-04T07:56:00.000Z 2025-05-14T12:28:19.000Z
vde-2021-029 PHOENIX CONTACT: DoS for PLCnext Control devices in versions <2021.0.5 LTS 2021-08-04T07:58:00.000Z 2025-05-14T12:28:19.000Z
vde-2021-025 PHOENIX CONTACT: Security Advisory for PLCNext, ILC 2050 BI, FL MGUARD DM UNLIMITED, TC ROUTER und CLOUD CLIENT products 2021-06-23T12:19:00.000Z 2025-05-14T12:28:19.000Z
vde-2021-024 PHOENIX CONTACT: Security Advisory for PLCNext, SMARTRTU AXC, CHARX control modular and EEM-SB37x 2021-05-04T08:17:00.000Z 2025-05-14T12:28:19.000Z
vde-2021-023 PHOENIX CONTACT: Security Advisory for FL SWITCH SMCS series 2021-06-23T12:17:00.000Z 2025-05-14T12:28:19.000Z
vde-2021-022 PHOENIX CONTACT: Security Advisory for FL COMSERVER UNI 2021-06-23T12:16:00.000Z 2025-05-14T12:28:19.000Z
vde-2021-021 PHOENIX CONTACT: Security Advisory for AXL F BK and IL BK products 2021-06-23T12:15:00.000Z 2025-05-14T12:28:19.000Z
vde-2021-020 PHOENIX CONTACT: Security Advisory for Automation Worx Software Suite 2021-06-23T11:10:00.000Z 2025-05-14T12:28:19.000Z
vde-2020-047 PHOENIX CONTACT: BTP Touch Panels uncontrolled resource consumption 2020-12-02T09:00:00.000Z 2025-05-14T12:28:19.000Z
vde-2020-046 PHOENIX CONTACT: mGuard <8.8.3 products missing initialization of resource 2020-12-17T09:01:00.000Z 2025-05-14T12:28:19.000Z
vde-2020-025 PHOENIX CONTACT: Improper path sanitation on import of project files in PLCnext Engineer 2020-07-21T09:38:00.000Z 2025-05-14T12:28:19.000Z
vde-2020-023 PHOENIX CONTACT: Two Vulnerabilities in Automation Worx Suite 2020-07-01T08:25:00.000Z 2025-05-14T12:28:19.000Z
vde-2020-003 PHOENIX CONTACT: TC Router and TC Cloud Client multiple vulnerabilities 2020-03-05T15:58:00.000Z 2025-05-14T12:28:19.000Z
vde-2019-016 PHOENIX CONTACT: Security Advisory for Automation Worx Software Suite 2019-10-15T06:17:00.000Z 2025-05-14T12:28:19.000Z
vde-2019-014 PHOENIX CONTACT: Multiple Vulnerabilities in Automation Worx Software Suite 2019-06-19T12:41:00.000Z 2025-05-14T12:28:19.000Z
vde-2019-007 PHOENIX CONTACT: command injection on RAD-80211-XD(/HP-BUS) 2019-03-25T11:45:00.000Z 2025-05-14T12:28:19.000Z
vde-2019-006 PHOENIX CONTACT: unauthorized access to WEB-UI on FL NAT SMx 2019-03-25T11:40:00.000Z 2025-05-14T12:28:19.000Z
vde-2018-004 Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series through 1.33 allows Command Injection 2018-05-16T05:35:00.000Z 2025-05-14T12:28:19.000Z
vde-2018-001 PHOENIX CONTACT: Advisory for mGuard products 2018-01-30T09:00:00.000Z 2025-05-14T12:28:19.000Z
vde-2017-004 PHOENIX CONTACT: FL COMSERVER cross-site scripting (XSS) vulnerability 2017-12-05T08:50:00.000Z 2025-05-14T12:28:19.000Z
vde-2017-003 PHOENIX CONTACT: WLAN enabled devices utilising WPA2 encryption 2017-11-09T16:20:00.000Z 2025-05-14T12:28:19.000Z
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
vde-2023-015 WAGO: Improper privilege management in web-based management 2023-11-20T07:00:00.000Z 2023-11-20T07:00:00.000Z
vde-2022-040 WAGO: Multiple Vulnerabilities in Controller with WAGO I/O-Pro / CODESYS 2.3 Runtime 2022-10-17T08:00:00.000Z 2023-09-22T12:39:00.000Z
vde-2023-014 WAGO: Bluetooth LE vulnerability in WLAN-ETHERNET-Gateway 2023-07-31T07:00:00.000Z 2023-07-31T07:00:00.000Z
vde-2023-005 WAGO: Series 750-3x/-8x prone to MODBUS server DoS 2023-06-25T06:00:00.000Z 2023-06-25T06:00:00.000Z
vde-2022-060 WAGO: Multiple vulnerabilities in web-based management of multiple products 2023-02-27T11:00:00.000Z 2023-02-27T11:00:00.000Z
vde-2022-055 WAGO: Exposure of configuration interface in unmanaged switches 2023-02-16T13:43:00.000Z 2023-02-16T13:43:00.000Z
vde-2022-054 WAGO: Unauthenticated Configuration Export in web-based management in multiple devices 2023-01-12T07:52:00.000Z 2023-01-12T07:52:00.000Z
vde-2022-042 WAGO: Multiple products - Loss of MAC-Address-Filtering after reboot 2022-10-17T08:00:00.000Z 2022-10-17T08:00:00.000Z
vde-2022-047 WAGO: FTP-Server - Denial-of-Service 2022-10-12T08:00:00.000Z 2022-10-12T08:00:00.000Z
vde-2022-035 WAGO: Multiple product series affected by multiple CODESYS vulnerabilities 2022-08-17T08:00:00.000Z 2022-08-17T08:00:00.000Z
vde-2022-031 WAGO: Multiple Products Series affected by multiple CODESYS vulnerabilities 2022-08-17T08:00:00.000Z 2022-08-17T08:00:00.000Z
vde-2022-004 WAGO: Web-Based Management Cross-Site Scripting 2022-03-09T07:00:00.000Z 2022-03-09T07:00:00.000Z
vde-2021-050 WAGO: Multiple devices affected by Vulnerabilities in NUCLEUS TCP Stack. 2021-11-16T11:02:00.000Z 2021-11-16T11:02:00.000Z
vde-2020-048 M&M Software (WAGO): Deserialisation of untrusted data in fdtContainer 2021-01-14T14:57:00.000Z 2021-01-14T14:57:00.000Z
vde-2020-015 WAGO: Web Based Management - Code Execution Vulnerability 2020-06-10T08:00:00.000Z 2020-06-10T08:00:00.000Z
vde-2020-010 WAGO: Cloud Connectivity Remote Code Execution Vulnerability 2020-03-09T09:25:00.000Z 2020-03-09T09:25:00.000Z
vde-2020-007 WAGO: Web-Based Management Denial of Service 2020-03-09T09:10:00.000Z 2020-03-09T09:10:00.000Z
vde-2019-022 WAGO: Multiple Vulnerabilities in I/O-Check Service in Multiple Devices 2019-12-16T09:00:00.000Z 2019-12-16T09:00:00.000Z
vde-2019-013 WAGO: Multiple Vulnerabilities in industrial managed switches 2019-06-12T10:25:00.000Z 2019-06-12T10:25:00.000Z
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID Description Published Updated
ID CVSS Description Vendor Product Published Updated
GCVE-1-2025-0008
7 (4.0)
Logged users can view vulnerability disclosure comment… CIRCL
 vulnerability-lookup
 2025-10-13T09:10:00.000Z 2025-10-13T09:15:31.637686Z
GCVE-1-2025-0007
4.5 (4.0)
Missing email validation on user management CIRCL
 vulnerability-lookup
 2025-10-13T08:37:00.000Z 2025-10-13T08:51:37.408861Z
GCVE-1-2025-0006
9.3 (4.0)
Potential XSS in admin CPE in organization model CIRCL
 vulnerability-lookup
 2025-10-13T08:29:00.000Z 2025-10-13T08:52:23.411325Z
GCVE-1-2025-0005
9.4 (4.0)
Reflected XSS due to insecure use of Markup CIRCL
 vulnerability-lookup
 2025-10-13T08:23:29.812914Z 2025-10-13T08:23:29.812914Z
GCVE-1-2025-0004
10 (4.0)
XSS in Comments, Bundles, and Sightings component of v… CIRCL
 vulnerability-lookup
 2025-09-25T14:10:00.000Z 2025-11-19T10:16:47.656802Z
GCVE-1-2025-0003
9.3 (4.0)
Incorrect ACL for user settings edit, which previ… cerebrate
 cerebrate
 2025-08-22T12:33:00.000Z 2025-08-23T07:55:10.950332Z
GCVE-1-2025-0002
8.9 (4.0)
Command Injection in Cl0p Exfiltration Python Script Cl0p ransomware
 exfiltration
 2025-07-01T08:19:00.000Z 2025-07-01T10:58:58.443468Z
GCVE-1-2025-0001
5.3 (4.0)
The absence of a password confirmation step when deact… CIRCL
 Vulnerability-Lookup
 2025-05-27T08:58:00.000Z 2025-05-30T14:27:56.273945Z
ID CVSS Description Vendor Product Published Updated