Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-25370 |
5.3 (3.1)
|
WordPress WP Compress plugin <= 6.60.28 - Broken Acces… |
AresIT |
WP Compress |
2026-02-19T08:27:00.225Z | 2026-04-24T18:07:15.809Z |
| CVE-2026-25387 |
4.3 (3.1)
|
WordPress Image Optimizer by Elementor plugin <= 1.7.1… |
Elementor |
Image Optimizer by Elementor |
2026-02-19T08:27:02.035Z | 2026-04-24T18:07:15.639Z |
| CVE-2026-25392 |
4.7 (3.1)
|
WordPress Update URLs – Quick and Easy way to search o… |
KaizenCoders |
Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress |
2026-02-19T08:27:02.858Z | 2026-04-24T18:07:15.433Z |
| CVE-2026-25441 |
5.3 (3.1)
|
WordPress LeadConnector plugin <= 3.0.21 - Broken Acce… |
varunvairavanlc |
LeadConnector |
2026-02-19T08:27:08.043Z | 2026-04-24T18:07:15.256Z |
| CVE-2026-27066 |
5.3 (3.1)
|
WordPress Live sales notification for WooCommerce plug… |
PI Web Solution |
Live sales notification for WooCommerce |
2026-02-19T08:27:11.001Z | 2026-04-24T18:07:14.984Z |
| CVE-2024-34438 |
5.3 (3.1)
|
WordPress Shared Files plugin <= 1.7.19 - Broken Acces… |
Anssi Laitila |
Shared Files |
2026-02-20T15:46:24.610Z | 2026-04-24T18:07:14.805Z |
| CVE-2024-43228 |
5.3 (3.1)
|
WordPress SecuPress Free plugin <= 2.2.5.3 - Broken Ac… |
SecuPress |
SecuPress Free |
2026-02-20T15:46:24.859Z | 2026-04-24T18:07:14.631Z |
| CVE-2025-52744 |
7.7 (3.1)
|
WordPress Inpersttion For Theme plugin <= 1.0 - Arbitr… |
inpersttion |
Inpersttion For Theme |
2026-02-20T15:46:26.398Z | 2026-04-24T18:07:14.420Z |
| CVE-2025-53217 |
7.6 (3.1)
|
WordPress AIO WP Builder Plugin <= 2.0.2 - Broken Acce… |
staviravn |
AIO WP Builder |
2026-02-20T15:46:26.588Z | 2026-04-24T18:07:14.218Z |
| CVE-2025-67547 |
6.5 (3.1)
|
WordPress Konte theme <= 2.4.6 - Broken Access Control… |
uixthemes |
Konte |
2026-02-20T15:46:27.909Z | 2026-04-24T18:07:14.047Z |
| CVE-2025-67624 |
6.5 (3.1)
|
WordPress Optimize More! – Images plugin <= 1.1.3 - Br… |
Arya Dhiratara |
Optimize More! – Images |
2026-02-20T15:46:28.340Z | 2026-04-24T18:07:13.877Z |
| CVE-2025-67970 |
5.9 (3.1)
|
WordPress Schedula plugin <= 1.0 - Broken Access Contr… |
vertim |
Schedula |
2026-02-20T15:46:28.741Z | 2026-04-24T18:07:13.709Z |
| CVE-2025-67973 |
6.5 (3.1)
|
WordPress Sunshine Photo Cart plugin <= 3.5.6.2 - Brok… |
sunshinephotocart |
Sunshine Photo Cart |
2026-02-20T15:46:29.373Z | 2026-04-24T18:07:13.530Z |
| CVE-2025-67974 |
7.5 (3.1)
|
WordPress WPLegalPages plugin <= 3.5.4 - Broken Access… |
WP Legal Pages |
WPLegalPages |
2026-02-20T15:46:29.701Z | 2026-04-24T18:07:13.119Z |
| CVE-2025-67975 |
6.5 (3.1)
|
WordPress aDirectory plugin <= 3.0.3 - Broken Access C… |
aDirectory |
aDirectory |
2026-02-20T15:46:30.134Z | 2026-04-24T18:07:12.898Z |
| CVE-2025-67977 |
8.2 (3.1)
|
WordPress HAPPY plugin <= 1.0.8 - Broken Access Contro… |
VillaTheme |
HAPPY |
2026-02-20T15:46:30.439Z | 2026-04-24T18:07:12.730Z |
| CVE-2025-67994 |
7.5 (3.1)
|
WordPress YayCurrency plugin <= 3.3 - Arbitrary Conten… |
YayCommerce |
YayCurrency |
2026-02-20T15:46:32.934Z | 2026-04-24T18:07:12.551Z |
| CVE-2025-68000 |
6.5 (3.1)
|
WordPress Testimonial Slider plugin <= 2.0.15 - Broken… |
PickPlugins |
Testimonial Slider |
2026-02-20T15:46:33.875Z | 2026-04-24T18:07:12.367Z |
| CVE-2025-68005 |
6.5 (3.1)
|
WordPress Easy Hotel Booking plugin <= 1.9.2 - Broken … |
themewant |
Easy Hotel Booking |
2026-02-20T15:46:34.209Z | 2026-04-24T18:07:12.201Z |
| CVE-2025-68021 |
6.5 (3.1)
|
WordPress ConveyThis plugin <= 269.9 - Broken Access C… |
ConveyThis |
ConveyThis |
2026-02-20T15:46:34.400Z | 2026-04-24T18:07:11.973Z |
| CVE-2026-41066 |
7.5 (3.1)
|
lxml: Default configuration of iterparse() and ETCompa… |
lxml |
lxml |
2026-04-24T16:45:19.617Z | 2026-04-24T18:04:04.548Z |
| CVE-2026-42042 |
5.4 (3.1)
|
Axios: XSRF Token Cross-Origin Leakage via Prototype P… |
axios |
axios |
2026-04-24T18:03:29.924Z | 2026-04-24T18:03:29.924Z |
| CVE-2026-41140 |
0.6 (4.0)
|
Poetry: Path traversal in tar extraction on Python 3.1… |
python-poetry |
poetry |
2026-04-24T17:10:33.869Z | 2026-04-24T18:03:02.013Z |
| CVE-2026-41677 |
1.7 (4.0)
|
rust-openssl: Out-of-bounds read in PEM password callb… |
rust-openssl |
rust-openssl |
2026-04-24T17:17:17.849Z | 2026-04-24T18:02:27.756Z |
| CVE-2026-41898 |
8.3 (4.0)
|
rust-openssl: Unchecked callback-returned length in PS… |
rust-openssl |
rust-openssl |
2026-04-24T17:20:38.073Z | 2026-04-24T18:01:47.877Z |
| CVE-2025-67259 |
6.5 (3.1)
|
A Broken Access Control vulnerability exists in C… |
n/a |
n/a |
2026-04-24T00:00:00.000Z | 2026-04-24T17:58:28.632Z |
| CVE-2026-42037 |
5.3 (3.1)
|
Axios: CRLF Injection in multipart/form-data body via … |
axios |
axios |
2026-04-24T17:58:16.058Z | 2026-04-24T17:58:16.058Z |
| CVE-2026-42038 |
6.8 (3.1)
|
Axios: no_proxy bypass via IP alias allows SSRF |
axios |
axios |
2026-04-24T17:57:26.975Z | 2026-04-24T17:57:26.975Z |
| CVE-2025-68022 |
7.3 (3.1)
|
WordPress Plugin BlueX for WooCommerce plugin <= 3.1.6… |
soporteblue |
Plugin BlueX for WooCommerce |
2026-02-20T15:46:34.974Z | 2026-04-24T17:57:08.490Z |
| CVE-2025-68023 |
6.5 (3.1)
|
WordPress Addonify – Compare Products For WooCommerce … |
Addonify |
Addonify – Compare Products For WooCommerce |
2026-02-20T15:46:35.312Z | 2026-04-24T17:57:08.250Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-26169 |
6.1 (3.1)
|
Windows Kernel Memory Information Disclosure Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:58.532Z | 2026-04-24T12:50:33.359Z |
| CVE-2026-26170 |
7.8 (3.1)
|
PowerShell Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:59.294Z | 2026-04-24T12:50:34.029Z |
| CVE-2026-26172 |
7.8 (3.1)
|
Windows Push Notifications Elevation of Privilege Vuln… |
Microsoft |
Windows 10 Version 21H2 |
2026-04-14T16:58:00.062Z | 2026-04-24T12:50:34.879Z |
| CVE-2026-26173 |
7 (3.1)
|
Windows Ancillary Function Driver for WinSock Elevatio… |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:58:00.795Z | 2026-04-24T12:50:35.690Z |
| CVE-2026-41305 |
6.1 (3.1)
|
PostCSS has XSS via Unescaped </style> in its CSS Stri… |
postcss |
postcss |
2026-04-24T02:27:47.719Z | 2026-04-24T16:23:41.198Z |
| CVE-2026-41068 |
7.7 (3.1)
|
Kyverno: Cross-Namespace Read Bypasses RBAC Isolation … |
kyverno |
kyverno |
2026-04-24T03:14:27.640Z | 2026-04-24T16:22:26.972Z |
| CVE-2026-40690 |
N/A
|
Apache Airflow: Assets graph view bypasses DAG level a… |
Apache Software Foundation |
Apache Airflow |
2026-04-24T12:35:33.289Z | 2026-04-24T16:20:27.315Z |
| CVE-2026-38743 |
N/A
|
Apache Airflow: Dags endpoint might provide access to … |
Apache Software Foundation |
Apache Airflow |
2026-04-24T12:36:40.202Z | 2026-04-24T16:20:26.179Z |
| CVE-2026-33208 |
7.4 (4.0)
|
Roxy-WI Vulnerable to Authenticated Remote Code Execut… |
roxy-wi |
roxy-wi |
2026-04-24T02:10:13.834Z | 2026-04-24T16:28:13.136Z |
| CVE-2026-31281 |
8 (3.1)
|
Totara LMS v19.1.5 and before is vulnerable to HT… |
n/a |
n/a |
2026-04-13T00:00:00.000Z | 2026-04-24T16:34:23.641Z |
| CVE-2025-62233 |
N/A
|
Apache DolphinScheduler: Deserialization of untrusted … |
Apache Software Foundation |
Apache DolphinScheduler |
2026-04-24T10:54:55.162Z | 2026-04-24T16:09:59.535Z |
| CVE-2026-34067 |
3.1 (3.1)
|
nimiq-transaction vulnerable to panic via `HistoryTree… |
nimiq |
nimiq-transaction |
2026-04-22T19:52:43.916Z | 2026-04-23T14:17:59.735Z |
| CVE-2026-34066 |
5.3 (3.1)
|
nimiq-blockchain: Peer-triggerable panic during history sync |
nimiq |
nimiq-blockchain |
2026-04-22T19:47:49.249Z | 2026-04-23T12:57:06.467Z |
| CVE-2026-34065 |
7.5 (3.1)
|
nimiq-primitives: Node crash due to missing interlink … |
nimiq |
nimiq-primitives |
2026-04-22T19:45:01.171Z | 2026-04-23T14:17:01.654Z |
| CVE-2026-34064 |
5.3 (3.1)
|
nimiq-account: Vesting insufficient funds error can panic |
nimiq |
nimiq-account |
2026-04-22T19:43:04.453Z | 2026-04-23T16:25:19.186Z |
| CVE-2026-34063 |
7.5 (3.1)
|
network-libp2p: Peer can crash the node by opening dis… |
nimiq |
network-libp2p |
2026-04-22T19:40:26.837Z | 2026-04-23T13:54:06.421Z |
| CVE-2026-34062 |
5.3 (3.1)
|
Nimiq has Allocation of Resources Without Limits or Th… |
nimiq |
network-libp2p |
2026-04-22T19:23:36.838Z | 2026-04-23T12:57:42.075Z |
| CVE-2026-33471 |
9.6 (3.1)
|
nimiq-block has skip block quorum bypass via out-of-ra… |
nimiq |
nimiq-block |
2026-04-22T19:13:04.687Z | 2026-04-23T14:15:20.570Z |
| CVE-2026-32605 |
7.5 (3.1)
|
Nimiq: Remote crash via off-by-one signer bounds check… |
nimiq |
core-rs-albatross |
2026-04-13T18:54:58.542Z | 2026-04-16T13:26:40.930Z |
| CVE-2026-40093 |
8.1 (3.1)
|
nimiq-blockchain is missing a wall-clock upper bound o… |
nimiq |
core-rs-albatross |
2026-04-09T20:29:46.026Z | 2026-04-13T15:38:14.634Z |
| CVE-2026-34069 |
5.3 (3.1)
|
nimiq-consensus panics via RequestMacroChain micro-blo… |
nimiq |
core-rs-albatross |
2026-04-13T23:55:52.994Z | 2026-04-14T16:28:14.091Z |
| CVE-2026-34068 |
6.8 (3.1)
|
nimiq-transaction: UpdateValidator transactions allows… |
nimiq |
nimiq-transaction |
2026-04-22T19:55:08.219Z | 2026-04-23T12:56:27.980Z |
| CVE-2026-40070 |
8.1 (3.1)
|
bsv-sdk and bsv-wallet persist unverified certifier si… |
sgbett |
bsv-ruby-sdk |
2026-04-09T17:26:51.495Z | 2026-04-13T15:38:58.154Z |
| CVE-2026-40477 |
9.1 (3.1)
|
Improper restriction of the scope of accessible object… |
thymeleaf |
thymeleaf |
2026-04-17T21:53:47.271Z | 2026-04-22T03:55:41.093Z |
| CVE-2026-40478 |
9.1 (3.1)
|
Improper neutralization of specific syntax patterns fo… |
thymeleaf |
thymeleaf |
2026-04-17T21:57:01.560Z | 2026-04-22T03:55:42.682Z |
| CVE-2026-40481 |
8.2 (4.0)
|
monetr: Unauthenticated Stripe webhook reads attacker-… |
monetr |
monetr |
2026-04-17T22:54:57.545Z | 2026-04-20T13:36:05.862Z |
| CVE-2026-40347 |
5.3 (3.1)
|
Python-Multipart affected by Denial of Service via lar… |
Kludex |
python-multipart |
2026-04-17T23:56:50.777Z | 2026-04-20T15:46:40.011Z |
| CVE-2026-22683 |
8.7 (4.0)
8.8 (3.1)
|
Windmill < 1.615.0 Operator Role Missing Authorization… |
Windmill Labs |
Windmill CE (Community Edition) |
2026-04-07T16:50:30.297Z | 2026-04-13T13:04:17.928Z |
| CVE-2026-33594 |
5.3 (3.1)
|
Outgoing DoH excessive memory allocation |
PowerDNS |
DNSdist |
2026-04-22T13:48:14.166Z | 2026-04-22T14:36:48.875Z |
| CVE-2026-35582 |
8.8 (3.1)
|
Emissary has an OS Command Injection via Unvalidated I… |
NationalSecurityAgency |
emissary |
2026-04-18T01:16:27.661Z | 2026-04-20T15:48:51.543Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-26172 | Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… | 2026-04-14T18:16:51.757 | 2026-04-24T17:21:20.450 |
| fkie_cve-2026-26173 | Concurrent execution using shared resource with improper synchronization ('race condition') in Wind… | 2026-04-14T18:16:52.013 | 2026-04-24T17:20:35.770 |
| fkie_cve-2026-41305 | PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the ru… | 2026-04-24T03:16:11.547 | 2026-04-24T17:16:21.500 |
| fkie_cve-2026-41068 | Kyverno is a policy engine designed for cloud native platform engineering teams. The patch for CVE-… | 2026-04-24T04:16:19.950 | 2026-04-24T17:16:21.240 |
| fkie_cve-2026-40690 | The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with… | 2026-04-24T13:16:21.443 | 2026-04-24T17:16:20.643 |
| fkie_cve-2026-38743 | The authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the… | 2026-04-24T13:16:21.110 | 2026-04-24T17:16:20.503 |
| fkie_cve-2026-33208 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to ver… | 2026-04-24T03:16:10.863 | 2026-04-24T17:16:20.350 |
| fkie_cve-2026-31281 | Totara LMS v19.1.5 and before is vulnerable to HTML Injection. An attacker can inject malicious HTM… | 2026-04-13T15:17:32.973 | 2026-04-24T17:16:19.940 |
| fkie_cve-2025-62233 | Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module. This issue … | 2026-04-24T11:16:21.780 | 2026-04-24T17:16:17.837 |
| fkie_cve-2026-34067 | nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Pri… | 2026-04-22T21:17:07.760 | 2026-04-24T17:12:48.173 |
| fkie_cve-2026-34066 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. Prior to versio… | 2026-04-22T20:16:41.237 | 2026-04-24T17:12:43.110 |
| fkie_cve-2026-34065 | nimiq-primitives contains primitives (e.g., block, account, transaction) to be used in Nimiq's Rust… | 2026-04-22T20:16:41.077 | 2026-04-24T17:12:37.357 |
| fkie_cve-2026-34064 | nimiq-account contains account primitives to be used in Nimiq's Rust implementation. Prior to versi… | 2026-04-22T20:16:40.900 | 2026-04-24T17:12:30.763 |
| fkie_cve-2026-34063 | Nimiq's network-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, `… | 2026-04-22T20:16:40.713 | 2026-04-24T17:12:23.350 |
| fkie_cve-2026-34062 | nimiq-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, `MessageCod… | 2026-04-22T20:16:40.530 | 2026-04-24T17:11:49.060 |
| fkie_cve-2026-33471 | nimiq-block contains block primitives to be used in Nimiq's Rust implementation. `SkipBlockProof::v… | 2026-04-22T20:16:40.317 | 2026-04-24T17:11:40.037 |
| fkie_cve-2026-32605 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the … | 2026-04-13T20:16:33.787 | 2026-04-24T17:11:26.693 |
| fkie_cve-2026-40093 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In 1.3.0 and ea… | 2026-04-09T21:16:11.937 | 2026-04-24T17:11:14.347 |
| fkie_cve-2026-34069 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the … | 2026-04-14T00:16:07.023 | 2026-04-24T17:10:45.767 |
| fkie_cve-2026-34068 | nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Pri… | 2026-04-22T21:17:08.197 | 2026-04-24T17:10:07.777 |
| fkie_cve-2026-40070 | BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.3.1 to before 0.8.2, BSV::Wallet::Walle… | 2026-04-09T18:17:03.203 | 2026-04-24T17:03:39.437 |
| fkie_cve-2026-40477 | Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3… | 2026-04-17T22:16:33.500 | 2026-04-24T16:58:57.837 |
| fkie_cve-2026-40478 | Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3… | 2026-04-17T22:16:33.650 | 2026-04-24T16:58:33.957 |
| fkie_cve-2026-40481 | monetr is a budgeting application for recurring expenses. In versions 1.12.3 and below, the public … | 2026-04-17T23:16:12.457 | 2026-04-24T16:57:39.337 |
| fkie_cve-2026-40347 | Python-Multipart is a streaming multipart parser for Python. Versions prior to 0.0.26 have a denial… | 2026-04-18T00:16:38.520 | 2026-04-24T16:51:19.917 |
| fkie_cve-2026-22683 | Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows … | 2026-04-07T17:16:27.037 | 2026-04-24T16:49:50.443 |
| fkie_cve-2026-33594 | A client can trigger excessive memory allocation by generating a lot of queries that are routed to … | 2026-04-22T14:16:53.837 | 2026-04-24T16:48:39.007 |
| fkie_cve-2026-35582 | Emissary is a P2P based data-driven workflow engine. In versions 8.42.0 and below, Executrix.getCom… | 2026-04-18T02:16:11.510 | 2026-04-24T16:48:25.797 |
| fkie_cve-2026-40925 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/configurationUpd… | 2026-04-21T21:16:45.903 | 2026-04-24T16:46:18.467 |
| fkie_cve-2026-35241 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (compone… | 2026-04-21T21:16:39.983 | 2026-04-24T16:44:02.000 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-44p5-527f-xg43 |
6.5 (3.1)
|
Missing Authorization vulnerability in CoSchedule Headline Analyzer allows Exploiting Incorrectly C… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:13Z |
| ghsa-23vc-r48x-wwpp |
5.4 (3.1)
|
Missing Authorization vulnerability in RumbleTalk Ltd RumbleTalk Live Group Chat allows Exploiting … | 2025-01-02T12:32:13Z | 2026-04-23T15:34:13Z |
| ghsa-x39g-98hm-frjw |
4.3 (3.1)
|
Missing Authorization vulnerability in gVectors Team wpDiscuz allows Exploiting Incorrectly Configu… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:12Z |
| ghsa-x322-j5qj-m76r |
6.5 (3.1)
|
Missing Authorization vulnerability in Kali Forms Contact Form builder with drag & drop - Kali Form… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:12Z |
| ghsa-wgg3-6fhx-57cc |
5.3 (3.1)
|
Missing Authorization vulnerability in AWSM Innovations WP Job Openings allows Exploiting Incorrect… | 2025-01-02T12:32:12Z | 2026-04-23T15:34:12Z |
| ghsa-prw5-xj65-rw25 |
4.3 (3.1)
|
Missing Authorization vulnerability in BoldThemes Bold Timeline Lite allows Exploiting Incorrectly … | 2025-01-02T12:32:12Z | 2026-04-23T15:34:12Z |
| ghsa-jcfm-5jqr-9j9r |
5.4 (3.1)
|
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration allows Exploiting Inc… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:12Z |
| ghsa-gjpw-5w4x-fpq5 |
5.3 (3.1)
|
Missing Authorization vulnerability in Poll Maker Team Poll Maker allows Exploiting Incorrectly Con… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:12Z |
| ghsa-c2x9-j4mv-ggw3 |
5.4 (3.1)
|
Missing Authorization vulnerability in Kishor Khambu WP Custom Widget area allows Exploiting Incorr… | 2025-01-02T12:32:12Z | 2026-04-23T15:34:12Z |
| ghsa-8vfh-c58r-php5 |
4.3 (3.1)
|
Missing Authorization vulnerability in CusRev Customer Reviews for WooCommerce allows Exploiting In… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:12Z |
| ghsa-7wvc-68qr-wgqx |
4.3 (3.1)
|
Missing Authorization vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Expl… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:12Z |
| ghsa-6rrq-cw26-cgx2 |
4.3 (3.1)
|
Missing Authorization vulnerability in WowStore Team ProductX – Gutenberg WooCommerce Blocks allows… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:12Z |
| ghsa-6mjj-949w-m965 |
4.3 (3.1)
|
Missing Authorization vulnerability in weDevs WP ERP allows Exploiting Incorrectly Configured Acces… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:12Z |
| ghsa-5g8m-6vgv-qm45 |
5.3 (3.1)
|
Missing Authorization vulnerability in CodePeople Appointment Hour Booking allows Exploiting Incorr… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:12Z |
| ghsa-3px9-vgqj-48v9 |
7.3 (3.1)
|
Missing Authorization vulnerability in WPDeveloper BetterLinks allows Exploiting Incorrectly Config… | 2025-01-02T12:32:13Z | 2026-04-23T15:34:12Z |
| ghsa-vj29-vrh9-6589 |
4.3 (3.1)
|
Missing Authorization vulnerability in Woo WooCommerce Subscriptions allows Exploiting Incorrectly … | 2024-12-31T15:30:44Z | 2026-04-23T15:34:11Z |
| ghsa-cq22-f7mv-9c42 |
5.3 (3.1)
|
Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configure… | 2024-12-31T15:30:44Z | 2026-04-23T15:34:11Z |
| ghsa-86fm-wq4c-m3q9 |
4.3 (3.1)
|
Missing Authorization vulnerability in Martin Gibson WP Custom Admin Interface allows Exploiting In… | 2025-01-02T12:32:12Z | 2026-04-23T15:34:11Z |
| ghsa-7grv-gxhv-f4pm |
4.3 (3.1)
|
Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Config… | 2025-01-02T12:32:12Z | 2026-04-23T15:34:11Z |
| ghsa-398x-j3p9-ffhp |
5.3 (3.1)
|
Missing Authorization vulnerability in Schema App Schema App Structured Data allows Exploiting Inco… | 2025-01-02T12:32:12Z | 2026-04-23T15:34:11Z |
| ghsa-8w8w-88r2-6w5q |
7.1 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Tom Royal Stop Registration Spam allows Stored X… | 2024-12-17T00:31:18Z | 2026-04-23T15:34:06Z |
| ghsa-wx24-g8wj-27rf |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2024-12-16T18:31:09Z | 2026-04-23T15:34:05Z |
| ghsa-v8f4-pqh6-gjpr |
7.6 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2024-12-16T18:31:09Z | 2026-04-23T15:34:05Z |
| ghsa-f8wm-cjfc-xpmm |
7.6 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2024-12-16T18:31:09Z | 2026-04-23T15:34:05Z |
| ghsa-f44c-8fc3-c52q |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2024-12-16T18:31:09Z | 2026-04-23T15:34:05Z |
| ghsa-8j65-hvp5-w9jp |
9.1 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in SeedProd LLC SeedProd Pro allows U… | 2024-12-16T18:31:09Z | 2026-04-23T15:34:05Z |
| ghsa-7v7x-8p54-6fgp |
7.1 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in John Godley Tidy Up allows Reflected XSS.This is… | 2024-12-16T15:31:37Z | 2026-04-23T15:34:05Z |
| ghsa-x9w4-cxmc-832m |
6.5 (3.1)
|
Path Traversal vulnerability in FULL. FULL Customer allows Path Traversal.This issue affects FULL C… | 2024-12-13T15:30:44Z | 2026-04-23T15:33:57Z |
| ghsa-p83f-5g8v-2prf |
6.5 (3.1)
|
Missing Authorization vulnerability in Appsbd Elite Notification – Sales Popup, Social Proof, FOMO … | 2024-12-13T15:30:43Z | 2026-04-23T15:33:54Z |
| ghsa-m3vm-c2qr-hmgv |
6.5 (3.1)
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DEL… | 2024-12-13T15:30:43Z | 2026-04-23T15:33:54Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-105 |
|
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an atta… | apache-airflow | 2023-07-12T10:15:00+00:00 | 2023-07-12T12:59:56.733680+00:00 |
| pysec-2023-104 |
|
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an atta… | apache-airflow | 2023-07-12T10:15:00+00:00 | 2023-07-12T12:59:56.649145+00:00 |
| pysec-2023-103 |
|
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unau… | apache-airflow | 2023-07-12T10:15:00+00:00 | 2023-07-12T12:59:56.564522+00:00 |
| pysec-2023-100 |
|
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and UR… | django | 2023-07-03T13:15:00+00:00 | 2023-07-11T16:37:11.407533+00:00 |
| pysec-2023-99 |
|
A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary… | pipreqs | 2023-06-30T20:15:00+00:00 | 2023-07-10T18:33:06.804092+00:00 |
| pysec-2023-97 |
|
easy-parse v0.1.1 was discovered to contain a XML External Entity Injection (XXE) vulnera… | easy-parse | 2023-06-29T21:15:00+00:00 | 2023-07-07T02:41:36.549732+00:00 |
| pysec-2023-96 |
|
requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vuln… | requests-xml | 2023-06-29T21:15:00+00:00 | 2023-07-06T22:29:19.818007+00:00 |
| pysec-2023-95 |
|
py-xml v1.0 was discovered to contain an XML External Entity Injection (XXE) vulnerabilit… | py-xml | 2023-06-29T21:15:00+00:00 | 2023-07-06T22:29:19.184837+00:00 |
| pysec-2022-43052 |
|
Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `fol… | request-util | 2022-03-01T21:15:00+00:00 | 2023-07-03T20:33:00+00:00 |
| pysec-2022-43051 |
|
Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `fol… | pyquest | 2022-03-01T21:15:00+00:00 | 2023-07-03T20:33:00+00:00 |
| pysec-2023-94 |
|
Flask-AppBuilder is an application development framework, built on top of Flask. Prior to… | flask-appbuilder | 2023-06-22T23:15:00+00:00 | 2023-07-03T20:28:23.811646+00:00 |
| pysec-2023-93 |
|
pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly … | pacparser | 2023-06-30T18:15:00+00:00 | 2023-06-30T20:25:46.450877+00:00 |
| pysec-2023-73 |
|
redis-7.0.10 was discovered to contain a segmentation violation. | redis | 2023-05-18T20:15:00Z | 2023-06-27T18:49:56.911238Z |
| pysec-2020-221 |
|
A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no … | ansible | 2020-10-05T13:15:00Z | 2023-06-22T16:29:43.777510Z |
| pysec-2023-90 |
|
Gradio is an open-source Python library that is used to build machine learning and data s… | gradio | 2023-06-08T00:15:00Z | 2023-06-21T05:27:13.352872Z |
| pysec-2023-89 |
|
In Apache Airflow, some potentially sensitive values were being shown to the user in cert… | apache-airflow | 2023-06-19T09:15:00Z | 2023-06-19T10:29:28.607914Z |
| pysec-2023-88 |
|
The Snowflake Connector for Python provides an interface for developing Python applicatio… | snowflake-connector-python | 2023-06-08T21:15:00Z | 2023-06-16T18:28:10.272383Z |
| pysec-2023-81 |
|
A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. T… | mindspore | 2023-05-30T06:16:00Z | 2023-06-16T08:29:55.937187Z |
| pysec-2023-87 |
|
sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL p… | sqlparse | 2023-04-18T22:15:00Z | 2023-06-14T20:24:17.342510Z |
| pysec-2023-86 |
|
OWSLib is a Python package for client programming with Open Geospatial Consortium (OGC) w… | owslib | 2023-03-08T00:15:00Z | 2023-06-14T18:28:54.683011Z |
| pysec-2023-85 |
|
Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. A d… | matrix-synapse | 2023-06-06T19:15:00Z | 2023-06-13T20:24:13.764030Z |
| pysec-2023-84 |
|
Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. In … | matrix-synapse | 2023-06-06T19:15:00Z | 2023-06-13T18:28:46.812103Z |
| pysec-2023-83 |
|
Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.2… | starlette | 2023-06-01T02:15:00Z | 2023-06-08T05:25:54.818459Z |
| pysec-2023-82 |
|
Django-SES is a drop-in mail backend for Django. The django_ses library implements a mail… | django-ses | 2023-05-26T21:15:00Z | 2023-06-06T20:23:42.892470Z |
| pysec-2023-80 |
|
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In contract… | vyper | 2023-05-19T20:15:00Z | 2023-06-05T01:13:03.140034Z |
| pysec-2023-79 |
|
Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to ve… | vyper | 2023-05-11T22:15:00Z | 2023-06-05T01:13:03.051477Z |
| pysec-2023-78 |
|
Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to ve… | vyper | 2023-05-11T21:15:00Z | 2023-06-05T01:13:02.949990Z |
| pysec-2023-77 |
|
Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to ve… | vyper | 2023-05-11T21:15:00Z | 2023-06-05T01:13:02.500642Z |
| pysec-2023-76 |
|
Vyper is a pythonic smart contract language for the EVM. The storage allocator does not g… | vyper | 2023-05-08T17:15:00Z | 2023-06-05T01:13:02.407312Z |
| pysec-2023-75 |
|
Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthe… | tornado | 2023-05-25T10:15:00Z | 2023-06-05T01:13:01.694311Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33223 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.706662Z |
| gsd-2024-33222 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.760715Z |
| gsd-2024-33221 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.715064Z |
| gsd-2024-33220 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.721987Z |
| gsd-2024-33219 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.661517Z |
| gsd-2024-33218 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.711814Z |
| gsd-2024-33217 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.720970Z |
| gsd-2024-33216 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.717949Z |
| gsd-2024-33215 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.748476Z |
| gsd-2024-33214 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.710943Z |
| gsd-2024-33213 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.735466Z |
| gsd-2024-33212 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.727129Z |
| gsd-2024-33211 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.635754Z |
| gsd-2024-33210 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.762839Z |
| gsd-2024-33209 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.700226Z |
| gsd-2024-33208 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.752907Z |
| gsd-2024-33207 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.707334Z |
| gsd-2024-33206 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.742097Z |
| gsd-2024-33205 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.677776Z |
| gsd-2024-33204 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.612720Z |
| gsd-2024-33203 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.612515Z |
| gsd-2024-33202 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.617718Z |
| gsd-2024-33201 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.690170Z |
| gsd-2024-33200 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.713644Z |
| gsd-2024-33199 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.657538Z |
| gsd-2024-33198 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.684409Z |
| gsd-2024-33197 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.664646Z |
| gsd-2024-33196 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.637713Z |
| gsd-2024-33195 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.746132Z |
| gsd-2024-33194 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.603987Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-2403 | Malicious code in polymarkets-sdk (PyPI) | 2026-04-01T15:30:14Z | 2026-04-01T16:27:32Z |
| mal-2026-870 | Malicious code in b10connoisseur (PyPI) | 2026-02-12T12:10:26Z | 2026-04-01T12:28:04Z |
| mal-2026-1407 | Malicious code in thief-utils (PyPI) | 2026-03-13T08:43:52Z | 2026-04-01T12:28:04Z |
| mal-2026-1406 | Malicious code in makenotion-ppetest (PyPI) | 2026-03-13T08:13:53Z | 2026-04-01T12:28:04Z |
| mal-2026-1365 | Malicious code in unibody (npm) | 2026-03-12T02:18:38Z | 2026-04-01T12:28:04Z |
| mal-2026-1274 | Malicious code in test-mal-npm-pkg-not-local (npm) | 2026-03-06T14:26:46Z | 2026-04-01T12:28:04Z |
| mal-2026-1273 | Malicious code in test-mal-npm-pkg-local (npm) | 2026-03-06T14:26:46Z | 2026-04-01T12:28:04Z |
| mal-2026-1163 | Malicious code in xpack-video-submission (npm) | 2026-03-03T04:08:35Z | 2026-04-01T12:28:04Z |
| mal-2026-1161 | Malicious code in xpack-sui (npm) | 2026-03-03T04:08:34Z | 2026-04-01T12:28:04Z |
| mal-2026-1160 | Malicious code in xpack-subscription (npm) | 2026-03-03T04:08:34Z | 2026-04-01T12:28:04Z |
| mal-2026-1159 | Malicious code in xpack-per-device (npm) | 2026-03-03T04:08:34Z | 2026-04-01T12:28:04Z |
| mal-2026-1158 | Malicious code in xpack-arc-gateway (npm) | 2026-03-03T04:08:35Z | 2026-04-01T12:28:04Z |
| mal-2026-1143 | Malicious code in wisecloudsecrets (PyPI) | 2026-03-02T18:48:25Z | 2026-04-01T12:28:04Z |
| mal-2026-1142 | Malicious code in wisecloudcyberark (PyPI) | 2026-03-02T18:48:31Z | 2026-04-01T12:28:04Z |
| mal-2026-1141 | Malicious code in identityapi (PyPI) | 2026-03-02T18:47:02Z | 2026-04-01T12:28:04Z |
| mal-2026-1140 | Malicious code in heimdal-credentials (PyPI) | 2026-03-02T18:48:28Z | 2026-04-01T12:28:04Z |
| mal-2026-1139 | Malicious code in fwk-amigapython-rest-server (PyPI) | 2026-03-02T18:48:10Z | 2026-04-01T12:28:04Z |
| mal-2026-1138 | Malicious code in fwk-amigapython-amigamlserver (PyPI) | 2026-03-02T18:48:18Z | 2026-04-01T12:28:04Z |
| mal-2026-1137 | Malicious code in fwk-amigapython (PyPI) | 2026-03-02T18:48:22Z | 2026-04-01T12:28:04Z |
| mal-2026-1136 | Malicious code in amigapythonupdater (PyPI) | 2026-03-02T18:49:05Z | 2026-04-01T12:28:04Z |
| mal-2025-2008 | Malicious code in usvr-agent (PyPI) | 2025-03-03T13:45:33Z | 2026-04-01T12:28:04Z |
| mal-2025-191807 | Malicious code in package-346234294 (PyPI) | 2025-07-13T17:51:22Z | 2026-04-01T12:28:04Z |
| mal-2024-12290 | Malicious code in ibmodules (PyPI) | 2024-08-23T22:55:41Z | 2026-04-01T12:28:04Z |
| mal-2026-784 | Malicious code in monkey-tags (npm) | 2026-02-06T02:07:02Z | 2026-04-01T12:28:03Z |
| mal-2026-1362 | Malicious code in praxis-scripts (npm) | 2026-03-12T02:18:38Z | 2026-04-01T12:28:03Z |
| mal-2026-1361 | Malicious code in pcl-build-docroot (npm) | 2026-03-12T02:18:38Z | 2026-04-01T12:28:03Z |
| mal-2026-1360 | Malicious code in npm-doc-build (npm) | 2026-03-12T02:07:51Z | 2026-04-01T12:28:03Z |
| mal-2026-1202 | Malicious code in mvn-runtime (npm) | 2026-03-03T06:48:16Z | 2026-04-01T12:28:03Z |
| mal-2026-1100 | Malicious code in ng-vzbootstrap (npm) | 2026-03-01T17:14:48Z | 2026-04-01T12:28:03Z |
| mal-2026-1050 | Malicious code in launch-darkly-js (npm) | 2026-02-26T20:10:47Z | 2026-04-01T12:28:03Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1954 | Drupal: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-03T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1785 | Intel Prozessoren: Mehrere Schwachstellen | 2025-08-12T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1656 | Red Hat Enterprise Linux (unbound): Schwachstelle ermöglicht Manipulation von Daten | 2025-07-27T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1055 | Node.js: Mehrere Schwachstellen | 2025-05-14T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-0403 | libxml2: Mehrere Schwachstellen | 2025-02-18T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2024-3338 | Red Hat OpenShift: Mehrere Schwachstelle | 2024-11-05T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2024-1547 | OpenSSH auf Red Hat Enterprise Linux 9: Schwachstelle ermöglicht Denial of Service | 2024-07-08T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2023-3022 | Apache ActiveMQ: Schwachstelle ermöglicht Codeausführung | 2023-11-28T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2023-2119 | Python: Mehrere Schwachstellen | 2023-08-22T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2023-0611 | Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Denial of Service | 2023-03-09T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2023-0433 | Apache Commons und Apache Tomcat: Schwachstelle ermöglicht Denial of Service | 2023-02-20T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2391 | OpenBao: Mehrere Schwachstellen | 2025-10-22T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-2388 | MongoDB: Schwachstelle ermöglicht Privilegieneskalation | 2025-10-22T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-2272 | Moodle: Mehrere Schwachstellen | 2025-10-13T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-2224 | Keycloak: Mehrere Schwachstellen | 2025-10-07T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-2202 | fetchmail: Schwachstelle ermöglicht Denial of Service | 2025-10-05T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-2036 | IBM WebSphere Application Server: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-10T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1925 | Hashicorp Vault: Schwachstelle ermöglicht Denial of Service | 2025-08-28T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1866 | Mozilla Firefox und Thunderbird: Mehrere Schwachstellen | 2025-08-19T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1613 | Linux Kernel: Mehrere Schwachstellen | 2025-07-20T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1463 | Redis: Mehrere Schwachstellen | 2025-07-06T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0683 | Linux Kernel: Mehrere Schwachstellen | 2025-04-01T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2024-3690 | Gitea: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-12-11T23:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2024-3368 | Linux Kernel: Mehrere Schwachstellen | 2024-11-06T23:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2024-1944 | Red Hat multicluster engine for Kubernetes: Schwachstelle ermöglicht Denial of Service | 2024-08-28T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2024-1606 | Bootstrap: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2024-07-11T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2024-0459 | Linux Kernel: Mehrere Schwachstellen | 2024-02-21T23:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2023-2864 | Linux Kernel: Mehrere Schwachstellen | 2023-11-08T23:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2023-2434 | Linux Kernel: Schwachstelle ermöglicht Codeausführung | 2023-09-24T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2023-1666 | Linux Kernel: Mehrere Schwachstellen | 2023-07-05T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-15-013-02 | Clorius Controls A/S ISC SCADA Insecure Java Client Web Authentication | 2015-10-16T06:00:00.000000Z | 2025-06-06T22:32:32.033557Z |
| icsa-15-013-01 | Siemens SIMATIC WinCC Sm@rtClient iOS Application Authentication Vulnerabilities | 2015-10-16T06:00:00.000000Z | 2025-06-06T22:32:12.568337Z |
| icsa-15-012-01c | CodeWrights GmbH HART Device DTM Vulnerability (Update C) | 2015-10-15T06:00:00.000000Z | 2025-06-06T22:32:06.053252Z |
| icsa-15-012-01b | CodeWrights GmbH HART DTM Vulnerability (Update B) | 2015-10-15T06:00:00.000000Z | 2025-06-06T22:31:59.580273Z |
| icsa-15-012-01a | CodeWrights GmbH HART DTM Vulnerability (Update A) | 2015-10-15T06:00:00.000000Z | 2025-06-06T22:31:53.116696Z |
| icsa-15-012-01 | CodeWrights GmbH HART DTM Vulnerability | 2015-10-15T06:00:00.000000Z | 2025-06-06T22:31:46.333944Z |
| icsa-12-129-01 | WellinTech KingSCADA Insecure Password Encryption | 2012-02-09T07:00:00.000000Z | 2025-06-06T21:45:26.636405Z |
| icsa-12-122-01 | WellinTech KingView DLL Hijack Vulnerability | 2012-02-02T07:00:00.000000Z | 2025-06-06T21:45:20.208792Z |
| icsa-12-102-05 | Siemens Scalance S Multiple Security Vulnerabilities | 2012-01-13T07:00:00.000000Z | 2025-06-06T21:45:13.758298Z |
| icsa-12-102-04 | Siemens Scalance X Buffer Overflow Vulnerability | 2012-01-13T07:00:00.000000Z | 2025-06-06T21:45:07.306451Z |
| icsa-12-102-03 | MICROSYS PROMOTIC Use After Free Vulnerability | 2012-01-13T07:00:00.000000Z | 2025-06-06T21:45:00.844061Z |
| icsa-12-102-02 | Koyo Ecom Modules Vulnerabilities | 2012-01-13T07:00:00.000000Z | 2025-06-06T21:44:54.405200Z |
| icsa-12-102-01 | Certec atvise webMI2ADS Vulnerabilities | 2012-01-13T07:00:00.000000Z | 2025-06-06T21:44:47.952815Z |
| icsa-12-095-01a | ABB Multiple Components Buffer Overflow | 2012-01-06T07:00:00.000000Z | 2025-06-06T21:44:41.492952Z |
| icsa-12-088-01a | Rockwell Automation FactoryTalk RNADiagReceiver | 2012-12-30T07:00:00.000000Z | 2025-06-06T21:44:35.026913Z |
| icsa-12-083-01 | Ecava IntegraXor ActiveX Directory Traversal | 2012-12-25T07:00:00.000000Z | 2025-06-06T21:44:28.588784Z |
| icsa-12-032-02 | GE Intelligent Platforms Proficy Plant Applications Memory Corruption Vulnerabilities | 2012-11-04T06:00:00.000000Z | 2025-06-06T21:44:08.900302Z |
| icsa-12-032-01 | GE Proficy Historian ihDataArchiver | 2012-11-04T06:00:00.000000Z | 2025-06-06T21:44:02.422128Z |
| icsa-15-223-01 | Schneider Electric IMT25 DTM Vulnerability | 2015-05-14T06:00:00.000000Z | 2025-06-06T21:43:55.748554Z |
| icsa-15-211-01 | Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Password Storage Vulnerability | 2015-05-02T06:00:00.000000Z | 2025-06-06T21:43:48.989760Z |
| icsa-15-202-03b | Siemens RUGGEDCOM ROS and ROX-based Devices TLS POODLE Vulnerability (Update B) | 2015-04-23T06:00:00.000000Z | 2025-06-06T21:43:42.534859Z |
| icsa-15-195-01 | Siemens SICAM MIC Authentication Bypass Vulnerability | 2015-04-16T06:00:00.000000Z | 2025-06-06T21:43:23.165608Z |
| icsa-15-181-01 | Baxter SIGMA Spectrum Infusion System Vulnerabilities | 2015-04-02T06:00:00.000000Z | 2025-06-06T21:43:16.616537Z |
| icsa-15-176-02 | PACTware Exceptional Conditions Vulnerability | 2015-03-28T06:00:00.000000Z | 2025-06-06T21:43:10.139031Z |
| icsa-15-176-01 | Siemens Climatix BACnet/IP Communication Module Cross-site Scripting Vulnerability | 2015-03-28T06:00:00.000000Z | 2025-06-06T21:43:03.687724Z |
| icsa-15-174-01 | Hospira Symbiq Infusion System Vulnerability | 2015-03-26T06:00:00.000000Z | 2025-06-06T21:42:57.240178Z |
| icsa-15-167-01 | Schneider Electric StruxureWare Building Expert Plaintext Credentials Vulnerability | 2015-03-19T06:00:00.000000Z | 2025-06-06T21:42:37.652958Z |
| icsa-15-162-01a | RLE Nova-Wind Turbine HMI Unsecure Credentials Vulnerability (Update A) | 2015-03-14T06:00:00.000000Z | 2025-06-06T21:42:31.195189Z |
| icsa-15-160-02 | Sinapsi eSolar Light Plaintext Passwords Vulnerability | 2015-03-12T06:00:00.000000Z | 2025-06-06T21:42:24.744905Z |
| icsa-15-160-01a | N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys (Update A) | 2015-03-12T06:00:00.000000Z | 2025-06-06T21:42:18.275644Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-asaftd-aclconfig-wvk52f3z | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software ACLs Not Installed upon Reload | 2023-07-27T16:00:00+00:00 | 2023-07-27T16:38:54+00:00 |
| cisco-sa-asaftd-aclconfig-wVK52f3z | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software ACLs Not Installed upon Reload | 2023-07-27T16:00:00+00:00 | 2023-07-27T16:38:54+00:00 |
| cisco-sa-bw-priv-esc-qtguzosq | Cisco BroadWorks Privilege Escalation Vulnerability | 2023-07-19T16:00:00+00:00 | 2023-07-20T17:42:21+00:00 |
| cisco-sa-bw-priv-esc-qTgUZOsQ | Cisco BroadWorks Privilege Escalation Vulnerability | 2023-07-19T16:00:00+00:00 | 2023-07-20T17:42:21+00:00 |
| cisco-sa-spa-web-multi-7kvpmu2f | Cisco Small Business SPA500 Series IP Phones Web UI Vulnerabilities | 2023-07-19T16:00:00+00:00 | 2023-07-19T16:00:00+00:00 |
| cisco-sa-spa-web-multi-7kvPmu2F | Cisco Small Business SPA500 Series IP Phones Web UI Vulnerabilities | 2023-07-19T16:00:00+00:00 | 2023-07-19T16:00:00+00:00 |
| cisco-sa-vmanage-unauthapi-sphCLYPA | Cisco SD-WAN vManage Unauthenticated REST API Access Vulnerability | 2023-07-12T16:00:00+00:00 | 2024-03-12T18:21:23+00:00 |
| cisco-sa-esa-sma-wsa-xss-cp9duemq | Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities | 2023-06-21T16:00:00+00:00 | 2023-07-11T16:43:10+00:00 |
| cisco-sa-esa-sma-wsa-xss-cP9DuEmq | Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities | 2023-06-21T16:00:00+00:00 | 2023-07-11T16:43:10+00:00 |
| cisco-sa-aci-cloudsec-enc-Vs5Wn2sX | Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability | 2023-07-05T16:00:00+00:00 | 2026-04-24T13:05:36+00:00 |
| cisco-sa-duo-auth-info-jgkswblz | Cisco Duo Authentication Proxy Information Disclosure Vulnerability | 2023-07-05T16:00:00+00:00 | 2023-07-07T15:45:19+00:00 |
| cisco-sa-duo-auth-info-JgkSWBLz | Cisco Duo Authentication Proxy Information Disclosure Vulnerability | 2023-07-05T16:00:00+00:00 | 2023-07-07T15:45:19+00:00 |
| cisco-sa-ac-csc-privesc-wx4u4kw | Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows Privilege Escalation Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-07-05T16:20:46+00:00 |
| cisco-sa-ac-csc-privesc-wx4U4Kw | Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows Privilege Escalation Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-07-05T16:20:46+00:00 |
| cisco-sa-sxsscsrf-2l24bbx6 | Cisco Webex Meetings Web UI Vulnerabilities | 2023-07-05T16:00:00+00:00 | 2023-07-05T16:00:00+00:00 |
| cisco-sa-sxsscsrf-2L24bBx6 | Cisco Webex Meetings Web UI Vulnerabilities | 2023-07-05T16:00:00+00:00 | 2023-07-05T16:00:00+00:00 |
| cisco-sa-bw-privesc-yw4ekrxw | Cisco BroadWorks Privilege Escalation Vulnerability | 2023-07-05T16:00:00+00:00 | 2023-07-05T16:00:00+00:00 |
| cisco-sa-bw-privesc-yw4ekrXW | Cisco BroadWorks Privilege Escalation Vulnerability | 2023-07-05T16:00:00+00:00 | 2023-07-05T16:00:00+00:00 |
| cisco-sa-duo-replay-knunkd | Cisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-06-23T16:48:56+00:00 |
| cisco-sa-duo-replay-knuNKd | Cisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-06-23T16:48:56+00:00 |
| cisco-sa-duo-mac-bypass-oyzpvpnx | Cisco Duo Two-Factor Authentication for macOS Authentication Bypass Vulnerability | 2023-06-21T16:00:00+00:00 | 2023-06-21T16:00:00+00:00 |
| cisco-sa-duo-mac-bypass-OyZpVPnx | Cisco Duo Two-Factor Authentication for macOS Authentication Bypass Vulnerability | 2023-06-21T16:00:00+00:00 | 2023-06-21T16:00:00+00:00 |
| cisco-sa-sd-wan-fhqh8pkx | Cisco SD-WAN Software Information Disclosure Vulnerability | 2021-09-22T16:00:00+00:00 | 2023-06-16T19:11:51+00:00 |
| cisco-sa-sd-wan-Fhqh8pKX | Cisco SD-WAN Software Information Disclosure Vulnerability | 2021-09-22T16:00:00+00:00 | 2023-06-16T19:11:51+00:00 |
| cisco-sa-smb-sxss-opyjzume | Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Stored Cross-Site Scripting Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-smb-sxss-OPYJZUmE | Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Stored Cross-Site Scripting Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-expressway-priv-esc-ls2b9t7b | Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-expressway-priv-esc-Ls2B9t7b | Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-cucm-imp-dos-49gl7rzt | Cisco Unified Communications Manager IM & Presence Service Denial of Service Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| cisco-sa-cucm-imp-dos-49GL7rzT | Cisco Unified Communications Manager IM & Presence Service Denial of Service Vulnerability | 2023-06-07T16:00:00+00:00 | 2023-06-07T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-38630 | watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger | 2024-06-02T07:00:00.000Z | 2026-03-31T15:04:57.000Z |
| msrc_cve-2025-38485 | iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush | 2025-07-02T00:00:00.000Z | 2026-03-31T15:04:52.000Z |
| msrc_cve-2025-22124 | md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb | 2025-04-02T00:00:00.000Z | 2026-03-31T15:04:51.000Z |
| msrc_cve-2023-52749 | spi: Fix null dereference on suspend | 2024-05-02T07:00:00.000Z | 2026-03-31T15:04:51.000Z |
| msrc_cve-2025-39744 | rcu: Fix rcu_read_unlock() deadloop due to IRQ work | 2025-09-02T00:00:00.000Z | 2026-03-31T15:04:47.000Z |
| msrc_cve-2024-49919 | drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer | 2024-10-01T07:00:00.000Z | 2026-03-31T15:04:41.000Z |
| msrc_cve-2023-52700 | tipc: fix kernel warning when sending SYN message | 2024-05-02T07:00:00.000Z | 2026-03-31T15:04:41.000Z |
| msrc_cve-2025-21801 | net: ravb: Fix missing rtnl lock in suspend/resume path | 2025-02-02T00:00:00.000Z | 2026-03-31T15:04:39.000Z |
| msrc_cve-2025-2308 | HDF5 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflow | 2025-03-02T00:00:00.000Z | 2026-03-31T15:04:31.000Z |
| msrc_cve-2024-56611 | mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM | 2024-12-02T00:00:00.000Z | 2026-03-31T15:04:28.000Z |
| msrc_cve-2025-58160 | Tracing logging user input may result in poisoning logs with ANSI escape sequences | 2025-08-02T00:00:00.000Z | 2026-03-31T15:04:27.000Z |
| msrc_cve-2025-22121 | ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() | 2025-04-02T00:00:00.000Z | 2026-03-31T15:04:25.000Z |
| msrc_cve-2025-38734 | net/smc: fix UAF on smcsk after smc_listen_out() | 2025-09-02T00:00:00.000Z | 2026-03-31T15:04:23.000Z |
| msrc_cve-2025-39862 | wifi: mt76: mt7915: fix list corruption after hardware restart | 2025-09-02T00:00:00.000Z | 2026-03-31T15:04:19.000Z |
| msrc_cve-2026-23204 | net/sched: cls_u32: use skb_header_pointer_careful() | 2026-02-02T00:00:00.000Z | 2026-03-31T15:04:14.000Z |
| msrc_cve-2024-42253 | gpio: pca953x: fix pca953x_irq_bus_sync_unlock race | 2024-08-02T00:00:00.000Z | 2026-03-31T15:04:09.000Z |
| msrc_cve-2022-48766 | drm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU. | 2024-06-02T07:00:00.000Z | 2026-03-31T15:04:04.000Z |
| msrc_cve-2024-35931 | drm/amdgpu: Skip do PCI error slot reset during RAS recovery | 2024-05-02T07:00:00.000Z | 2026-03-31T15:04:03.000Z |
| msrc_cve-2025-22111 | net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. | 2025-04-02T00:00:00.000Z | 2026-03-31T15:04:02.000Z |
| msrc_cve-2025-38678 | netfilter: nf_tables: reject duplicate device on updates | 2025-09-02T00:00:00.000Z | 2026-03-31T15:03:58.000Z |
| msrc_cve-2023-52632 | drm/amdkfd: Fix lock dependency warning with srcu | 2024-04-02T07:00:00.000Z | 2026-03-31T15:03:56.000Z |
| msrc_cve-2025-39851 | vxlan: Fix NPD when refreshing an FDB entry with a nexthop object | 2025-09-02T00:00:00.000Z | 2026-03-31T15:03:54.000Z |
| msrc_cve-2024-49921 | drm/amd/display: Check null pointers before used | 2024-10-01T07:00:00.000Z | 2026-03-31T15:03:53.000Z |
| msrc_cve-2026-23220 | ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths | 2026-02-02T00:00:00.000Z | 2026-03-31T15:03:51.000Z |
| msrc_cve-2024-44957 | xen: privcmd: Switch from mutex to spinlock for irqfds | 2024-09-01T07:00:00.000Z | 2026-03-31T15:03:44.000Z |
| msrc_cve-2024-56665 | bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog | 2024-12-02T00:00:00.000Z | 2026-03-31T15:03:39.000Z |
| msrc_cve-2025-22107 | net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() | 2025-04-02T00:00:00.000Z | 2026-03-31T15:03:38.000Z |
| msrc_cve-2023-53149 | ext4: avoid deadlock in fs reclaim with page writeback | 2025-09-02T00:00:00.000Z | 2026-03-31T15:03:37.000Z |
| msrc_cve-2024-26759 | mm/swap: fix race when skipping swapcache | 2024-04-02T07:00:00.000Z | 2026-03-31T15:03:35.000Z |
| msrc_cve-2024-42118 | drm/amd/display: Do not return negative stream id for array | 2024-07-01T07:00:00.000Z | 2026-03-31T15:03:26.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15833-1 | MozillaFirefox-146.0.1-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:20172-1 | Security update for the Linux Kernel | 2025-12-19T17:38:16Z | 2025-12-19T17:38:16Z |
| opensuse-su-2025:15832-1 | coredns-for-k8s1.35-1.13.1-2.1 on GA media | 2025-12-19T00:00:00Z | 2025-12-19T00:00:00Z |
| opensuse-su-2025:15831-1 | chromedriver-143.0.7499.146-1.1 on GA media | 2025-12-19T00:00:00Z | 2025-12-19T00:00:00Z |
| opensuse-su-2025:15830-1 | alloy-1.12.0-2.1 on GA media | 2025-12-19T00:00:00Z | 2025-12-19T00:00:00Z |
| opensuse-su-2025:15829-1 | ImageMagick-7.1.2.10-2.1 on GA media | 2025-12-19T00:00:00Z | 2025-12-19T00:00:00Z |
| opensuse-su-2025:20171-1 | Security update for qemu | 2025-12-18T12:42:03Z | 2025-12-18T12:42:03Z |
| opensuse-su-2025:20177-1 | Security update for cheat | 2025-12-18T00:17:52Z | 2025-12-18T00:17:52Z |
| opensuse-su-2025:15828-1 | libruby3_4-3_4-3.4.8-1.1 on GA media | 2025-12-18T00:00:00Z | 2025-12-18T00:00:00Z |
| opensuse-su-2025:15827-1 | rsync-3.4.1-4.1 on GA media | 2025-12-18T00:00:00Z | 2025-12-18T00:00:00Z |
| opensuse-su-2025:15826-1 | coredns-for-k8s1.34-1.12.1-2.1 on GA media | 2025-12-18T00:00:00Z | 2025-12-18T00:00:00Z |
| opensuse-su-2025:15825-1 | coredns-for-k8s1.33-1.12.0-2.1 on GA media | 2025-12-18T00:00:00Z | 2025-12-18T00:00:00Z |
| opensuse-su-2025:15824-1 | netty-4.1.130-1.1 on GA media | 2025-12-17T00:00:00Z | 2025-12-17T00:00:00Z |
| opensuse-su-2025:15823-1 | clair-4.9.0-1.1 on GA media | 2025-12-17T00:00:00Z | 2025-12-17T00:00:00Z |
| opensuse-su-2025:20164-1 | Security update for openssl-3 | 2025-12-15T18:16:15Z | 2025-12-15T18:16:15Z |
| opensuse-su-2025:20163-1 | Security update for grub2 | 2025-12-15T12:52:50Z | 2025-12-15T12:52:50Z |
| opensuse-su-2025:20162-1 | Security update for ImageMagick | 2025-12-15T09:55:25Z | 2025-12-15T09:55:25Z |
| opensuse-su-2025:15822-1 | strongswan-6.0.4-1.1 on GA media | 2025-12-15T00:00:00Z | 2025-12-15T00:00:00Z |
| opensuse-su-2025:15821-1 | qemu-10.1.3-1.1 on GA media | 2025-12-15T00:00:00Z | 2025-12-15T00:00:00Z |
| opensuse-su-2025:15820-1 | chromedriver-143.0.7499.109-1.1 on GA media | 2025-12-13T00:00:00Z | 2025-12-13T00:00:00Z |
| opensuse-su-2025:20150-1 | Security update for binutils | 2025-12-12T15:58:27Z | 2025-12-12T15:58:27Z |
| opensuse-su-2025:20161-1 | Security update for chromium | 2025-12-12T15:30:17Z | 2025-12-12T15:30:17Z |
| opensuse-su-2025:20160-1 | Security update for hauler | 2025-12-12T13:20:11Z | 2025-12-12T13:20:11Z |
| opensuse-su-2025:20159-1 | Security update for keylime | 2025-12-12T09:46:01Z | 2025-12-12T09:46:01Z |
| opensuse-su-2025:20158-1 | Security update for go1.24 | 2025-12-12T07:45:01Z | 2025-12-12T07:45:01Z |
| opensuse-su-2025:20157-1 | Security update for go1.25 | 2025-12-12T07:23:58Z | 2025-12-12T07:23:58Z |
| opensuse-su-2025:15819-1 | libruby4_0-4_0-4.0.0~preview2-1.1 on GA media | 2025-12-12T00:00:00Z | 2025-12-12T00:00:00Z |
| opensuse-su-2025:15818-1 | pgadmin4-9.11-1.1 on GA media | 2025-12-12T00:00:00Z | 2025-12-12T00:00:00Z |
| opensuse-su-2025:15817-1 | buildpacks-cli-0.39.1-1.1 on GA media | 2025-12-12T00:00:00Z | 2025-12-12T00:00:00Z |
| opensuse-su-2025:15816-1 | ImageMagick-7.1.2.10-1.1 on GA media | 2025-12-12T00:00:00Z | 2025-12-12T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:6042 | Red Hat Security Advisory: Self Node Remediation Operator 0.5.1 security update | 2023-10-23T18:39:36+00:00 | 2026-04-25T07:43:28+00:00 |
| rhsa-2023:6041 | Red Hat Security Advisory: Self Node Remediation Operator 0.7.1 security update | 2023-10-23T18:31:18+00:00 | 2026-04-25T07:43:27+00:00 |
| rhsa-2023:6040 | Red Hat Security Advisory: Node Maintenance Operator 5.2.1 security update | 2023-10-23T18:30:57+00:00 | 2026-04-25T07:43:26+00:00 |
| rhsa-2023:6031 | Red Hat Security Advisory: Cryostat security update | 2023-10-23T14:24:36+00:00 | 2026-04-25T07:43:26+00:00 |
| rhsa-2023:5982 | Red Hat Security Advisory: Red Hat Satellite Client security and bug fix update | 2023-10-20T22:28:07+00:00 | 2026-04-25T07:43:25+00:00 |
| rhsa-2023:5980 | Red Hat Security Advisory: Satellite 6.11.5.6 async security update | 2023-10-20T18:46:14+00:00 | 2026-04-25T07:43:25+00:00 |
| rhsa-2023:5979 | Red Hat Security Advisory: Satellite 6.12.5.2 Async Security Update | 2023-10-20T18:45:24+00:00 | 2026-04-25T07:43:24+00:00 |
| rhsa-2023:5976 | Red Hat Security Advisory: Service Telemetry Framework 1.5.2 security update | 2023-10-20T17:18:33+00:00 | 2026-04-25T07:43:23+00:00 |
| rhsa-2023:5971 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 (director-operator) security update | 2023-10-20T14:56:06+00:00 | 2026-04-25T07:43:21+00:00 |
| rhsa-2023:5974 | Red Hat Security Advisory: Network Observability security update | 2023-10-20T16:49:58+00:00 | 2026-04-25T07:43:20+00:00 |
| rhsa-2023:5970 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 (collectd-libpod-stats) security update | 2023-10-20T14:51:03+00:00 | 2026-04-25T07:43:10+00:00 |
| rhsa-2023:5969 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 security update | 2023-10-20T14:51:03+00:00 | 2026-04-25T07:43:06+00:00 |
| rhsa-2023:5967 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (collectd-libpod-stats, etcd) security update | 2023-10-20T14:51:43+00:00 | 2026-04-25T07:43:06+00:00 |
| rhsa-2023:5965 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 (collectd-libpod-stats, etcd) security update | 2023-10-20T14:54:26+00:00 | 2026-04-25T07:43:04+00:00 |
| rhsa-2023:5964 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 (collectd-libpod-stats) security update | 2023-10-20T14:54:29+00:00 | 2026-04-25T07:43:03+00:00 |
| rhsa-2023:5952 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.4.4 security update | 2023-10-19T22:22:44+00:00 | 2026-04-25T07:43:01+00:00 |
| rhsa-2023:5951 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.3.8 security update | 2023-10-19T22:22:22+00:00 | 2026-04-25T07:42:59+00:00 |
| rhsa-2023:5895 | Red Hat Security Advisory: OpenShift Container Platform 4.12.40 security and extras update | 2023-10-25T00:59:06+00:00 | 2026-04-25T07:42:59+00:00 |
| rhsa-2023:5950 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.2.11 security update | 2023-10-19T22:22:20+00:00 | 2026-04-25T07:42:58+00:00 |
| rhsa-2023:5947 | Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.0.1 security update | 2023-10-26T00:47:43+00:00 | 2026-04-25T07:42:57+00:00 |
| rhsa-2023:5935 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 security update | 2023-10-19T16:50:07+00:00 | 2026-04-25T07:42:55+00:00 |
| rhsa-2023:5933 | Red Hat Security Advisory: Openshift Secondary Scheduler Operator 1.1.3 security update | 2023-10-26T01:04:37+00:00 | 2026-04-25T07:42:55+00:00 |
| rhsa-2023:5931 | Red Hat Security Advisory: Satellite 6.13.5 Async Security Update | 2023-10-19T13:15:21+00:00 | 2026-04-25T07:42:55+00:00 |
| rhsa-2023:5867 | Red Hat Security Advisory: grafana security update | 2023-10-18T22:59:29+00:00 | 2026-04-25T07:42:53+00:00 |
| rhsa-2023:5866 | Red Hat Security Advisory: grafana security update | 2023-10-18T22:54:48+00:00 | 2026-04-25T07:42:53+00:00 |
| rhsa-2023:5851 | Red Hat Security Advisory: RHACS 4.1 enhancement and security update | 2023-10-18T16:23:22+00:00 | 2026-04-25T07:42:53+00:00 |
| rhsa-2023:5865 | Red Hat Security Advisory: grafana security update | 2023-10-18T22:55:59+00:00 | 2026-04-25T07:42:52+00:00 |
| rhsa-2023:5864 | Red Hat Security Advisory: grafana security update | 2023-10-18T22:56:50+00:00 | 2026-04-25T07:42:51+00:00 |
| rhsa-2023:5835 | Red Hat Security Advisory: rhc-worker-script enhancement and security update | 2023-10-18T07:59:41+00:00 | 2026-04-25T07:42:51+00:00 |
| rhsa-2023:5863 | Red Hat Security Advisory: grafana security update | 2023-10-18T23:01:34+00:00 | 2026-04-25T07:42:50+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-200951 | SSA-200951: Multiple Vulnerabilities in Third-Party Component libcurl of TIM Devices | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-133038 | SSA-133038: Multiple Modfem File Parsing Vulnerabilities in Simcenter Femap | 2021-06-08T00:00:00Z | 2021-06-08T00:00:00Z |
| ssa-119468 | SSA-119468: Luxion KeyShot Vulnerabilities in Solid Edge | 2021-05-25T00:00:00Z | 2021-05-25T00:00:00Z |
| ssa-695540 | SSA-695540: ASM and PAR File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0.2 | 2021-05-17T00:00:00Z | 2021-05-17T00:00:00Z |
| ssa-663999 | SSA-663999: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0.1 | 2021-02-09T00:00:00Z | 2021-05-17T00:00:00Z |
| ssa-622830 | SSA-622830: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0 | 2021-01-12T00:00:00Z | 2021-05-17T00:00:00Z |
| ssa-983548 | SSA-983548: Multiple SPP File Parsing Vulnerabilities in Tecnomatix Plant Simulation | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-940818 | SSA-940818: UltraVNC Vulnerabilities in SIMATIC HMIs/WinCC Products | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-919955 | SSA-919955: Information Disclosure Vulnerability in Mendix Database Replication Module | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-854248 | SSA-854248: Information Disclosure Vulnerability in Mendix Excel Importer Module | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-794542 | SSA-794542: Insecure Folder Permissions in SIMARIS Configuration | 2021-02-09T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-676775 | SSA-676775: Denial-of-Service Vulnerability in SIMATIC NET CP 343-1 Devices | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-646763 | SSA-646763: DNSpooq - Dnsmasq Vulnerabilities in SCALANCE and RUGGEDCOM Devices | 2021-01-19T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-594364 | SSA-594364: Denial-of-Service Vulnerability in SNMP Implementation of WinCC Runtime | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-478893 | SSA-478893: TightVNC Vulnerabilities in Industrial Products (Revoked) | 2020-12-08T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-116379 | SSA-116379: Denial-of-Service Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices | 2021-05-11T00:00:00Z | 2021-05-11T00:00:00Z |
| ssa-875726 | SSA-875726: Privilege Escalation Vulnerability in Mendix | 2021-04-14T00:00:00Z | 2021-04-14T00:00:00Z |
| ssa-979775 | SSA-979775: Stack Overflow Vulnerability in SCALANCE and RUGGEDCOM Devices | 2021-03-09T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-853866 | SSA-853866: User Credentials Disclosure Vulnerability in Siveillance Video Open Network Bridge (ONVIF) | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-788287 | SSA-788287: Disclosure of Private Data | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-715184 | SSA-715184: Multiple File Parsing Vulnerabilities in Solid Edge | 2021-03-09T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-689942 | SSA-689942: Denial-of-Service and DLL Hijacking Vulnerabilities in Multiple SIMATIC Software Products | 2020-06-09T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-591405 | SSA-591405: Web Vulnerabilities in SCALANCE S-600 Family | 2020-02-11T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-541017 | SSA-541017: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SIRIUS 3RW5 Modbus TCP and SENTRON PAC / 3VA Devices | 2020-12-08T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-296266 | SSA-296266: Denial-of-Service Vulnerability in SCALANCE and RUGGEDCOM Devices | 2021-03-09T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-292794 | SSA-292794: Multiple Denial-of-Service Vulnerabilities in SINEMA Remote Connect Server | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-163226 | SSA-163226: CELL File Parsing Vulnerability in Tecnomatix RobotExpert | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0847-1 | Security update for libsoup | 2026-03-07T01:34:36Z | 2026-03-07T01:34:36Z |
| suse-su-2026:0846-1 | Security update for python-Markdown | 2026-03-06T17:04:39Z | 2026-03-06T17:04:39Z |
| suse-su-2026:20682-1 | Security update for ucode-intel | 2026-03-06T13:29:07Z | 2026-03-06T13:29:07Z |
| suse-su-2026:20708-1 | Security update for gnutls | 2026-03-06T12:11:09Z | 2026-03-06T12:11:09Z |
| suse-su-2026:20707-1 | Security update for libxslt, libxml2 | 2026-03-06T11:53:41Z | 2026-03-06T11:53:41Z |
| suse-su-2026:20657-1 | Security update for libxslt, libxml2 | 2026-03-06T11:37:27Z | 2026-03-06T11:37:27Z |
| suse-su-2026:0840-1 | Security update for grpc | 2026-03-06T11:36:18Z | 2026-03-06T11:36:18Z |
| suse-su-2026:20656-1 | Security update for docker-compose | 2026-03-06T11:34:20Z | 2026-03-06T11:34:20Z |
| suse-su-2026:0838-1 | Security update for python-tornado | 2026-03-06T08:15:16Z | 2026-03-06T08:15:16Z |
| suse-su-2026:0834-1 | Security update for libsoup2 | 2026-03-05T20:00:24Z | 2026-03-05T20:00:24Z |
| suse-su-2026:0833-1 | Security update for libsoup | 2026-03-05T19:55:51Z | 2026-03-05T19:55:51Z |
| suse-su-2026:0832-1 | Security update for qemu | 2026-03-05T16:38:47Z | 2026-03-05T16:38:47Z |
| suse-su-2026:20686-1 | Security update for gstreamer-rtsp-server, gstreamer-plugins-ugly, gstreamer-plugins-rs, gstreamer-plugins-libav, gstreamer-plugins-good, gstreamer-plugins-base, gstreamer-plugins-bad, gstreamer-docs, gstreamer-devtools, gstreamer | 2026-03-05T15:55:51Z | 2026-03-05T15:55:51Z |
| suse-su-2026:0831-1 | Security update for openvpn | 2026-03-05T15:18:06Z | 2026-03-05T15:18:06Z |
| suse-su-2026:0830-1 | Security update for ocaml | 2026-03-05T15:17:30Z | 2026-03-05T15:17:30Z |
| suse-su-2026:0829-1 | Security update for gnutls | 2026-03-05T15:17:09Z | 2026-03-05T15:17:09Z |
| suse-su-2026:0828-1 | Security update for python-Authlib | 2026-03-05T15:16:58Z | 2026-03-05T15:16:58Z |
| suse-su-2026:0827-1 | Security update for glibc-livepatches | 2026-03-05T15:16:49Z | 2026-03-05T15:16:49Z |
| suse-su-2026:0826-1 | Security update for expat | 2026-03-05T15:16:40Z | 2026-03-05T15:16:40Z |
| suse-su-2026:0825-1 | Security update for php-composer2 | 2026-03-05T15:16:16Z | 2026-03-05T15:16:16Z |
| suse-su-2026:0824-1 | Security update for openCryptoki | 2026-03-05T15:16:07Z | 2026-03-05T15:16:07Z |
| suse-su-2026:20685-1 | Security update for helm | 2026-03-05T14:28:21Z | 2026-03-05T14:28:21Z |
| suse-su-2026:20655-1 | Security update for python-cryptography | 2026-03-05T14:25:02Z | 2026-03-05T14:25:02Z |
| suse-su-2026:20684-1 | Security update for virtiofsd | 2026-03-05T14:24:46Z | 2026-03-05T14:24:46Z |
| suse-ru-2026:20683-1 | Recommended update for shim | 2026-03-05T14:21:04Z | 2026-03-05T14:21:04Z |
| suse-su-2026:20706-1 | Security update for python-cryptography | 2026-03-05T13:08:52Z | 2026-03-05T13:08:52Z |
| suse-su-2026:0821-1 | Security update for python-Django | 2026-03-05T11:43:12Z | 2026-03-05T11:43:12Z |
| suse-su-2026:20705-1 | Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0) | 2026-03-05T11:13:05Z | 2026-03-05T11:13:05Z |
| suse-su-2026:20681-1 | Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0) | 2026-03-05T11:13:05Z | 2026-03-05T11:13:05Z |
| suse-su-2026:20704-1 | Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0) | 2026-03-05T11:11:45Z | 2026-03-05T11:11:45Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2025:3262 | Moderate: nginx:1.24 security update | 2025-03-26T00:00:00Z | 2025-07-24T13:36:44Z |
| alsa-2025:10854 | Important: kernel security update | 2025-07-14T00:00:00Z | 2025-07-24T10:26:09Z |
| alsa-2025:11533 | Important: git security update | 2025-07-22T00:00:00Z | 2025-07-24T09:25:29Z |
| alsa-2025:11537 | Important: sudo security update | 2025-07-22T00:00:00Z | 2025-07-24T09:20:42Z |
| alsa-2025:11534 | Important: git security update | 2025-07-22T00:00:00Z | 2025-07-23T08:07:31Z |
| alsa-2025:11411 | Important: kernel security update | 2025-07-21T00:00:00Z | 2025-07-23T07:42:35Z |
| alsa-2025:11456 | Moderate: kernel-rt security update | 2025-07-21T00:00:00Z | 2025-07-23T07:31:24Z |
| alsa-2025:10848 | Important: cloud-init security update | 2025-07-14T00:00:00Z | 2025-07-22T13:36:59Z |
| alsa-2025:11463 | Moderate: fence-agents security update | 2025-07-21T00:00:00Z | 2025-07-22T13:35:00Z |
| alsa-2025:11462 | Important: git security update | 2025-07-21T00:00:00Z | 2025-07-22T10:34:40Z |
| alsa-2025:11332 | Important: tomcat9 security update | 2025-07-16T00:00:00Z | 2025-07-21T10:03:39Z |
| alsa-2025:10862 | Important: java-1.8.0-openjdk security update | 2025-07-17T00:00:00Z | 2025-07-21T09:41:01Z |
| alsa-2025:10844 | Important: cloud-init security update | 2025-07-14T00:00:00Z | 2025-07-18T06:52:34Z |
| alsa-2025:11066 | Moderate: glibc security update | 2025-07-15T00:00:00Z | 2025-07-18T06:49:51Z |
| alsa-2025:11335 | Important: tomcat security update | 2025-07-16T00:00:00Z | 2025-07-17T08:49:49Z |
| alsa-2025:10837 | Moderate: kernel security update | 2025-07-14T00:00:00Z | 2025-07-17T08:21:12Z |
| alsa-2025:11333 | Important: tomcat security update | 2025-07-16T00:00:00Z | 2025-07-17T08:17:04Z |
| alsa-2025:11327 | Moderate: glib2 security update | 2025-07-16T00:00:00Z | 2025-07-17T08:13:56Z |
| alsa-2025:11324 | Important: cloud-init security update | 2025-07-16T00:00:00Z | 2025-07-17T08:11:16Z |
| alsa-2025:10867 | Important: java-17-openjdk security update | 2025-07-15T00:00:00Z | 2025-07-16T12:49:47Z |
| alsa-2025:11140 | Moderate: glib2 security update | 2025-07-15T00:00:00Z | 2025-07-16T12:44:37Z |
| alsa-2025:11299 | Moderate: kernel-rt security update | 2025-07-16T00:00:00Z | 2025-07-16T12:42:40Z |
| alsa-2025:11298 | Moderate: kernel security update | 2025-07-16T00:00:00Z | 2025-07-16T12:39:32Z |
| alsa-2025:11044 | Moderate: python3.12-setuptools security update | 2025-07-15T00:00:00Z | 2025-07-16T08:04:17Z |
| alsa-2025:11043 | Moderate: python3.11-setuptools security update | 2025-07-15T00:00:00Z | 2025-07-16T08:02:22Z |
| alsa-2025:11042 | Moderate: socat security update | 2025-07-15T00:00:00Z | 2025-07-16T08:00:21Z |
| alsa-2025:11030 | Moderate: emacs security update | 2025-07-15T00:00:00Z | 2025-07-16T07:58:14Z |
| alsa-2025:10991 | Moderate: microcode_ctl security update | 2025-07-14T00:00:00Z | 2025-07-16T07:55:26Z |
| alsa-2025:10672 | Moderate: go-toolset:rhel8 security update | 2025-07-09T00:00:00Z | 2025-07-11T09:05:26Z |
| alsa-2025:10676 | Moderate: golang security update | 2025-07-09T00:00:00Z | 2025-07-10T22:02:04Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2023-1365 | Heap-use-after-free in xmlStaticCopyNode | 2023-12-28T00:07:29.258949Z | 2023-12-28T00:07:29.259296Z |
| osv-2023-1364 | Heap-buffer-overflow in processClientServerHello | 2023-12-28T00:01:38.624999Z | 2023-12-28T00:01:38.625414Z |
| osv-2023-1361 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2023-12-27T00:01:27.841254Z | 2023-12-27T00:01:27.841623Z |
| osv-2023-1360 | Heap-buffer-overflow in NetworkInterface::dissectPacket | 2023-12-27T00:00:10.846266Z | 2023-12-27T00:00:10.846829Z |
| osv-2023-1358 | Heap-buffer-overflow in js_free_function_def | 2023-12-26T00:04:18.300258Z | 2023-12-26T00:04:18.300779Z |
| osv-2023-1357 | Heap-buffer-overflow in processClientServerHello | 2023-12-25T00:13:45.414227Z | 2023-12-25T00:13:45.414669Z |
| osv-2023-1356 | Heap-buffer-overflow in rawspeed::DngDecoder::parseWhiteBalance | 2023-12-25T00:10:36.482844Z | 2023-12-25T00:10:36.483166Z |
| osv-2023-1354 | Heap-buffer-overflow in processClientServerHello | 2023-12-25T00:03:08.530303Z | 2023-12-25T00:03:08.530510Z |
| osv-2023-1353 | Security exception in org.apache.poi.ddf.EscherContainerRecord.fillFields | 2023-12-25T00:03:02.003193Z | 2023-12-25T00:03:02.003829Z |
| osv-2023-1352 | Heap-buffer-overflow in Flow::dissectMDNS | 2023-12-24T00:05:23.975196Z | 2023-12-24T00:05:23.975551Z |
| osv-2023-756 | Heap-buffer-overflow in rawspeed::DngDecoder::decodeMetaDataInternal | 2023-08-28T14:02:10.741602Z | 2023-12-23T14:16:41.470280Z |
| osv-2022-896 | Segv on unknown address in Sass::unifyComplex | 2022-09-15T00:02:01.621945Z | 2023-12-22T14:15:53.864807Z |
| osv-2021-508 | Segv on unknown address in Sass::CompoundSelector::resolve_parent_refs | 2021-03-09T00:02:18.581527Z | 2023-12-22T14:10:14.701082Z |
| osv-2020-1420 | Bad-cast to Sass::PreValue from Sass::Unary_Expression | 2020-07-28T00:00:14.887375Z | 2023-12-22T14:07:59.765838Z |
| osv-2020-862 | Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::Extension, std::__1::allocator<Sass::Ext | 2020-07-14T22:13:48.731457Z | 2023-12-22T14:06:49.113213Z |
| osv-2023-1343 | Heap-buffer-overflow in _libssh2_kex_agree_instr | 2023-12-22T00:10:36.346763Z | 2023-12-22T00:10:36.347283Z |
| osv-2023-276 | Heap-use-after-free in aiScene::~aiScene | 2023-04-04T14:01:47.666563Z | 2023-12-21T14:16:54.547364Z |
| osv-2023-736 | Heap-buffer-overflow in HeifContext::interpret_heif_file | 2023-08-25T14:00:14.487219Z | 2023-12-20T14:12:01.243209Z |
| osv-2023-1327 | Security exception in com.github.javaparser.CommentsInserter.insertComments | 2023-12-18T00:10:41.666920Z | 2023-12-18T00:10:41.667465Z |
| osv-2023-1325 | UNKNOWN WRITE in zero | 2023-12-18T00:04:49.365880Z | 2023-12-18T00:04:49.366308Z |
| osv-2023-1324 | Heap-use-after-free in memory_bclose | 2023-12-18T00:03:27.139777Z | 2023-12-18T00:03:27.140220Z |
| osv-2023-1320 | Heap-use-after-free in memory_bstat | 2023-12-17T00:12:41.223755Z | 2023-12-17T00:12:41.224161Z |
| osv-2023-1315 | Heap-use-after-free in htmlParseDocument | 2023-12-17T00:02:06.164794Z | 2023-12-17T00:02:06.165194Z |
| osv-2023-42 | Heap-buffer-overflow in bit_read_BB | 2023-02-02T13:00:40.999896Z | 2023-12-16T14:20:07.644053Z |
| osv-2023-1303 | Heap-use-after-free in htmlCurrentChar | 2023-12-15T00:00:06.313566Z | 2023-12-15T00:00:06.314002Z |
| osv-2023-1302 | Global-buffer-overflow in pcre_get_compiled_regex_cache_ex | 2023-12-14T00:13:52.791976Z | 2023-12-14T00:13:52.792479Z |
| osv-2023-1301 | Global-buffer-overflow in xmlDictLookupInternal | 2023-12-14T00:13:26.532719Z | 2023-12-14T00:13:26.533280Z |
| osv-2023-1300 | Security exception in com.fasterxml.jackson.core.JsonParser.currentName | 2023-12-14T00:13:10.208981Z | 2023-12-14T00:13:10.209415Z |
| osv-2023-1299 | Global-buffer-overflow in pcre_get_compiled_regex_cache_ex | 2023-12-14T00:12:13.097305Z | 2023-12-14T00:12:13.097842Z |
| osv-2023-1298 | Heap-buffer-overflow in loongarch_split_args_by_comma | 2023-12-14T00:10:40.133892Z | 2023-12-14T00:10:40.134313Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2019-0005 | Format string vulnerabilities in `pancurses` | 2019-06-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0004 | Failure to properly verify ed25519 signatures makes any signature valid | 2019-05-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0003 | Out of Memory in stream::read_raw_bytes_into() | 2019-06-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0002 | Bug in SliceDeque::move_head_unchecked corrupts its memory | 2019-05-07T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2019-0001 | Uncontrolled recursion leads to abort in HTML serialization | 2019-04-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0022 | Use of uninitialized memory in temporary | 2018-08-22T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0021 | Use-after-free with objects returned by `Stream`'s `get_format_info` and `get_context` methods | 2018-06-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0019 | Multiple memory safety issues | 2018-06-08T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0018 | smallvec creates uninitialized value of any type | 2018-09-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0013 | Vec-to-vec transmutations could lead to heap overflow/corruption | 2018-11-27T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0012 | Flaw in streaming state reset() functions can create incorrect results. | 2018-12-20T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0011 | Enum repr causing potential memory corruption | 2018-12-18T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0010 | Use after free in CMS Signing | 2018-06-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0009 | MsQueue and SegQueue suffer from double-free | 2018-12-09T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0008 | Bug in SliceDeque::move_head_unchecked allows read of corrupted memory | 2018-12-05T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0007 | Stack overflow when parsing malicious DNS packet | 2018-10-09T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0006 | Uncontrolled recursion leads to abort in deserialization | 2018-09-17T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0005 | Uncontrolled recursion leads to abort in deserialization | 2018-09-17T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0004 | Malicious input could cause uninitialized memory to be exposed | 2018-08-25T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0003 | Possible double free during unwinding in SmallVec::insert_many | 2018-07-19T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0002 | Links in archives can overwrite any existing file | 2018-06-29T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2018-0001 | An integer underflow could lead to panic | 2018-06-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2017-0006 | Unchecked vector pre-allocation | 2017-11-21T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2017-0005 | Large cookie Max-Age values can cause a denial of service | 2017-05-06T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2017-0004 | Integer overflow leads to heap-based buffer overflow in encode_config_buf | 2017-05-03T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2017-0003 | Hostname verification skipped when custom root certs used | 2017-03-15T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2017-0002 | headers containing newline characters can split messages | 2017-01-23T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2017-0001 | scalarmult() vulnerable to degenerate public keys | 2017-01-26T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2016-0003 | HTTP download and execution allows MitM RCE | 2016-08-01T12:00:00Z | 2023-06-13T13:10:24Z |
| rustsec-2016-0002 | HTTPS MitM vulnerability due to lack of hostname verification | 2016-05-09T12:00:00Z | 2023-06-13T13:10:24Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-parse-2025-68150 | Parse Server has Server-Side Request Forgery (SSRF) in Instagram OAuth Adapter | 2025-12-18T11:46:18.950Z | 2026-01-08T18:07:34.629Z |
| bit-parse-2025-68115 | Parse Server vulnerable to Cross-Site Scripting (XSS) via Unescaped Mustache Template Variables | 2025-12-18T11:46:17.211Z | 2026-01-08T18:07:34.629Z |
| bit-parse-2025-67727 | Parse Server GitHub CI workflow vulnerable to RCE through Improper Privilege Management | 2025-12-18T11:46:15.637Z | 2026-01-08T18:07:34.629Z |
| bit-parse-2025-64502 | Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details | 2025-11-12T11:45:03.650Z | 2026-01-08T18:07:34.629Z |
| bit-openldap-2021-27212 | 2024-03-06T11:00:07.978Z | 2026-01-08T18:07:34.629Z | |
| bit-mongodb-2025-13644 | MongoDB may be susceptible to Invariant Failure due to batched delete | 2025-12-12T11:19:13.963Z | 2026-01-08T18:07:34.629Z |
| bit-mongodb-2025-13643 | MongoDB Server may allow queries to be terminated by unauthorized users | 2025-12-12T11:19:08.903Z | 2026-01-08T18:07:34.629Z |
| bit-mastodon-2025-62176 | Mastadon streaming server allows OAuth clients without the `read` scope to subscribe to public channels | 2025-10-15T08:44:06.235Z | 2026-01-08T18:07:34.629Z |
| bit-mastodon-2025-62175 | Mastodon streaming API fails to disconnect disabled and suspended users | 2025-10-15T08:44:04.530Z | 2026-01-08T18:07:34.629Z |
| bit-mastodon-2025-62174 | Mastodon allows continued access after password reset via CLI | 2025-10-15T08:44:02.890Z | 2026-01-08T18:07:34.629Z |
| bit-lua-2020-24370 | 2024-03-06T10:56:50.799Z | 2026-01-08T18:07:34.629Z | |
| bit-kyverno-2025-46342 | Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements | 2025-09-12T11:43:04.352Z | 2026-01-08T18:07:34.629Z |
| bit-kyverno-2025-29778 | Kyverno ignores subjectRegExp and IssuerRegExp | 2025-09-12T11:43:02.825Z | 2026-01-08T18:07:34.629Z |
| bit-wordpress-2024-31210 | PHP file upload bypass via Plugin installer | 2024-04-06T18:33:59.181Z | 2026-01-08T12:08:29.041Z |
| bit-php-2025-14180 | NULL Pointer Dereference in PDO quoting | 2026-01-08T11:48:33.482Z | 2026-01-08T12:08:29.041Z |
| bit-php-2025-14177 | Information Leak of Memory in getimagesize | 2026-01-08T11:48:30.537Z | 2026-01-08T12:08:29.041Z |
| bit-libphp-2025-14180 | NULL Pointer Dereference in PDO quoting | 2026-01-08T11:43:29.868Z | 2026-01-08T12:08:29.041Z |
| bit-libphp-2025-14177 | Information Leak of Memory in getimagesize | 2026-01-08T11:43:26.820Z | 2026-01-08T12:08:29.041Z |
| bit-composer-2025-67746 | Composer vulnerable to ANSI sequence injection | 2026-01-08T11:35:54.533Z | 2026-01-08T12:08:29.041Z |
| bit-gitea-2025-69413 | 2026-01-07T12:00:07.972Z | 2026-01-07T12:31:01.344Z | |
| bit-git-2024-32020 | Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will | 2024-05-24T07:18:47.345Z | 2026-01-07T12:31:01.344Z |
| bit-git-2024-32004 | Git vulnerable to Remote Code Execution while cloning special-crafted local repositories | 2024-05-24T07:19:02.349Z | 2026-01-07T12:31:01.344Z |
| bit-wordpress-2024-4439 | 2024-05-14T07:38:44.185Z | 2026-01-06T12:06:51.467Z | |
| bit-git-2024-32465 | Git's protections for cloning untrusted repositories can be bypassed | 2024-05-24T07:18:19.848Z | 2026-01-06T12:06:51.467Z |
| bit-git-2024-32021 | Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory | 2024-05-24T07:18:34.045Z | 2026-01-06T12:06:51.467Z |
| bit-wordpress-2024-31211 | Remote Code Execution in `WP_HTML_Token` | 2024-04-06T18:33:49.785Z | 2026-01-03T12:07:32.193Z |
| bit-pytorch-2025-63396 | 2026-01-03T11:47:28.014Z | 2026-01-03T12:07:32.193Z | |
| bit-gitea-2025-68942 | 2026-01-03T11:37:48.385Z | 2026-01-03T12:07:32.193Z | |
| bit-gitea-2025-68941 | 2026-01-03T11:37:46.756Z | 2026-01-03T12:07:32.193Z | |
| bit-gitea-2025-68940 | 2026-01-03T11:37:45.335Z | 2026-01-03T12:07:32.193Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1045 | Vulnérabilité dans MISP | 2025-11-27T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| CERTFR-2025-AVI-1051 | Multiples vulnérabilités dans les produits IBM | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| CERTFR-2025-AVI-1050 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| CERTFR-2025-AVI-1049 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| CERTFR-2025-AVI-1048 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| CERTFR-2025-AVI-1047 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| CERTFR-2025-AVI-1046 | Multiples vulnérabilités dans les produits Moxa | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| CERTFR-2025-AVI-1045 | Vulnérabilité dans MISP | 2025-11-27T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1044 | Vulnérabilité dans Mattermost Server | 2025-11-27T00:00:00.000000 | 2025-11-27T00:00:00.000000 |
| certfr-2025-avi-1043 | Multiples vulnérabilités dans les produits Splunk | 2025-11-27T00:00:00.000000 | 2025-11-27T00:00:00.000000 |
| certfr-2025-avi-1042 | Multiples vulnérabilités dans GitLab | 2025-11-27T00:00:00.000000 | 2025-11-27T00:00:00.000000 |
| CERTFR-2025-AVI-1044 | Vulnérabilité dans Mattermost Server | 2025-11-27T00:00:00.000000 | 2025-11-27T00:00:00.000000 |
| CERTFR-2025-AVI-1043 | Multiples vulnérabilités dans les produits Splunk | 2025-11-27T00:00:00.000000 | 2025-11-27T00:00:00.000000 |
| CERTFR-2025-AVI-1042 | Multiples vulnérabilités dans GitLab | 2025-11-27T00:00:00.000000 | 2025-11-27T00:00:00.000000 |
| certfr-2025-avi-1041 | Vulnérabilité dans Synology ActiveProtect Agent | 2025-11-26T00:00:00.000000 | 2025-11-26T00:00:00.000000 |
| certfr-2025-avi-1040 | Vulnérabilité dans Postfix | 2025-11-26T00:00:00.000000 | 2025-11-26T00:00:00.000000 |
| CERTFR-2025-AVI-1041 | Vulnérabilité dans Synology ActiveProtect Agent | 2025-11-26T00:00:00.000000 | 2025-11-26T00:00:00.000000 |
| CERTFR-2025-AVI-1040 | Vulnérabilité dans Postfix | 2025-11-26T00:00:00.000000 | 2025-11-26T00:00:00.000000 |
| certfr-2025-avi-1039 | Vulnérabilité dans Kaspersky Security Center | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| certfr-2025-avi-1038 | Vulnérabilité dans les produits PrimX | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| certfr-2025-avi-1037 | Multiples vulnérabilités dans Progress MOVEit Transfer | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| CERTFR-2025-AVI-1039 | Vulnérabilité dans Kaspersky Security Center | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| CERTFR-2025-AVI-1038 | Vulnérabilité dans les produits PrimX | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| CERTFR-2025-AVI-1037 | Multiples vulnérabilités dans Progress MOVEit Transfer | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| certfr-2025-avi-1036 | Multiples vulnérabilités dans les produits VMware | 2025-11-24T00:00:00.000000 | 2025-11-24T00:00:00.000000 |
| certfr-2025-avi-1035 | Multiples vulnérabilités dans les produits Synology | 2025-11-24T00:00:00.000000 | 2025-11-24T00:00:00.000000 |
| CERTFR-2025-AVI-1036 | Multiples vulnérabilités dans les produits VMware | 2025-11-24T00:00:00.000000 | 2025-11-24T00:00:00.000000 |
| CERTFR-2025-AVI-1035 | Multiples vulnérabilités dans les produits Synology | 2025-11-24T00:00:00.000000 | 2025-11-24T00:00:00.000000 |
| certfr-2025-avi-1034 | Multiples vulnérabilités dans les produits IBM | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1033 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2022-000011 | HPE Agentless Management registers unquoted service paths | 2022-02-09T15:49+09:00 | 2022-02-09T15:49+09:00 |
| jvndb-2022-001299 | Cross-site Scripting Vulnerability in JP1/IT Desktop Management 2 | 2022-02-08T17:15+09:00 | 2022-02-08T17:15+09:00 |
| jvndb-2022-000009 | CSV+ vulnerable to cross-site scripting | 2022-02-08T16:33+09:00 | 2022-02-08T16:33+09:00 |
| jvndb-2022-000010 | Multiple vulnerabilities in multiple ELECOM LAN routers | 2022-02-08T16:13+09:00 | 2022-02-08T16:13+09:00 |
| jvndb-2016-008013 | Multiple ESET products for macOS vulnerable to improper server certificate verification | 2022-02-07T14:18+09:00 | 2022-02-07T14:18+09:00 |
| jvndb-2022-000007 | Multiple vulnerabilities in TransmitMail | 2022-01-25T15:31+09:00 | 2022-01-25T15:31+09:00 |
| jvndb-2022-001097 | Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux | 2022-01-25T13:35+09:00 | 2022-01-25T13:35+09:00 |
| jvndb-2022-001087 | GROWI vulnerable to authorization bypass through user-controlled key | 2022-01-24T14:07+09:00 | 2022-01-24T14:07+09:00 |
| jvndb-2022-000006 | Multiple cross-site scripting vulnerabilities in php_mailform | 2022-01-20T15:42+09:00 | 2022-01-20T15:42+09:00 |
| jvndb-2022-000001 | Canon laser printers and small office multifunctional printers vulnerable to cross-site scripting | 2022-01-19T14:00+09:00 | 2022-01-19T14:00+09:00 |
| jvndb-2022-000005 | PASSWORD MANAGER "MIRUPASS" PW10 / PW20 missing encryption | 2022-01-13T15:26+09:00 | 2022-01-13T15:26+09:00 |
| jvndb-2022-000004 | Label printers "TEPRA" PRO SR5900P / SR-R7900P vulnerable to insufficiently protected credentials | 2022-01-13T15:21+09:00 | 2022-01-13T15:21+09:00 |
| jvndb-2022-000003 | Jimoty App for Android uses a hard-coded API key for an external service | 2022-01-12T15:37+09:00 | 2022-01-12T15:37+09:00 |
| jvndb-2022-000002 | Multiple vulnerabilities in WordPress Plugin "Quiz And Survey Master" | 2022-01-12T15:33+09:00 | 2022-01-12T15:33+09:00 |
| jvndb-2021-006117 | Multiple vulnerabilities in IDEC PLCs | 2021-12-27T16:54+09:00 | 2022-01-11T16:36+09:00 |
| jvndb-2021-006146 | Multiple vulnerabilities in KONICA MINOLTA MFPs and printing systems | 2021-12-28T11:51+09:00 | 2021-12-28T11:51+09:00 |
| jvndb-2021-006026 | TP-Link TL-WR802N V4(JP) vulnerable to OS command injection | 2021-12-24T15:31+09:00 | 2021-12-24T15:31+09:00 |
| jvndb-2021-005998 | Multiple vulnerabilities in QNAP VioStar NVR | 2021-12-24T10:58+09:00 | 2021-12-24T10:58+09:00 |
| jvndb-2021-003929 | Multiple vulnerabilities in multiple Yamaha routers | 2021-12-24T10:51+09:00 | 2021-12-24T10:51+09:00 |
| jvndb-2021-000112 | Android Apps developed using Yappli fails to restrict custom URL schemes properly | 2021-12-22T15:07+09:00 | 2021-12-22T15:07+09:00 |
| jvndb-2021-000111 | Multiple vulnerabilities in GroupSession | 2021-12-20T14:53+09:00 | 2021-12-21T14:20+09:00 |
| jvndb-2021-000022 | Multiple vulnerabilities in Cybozu Office | 2021-03-15T15:56+09:00 | 2021-12-17T17:51+09:00 |
| jvndb-2021-000093 | Movable Type XMLRPC API vulnerable to OS command injection | 2021-10-20T17:38+09:00 | 2021-12-17T17:36+09:00 |
| jvndb-2021-000110 | UNIVERGE DT Series vulnerable to missing encryption of sensitive data | 2021-12-17T16:57+09:00 | 2021-12-17T16:57+09:00 |
| jvndb-2021-005174 | Multiple vulnerabilities in Trend Micro Security 2021 family (Consumer) | 2021-12-09T13:43+09:00 | 2021-12-09T13:43+09:00 |
| jvndb-2021-000107 | Wi-Fi STATION SH-52A vulnerable to cross-site scripting | 2021-11-30T14:49+09:00 | 2021-11-30T14:49+09:00 |
| jvndb-2021-004716 | Trend Micro Antivirus for MAC vulnerable to improper access controls | 2021-11-29T13:52+09:00 | 2021-11-29T13:52+09:00 |
| jvndb-2021-000106 | Multiple vulnerabilities in baserCMS | 2021-11-26T14:59+09:00 | 2021-11-26T14:59+09:00 |
| jvndb-2021-000104 | WordPress Plugin "Browser and Operating System Finder" vulnerable to cross-site request forgery | 2021-11-25T14:31+09:00 | 2021-11-25T14:31+09:00 |
| jvndb-2021-004432 | Multiple Vulnerabilities in JP1/Automatic Operation | 2021-11-22T16:10+09:00 | 2021-11-22T16:10+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-12772 | WordPress插件Uncanny Automator信息泄露漏洞 | 2025-11-25 | 2026-03-06 |
| cnvd-2026-12770 | WordPress插件Web Accessibility by accessiBe信息泄露漏洞 | 2026-03-02 | 2026-03-06 |
| cnvd-2026-12769 | WordPress插件Simple Ajax Chat信息泄露漏洞 | 2026-03-02 | 2026-03-06 |
| cnvd-2026-12768 | WordPress插件Context Blog信息泄露漏洞 | 2026-03-02 | 2026-03-06 |
| cnvd-2026-12767 | D-Link DWR-M960 formDdns文件缓冲区溢出漏洞 | 2026-03-02 | 2026-03-06 |
| cnvd-2026-12766 | Huawei EMUI和Huawei HarmonyOS通信模块地址读取漏洞 | 2026-02-11 | 2026-03-06 |
| cnvd-2026-12765 | Huawei EMUI和Huawei HarmonyOS AMS模块权限控制类漏洞 | 2026-02-11 | 2026-03-06 |
| cnvd-2026-12764 | Huawei HarmonyOS HDC模块缓冲区溢出漏洞 | 2026-02-11 | 2026-03-06 |
| cnvd-2026-12763 | Google Chrome缓冲区溢出漏洞（CNVD-2026-12763） | 2026-03-02 | 2026-03-06 |
| cnvd-2026-12697 | Adobe Substance 3D Stager存在越界写入漏洞（CNVD-2026-12697） | 2026-03-02 | 2026-03-05 |
| cnvd-2026-12687 | IBM PowerVM Hypervisor存在未明漏洞 | 2026-02-11 | 2026-03-05 |
| cnvd-2026-12685 | IBM Concert存在信息泄露漏洞 | 2026-02-11 | 2026-03-05 |
| cnvd-2026-12684 | Cisco NX-OS Software操作系统命令注入漏洞 | 2025-09-09 | 2026-03-05 |
| cnvd-2026-12683 | Cisco IOS XE Software跨站脚本漏洞 | 2025-09-28 | 2026-03-05 |
| cnvd-2026-12682 | Cisco IOS XE Software代码问题漏洞 | 2025-09-28 | 2026-03-05 |
| cnvd-2026-12681 | Cisco Unified Contact Center Express代码问题漏洞 | 2025-11-10 | 2026-03-05 |
| cnvd-2026-12680 | Cisco Unified Contact Center Express路径遍历漏洞 | 2025-11-10 | 2026-03-05 |
| cnvd-2026-12679 | Cisco Unified Contact Center Express代码问题漏洞 | 2025-11-10 | 2026-03-05 |
| cnvd-2026-12678 | Cisco Unified Contact Center Express代码问题漏洞 | 2025-11-10 | 2026-03-05 |
| cnvd-2026-12677 | Cisco Catalyst Center操作系统命令注入漏洞 | 2025-11-28 | 2026-03-05 |
| cnvd-2026-12676 | Cisco Catalyst Center跨站脚本漏洞 | 2025-11-28 | 2026-03-05 |
| cnvd-2026-12675 | Cisco Catalyst Center Virtual Appliance输入验证错误漏洞 | 2025-11-28 | 2026-03-05 |
| cnvd-2026-12674 | Cisco Identity Services Engine跨站脚本漏洞（CNVD-2026-12674） | 2026-02-04 | 2026-03-05 |
| cnvd-2026-12673 | Cisco Meeting Management(CMM)代码问题漏洞 | 2026-02-06 | 2026-03-05 |
| cnvd-2026-12672 | IBM Cloud Pak for Business Automation存在XSS漏洞 | 2026-02-11 | 2026-03-05 |
| cnvd-2026-12671 | IBM Concert存在弱密码算法漏洞 | 2026-02-11 | 2026-03-05 |
| cnvd-2026-12670 | IBM Cloud Pak for Business Automation存在拒绝服务漏洞 | 2026-02-11 | 2026-03-05 |
| cnvd-2026-12669 | IBM Business Automation Workflow containers和IBM Business Automation Workflow traditional存… | 2026-02-11 | 2026-03-05 |
| cnvd-2026-12668 | IBM webMethods Integration Server存在HTML注入漏洞 | 2026-03-02 | 2026-03-05 |
| cnvd-2026-12667 | IBM Sterling B2B Integrator和IBM Sterling File Gateway存在信息泄露漏洞 | 2026-03-02 | 2026-03-05 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-07122 | Уязвимость компонента romfs загрузчика операционных систем Grub2, позволяющая нарушителю … | 20.06.2025 | 16.02.2026 |
| bdu:2025-07119 | Уязвимость компонента hfs загрузчика операционных систем Grub2, позволяющая нарушителю вы… | 20.06.2025 | 16.02.2026 |
| bdu:2025-07116 | Уязвимость компонента fs Filesystem Handler загрузчика операционных систем Grub2, позволя… | 20.06.2025 | 16.02.2026 |
| bdu:2025-07084 | Уязвимость библиотеки libblockdev, связанная с возможностью монтирования файловой системы… | 07.08.2025 | 16.02.2026 |
| bdu:2025-07022 | Уязвимость функции RRChangeProviderProperty() сервера X Window System Xorg-server, позвол… | 19.06.2025 | 16.02.2026 |
| bdu:2025-07020 | Уязвимость функции RecordSanityCheckRegisterClients() сервера X Window System Xorg-server… | 19.06.2025 | 16.02.2026 |
| bdu:2025-06968 | Уязвимость JBIG2Bitmap::combine() библиотеки для отображения PDF-файлов Poppler, позволяю… | 19.06.2025 | 16.02.2026 |
| bdu:2025-06803 | Уязвимость функции net_dm_monitor_start() ядра операционной системы Linux, позволяющая на… | 16.06.2025 | 16.02.2026 |
| bdu:2025-06694 | Уязвимость службы systemd-coredump демона Systemd, позволяющая нарушителю оказать воздейс… | 13.06.2025 | 16.02.2026 |
| bdu:2025-06686 | Уязвимость функции jv_string_vfmt функционального языка программирования jq, позволяющая … | 13.06.2025 | 16.02.2026 |
| bdu:2025-06570 | Уязвимость функции sample_conv_regsub серверного программного обеспечения HAProxy, связан… | 09.06.2025 | 16.02.2026 |
| bdu:2025-06564 | Уязвимость функции xmlSchemaIDCFillNodeTables() файла xmlschemas.c библиотеки libxml2, по… | 09.06.2025 | 16.02.2026 |
| bdu:2025-06562 | Уязвимость компилятора инструмента для html-шаблонизации jinja, связанная с непринятием м… | 09.06.2025 | 16.02.2026 |
| bdu:2025-06494 | Уязвимость функции TarFile.extractall() и TarFile.extract() модуля tarfile интерпретатора… | 09.06.2025 | 16.02.2026 |
| bdu:2025-06490 | Уязвимость модуля net/sched/sch_hfsc.c ядра операционной системы Linux, позволяющая наруш… | 06.06.2025 | 16.02.2026 |
| bdu:2025-06438 | Уязвимость функций xmlSchemaIDCFillNodeTables, xmlSchemaBubbleIDCNodeTables (xmlschemas.c… | 05.06.2025 | 16.02.2026 |
| bdu:2025-06411 | Уязвимость функции sqlite3_db_config() файла sqlite3.c системы управления базами данных S… | 05.06.2025 | 16.02.2026 |
| bdu:2025-06312 | Уязвимость функции krb_authenticate() модуля fs/smb/server/smb2pdu.c ядра операционной си… | 03.06.2025 | 16.02.2026 |
| bdu:2025-06251 | Уязвимость библиотеки h11, связанная с недостатками обработки HTTP-запросов, позволяющая … | 02.06.2025 | 16.02.2026 |
| bdu:2025-06078 | Уязвимость библиотеки для отображения PDF-файлов Poppler, связанная с чтением за границам… | 28.05.2025 | 16.02.2026 |
| bdu:2025-06077 | Уязвимость библиотеки для отображения PDF-файлов Poppler, связанная с целочисленным переп… | 28.05.2025 | 16.02.2026 |
| bdu:2025-06076 | Уязвимость компонента adbe.pkcs7.sha1 библиотеки для отображения PDF-файлов Poppler, позв… | 28.05.2025 | 16.02.2026 |
| bdu:2025-06050 | Уязвимость функции php_request_shutdown интерпретатора языка программирования PHP, позвол… | 28.05.2025 | 16.02.2026 |
| bdu:2025-06026 | Уязвимость функции smb2_sess_setup модуля fs/smb/server/smb2pdu.c компонента ksmbd ядра о… | 27.05.2025 | 16.02.2026 |
| bdu:2025-05975 | Уязвимость функции overflow_allocation_test() ядра операционной системы Linux, позволяюща… | 26.05.2025 | 16.02.2026 |
| bdu:2025-05974 | Уязвимость функции amdgpu_dm_initialize_drm_device() драйвера поддержки инфраструктуры пр… | 26.05.2025 | 16.02.2026 |
| bdu:2025-05922 | Уязвимость функции dcn315_populate_dml_pipes_from_context() драйвера поддержки инфраструк… | 23.05.2025 | 16.02.2026 |
| bdu:2025-05918 | Уязвимость функции btrfs_lookup_extent_info() файловой системы btrfs ядра операционной си… | 23.05.2025 | 16.02.2026 |
| bdu:2025-05914 | Уязвимость функции create_lease_buf() подсистемы SMB ядра операционной системы Linux, поз… | 23.05.2025 | 16.02.2026 |
| bdu:2025-05909 | Уязвимость модуля Net::IMAP языка программирования Ruby, позволяющая нарушителю вызвать о… | 23.05.2025 | 16.02.2026 |
| ID | Description | Updated |
|---|---|---|
| var-201804-1182 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2024-07-23T20:25:18.221000Z |
| var-202207-0588 | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does no… | 2024-07-23T20:25:16.794000Z |
| var-200809-0184 | Race condition in Login Window in Apple Mac OS X 10.5 through 10.5.4, when a blank-passwo… | 2024-07-23T20:25:15.218000Z |
| var-201210-0269 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:25:11.811000Z |
| var-201404-0374 | Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 an… | 2024-07-23T20:25:08.563000Z |
| var-201704-1034 | Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.… | 2024-07-23T20:25:07.884000Z |
| var-201912-1848 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:24:44.163000Z |
| var-201210-0280 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:24:43.164000Z |
| var-201912-0589 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:24:42.912000Z |
| var-200611-0487 | com.apple.AppleDiskImageController in Apple Mac OS X 10.4.8, and possibly other versions,… | 2024-07-23T20:24:10.857000Z |
| var-202006-1807 | Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)]… | 2024-07-23T20:23:24.085000Z |
| var-201306-0242 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:22:47.590000Z |
| var-202101-0220 | A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded qu… | 2024-07-23T20:21:44.763000Z |
| var-202105-1451 | An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas i… | 2024-07-23T20:21:39.668000Z |
| var-201504-0479 | The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle … | 2024-07-23T20:21:39.248000Z |
| var-200904-0817 | Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS … | 2024-07-23T20:21:39.155000Z |
| var-200810-0394 | Unspecified vulnerability in Script Editor in Mac OS X 10.4.11 and 10.5.5 allows local us… | 2024-07-23T20:21:38.100000Z |
| var-202105-1469 | A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol(… | 2024-07-23T20:21:37.217000Z |
| var-202006-1640 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 a… | 2024-07-23T20:21:37.869000Z |
| var-201203-0171 | Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google… | 2024-07-23T20:21:34.716000Z |
| var-200609-1013 | Stack-based buffer overflow in the Apple Type Services (ATS) server in Mac OS 10.4.8 and … | 2024-07-23T20:21:33.528000Z |
| var-201410-1418 | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeter… | 2024-07-23T20:21:29.859000Z |
| var-201010-0168 | Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache… | 2024-07-23T20:20:56.693000Z |
| var-201707-1197 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari … | 2024-07-23T20:20:19.517000Z |
| var-200810-0643 | Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in ne… | 2024-07-23T20:20:17.446000Z |
| var-201808-1002 | Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo… | 2024-07-23T20:20:15.857000Z |
| var-201506-0210 | The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 befo… | 2024-07-23T20:20:15.383000Z |
| var-202006-0241 | Incomplete cleanup from specific special register read operations in some Intel(R) Proces… | 2024-07-23T20:20:14.740000Z |
| var-201110-0392 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK… | 2024-07-23T20:20:14.628000Z |
| var-201306-0226 | mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 wri… | 2024-07-23T20:20:13.633000Z |