Recent vulnerabilities

Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
ID CVSS Description Vendor Product Published Updated
CVE-2025-68853
8.8 (3.1)
WordPress Contact Manager plugin <= 9.1.1 - PHP Object… Kleor
Contact Manager
2026-02-20T15:46:43.488Z 2026-04-24T17:56:59.745Z
CVE-2025-69063
8.6 (3.1)
WordPress New User Approve plugin <= 3.2.0 - Broken Ac… Saad Iqbal
New User Approve
2026-02-20T15:46:45.384Z 2026-04-24T17:56:59.583Z
CVE-2025-69298
7.5 (3.1)
WordPress Gauge theme <= 6.56.4 - Broken Access Contro… GhostPool
Gauge
2026-02-20T15:46:46.307Z 2026-04-24T17:56:59.410Z
CVE-2025-69303
7.5 (3.1)
WordPress ModelTheme Framework plugin < 2.0.0 - Broken… modeltheme
ModelTheme Framework
2026-02-20T15:46:47.100Z 2026-04-24T17:56:59.221Z
CVE-2025-69373
7.5 (3.1)
WordPress VidoRev theme <= 2.9.9.9.9.9.7 - Local File … beeteam368
VidoRev
2026-02-20T15:46:51.695Z 2026-04-24T17:56:59.058Z
CVE-2025-69378
7.2 (3.1)
WordPress Product Filter for WooCommerce plugin <= 9.1… XforWooCommerce
Product Filter for WooCommerce
2026-02-20T15:46:53.046Z 2026-04-24T17:56:58.892Z
CVE-2026-22471
8.8 (3.1)
WordPress Secudeal Payments for Ecommerce plugin <= 1.… maximsecudeal
Secudeal Payments for Ecommerce
2026-03-05T05:53:46.338Z 2026-04-24T17:56:58.713Z
CVE-2025-69393
7.5 (3.1)
WordPress Exzo theme <= 1.2.4 - Broken Access Control … Jthemes
Exzo
2026-02-20T15:46:55.856Z 2026-04-24T17:56:58.507Z
CVE-2026-42043
7.2 (3.1)
Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY P… axios
axios
2026-04-24T17:54:42.668Z 2026-04-24T17:54:42.668Z
CVE-2025-69394
7.5 (3.1)
WordPress Cnvrse plugin < 026.02.10.20 - Insecure Dire… cnvrse
Cnvrse
2026-02-20T15:46:56.050Z 2026-04-24T17:46:48.705Z
CVE-2025-69401
7.5 (3.1)
WordPress WooODT Lite plugin <= 2.5.2 - Payment Bypass… mdalabar
WooODT Lite
2026-02-20T15:46:57.345Z 2026-04-24T17:46:48.529Z
CVE-2026-22341
6.7 (3.1)
WordPress Booked plugin <= 3.0.0 - Account Takeover vu… Case-Themes
Booked
2026-02-20T15:46:59.242Z 2026-04-24T17:46:48.321Z
CVE-2026-22350
6.5 (3.1)
WordPress PDF for Elementor Forms + Drag And Drop Temp… add-ons.org
PDF for Elementor Forms + Drag And Drop Template Builder
2026-02-20T15:47:00.543Z 2026-04-24T17:46:48.141Z
CVE-2026-22351
7.5 (3.1)
WordPress WP FullCalendar plugin <= 1.6 - Broken Acces… Marcus (aka @msykes)
WP FullCalendar
2026-02-20T15:47:00.722Z 2026-04-24T17:46:47.863Z
CVE-2026-22365
8.1 (3.1)
WordPress Soleng theme <= 1.0.5 - Local File Inclusion… axiomthemes
Soleng
2026-02-20T15:47:02.847Z 2026-04-24T17:46:47.678Z
CVE-2026-22383
7.5 (3.1)
WordPress PawFriends - Pet Shop and Veterinary WordPre… Mikado-Themes
PawFriends - Pet Shop and Veterinary WordPress Theme
2026-02-20T15:47:06.889Z 2026-04-24T17:46:47.474Z
CVE-2026-22384
9.8 (3.1)
WordPress Applay - Shortcodes plugin <= 3.7 - PHP Obje… leafcolor
Applay - Shortcodes
2026-02-20T15:47:07.059Z 2026-04-24T17:46:47.205Z
CVE-2026-28083
6.5 (3.1)
WordPress Flatsome theme <= 3.20.5 - Cross Site Script… UX-themes
Flatsome
2026-02-26T08:33:36.172Z 2026-04-24T17:46:46.883Z
CVE-2025-69340
7.5 (3.1)
WordPress WeDesignTech Ultimate Booking Addon plugin <… BuddhaThemes
WeDesignTech Ultimate Booking Addon
2026-03-05T05:53:32.008Z 2026-04-24T17:46:46.710Z
CVE-2026-22389
8.1 (3.1)
WordPress Cocco theme <= 2.0 - Local File Inclusion vu… Mikado-Themes
Cocco
2026-03-05T05:53:33.113Z 2026-04-24T17:46:46.516Z
CVE-2026-22403
8.1 (3.1)
WordPress Innovio theme <= 1.9 - Local File Inclusion … Mikado-Themes
Innovio
2026-03-05T05:53:35.418Z 2026-04-24T17:46:46.286Z
CVE-2026-22459
6.5 (3.1)
WordPress WordPress CTA plugin <= 2.1.2 - Broken Acces… Blend Media
WordPress CTA
2026-03-05T05:53:45.404Z 2026-04-24T17:46:46.118Z
CVE-2026-22397
8.1 (3.1)
WordPress Fleur theme <= 2.2.1 - Local File Inclusion … Mikado-Themes
Fleur
2026-03-05T05:53:34.263Z 2026-04-24T17:46:45.904Z
CVE-2026-22494
8.1 (3.1)
WordPress Good Homes theme <= 1.3.13 - Local File Incl… ThemeREX
Good Homes
2026-03-25T16:14:23.360Z 2026-04-24T17:46:45.663Z
CVE-2026-40897
8.8 (3.1)
Math.js: Unsafe object property setter in mathjs josdejong
mathjs
2026-04-24T16:48:34.849Z 2026-04-24T17:44:59.520Z
CVE-2026-41411
6.6 (3.1)
Vim: Command injection via backtick expansion in tag f… vim
vim
2026-04-24T16:51:39.657Z 2026-04-24T17:44:09.587Z
CVE-2026-41676
7.2 (4.0)
rust-openssl: Deriver::derive and PkeyCtxRef::derive c… rust-openssl
rust-openssl
2026-04-24T17:16:20.539Z 2026-04-24T17:43:20.693Z
CVE-2026-41681
8.1 (4.0)
rust-openssl: MdCtxRef::digest_final() writes past cal… rust-openssl
rust-openssl
2026-04-24T17:19:15.187Z 2026-04-24T17:42:54.765Z
CVE-2026-42040
3.7 (3.1)
Axios: Null Byte Injection via Reverse-Encoding in Axi… axios
axios
2026-04-24T17:40:31.125Z 2026-04-24T17:40:31.125Z
CVE-2026-23799
6.5 (3.1)
WordPress Tutor LMS plugin <= 3.9.5 - Broken Access Co… Themeum
Tutor LMS
2026-03-05T05:53:48.754Z 2026-04-24T17:06:31.833Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-62233
N/A
Apache DolphinScheduler: Deserialization of untrusted … Apache Software Foundation
Apache DolphinScheduler
2026-04-24T10:54:55.162Z 2026-04-24T16:09:59.535Z
CVE-2026-34067
3.1 (3.1)
nimiq-transaction vulnerable to panic via `HistoryTree… nimiq
nimiq-transaction
2026-04-22T19:52:43.916Z 2026-04-23T14:17:59.735Z
CVE-2026-34066
5.3 (3.1)
nimiq-blockchain: Peer-triggerable panic during history sync nimiq
nimiq-blockchain
2026-04-22T19:47:49.249Z 2026-04-23T12:57:06.467Z
CVE-2026-34065
7.5 (3.1)
nimiq-primitives: Node crash due to missing interlink … nimiq
nimiq-primitives
2026-04-22T19:45:01.171Z 2026-04-23T14:17:01.654Z
CVE-2026-34064
5.3 (3.1)
nimiq-account: Vesting insufficient funds error can panic nimiq
nimiq-account
2026-04-22T19:43:04.453Z 2026-04-23T16:25:19.186Z
CVE-2026-34063
7.5 (3.1)
network-libp2p: Peer can crash the node by opening dis… nimiq
network-libp2p
2026-04-22T19:40:26.837Z 2026-04-23T13:54:06.421Z
CVE-2026-34062
5.3 (3.1)
Nimiq has Allocation of Resources Without Limits or Th… nimiq
network-libp2p
2026-04-22T19:23:36.838Z 2026-04-23T12:57:42.075Z
CVE-2026-33471
9.6 (3.1)
nimiq-block has skip block quorum bypass via out-of-ra… nimiq
nimiq-block
2026-04-22T19:13:04.687Z 2026-04-23T14:15:20.570Z
CVE-2026-32605
7.5 (3.1)
Nimiq: Remote crash via off-by-one signer bounds check… nimiq
core-rs-albatross
2026-04-13T18:54:58.542Z 2026-04-16T13:26:40.930Z
CVE-2026-40093
8.1 (3.1)
nimiq-blockchain is missing a wall-clock upper bound o… nimiq
core-rs-albatross
2026-04-09T20:29:46.026Z 2026-04-13T15:38:14.634Z
CVE-2026-34069
5.3 (3.1)
nimiq-consensus panics via RequestMacroChain micro-blo… nimiq
core-rs-albatross
2026-04-13T23:55:52.994Z 2026-04-14T16:28:14.091Z
CVE-2026-34068
6.8 (3.1)
nimiq-transaction: UpdateValidator transactions allows… nimiq
nimiq-transaction
2026-04-22T19:55:08.219Z 2026-04-23T12:56:27.980Z
CVE-2026-40070
8.1 (3.1)
bsv-sdk and bsv-wallet persist unverified certifier si… sgbett
bsv-ruby-sdk
2026-04-09T17:26:51.495Z 2026-04-13T15:38:58.154Z
CVE-2026-40477
9.1 (3.1)
Improper restriction of the scope of accessible object… thymeleaf
thymeleaf
2026-04-17T21:53:47.271Z 2026-04-22T03:55:41.093Z
CVE-2026-40478
9.1 (3.1)
Improper neutralization of specific syntax patterns fo… thymeleaf
thymeleaf
2026-04-17T21:57:01.560Z 2026-04-22T03:55:42.682Z
CVE-2026-40481
8.2 (4.0)
monetr: Unauthenticated Stripe webhook reads attacker-… monetr
monetr
2026-04-17T22:54:57.545Z 2026-04-20T13:36:05.862Z
CVE-2026-40347
5.3 (3.1)
Python-Multipart affected by Denial of Service via lar… Kludex
python-multipart
2026-04-17T23:56:50.777Z 2026-04-20T15:46:40.011Z
CVE-2026-22683
8.7 (4.0)
8.8 (3.1)
Windmill < 1.615.0 Operator Role Missing Authorization… Windmill Labs
Windmill CE (Community Edition)
2026-04-07T16:50:30.297Z 2026-04-13T13:04:17.928Z
CVE-2026-33594
5.3 (3.1)
Outgoing DoH excessive memory allocation PowerDNS
DNSdist
2026-04-22T13:48:14.166Z 2026-04-22T14:36:48.875Z
CVE-2026-35582
8.8 (3.1)
Emissary has an OS Command Injection via Unvalidated I… NationalSecurityAgency
emissary
2026-04-18T01:16:27.661Z 2026-04-20T15:48:51.543Z
CVE-2026-40925
8.3 (3.1)
WWBN AVideo has CSRF in configurationUpdate.json.php E… WWBN
AVideo
2026-04-21T19:58:29.854Z 2026-04-21T20:35:55.243Z
CVE-2026-35241
5.7 (3.1)
Vulnerability in the PeopleSoft Enterprise CS Stu… Oracle Corporation
PeopleSoft Enterprise CS Student Records
2026-04-21T20:35:49.320Z 2026-04-22T15:33:01.531Z
CVE-2026-35243
7.8 (3.1)
Vulnerability in the Oracle Application Developme… Oracle Corporation
Oracle Application Development Framework (ADF)
2026-04-21T20:35:50.273Z 2026-04-22T15:32:50.205Z
CVE-2026-34279
9.1 (3.1)
Vulnerability in the Oracle Enterprise Manager Ba… Oracle Corporation
Oracle Enterprise Manager Base Platform
2026-04-21T20:35:20.053Z 2026-04-22T14:20:26.979Z
CVE-2026-22003
6 (3.1)
Vulnerability in the Oracle Java SE, Oracle Graal… Oracle Corporation
Oracle Java SE
2026-04-21T20:35:02.518Z 2026-04-22T14:10:38.643Z
CVE-2025-12474
2.3 (4.0)
libjxl: Uninitialized memory read in decoder due to in… Google
libjxl
2026-02-11T15:27:24.118Z 2026-02-11T21:41:40.223Z
CVE-2026-6919
9.6 (3.1)
Use after free in DevTools in Google Chrome prior… Google
Chrome
2026-04-23T16:12:22.841Z 2026-04-24T13:37:36.823Z
CVE-2026-6920
9.6 (3.1)
Out of bounds read in GPU in Google Chrome on And… Google
Chrome
2026-04-23T16:12:23.660Z 2026-04-24T03:55:28.732Z
CVE-2026-6921
8.3 (3.1)
Race in GPU in Google Chrome on Windows prior to … Google
Chrome
2026-04-23T16:12:24.489Z 2026-04-24T13:38:08.991Z
CVE-2026-23407
7.8 (3.1)
apparmor: fix missing bounds check on DEFAULT table in… Linux
Linux
2026-04-01T08:36:37.197Z 2026-04-18T08:58:41.909Z
ID Description Published Updated
fkie_cve-2026-34065 nimiq-primitives contains primitives (e.g., block, account, transaction) to be used in Nimiq's Rust… 2026-04-22T20:16:41.077 2026-04-24T17:12:37.357
fkie_cve-2026-34064 nimiq-account contains account primitives to be used in Nimiq's Rust implementation. Prior to versi… 2026-04-22T20:16:40.900 2026-04-24T17:12:30.763
fkie_cve-2026-34063 Nimiq's network-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, `… 2026-04-22T20:16:40.713 2026-04-24T17:12:23.350
fkie_cve-2026-34062 nimiq-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, `MessageCod… 2026-04-22T20:16:40.530 2026-04-24T17:11:49.060
fkie_cve-2026-33471 nimiq-block contains block primitives to be used in Nimiq's Rust implementation. `SkipBlockProof::v… 2026-04-22T20:16:40.317 2026-04-24T17:11:40.037
fkie_cve-2026-32605 nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the … 2026-04-13T20:16:33.787 2026-04-24T17:11:26.693
fkie_cve-2026-40093 nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In 1.3.0 and ea… 2026-04-09T21:16:11.937 2026-04-24T17:11:14.347
fkie_cve-2026-34069 nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the … 2026-04-14T00:16:07.023 2026-04-24T17:10:45.767
fkie_cve-2026-34068 nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Pri… 2026-04-22T21:17:08.197 2026-04-24T17:10:07.777
fkie_cve-2026-40070 BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.3.1 to before 0.8.2, BSV::Wallet::Walle… 2026-04-09T18:17:03.203 2026-04-24T17:03:39.437
fkie_cve-2026-40477 Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3… 2026-04-17T22:16:33.500 2026-04-24T16:58:57.837
fkie_cve-2026-40478 Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3… 2026-04-17T22:16:33.650 2026-04-24T16:58:33.957
fkie_cve-2026-40481 monetr is a budgeting application for recurring expenses. In versions 1.12.3 and below, the public … 2026-04-17T23:16:12.457 2026-04-24T16:57:39.337
fkie_cve-2026-40347 Python-Multipart is a streaming multipart parser for Python. Versions prior to 0.0.26 have a denial… 2026-04-18T00:16:38.520 2026-04-24T16:51:19.917
fkie_cve-2026-22683 Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows … 2026-04-07T17:16:27.037 2026-04-24T16:49:50.443
fkie_cve-2026-33594 A client can trigger excessive memory allocation by generating a lot of queries that are routed to … 2026-04-22T14:16:53.837 2026-04-24T16:48:39.007
fkie_cve-2026-35582 Emissary is a P2P based data-driven workflow engine. In versions 8.42.0 and below, Executrix.getCom… 2026-04-18T02:16:11.510 2026-04-24T16:48:25.797
fkie_cve-2026-40925 WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/configurationUpd… 2026-04-21T21:16:45.903 2026-04-24T16:46:18.467
fkie_cve-2026-35241 Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (compone… 2026-04-21T21:16:39.983 2026-04-24T16:44:02.000
fkie_cve-2026-35243 Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middle… 2026-04-21T21:16:40.260 2026-04-24T16:43:37.050
fkie_cve-2026-34279 Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (… 2026-04-21T21:16:32.180 2026-04-24T16:43:19.373
fkie_cve-2026-22003 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (c… 2026-04-21T21:16:25.650 2026-04-24T16:42:55.780
fkie_cve-2025-12474 A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allo… 2026-02-11T16:15:53.647 2026-04-24T16:42:18.960
fkie_cve-2026-6919 Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who h… 2026-04-23T18:16:30.520 2026-04-24T16:39:50.947
fkie_cve-2026-6920 Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote atta… 2026-04-23T18:16:30.640 2026-04-24T16:39:41.147
fkie_cve-2026-6921 Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potent… 2026-04-23T18:16:30.790 2026-04-24T16:39:30.307
fkie_cve-2026-23407 In the Linux kernel, the following vulnerability has been resolved: apparmor: fix missing bounds c… 2026-04-01T09:16:16.527 2026-04-24T16:38:39.543
fkie_cve-2026-23369 In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Revert "i2c: i801: … 2026-03-25T11:16:36.347 2026-04-24T16:38:18.080
fkie_cve-2026-23370 In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman:… 2026-03-25T11:16:36.527 2026-04-24T16:37:55.187
fkie_cve-2026-41271 Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3… 2026-04-23T20:16:15.683 2026-04-24T16:37:54.877
ID Severity Description Published Updated
ghsa-phf4-w5j6-499q
5.3 (3.1)
Authentication Bypass by Spoofing vulnerability in Michal Novák Secure Admin IP allows Functionalit… 2024-12-13T15:30:42Z 2026-04-23T15:33:50Z
ghsa-89p6-5p4m-h2pv
4.3 (3.1)
Missing Authorization vulnerability in bqworks Accordion Slider allows Exploiting Incorrectly Confi… 2024-12-13T15:30:42Z 2026-04-23T15:33:50Z
ghsa-685g-7w4h-726p
8.1 (3.1)
Missing Authorization vulnerability in Premmerce Premmerce User Roles allows Exploiting Incorrectly… 2024-12-13T15:30:42Z 2026-04-23T15:33:50Z
ghsa-476h-737f-mc4w
4.3 (3.1)
Missing Authorization vulnerability in MailMunch MailChimp Forms by MailMunch allows Exploiting Inc… 2024-12-13T15:30:42Z 2026-04-23T15:33:50Z
ghsa-q966-x4v8-whfm
4.3 (3.1)
Missing Authorization vulnerability in Mateusz Czardybon Justified Gallery allows Exploiting Incorr… 2024-12-13T15:30:42Z 2026-04-23T15:33:49Z
ghsa-pfw8-vjxx-7qhh
5.4 (3.1)
Missing Authorization vulnerability in StylemixThemes Cost Calculator Builder allows Exploiting Inc… 2024-12-13T15:30:42Z 2026-04-23T15:33:49Z
ghsa-mvr3-fvpv-v5pf
4.3 (3.1)
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Portfolio and Projects al… 2024-12-13T15:30:41Z 2026-04-23T15:33:49Z
ghsa-mv8m-8gw4-6jh3
4.3 (3.1)
Missing Authorization vulnerability in SolidWP iThemes Sync allows Exploiting Incorrectly Configure… 2024-12-13T15:30:42Z 2026-04-23T15:33:49Z
ghsa-m9cr-g8p8-8x4r
6.5 (3.1)
Missing Authorization vulnerability in weDevs WP Project Manager allows Exploiting Incorrectly Conf… 2024-12-13T15:30:42Z 2026-04-23T15:33:49Z
ghsa-j6f4-g5vh-36v8
5.3 (3.1)
Missing Authorization vulnerability in supsystic.com Popup by Supsystic allows Exploiting Incorrect… 2024-12-13T15:30:42Z 2026-04-23T15:33:49Z
ghsa-c4vc-qwpj-cgw6
5.3 (3.1)
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Accordion and Accordion S… 2024-12-13T15:30:41Z 2026-04-23T15:33:49Z
ghsa-5hgq-g4w5-rwmf
7.5 (3.1)
Missing Authorization vulnerability in Themeisle Redirection for Contact Form 7 allows Exploiting I… 2024-12-13T15:30:41Z 2026-04-23T15:33:49Z
ghsa-485q-m5hh-2rqx
5.3 (3.1)
Missing Authorization vulnerability in Easy Digital Downloads Easy Digital Downloads allows Exploit… 2024-12-13T15:30:42Z 2026-04-23T15:33:49Z
ghsa-xx6h-c2fx-v78f
5.4 (3.1)
Missing Authorization vulnerability in OnTheGoSystems Language allows Exploiting Incorrectly Config… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-wm3h-3hjp-64v8
5.4 (3.1)
Missing Authorization vulnerability in Suresh Chand CHP Ads Block Detector allows Exploiting Incorr… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-w9vc-q9hh-6g37
4.3 (3.1)
Missing Authorization vulnerability in ExpressTech Quiz And Survey Master allows Exploiting Incorre… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-w4r8-222j-w435
5.3 (3.1)
Missing Authorization vulnerability in YetAnotherStarsRating.com Yet Another Stars Rating allows Ex… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-w43h-737f-6x4q
6.5 (3.1)
Missing Authorization vulnerability in miniOrange YourMembership Single Sign On allows Exploiting I… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-r235-444x-j59r
6.5 (3.1)
Missing Authorization vulnerability in WPSchoolPress Team WPSchoolPress allows Exploiting Incorrect… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-qv2x-7mqw-c4mf
4.3 (3.1)
Missing Authorization vulnerability in LiquidPoll LiquidPoll – Advanced Polls for Creators and Bran… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-p77r-v683-34m4
4.3 (3.1)
Missing Authorization vulnerability in social share pro Social Share Icons & Social Share Buttons a… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-jf99-j3rv-qp5p
4.3 (3.1)
Missing Authorization vulnerability in Hugh Lashbrooke Post Hit Counter allows Exploiting Incorrect… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-j5q9-7xqm-r9fg
5.3 (3.1)
Missing Authorization vulnerability in The African Boss Checkout with Zelle on Woocommerce allows E… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-j3qr-gw2j-fj2r
5.3 (3.1)
Missing Authorization vulnerability in Codents Simple Googlebot Visit allows Exploiting Incorrectly… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-gvpq-4fvc-8q2q
5.4 (3.1)
Missing Authorization vulnerability in Easyship Easyship WooCommerce Shipping Rates allows Exploiti… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-gq4m-hx6p-2rp5
5.4 (3.1)
Missing Authorization vulnerability in wpthemego SW Product Bundles allows Exploiting Incorrectly C… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-8fg5-f59f-ph4f
6.5 (3.1)
Missing Authorization vulnerability in Designinvento DirectoryPress allows Exploiting Incorrectly C… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-8f9w-g33v-vmxc
5.3 (3.1)
Missing Authorization vulnerability in Certain Dev Booster Elementor Addons allows Exploiting Incor… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-8f38-9x5m-gx9w
7.3 (3.1)
Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Exploit… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ghsa-7v6h-292g-jmmf
5.4 (3.1)
Missing Authorization vulnerability in Dylan Blokhuis Instant CSS allows Exploiting Incorrectly Con… 2024-12-13T15:30:41Z 2026-04-23T15:33:48Z
ID Severity Description Package Published Updated
pysec-2022-43037
The d8s-lists package for Python, as distributed on PyPI, included a potential code-execu… democritus-dicts 2022-10-11T22:15:00Z 2023-06-05T01:12:50.022993Z
pysec-2022-43036
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execut… democritus-csv 2022-10-11T22:15:00Z 2023-06-05T01:12:49.913597Z
pysec-2022-43035
The d8s-urls package for Python, as distributed on PyPI, included a potential code-execut… democritus-csv 2022-10-11T22:15:00Z 2023-06-05T01:12:49.835906Z
pysec-2022-43034
The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execut… d8s-yaml 2022-10-11T22:15:00Z 2023-06-05T01:12:49.718747Z
pysec-2022-43033
The d8s-xml package for Python, as distributed on PyPI, included a potential code-executi… d8s-xml 2022-10-11T22:15:00Z 2023-06-05T01:12:49.587712Z
pysec-2022-43032
The d8s-utility package for Python, as distributed on PyPI, included a potential code-exe… d8s-utility 2022-10-11T22:15:00Z 2023-06-05T01:12:49.473097Z
pysec-2022-43031
The d8s-utility package for Python, as distributed on PyPI, included a potential code-exe… d8s-utility 2022-10-11T22:15:00Z 2023-06-05T01:12:49.395893Z
pysec-2022-43030
The d8s-urls package for Python, as distributed on PyPI, included a potential code-execut… d8s-urls 2022-10-11T22:15:00Z 2023-06-05T01:12:49.291206Z
pysec-2022-43029
The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execut… d8s-pdfs 2022-10-11T22:15:00Z 2023-06-05T01:12:49.177857Z
pysec-2022-43028
The d8s-networking package for Python, as distributed on PyPI, included a potential code-… d8s-networking 2022-10-11T22:15:00Z 2023-06-05T01:12:49.075232Z
pysec-2022-43027
The d8s-lists package for Python, as distributed on PyPI, included a potential code-execu… d8s-lists 2022-10-11T22:15:00Z 2023-06-05T01:12:48.913872Z
pysec-2022-43026
The d8s-json package for Python, as distributed on PyPI, included a potential code-execut… d8s-json 2022-10-11T22:15:00Z 2023-06-05T01:12:48.769675Z
pysec-2022-43025
The d8s-html package for Python, as distributed on PyPI, included a potential code-execut… d8s-html 2022-10-11T22:15:00Z 2023-06-05T01:12:48.578719Z
pysec-2022-43024
The d8s-file-system package for Python, as distributed on PyPI, included a potential code… d8s-file-system 2022-10-11T22:15:00Z 2023-06-05T01:12:48.460219Z
pysec-2022-43023
The d8s-domains package for Python, as distributed on PyPI, included a potential code-exe… d8s-domains 2022-10-11T22:15:00Z 2023-06-05T01:12:48.349619Z
pysec-2022-43022
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execut… d8s-asns 2022-10-11T22:15:00Z 2023-06-05T01:12:48.247277Z
pysec-2022-43021
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execut… d8s-asns 2022-10-11T22:15:00Z 2023-06-05T01:12:48.172299Z
pysec-2022-43020
The d8s-archives package for Python, as distributed on PyPI, included a potential code-ex… d8s-archives 2022-10-11T22:15:00Z 2023-06-05T01:12:48.057391Z
pysec-2022-43019
The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-… d8s-algorithms 2022-10-11T22:15:00Z 2023-06-05T01:12:47.946780Z
pysec-2023-60
Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apa… apache-airflow 2023-05-08T10:15:00Z 2023-06-05T01:12:45.763850Z
pysec-2023-59
Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airf… apache-airflow 2023-05-08T12:15:00Z 2023-06-05T01:12:45.655810Z
pysec-2021-427
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.… mpmath 2021-06-21T20:15:00Z 2023-05-31T06:15:00Z
pysec-2022-42980
Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL. pillow 2022-11-14T07:15:00Z 2023-05-25T05:07:00Z
pysec-2022-234
Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes t… poetry 2022-03-21T22:15:00Z 2023-05-25T05:07:00Z
pysec-2022-233
openssh_key_parser is an open source Python package providing utilities to parse and pack… openssh-key-parser 2022-07-06T18:15:00Z 2023-05-25T05:07:00Z
pysec-2022-230
NULL Pointer Dereference allows attackers to cause a denial of service (or application cr… lxml 2022-07-05T10:15:00Z 2023-05-25T05:07:00Z
pysec-2022-229
`gradio` is an open source framework for building interactive machine learning models and… gradio 2022-03-17T21:15:00Z 2023-05-25T05:07:00Z
pysec-2022-228
An Access Control vunerabiity exists in Gerapy v 0.9.7 via the spider parameter in projec… gerapy 2022-03-10T21:15:00Z 2023-05-25T05:07:00Z
pysec-2022-227
Bottle before 0.12.20 mishandles errors during early request binding. bottle 2022-06-02T14:15:00Z 2023-05-25T05:07:00Z
pysec-2021-874
pytorch-lightning is vulnerable to Deserialization of Untrusted Data pytorch-lightning 2021-12-23T18:15:00Z 2023-05-25T05:07:00Z
ID Description Updated
gsd-2024-33163 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.691394Z
gsd-2024-33162 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.736744Z
gsd-2024-33161 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.747995Z
gsd-2024-33160 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.698437Z
gsd-2024-33159 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.732504Z
gsd-2024-33158 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.688050Z
gsd-2024-33157 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.746799Z
gsd-2024-33156 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.718799Z
gsd-2024-33155 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.707542Z
gsd-2024-33154 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.704633Z
gsd-2024-33153 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.662915Z
gsd-2024-33152 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.669552Z
gsd-2024-33151 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.706908Z
gsd-2024-33150 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.617332Z
gsd-2024-33149 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.633232Z
gsd-2024-33148 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.705420Z
gsd-2024-33147 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.758533Z
gsd-2024-33146 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.703789Z
gsd-2024-33145 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.603403Z
gsd-2024-33144 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.671183Z
gsd-2024-33143 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.755388Z
gsd-2024-33142 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.695922Z
gsd-2024-33141 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.694744Z
gsd-2024-33140 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.690890Z
gsd-2024-33139 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.720304Z
gsd-2024-33138 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.712826Z
gsd-2024-33137 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.732911Z
gsd-2024-33136 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.757468Z
gsd-2024-33135 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.734589Z
gsd-2024-33134 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.754805Z
ID Description Published Updated
mal-2025-192725 Malicious code in chai-pack (npm) 2025-12-23T08:02:18Z 2026-04-01T12:28:01Z
mal-2025-191567 Malicious code in chai-sync (npm) 2025-12-01T13:05:09Z 2026-04-01T12:28:01Z
mal-2026-1302 Malicious code in @platform-growth/guidance-channel-provider (npm) 2026-03-10T01:04:15Z 2026-04-01T12:28:00Z
mal-2026-1247 Malicious code in @imhuman/corp-build-utils-poc (npm) 2026-03-05T16:49:33Z 2026-04-01T12:28:00Z
mal-2026-1187 Malicious code in @twilio-client/twilio-client (npm) 2026-03-03T06:32:39Z 2026-04-01T12:28:00Z
mal-2026-1170 Malicious code in @global-dax-ad-platform/dax-utils (npm) 2026-03-03T05:13:37Z 2026-04-01T12:28:00Z
mal-2026-1169 Malicious code in @global-dax-ad-platform/dax-types (npm) 2026-03-03T05:13:37Z 2026-04-01T12:28:00Z
mal-2026-1168 Malicious code in @global-dax-ad-platform/dax-styles (npm) 2026-03-03T05:13:37Z 2026-04-01T12:28:00Z
mal-2026-1167 Malicious code in @global-dax-ad-platform/dax-modules (npm) 2026-03-03T05:13:37Z 2026-04-01T12:28:00Z
mal-2026-1166 Malicious code in @global-dax-ad-platform/dax-hooks (npm) 2026-03-03T05:13:37Z 2026-04-01T12:28:00Z
mal-2026-1165 Malicious code in @global-dax-ad-platform/dax-components (npm) 2026-03-03T05:13:37Z 2026-04-01T12:28:00Z
mal-2026-2316 Malicious code in openai-async-helpers (PyPI) 2026-04-01T06:00:26Z 2026-04-01T06:00:27Z
mal-2026-2317 Malicious code in pygithub-async-utils (PyPI) 2026-04-01T05:58:39Z 2026-04-01T05:58:40Z
mal-2026-2315 Malicious code in latinum-wallet-mcp (PyPI) 2026-03-31T20:37:05Z 2026-03-31T21:18:58Z
mal-2026-2313 Malicious code in coredxloader (PyPI) 2026-03-31T17:07:08Z 2026-03-31T17:07:08Z
mal-2026-2274 Malicious code in autoshipment-public-front (npm) 2026-03-28T10:54:19Z 2026-03-31T11:35:12Z
mal-2026-2311 Malicious code in officepyai (PyPI) 2026-03-31T09:26:34Z 2026-03-31T09:28:16Z
mal-2026-2310 Malicious code in lakeflow-community-connectors (PyPI) 2026-03-31T05:36:24Z 2026-03-31T05:36:24Z
mal-2026-2306 Malicious code in plain-crypto-js (npm) 2026-03-31T02:07:58Z 2026-03-31T05:26:30Z
mal-2026-2309 Malicious code in zzzzthisisitwantsafecheckitzzzz (PyPI) 2026-03-31T03:35:47Z 2026-03-31T05:19:14Z
mal-2026-2308 Malicious code in workingitme (PyPI) 2026-03-31T03:40:48Z 2026-03-31T05:19:14Z
mal-2026-2257 Malicious code in xpna-context (npm) 2026-03-27T12:10:43Z 2026-03-31T03:12:05Z
mal-2026-2227 Malicious code in validator-lut-sdk (npm) 2026-03-26T00:52:19Z 2026-03-31T03:12:05Z
mal-2026-2190 Malicious code in ts-bign (npm) 2026-03-25T11:59:23Z 2026-03-31T03:12:05Z
mal-2026-2162 Malicious code in svg-sizer-responsive (npm) 2026-03-25T01:49:22Z 2026-03-31T03:12:05Z
mal-2026-2157 Malicious code in transitive_lib (npm) 2026-03-25T00:31:36Z 2026-03-31T03:12:05Z
mal-2026-2156 Malicious code in tailwind-animationbasis (npm) 2026-03-25T00:35:42Z 2026-03-31T03:12:05Z
mal-2026-2136 Malicious code in yelp-react-component-rating (npm) 2026-03-24T12:48:28Z 2026-03-31T03:12:05Z
mal-2026-2135 Malicious code in yelp-react-component-photo-upload (npm) 2026-03-24T12:48:27Z 2026-03-31T03:12:05Z
mal-2026-2134 Malicious code in yelp-biz-action-constants-js-generated (npm) 2026-03-24T12:48:27Z 2026-03-31T03:12:05Z
ID Description Published Updated
wid-sec-w-2025-1077 VMware Tanzu Spring Framework: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-05-15T22:00:00.000+00:00 2025-10-08T22:00:00.000+00:00
wid-sec-w-2025-0954 Apache ActiveMQ: Schwachstelle ermöglicht Denial of Service 2025-05-06T22:00:00.000+00:00 2025-10-08T22:00:00.000+00:00
wid-sec-w-2025-2181 Logback: Schwachstelle ermöglicht Codeausführung 2025-10-01T22:00:00.000+00:00 2025-10-05T22:00:00.000+00:00
wid-sec-w-2025-2171 Red Hat Enterprise Linux (JSON-XS Perl): Schwachstelle ermöglicht Denial of Service 2025-09-30T22:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2025-2164 Red Hat Enterprise Linux (FreeIPA): Schwachstelle ermöglicht Erlangen von Administratorrechten 2025-09-30T22:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2025-2075 Podman: Schwachstelle ermöglicht Manipulation von Dateien 2025-09-16T22:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2025-2043 IBM QRadar SIEM: Mehrere Schwachstellen 2025-09-11T22:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2025-1980 IBM MQ: Schwachstelle ermöglicht Offenlegung von Informationen 2025-09-04T22:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2025-1968 pgAdmin: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-09-03T22:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2025-1817 NGINX: Schwachstelle ermöglicht Offenlegung von Informationen 2025-08-13T22:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2023-2716 docker: Mehrere Schwachstellen 2021-02-02T23:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2023-1751 systemd: Schwachstelle ermöglicht Manipulation von Einträgen 2023-07-13T22:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2023-1183 docker: Mehrere Schwachstellen 2023-05-09T22:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2023-1124 docker: Mehrere Schwachstellen 2021-10-04T22:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2023-0157 Red Hat OpenShift: Mehrere Schwachstellen 2023-01-19T23:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2023-0152 Linux Kernel: Schwachstelle ermöglicht Denial of Service 2023-01-18T23:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2023-0089 Python: Schwachstelle ermöglicht Denial of Service 2023-01-12T23:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2023-0066 sudo: Schwachstelle ermöglicht Privilegieneskalation 2021-01-26T23:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2022-0243 Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation 2021-06-27T22:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2022-0242 Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation 2021-05-26T22:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2022-0214 Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2021-07-21T22:00:00.000+00:00 2025-10-01T22:00:00.000+00:00
wid-sec-w-2025-2157 Apple iOS, iPadOS and macOS (Font Parser): Schwachstelle ermöglicht Denial of Service 2025-09-29T22:00:00.000+00:00 2025-09-30T22:00:00.000+00:00
wid-sec-w-2025-2149 IBM License Metric Tool: Mehrere Schwachstellen 2025-09-28T22:00:00.000+00:00 2025-09-29T22:00:00.000+00:00
wid-sec-w-2025-2117 Google Chrome / Microsoft Edge: Mehrere Schwachstellen 2025-09-23T22:00:00.000+00:00 2025-09-29T22:00:00.000+00:00
wid-sec-w-2025-2074 Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen 2025-09-16T22:00:00.000+00:00 2025-09-29T22:00:00.000+00:00
wid-sec-w-2025-2073 ESRI ArcGIS: Mehrere Schwachstellen 2025-09-16T22:00:00.000+00:00 2025-09-29T22:00:00.000+00:00
wid-sec-w-2025-1981 ImageMagick (MagickCore blob): Schwachstelle ermöglicht Codeausführung 2025-09-04T22:00:00.000+00:00 2025-09-29T22:00:00.000+00:00
wid-sec-w-2025-1863 libTIFF: Schwachstelle ermöglicht Denial of Service 2025-08-19T22:00:00.000+00:00 2025-09-29T22:00:00.000+00:00
wid-sec-w-2025-1847 libTIFF: Schwachstelle ermöglicht Denial of Service 2025-08-14T22:00:00.000+00:00 2025-09-29T22:00:00.000+00:00
wid-sec-w-2025-1721 OWASP ModSecurity: Schwachstelle ermöglicht Cross-Site Scripting 2025-08-05T22:00:00.000+00:00 2025-09-29T22:00:00.000+00:00
ID Description Published Updated
icsa-14-107-01 Siemens SINEMA Vulnerabilities 2014-01-18T07:00:00.000000Z 2025-06-06T18:44:58.592001Z
icsa-14-016-01 Ecava IntegraXor Buffer Overflow Vulnerability 2014-10-19T06:00:00.000000Z 2025-06-06T18:44:52.152987Z
icsa-14-014-01 Schneider Electric ClearSCADA Uncontrolled Resource Consumption Vulnerability 2014-10-17T06:00:00.000000Z 2025-06-06T18:44:45.696445Z
icsa-14-010-01 MatrikonOPC Improper Input Validation 2014-10-13T06:00:00.000000Z 2025-06-06T18:44:39.268482Z
icsa-14-008-01 Ecava Sdn Bhd IntegraXor Project Directory Information Disclosure Vulnerability 2014-10-11T06:00:00.000000Z 2025-06-06T18:44:32.855266Z
icsa-14-007-01b Sierra Wireless AirLink Raven X EV-DO Vulnerabilities (Update B) 2014-10-10T06:00:00.000000Z 2025-06-06T18:44:19.916379Z
icsa-14-006-01 Schneider Electric Telvent SAGE RTU DNP3 Improper Input Validation Vulnerability 2014-10-09T06:00:00.000000Z 2025-06-06T18:44:13.497573Z
icsa-13-350-01a Schneider Electric CitectSCADA Products Exception Handler Vulnerability (Update A) 2013-09-18T06:00:00.000000Z 2025-06-06T18:43:53.863083Z
icsa-13-347-01 Siemens COMOS Privilege Escalation 2013-09-15T06:00:00.000000Z 2025-06-06T18:43:47.381681Z
icsa-13-346-02 Cooper Power Systems Cybectec DNP3 Master OPC Server Improper Input Validation 2013-09-14T06:00:00.000000Z 2025-06-06T18:43:40.964007Z
icsa-13-346-01 Cooper Power Systems Improper Input Validation Vulnerability 2013-09-14T06:00:00.000000Z 2025-06-06T18:43:28.031039Z
icsa-13-340-01 RuggedCom ROS Multiple Vulnerabilities 2013-09-08T06:00:00.000000Z 2025-06-06T18:43:15.047736Z
icsa-13-338-01 Siemens SINAMICS S/G Authentication Bypass Vulnerability 2013-09-06T06:00:00.000000Z 2025-06-06T18:43:08.603348Z
icsa-13-337-01 Elecsys Director Gateway Improper Input Validation Vulnerability 2013-09-05T06:00:00.000000Z 2025-06-06T18:43:02.174857Z
icsa-13-329-01 Triangle Research Nano-10 PLC Improper Input Validation 2013-08-28T06:00:00.000000Z 2025-06-06T18:42:55.702902Z
icsa-13-297-02 GE Proficy DNP3 Improper Input Validation 2013-07-27T06:00:00.000000Z 2025-06-06T18:42:42.774163Z
icsa-13-297-01 Catapult Software DNP3 Driver Improper Input Validation 2013-07-27T06:00:00.000000Z 2025-06-06T18:42:29.914784Z
icsa-13-295-01 WellinTech KingView ActiveX Vulnerabilities 2013-07-25T06:00:00.000000Z 2025-06-06T18:42:17.056042Z
icsa-13-282-01a Alstom e-Terracontrol DNP3 Master Improper Input Validation (Update A) 2013-07-12T06:00:00.000000Z 2025-06-06T18:42:03.985605Z
icsa-13-277-01 Philips Xper Buffer Overflow Vulnerability 2013-07-07T06:00:00.000000Z 2025-06-06T18:41:57.477223Z
icsa-13-276-01 Invensys Wonderware InTouch Improper Input Validation Vulnerability 2013-07-06T06:00:00.000000Z 2025-06-06T18:41:51.044803Z
icsa-13-274-01 Siemens SCALANCE X-200 Authentication Bypass Vulnerability 2013-07-04T06:00:00.000000Z 2025-06-06T18:41:44.564454Z
icsa-13-259-01b Emerson ROC800 Multiple Vulnerabilities (Update B) 2013-06-19T06:00:00.000000Z 2025-06-06T18:41:12.361598Z
icsa-13-259-01a Emerson ROC800 Multiple Vulnerabilities (Update A) 2013-06-19T06:00:00.000000Z 2025-06-06T18:40:40.005036Z
icsa-13-252-01 SUBNET Solutions Inc. SubSTATION Server DNP3 Outstation Improper Input Validation 2013-06-12T06:00:00.000000Z 2025-06-06T18:40:27.160098Z
icsa-13-248-01 ProSoft Technology RadioLinx ControlScape PRNG Vulnerability 2013-06-08T06:00:00.000000Z 2025-06-06T18:40:20.749066Z
icsa-13-240-01 Triangle MicroWorks Improper Input Validation 2013-05-31T06:00:00.000000Z 2025-06-06T18:40:07.718354Z
icsa-13-234-02 Top Server OPC Improper Input Validation Vulnerability 2013-05-25T06:00:00.000000Z 2025-06-06T18:40:01.237007Z
icsa-13-234-01 Schneider Electric Trio J-Series Radio Encryption 2013-05-25T06:00:00.000000Z 2025-06-06T18:39:54.739781Z
icsa-13-233-01 Siemens COMOS Privilege Escalation Vulnerability 2013-05-24T06:00:00.000000Z 2025-06-06T18:39:48.283414Z
ID Description Published Updated
cisco-sa-pi-epnm-erpwaxle Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities 2023-04-05T16:00:00+00:00 2023-05-15T13:11:25+00:00
cisco-sa-pi-epnm-eRPWAXLe Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities 2023-04-05T16:00:00+00:00 2023-05-15T13:11:25+00:00
cisco-sa-c9300-spi-ace-yejygnnq Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability 2023-03-22T16:00:00+00:00 2023-05-11T15:34:52+00:00
cisco-sa-c9300-spi-ace-yejYgnNQ Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability 2023-03-22T16:00:00+00:00 2023-05-11T15:34:52+00:00
cisco-sa-iox-priv-escalate-xg8zkypk Cisco IOS XE Software IOx Application Hosting Environment Privilege Escalation Vulnerability 2023-03-22T16:00:00+00:00 2023-05-08T15:01:45+00:00
cisco-sa-iox-priv-escalate-Xg8zkyPk Cisco IOS XE Software IOx Application Hosting Environment Privilege Escalation Vulnerability 2023-03-22T16:00:00+00:00 2023-05-08T15:01:45+00:00
cisco-sa-spa-unauth-upgrade-uqhytww Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability 2023-05-03T16:00:00+00:00 2023-05-03T16:00:00+00:00
cisco-sa-spa-unauth-upgrade-UqhyTWW Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability 2023-05-03T16:00:00+00:00 2023-05-03T16:00:00+00:00
cisco-sa-ipp-oobwrite-8cmf5r7u Cisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol Stack Overflow Vulnerability 2022-12-08T16:00:00+00:00 2023-04-27T21:07:18+00:00
cisco-sa-ipp-oobwrite-8cMF5r7U Cisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol Stack Overflow Vulnerability 2022-12-08T16:00:00+00:00 2023-04-27T21:07:18+00:00
cisco-sa-pcd-xss-jdxpjm7 Cisco Prime Collaboration Deployment Cross-Site Scripting Vulnerability 2023-04-26T16:00:00+00:00 2023-04-26T16:00:00+00:00
cisco-sa-pcd-xss-jDXpjm7 Cisco Prime Collaboration Deployment Cross-Site Scripting Vulnerability 2023-04-26T16:00:00+00:00 2023-04-26T16:00:00+00:00
cisco-sa-cisco-pdng-dos-kmzwey2q Cisco Packet Data Network Gateway IPsec ICMP Denial of Service Vulnerability 2023-04-05T16:00:00+00:00 2023-04-19T20:31:01+00:00
cisco-sa-cisco-pdng-dos-KmzwEy2Q Cisco Packet Data Network Gateway IPsec ICMP Denial of Service Vulnerability 2023-04-05T16:00:00+00:00 2023-04-19T20:31:01+00:00
cisco-sa-staros-ssh-privesc-bmwejc3h Cisco StarOS Software Key-Based SSH Authentication Privilege Escalation Vulnerability 2023-04-19T16:00:00+00:00 2023-04-19T16:00:00+00:00
cisco-sa-staros-ssh-privesc-BmWeJC3h Cisco StarOS Software Key-Based SSH Authentication Privilege Escalation Vulnerability 2023-04-19T16:00:00+00:00 2023-04-19T16:00:00+00:00
cisco-sa-sdwan-vmanage-wfnqmyhn Cisco SD-WAN vManage Software Arbitrary File Deletion Vulnerability 2023-04-19T16:00:00+00:00 2023-04-19T16:00:00+00:00
cisco-sa-sdwan-vmanage-wfnqmYhN Cisco SD-WAN vManage Software Arbitrary File Deletion Vulnerability 2023-04-19T16:00:00+00:00 2023-04-19T16:00:00+00:00
cisco-sa-roomos-file-write-rhkwegkf Cisco TelePresence Collaboration Endpoint and RoomOS Arbitrary File Write Vulnerabilities 2023-04-19T16:00:00+00:00 2023-04-19T16:00:00+00:00
cisco-sa-roomos-file-write-rHKwegKf Cisco TelePresence Collaboration Endpoint and RoomOS Arbitrary File Write Vulnerabilities 2023-04-19T16:00:00+00:00 2023-04-19T16:00:00+00:00
cisco-sa-ind-caelfk6v Cisco Industrial Network Director Vulnerabilities 2023-04-19T16:00:00+00:00 2023-04-19T16:00:00+00:00
cisco-sa-ind-CAeLFk6V Cisco Industrial Network Director Vulnerabilities 2023-04-19T16:00:00+00:00 2023-04-19T16:00:00+00:00
cisco-sa-cml-auth-bypass-4fucceg5 Cisco Modeling Labs External Authentication Bypass Vulnerability 2023-04-19T16:00:00+00:00 2023-04-19T16:00:00+00:00
cisco-sa-cml-auth-bypass-4fUCCeG5 Cisco Modeling Labs External Authentication Bypass Vulnerability 2023-04-19T16:00:00+00:00 2023-04-19T16:00:00+00:00
cisco-sa-bw-tcp-dos-kedjcxls Cisco BroadWorks Network Server TCP Denial of Service Vulnerability 2023-04-19T16:00:00+00:00 2023-04-19T16:00:00+00:00
cisco-sa-bw-tcp-dos-KEdJCxLs Cisco BroadWorks Network Server TCP Denial of Service Vulnerability 2023-04-19T16:00:00+00:00 2023-04-19T16:00:00+00:00
cisco-sa-cisco-pi-epnm-xss-mzshh2j Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability 2023-03-01T16:00:00+00:00 2023-04-06T15:31:34+00:00
cisco-sa-cisco-pi-epnm-xss-mZShH2J Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability 2023-03-01T16:00:00+00:00 2023-04-06T15:31:34+00:00
cisco-sa-sb-rv01x_rv32x_rce-nzagwwdd Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Remote Command Execution Vulnerability 2023-04-05T16:00:00+00:00 2023-04-05T20:30:30+00:00
cisco-sa-sb-rv01x_rv32x_rce-nzAGWWDD Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Remote Command Execution Vulnerability 2023-04-05T16:00:00+00:00 2023-04-05T20:30:30+00:00
ID Description Published Updated
msrc_cve-2025-38704 rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access 2025-09-02T00:00:00.000Z 2026-03-31T15:01:57.000Z
msrc_cve-2025-22057 net: decrease cached dst counters in dst_release 2025-04-02T00:00:00.000Z 2026-03-31T15:01:56.000Z
msrc_cve-2025-68745 scsi: qla2xxx: Clear cmds after chip reset 2025-12-02T00:00:00.000Z 2026-03-31T15:01:55.000Z
msrc_cve-2022-49531 loop: implement ->free_disk 2025-02-02T00:00:00.000Z 2026-03-31T15:01:52.000Z
msrc_cve-2026-23157 btrfs: do not strictly require dirty metadata threshold for metadata writepages 2026-02-02T00:00:00.000Z 2026-03-31T15:01:50.000Z
msrc_cve-2025-37834 mm/vmscan: don't try to reclaim hwpoison folio 2025-05-02T00:00:00.000Z 2026-03-31T15:01:45.000Z
msrc_cve-2024-26947 ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses 2024-05-02T07:00:00.000Z 2026-03-31T15:01:37.000Z
msrc_cve-2024-49904 drm/amdgpu: add list empty check to avoid null pointer issue 2024-10-01T07:00:00.000Z 2026-03-31T15:01:35.000Z
msrc_cve-2025-68736 landlock: Fix handling of disconnected directories 2025-12-02T00:00:00.000Z 2026-03-31T15:01:33.000Z
msrc_cve-2026-23399 nf_tables: nft_dynset: fix possible stateful expression memleak in error path 2026-03-02T00:00:00.000Z 2026-03-31T15:01:32.000Z
msrc_cve-2025-21899 tracing: Fix bad hist from corrupting named_triggers list 2025-04-02T00:00:00.000Z 2026-03-31T15:01:32.000Z
msrc_cve-2023-53152 drm/amdgpu: fix calltrace warning in amddrm_buddy_fini 2025-09-02T00:00:00.000Z 2026-03-31T15:01:32.000Z
msrc_cve-2024-26680 net: atlantic: Fix DMA mapping for PTP hwts ring 2024-04-02T07:00:00.000Z 2026-03-31T15:01:31.000Z
msrc_cve-2024-35887 ax25: fix use-after-free bugs caused by ax25_ds_del_timer 2024-05-02T07:00:00.000Z 2026-03-31T15:01:30.000Z
msrc_cve-2026-23154 net: fix segmentation of forwarding fraglist GRO 2026-02-02T00:00:00.000Z 2026-03-31T15:01:27.000Z
msrc_cve-2024-53219 virtiofs: use pages instead of pointer for kernel direct IO 2024-12-02T00:00:00.000Z 2026-03-31T15:01:19.000Z
msrc_cve-2024-26938 drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode() 2024-05-02T07:00:00.000Z 2026-03-31T15:01:13.000Z
msrc_cve-2026-25645 Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function 2026-03-02T00:00:00.000Z 2026-03-31T15:01:09.000Z
msrc_cve-2024-35868 smb: client: fix potential UAF in cifs_stats_proc_write() 2024-05-02T07:00:00.000Z 2026-03-31T15:01:09.000Z
msrc_cve-2022-49177 hwrng: cavium - fix NULL but dereferenced coccicheck error 2025-02-02T00:00:00.000Z 2026-03-31T15:01:09.000Z
msrc_cve-2024-38594 net: stmmac: move the EST lock to struct stmmac_priv 2024-06-02T07:00:00.000Z 2026-03-31T15:01:08.000Z
msrc_cve-2025-38162 netfilter: nft_set_pipapo: prevent overflow in lookup table allocation 2025-07-02T00:00:00.000Z 2026-03-31T15:01:06.000Z
msrc_cve-2026-23126 netdevsim: fix a race issue related to the operation on bpf_bound_progs list 2026-02-02T00:00:00.000Z 2026-03-31T15:01:02.000Z
msrc_cve-2024-50012 cpufreq: Avoid a bad reference count on CPU node 2024-10-01T07:00:00.000Z 2026-03-31T15:00:58.000Z
msrc_cve-2025-38422 net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices 2025-07-02T00:00:00.000Z 2026-03-31T15:00:54.000Z
msrc_cve-2022-48668 smb3: fix temporary data corruption in collapse range 2024-04-02T07:00:00.000Z 2026-03-31T15:00:50.000Z
msrc_cve-2024-57974 udp: Deal with race between UDP socket address change and rehash 2025-02-02T00:00:00.000Z 2026-03-31T15:00:46.000Z
msrc_cve-2024-56738 GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks. 2024-12-02T00:00:00.000Z 2026-03-31T15:00:44.000Z
msrc_cve-2025-21907 mm: memory-failure: update ttu flag inside unmap_poisoned_folio 2025-04-02T00:00:00.000Z 2026-03-31T15:00:43.000Z
msrc_cve-2024-26706 parisc: Fix random data corruption from exception handler 2024-04-02T07:00:00.000Z 2026-03-31T15:00:43.000Z
ID Description Published Updated
opensuse-su-2025:20132-1 Security update for strongswan 2025-12-02T13:11:59Z 2025-12-02T13:11:59Z
opensuse-su-2025-20132-1 Security update for strongswan 2025-12-02T13:11:59Z 2025-12-02T13:11:59Z
opensuse-su-2025:15793-1 gegl-0.4.64-3.1 on GA media 2025-12-02T00:00:00Z 2025-12-02T00:00:00Z
opensuse-su-2025:15792-1 python39-3.9.24-2.1 on GA media 2025-12-01T00:00:00Z 2025-12-01T00:00:00Z
opensuse-su-2025:15791-1 python315-3.15.0~a1-2.1 on GA media 2025-12-01T00:00:00Z 2025-12-01T00:00:00Z
opensuse-su-2025:15790-1 python-mistralclient-doc-6.1.0-1.1 on GA media 2025-12-01T00:00:00Z 2025-12-01T00:00:00Z
opensuse-su-2025:15789-1 libecpg6-18.1-1.1 on GA media 2025-12-01T00:00:00Z 2025-12-01T00:00:00Z
opensuse-su-2025:15788-1 lightdm-kde-greeter-6.0.5-1.1 on GA media 2025-12-01T00:00:00Z 2025-12-01T00:00:00Z
opensuse-su-2025-20130-1 Security update for bash-git-prompt 2025-11-28T13:38:03Z 2025-11-28T13:38:03Z
opensuse-su-2025-20128-1 Security update for shadowsocks-v2ray-plugin, v2ray-core 2025-11-28T13:38:03Z 2025-11-28T13:38:03Z
opensuse-su-2025:20125-1 Security update for java-17-openjdk 2025-11-28T10:27:02Z 2025-11-28T10:27:02Z
opensuse-su-2025-20125-1 Security update for java-17-openjdk 2025-11-28T10:27:02Z 2025-11-28T10:27:02Z
opensuse-su-2025:20123-1 Security update for java-21-openjdk 2025-11-28T09:35:08Z 2025-11-28T09:35:08Z
opensuse-su-2025-20123-1 Security update for java-21-openjdk 2025-11-28T09:35:08Z 2025-11-28T09:35:08Z
opensuse-su-2025:20122-1 Security update for openssh 2025-11-28T07:46:24Z 2025-11-28T07:46:24Z
opensuse-su-2025-20122-1 Security update for openssh 2025-11-28T07:46:24Z 2025-11-28T07:46:24Z
opensuse-su-2025:15787-1 python311-salt-3006.0-52.1 on GA media 2025-11-28T00:00:00Z 2025-11-28T00:00:00Z
opensuse-su-2025:15786-1 postgresql17-17.7-1.1 on GA media 2025-11-28T00:00:00Z 2025-11-28T00:00:00Z
opensuse-su-2025:15785-1 postgresql16-16.11-1.1 on GA media 2025-11-28T00:00:00Z 2025-11-28T00:00:00Z
opensuse-su-2025:15784-1 postgresql15-15.15-1.1 on GA media 2025-11-28T00:00:00Z 2025-11-28T00:00:00Z
opensuse-su-2025:15783-1 postgresql14-14.20-1.1 on GA media 2025-11-28T00:00:00Z 2025-11-28T00:00:00Z
opensuse-su-2025:15782-1 postgresql13-13.23-1.1 on GA media 2025-11-28T00:00:00Z 2025-11-28T00:00:00Z
opensuse-su-2025:15781-1 libpng16-16-1.6.51-1.1 on GA media 2025-11-28T00:00:00Z 2025-11-28T00:00:00Z
opensuse-su-2025:15780-1 libcoap-devel-4.3.5a-1.1 on GA media 2025-11-28T00:00:00Z 2025-11-28T00:00:00Z
opensuse-su-2025:15779-1 helm3-3.19.2-1.1 on GA media 2025-11-28T00:00:00Z 2025-11-28T00:00:00Z
opensuse-su-2025:20113-1 Security update for dovecot24 2025-11-27T20:17:17Z 2025-11-27T20:17:17Z
opensuse-su-2025-20113-1 Security update for dovecot24 2025-11-27T20:17:17Z 2025-11-27T20:17:17Z
opensuse-su-2025:20114-1 Security update for himmelblau 2025-11-27T20:16:29Z 2025-11-27T20:16:29Z
opensuse-su-2025-20114-1 Security update for himmelblau 2025-11-27T20:16:29Z 2025-11-27T20:16:29Z
opensuse-su-2025-20121-1 Security update for redis 2025-11-27T15:53:18Z 2025-11-27T15:53:18Z
ID Description Published Updated
rhsa-2023:5677 Red Hat Security Advisory: OpenShift Container Platform 4.12.39 bug fix and security update 2023-10-18T03:01:21+00:00 2026-04-25T13:41:06+00:00
rhsa-2023:5675 Red Hat Security Advisory: OpenShift Container Platform 4.13.17 packages and security update 2023-10-17T18:26:04+00:00 2026-04-25T13:41:05+00:00
rhsa-2023:5672 Red Hat Security Advisory: OpenShift Container Platform 4.13.17 bug fix and security update 2023-10-17T18:07:15+00:00 2026-04-25T13:41:05+00:00
rhsa-2023:5542 Red Hat Security Advisory: Logging Subsystem 5.5.17 - Red Hat OpenShift security update 2023-10-24T12:02:15+00:00 2026-04-25T13:41:05+00:00
rhsa-2023:5541 Red Hat Security Advisory: Logging Subsystem 5.6.12 - Red Hat OpenShift security update 2023-10-20T04:11:50+00:00 2026-04-25T13:41:02+00:00
rhsa-2023:5530 Red Hat Security Advisory: Logging Subsystem 5.7.7 - Red Hat OpenShift security update 2023-10-20T05:04:43+00:00 2026-04-25T13:41:02+00:00
rhsa-2023:5009 Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security update 2023-10-31T14:06:15+00:00 2026-04-25T13:41:01+00:00
rhsa-2023:5005 Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security and extras update 2023-10-31T10:41:03+00:00 2026-04-25T13:41:01+00:00
rhsa-2023:3642 Red Hat Security Advisory: Red Hat Ceph Storage 6.1 Container security and bug fix update 2023-06-15T15:59:41+00:00 2026-04-25T13:40:59+00:00
rhsa-2023:2802 Red Hat Security Advisory: container-tools:4.0 security and bug fix update 2023-05-16T08:59:44+00:00 2026-04-25T13:40:57+00:00
rhsa-2023:2758 Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update 2023-05-16T08:49:00+00:00 2026-04-25T13:40:57+00:00
rhsa-2023:1529 Red Hat Security Advisory: Service Telemetry Framework 1.5 security update 2023-03-30T00:42:39+00:00 2026-04-25T13:40:57+00:00
rhsa-2023:0727 Red Hat Security Advisory: OpenShift Container Platform 4.12.3 security update 2023-02-16T16:12:02+00:00 2026-04-25T13:40:57+00:00
rhsa-2023:1042 Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift (with security updates) 2023-03-06T18:38:53+00:00 2026-04-25T13:40:56+00:00
rhsa-2023:0408 Red Hat Security Advisory: OpenShift Virtualization 4.12.0 Images security update 2023-01-25T11:11:29+00:00 2026-04-25T13:40:56+00:00
rhsa-2023:0407 Red Hat Security Advisory: OpenShift Virtualization 4.12.0 RPMs security update 2023-01-24T12:51:07+00:00 2026-04-25T13:40:55+00:00
rhsa-2022:8250 Red Hat Security Advisory: grafana-pcp security update 2022-11-15T15:16:26+00:00 2026-04-25T13:40:55+00:00
rhsa-2022:8098 Red Hat Security Advisory: toolbox security and bug fix update 2022-11-15T15:12:42+00:00 2026-04-25T13:40:54+00:00
rhsa-2022:8057 Red Hat Security Advisory: grafana security, bug fix, and enhancement update 2022-11-15T10:31:43+00:00 2026-04-25T13:40:53+00:00
rhsa-2022:7648 Red Hat Security Advisory: grafana-pcp security update 2022-11-08T09:46:12+00:00 2026-04-25T13:40:53+00:00
rhsa-2022:7529 Red Hat Security Advisory: container-tools:3.0 security update 2022-11-08T09:43:29+00:00 2026-04-25T13:40:53+00:00
rhsa-2022:7519 Red Hat Security Advisory: grafana security, bug fix, and enhancement update 2022-11-08T09:34:04+00:00 2026-04-25T13:40:53+00:00
rhsa-2022:7398 Red Hat Security Advisory: OpenShift Container Platform 4.12.0 packages and security update 2023-01-17T19:29:22+00:00 2026-04-25T13:40:52+00:00
rhsa-2022:6714 Red Hat Security Advisory: RHACS 3.72 enhancement and security update 2022-09-26T15:26:11+00:00 2026-04-25T13:40:52+00:00
rhsa-2022:6560 Red Hat Security Advisory: Openshift Logging Bug Fix Release and Security Update (5.3.12) 2022-09-26T09:39:08+00:00 2026-04-25T13:40:51+00:00
rhsa-2022:6517 Red Hat Security Advisory: Release of containers for OSP 16.2.z director operator tech preview 2022-09-14T12:46:52+00:00 2026-04-25T13:40:51+00:00
rhsa-2022:6430 Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.4 security and bug fix update 2022-09-13T02:09:43+00:00 2026-04-25T13:40:51+00:00
rhsa-2022:6429 Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.4 security and bug fix update 2022-09-13T00:58:09+00:00 2026-04-25T13:40:50+00:00
rhsa-2022:6370 Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.0 security updates and bug fixes 2022-09-06T22:27:58+00:00 2026-04-25T13:40:49+00:00
rhsa-2022:6348 Red Hat Security Advisory: Gatekeeper Operator v0.2 security and container updates 2022-09-06T13:43:08+00:00 2026-04-25T13:40:49+00:00
ID Description Published Updated
suse-su-2026:20647-1 Security update for libxml2, libxslt 2026-03-04T10:51:03Z 2026-03-04T10:51:03Z
suse-su-2026:20631-1 Security update for libxml2, libxslt 2026-03-04T10:51:03Z 2026-03-04T10:51:03Z
suse-su-2026:20646-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) 2026-03-04T10:44:08Z 2026-03-04T10:44:08Z
suse-su-2026:20636-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) 2026-03-04T10:44:08Z 2026-03-04T10:44:08Z
suse-su-2026:20645-1 Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16) 2026-03-04T10:13:56Z 2026-03-04T10:13:56Z
suse-su-2026:20644-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) 2026-03-04T09:41:19Z 2026-03-04T09:41:19Z
suse-su-2026:20635-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) 2026-03-04T09:41:19Z 2026-03-04T09:41:19Z
suse-su-2026:20652-1 Security update for ca-certificates-mozilla 2026-03-04T09:36:46Z 2026-03-04T09:36:46Z
suse-su-2026:0796-1 Security update for libsoup 2026-03-04T09:33:40Z 2026-03-04T09:33:40Z
suse-su-2026:20643-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) 2026-03-04T09:20:51Z 2026-03-04T09:20:51Z
suse-su-2026:20634-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) 2026-03-04T09:20:51Z 2026-03-04T09:20:51Z
suse-su-2026:20696-1 Security update for ca-certificates-mozilla 2026-03-04T08:37:59Z 2026-03-04T08:37:59Z
suse-su-2026:20651-1 Security update for docker 2026-03-04T06:50:07Z 2026-03-04T06:50:07Z
suse-su-2026:20695-1 Security update for cockpit-machines 2026-03-04T06:24:37Z 2026-03-04T06:24:37Z
suse-su-2026:20694-1 Security update for docker 2026-03-04T06:24:37Z 2026-03-04T06:24:37Z
suse-su-2026:0792-1 Security update for libsoup 2026-03-04T01:04:14Z 2026-03-04T01:04:14Z
suse-su-2026:20629-1 Security update for go1.24-openssl 2026-03-03T17:51:15Z 2026-03-03T17:51:15Z
suse-su-2026:20642-1 Security update for expat 2026-03-03T16:04:58Z 2026-03-03T16:04:58Z
suse-su-2026:20641-1 Security update for podman 2026-03-03T16:04:58Z 2026-03-03T16:04:58Z
suse-su-2026:20627-1 Security update for expat 2026-03-03T16:04:58Z 2026-03-03T16:04:58Z
suse-su-2026:20626-1 Security update for podman 2026-03-03T16:04:58Z 2026-03-03T16:04:58Z
suse-su-2026:0790-1 Security update for go1.25-openssl 2026-03-03T15:52:22Z 2026-03-03T15:52:22Z
suse-su-2026:0789-1 Security update for go1.24-openssl 2026-03-03T15:51:34Z 2026-03-03T15:51:34Z
suse-su-2026:0788-1 Security update for libsoup 2026-03-03T15:15:16Z 2026-03-03T15:15:16Z
suse-su-2026:20650-1 Security update for cockpit-machines 2026-03-03T15:11:38Z 2026-03-03T15:11:38Z
suse-su-2026:20649-1 Security update for libsoup 2026-03-03T15:01:12Z 2026-03-03T15:01:12Z
suse-su-2026:0787-1 Security update for postgresql17 2026-03-03T14:48:34Z 2026-03-03T14:48:34Z
suse-su-2026:0786-1 Security update for postgresql14 2026-03-03T14:47:10Z 2026-03-03T14:47:10Z
suse-su-2026:0785-1 Security update for postgresql18 2026-03-03T14:01:35Z 2026-03-03T14:01:35Z
suse-su-2026:0784-1 Security update for postgresql16 2026-03-03T13:42:32Z 2026-03-03T13:42:32Z
ID Description Published Updated
alsa-2025:10140 Important: python3.12 security update 2025-07-01T00:00:00Z 2025-07-03T07:53:50Z
alsa-2025:10189 Important: python3.12 security update 2025-07-02T00:00:00Z 2025-07-02T13:57:56Z
alsa-2025:10148 Important: python3.11 security update 2025-07-01T00:00:00Z 2025-07-02T13:55:59Z
alsa-2025:6977 Moderate: python3.9 security update 2025-05-13T00:00:00Z 2025-07-02T13:51:48Z
alsa-2025:6990 Moderate: grub2 security update 2025-05-13T00:00:00Z 2025-07-02T13:49:48Z
alsa-2025:7043 Moderate: microcode_ctl security update 2025-05-13T00:00:00Z 2025-07-02T13:47:48Z
alsa-2025:7049 Moderate: python-requests security update 2025-05-13T00:00:00Z 2025-07-02T13:46:12Z
alsa-2025:7050 Moderate: rsync security update 2025-05-13T00:00:00Z 2025-07-02T13:44:15Z
alsa-2025:7064 Moderate: iptraf-ng security update 2025-05-13T00:00:00Z 2025-07-02T13:42:29Z
alsa-2025:7067 Moderate: krb5 security update 2025-05-13T00:00:00Z 2025-07-02T13:41:00Z
alsa-2025:7076 Moderate: gnutls security update 2025-05-13T00:00:00Z 2025-07-02T13:39:03Z
alsa-2025:7077 Moderate: libtasn1 security update 2025-05-13T00:00:00Z 2025-07-02T13:37:08Z
alsa-2025:7107 Moderate: python3.12 security update 2025-05-13T00:00:00Z 2025-07-02T13:35:29Z
alsa-2025:7094 Moderate: aardvark-dns security update 2025-05-13T00:00:00Z 2025-07-02T13:33:31Z
alsa-2025:7109 Moderate: python3.11 security update 2025-05-13T00:00:00Z 2025-07-02T13:32:00Z
alsa-2025:7118 Important: osbuild and osbuild-composer security update 2025-05-13T00:00:00Z 2025-07-02T13:30:04Z
alsa-2025:7138 Moderate: protobuf security update 2025-05-13T00:00:00Z 2025-07-02T13:27:31Z
alsa-2025:7147 Moderate: rpm-ostree security update 2025-05-13T00:00:00Z 2025-07-02T13:25:32Z
alsa-2025:7160 Moderate: bootc security update 2025-05-13T00:00:00Z 2025-07-02T13:23:57Z
alsa-2025:7165 Moderate: xorg-x11-server-Xwayland security update 2025-05-13T00:00:00Z 2025-07-02T13:22:24Z
alsa-2025:7163 Moderate: xorg-x11-server security update 2025-05-13T00:00:00Z 2025-07-02T13:20:45Z
alsa-2025:7178 Moderate: gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server security update 2025-05-13T00:00:00Z 2025-07-02T13:18:46Z
alsa-2025:7201 Moderate: corosync security update 2025-05-13T00:00:00Z 2025-07-02T13:16:42Z
alsa-2025:7241 Moderate: rust-bootupd security update 2025-05-13T00:00:00Z 2025-07-02T13:14:49Z
alsa-2025:7242 Moderate: gstreamer1-plugins-good security update 2025-05-13T00:00:00Z 2025-07-02T13:13:21Z
alsa-2025:7243 Moderate: gstreamer1-plugins-base security update 2025-05-13T00:00:00Z 2025-07-02T13:11:45Z
alsa-2025:7256 Moderate: git-lfs security update 2025-05-13T00:00:00Z 2025-07-02T13:09:54Z
alsa-2025:7309 Moderate: openjpeg2 security update 2025-05-13T00:00:00Z 2025-07-02T13:08:12Z
alsa-2025:7313 Moderate: keylime-agent-rust security update 2025-05-13T00:00:00Z 2025-07-02T13:06:35Z
alsa-2025:7317 Moderate: python3.12-cryptography security update 2025-05-13T00:00:00Z 2025-07-02T13:05:05Z
ID Description Published Updated
osv-2023-1179 Index-out-of-bounds in iaace_calc_sfb_dist 2023-11-18T13:02:51.211821Z 2023-11-18T13:02:51.213081Z
osv-2023-1177 Heap-buffer-overflow in Gfx::ICC::TextDescriptionTagData::from_bytes 2023-11-18T13:01:39.155430Z 2023-11-18T13:01:39.155768Z
osv-2023-1174 Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch 2023-11-17T13:00:58.541560Z 2023-11-17T13:00:58.541823Z
osv-2023-1173 Heap-buffer-overflow in fill_lines 2023-11-17T13:00:49.902117Z 2023-11-17T13:00:49.902383Z
osv-2023-1172 Heap-buffer-overflow in pcpp::TLVRecordReader<pcpp::TcpOption>::getTLVRecord 2023-11-16T13:03:00.976378Z 2023-11-16T13:03:00.976647Z
osv-2023-1171 Heap-buffer-overflow in pcpp::SomeIpSdLayer::SomeIpSdLayer 2023-11-16T13:02:56.384461Z 2023-11-16T13:02:56.384702Z
osv-2023-1169 Heap-buffer-overflow in epassNUMBER_pkcs15_generate_key 2023-11-16T13:02:37.833543Z 2023-11-16T13:02:37.833956Z
osv-2023-1163 Invalid-free in sc_file_clear_acl_entries 2023-11-15T13:00:41.204460Z 2023-11-15T13:00:41.204717Z
osv-2023-1160 Heap-buffer-overflow in IEC104Stats::processPacket 2023-11-14T13:03:05.864884Z 2023-11-14T13:03:05.865182Z
osv-2023-1154 Heap-buffer-overflow in pcpp::SomeIpSdEntry::SomeIpSdEntry 2023-11-13T13:03:20.948897Z 2023-11-13T13:03:20.949199Z
osv-2023-1153 Heap-buffer-overflow in pcpp::SSLClientHelloMessage::getCipherSuite 2023-11-13T13:03:01.636510Z 2023-11-13T13:03:01.636801Z
osv-2023-1152 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr 2023-11-13T13:02:00.256484Z 2023-11-13T13:02:00.256878Z
osv-2023-1149 Heap-buffer-overflow in bit_read_fixed 2023-11-13T13:01:37.087461Z 2023-11-13T13:01:37.087873Z
osv-2023-1146 Negative-size-param in pcpp::RawPacket::insertData 2023-11-13T13:00:39.716145Z 2023-11-13T13:00:39.716577Z
osv-2023-1145 Heap-buffer-overflow in pcpp::GREv1Layer::computeCalculateFields 2023-11-13T13:00:35.546722Z 2023-11-13T13:00:35.547021Z
osv-2023-1136 Security exception in org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord 2023-11-11T13:00:42.865311Z 2023-11-11T13:00:42.865622Z
osv-2023-1122 Stack-buffer-overflow in dxf_header_read 2023-11-07T13:01:32.550733Z 2023-11-10T14:16:56.272618Z
osv-2023-1126 Heap-buffer-overflow in iasecc_parse_acls 2023-11-08T13:03:19.402769Z 2023-11-08T13:03:19.403118Z
osv-2023-1124 UNKNOWN READ in cmsIT8GetDataRowColDbl 2023-11-08T13:00:59.655386Z 2023-11-08T13:00:59.655691Z
osv-2023-1119 Segv on unknown address in FunctionCompiler::compileReturn 2023-11-06T13:02:57.494372Z 2023-11-06T13:02:57.494689Z
osv-2023-1117 Heap-buffer-overflow in cmsMLUsetWide 2023-11-05T13:02:43.507558Z 2023-11-05T13:02:43.507897Z
osv-2023-1115 Use-of-uninitialized-value in fp_uninit 2023-11-05T13:01:21.842426Z 2023-11-05T13:01:21.842714Z
osv-2023-1075 Segv on unknown address in cleanup_live_vars 2023-10-27T13:01:43.631205Z 2023-11-04T18:09:50.793423Z
osv-2023-1110 Stack-buffer-overflow in dynapi_set_helper 2023-11-04T13:01:06.700754Z 2023-11-04T13:01:06.701003Z
osv-2023-507 Heap-buffer-overflow in IEC104Stats::processPacket 2023-06-24T14:00:16.342283Z 2023-11-03T14:22:10.838616Z
osv-2023-1104 Heap-buffer-overflow in bit_read_RC 2023-11-03T13:00:39.940872Z 2023-11-03T13:00:39.941107Z
osv-2023-1103 Heap-buffer-overflow in OpenType::be_u32 2023-11-03T13:00:16.931853Z 2023-11-03T13:00:16.932069Z
osv-2023-1079 Heap-buffer-overflow in Calc_Length 2023-10-28T13:02:49.535222Z 2023-11-02T14:24:53.849577Z
osv-2023-397 Heap-buffer-overflow in json_write_TF 2023-05-14T14:02:14.802227Z 2023-11-02T14:21:15.660519Z
osv-2023-1101 Heap-buffer-overflow in decode_preR13_entities 2023-11-02T13:00:18.006273Z 2023-11-02T13:00:18.006480Z
ID Description Published Updated
rustsec-2023-0004 bzip2 Denial of Service (DoS) 2023-01-09T12:00:00Z 2023-02-04T13:29:07Z
rustsec-2022-0077 `claim` is Unmaintained 2022-12-04T12:00:00Z 2023-02-04T10:58:43Z
rustsec-2022-0087 Slack Webhooks secrets leak in debug logs 2022-10-10T12:00:00Z 2023-02-02T11:45:24Z
rustsec-2022-0086 Slack OAuth Secrets leak in debug logs 2022-07-22T12:00:00Z 2023-02-02T11:43:48Z
rustsec-2022-0085 matrix-sdk Impersonation of room keys 2022-09-29T12:00:00Z 2023-02-02T11:35:31Z
rustsec-2022-0084 libp2p Lack of resource management DoS 2022-07-12T12:00:00Z 2023-02-02T11:22:51Z
rustsec-2022-0083 evm incorrect state transition 2022-10-25T12:00:00Z 2023-02-02T11:20:42Z
rustsec-2020-0166 personnummer Input validation error 2020-09-04T12:00:00Z 2023-02-02T10:57:52Z
rustsec-2023-0003 git2 does not verify SSH keys by default 2023-01-20T12:00:00Z 2023-01-20T23:06:55Z
rustsec-2022-0080 parity-util-mem Unmaintained 2022-11-30T12:00:00Z 2023-01-16T09:26:23Z
rustsec-2022-0075 Bug in pooling instance allocator 2022-11-10T12:00:00Z 2023-01-14T00:56:30Z
rustsec-2022-0073 crate has been renamed to `embedded-alloc` 2022-12-21T12:00:00Z 2022-12-23T16:46:57Z
rustsec-2022-0071 Rusoto is unmaintained 2022-04-24T12:00:00Z 2022-12-18T12:08:00Z
rustsec-2022-0068 out-of-bounds read possible when setting list-of-pointers 2022-11-30T12:00:00Z 2022-11-30T22:16:39Z
rustsec-2019-0024 Test advisory with associated example crate 2019-10-08T12:00:00Z 2022-11-05T17:45:24Z
rustsec-2022-0066 Denial of Service from unchecked request length 2022-10-30T12:00:00Z 2022-11-02T22:38:38Z
rustsec-2022-0061 Crate `parity-wasm` deprecated by the author 2022-10-01T12:00:00Z 2022-10-23T11:05:06Z
rustsec-2022-0060 orbtk is Unmaintained 2022-10-13T12:00:00Z 2022-10-19T01:14:12Z
rustsec-2022-0058 Library exclusively intended to inject UB into safe Rust. 2022-09-28T12:00:00Z 2022-10-11T10:32:22Z
rustsec-2022-0056 clipboard is Unmaintained 2022-06-25T12:00:00Z 2022-09-24T11:52:27Z
rustsec-2021-0143 kamadak-exif DoS with untrusted PNG data 2021-01-04T12:00:00Z 2022-09-08T10:52:02Z
rustsec-2021-0142 dotenv is Unmaintained 2021-12-24T12:00:00Z 2022-08-30T19:40:13Z
rustsec-2021-0141 dotenv is Unmaintained 2021-12-24T12:00:00Z 2022-08-30T19:40:13Z
rustsec-2020-0077 memmap is unmaintained 2020-12-02T12:00:00Z 2022-08-25T07:09:30Z
rustsec-2022-0050 Interledger is Unmaintained 2022-08-04T12:00:00Z 2022-08-19T05:34:11Z
rustsec-2020-0055 Please see RUSTSEC-2018-0020 2020-10-21T12:00:00Z 2022-08-16T02:38:08Z
rustsec-2020-0054 directories is unmaintained, use directories-next instead 2020-10-16T12:00:00Z 2022-08-16T02:38:08Z
rustsec-2020-0053 dirs is unmaintained, use dirs-next instead 2020-10-16T12:00:00Z 2022-08-16T02:38:08Z
rustsec-2019-0031 spin is no longer actively maintained 2019-11-21T12:00:00Z 2022-08-16T02:38:08Z
rustsec-2021-0137 sodiumoxide is deprecated 2021-10-22T12:00:00Z 2022-08-10T04:01:59Z
ID Description Published Updated
bit-gitlab-2025-12716 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2025-12-18T12:04:33.134Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-12562 Allocation of Resources Without Limits or Throttling in GitLab 2025-12-18T12:04:25.675Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-12029 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2025-12-18T12:04:20.332Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-11984 Authentication Bypass Using an Alternate Path or Channel in GitLab 2025-12-18T12:04:14.698Z 2025-12-18T12:08:20.703Z
bit-gitlab-2025-11247 Authorization Bypass Through User-Controlled Key in GitLab 2025-12-18T12:03:59.823Z 2025-12-18T12:08:20.703Z
bit-elk-2025-37732 Kibana Cross-site Scripting via the Integration Package Upload Functionality 2025-12-18T11:37:43.350Z 2025-12-18T12:08:20.703Z
bit-vault-2025-6013 Vault LDAP MFA Enforcement Bypass When Using Username As Alias 2025-08-08T06:04:14.175Z 2025-12-16T15:14:22.118Z
bit-airflow-2025-66388 Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI 2025-12-16T14:37:51.384Z 2025-12-16T15:14:22.118Z
bit-mongodb-2025-12657 Malformed KMIP response may result in access violation 2025-12-13T11:42:23.275Z 2025-12-13T12:05:53.698Z
bit-django-2025-13372 Potential SQL injection in FilteredRelation column aliases on PostgreSQL 2025-12-13T11:36:31.883Z 2025-12-13T12:05:53.698Z
bit-mongodb-2025-14345 Cross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server 2025-12-12T17:42:48.437Z 2025-12-12T18:06:16.411Z
bit-jenkins-2025-67639 2025-12-12T11:23:52.749Z 2025-12-12T11:51:34.315Z
bit-jenkins-2025-67638 2025-12-12T11:23:47.516Z 2025-12-12T11:51:34.315Z
bit-jenkins-2025-67637 2025-12-12T11:23:42.761Z 2025-12-12T11:51:34.315Z
bit-jenkins-2025-67636 2025-12-12T11:23:36.617Z 2025-12-12T11:51:34.315Z
bit-jenkins-2025-67635 2025-12-12T11:23:31.286Z 2025-12-12T11:51:34.315Z
bit-gitlab-2025-7449 Allocation of Resources Without Limits or Throttling in GitLab 2025-12-02T12:05:42.978Z 2025-12-11T12:06:55.559Z
bit-gitlab-2025-6195 Direct Request ('Forced Browsing') in GitLab 2025-12-02T12:05:25.518Z 2025-12-11T12:06:55.559Z
bit-gitlab-2025-12653 Authentication Bypass by Spoofing in GitLab 2025-12-02T12:03:41.060Z 2025-12-11T12:06:55.559Z
bit-gitlab-2025-12571 Allocation of Resources Without Limits or Throttling in GitLab 2025-12-02T12:03:39.208Z 2025-12-11T12:06:55.559Z
bit-gitlab-2024-9183 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab 2025-12-09T12:02:49.276Z 2025-12-11T12:06:55.559Z
bit-django-2025-64460 Potential denial-of-service vulnerability in XML serializer text extraction 2025-12-11T11:37:12.400Z 2025-12-11T12:06:55.559Z
bit-golang-2025-61725 Excessive CPU consumption in ParseAddress in net/mail 2025-11-06T12:58:41.872Z 2025-12-10T12:06:24.101Z
bit-pgbouncer-2025-2291 PgBouncer default auth_query does not take Postgres password expiry into account 2025-04-18T19:19:16.416Z 2025-12-09T12:08:00.393Z
bit-envoy-2025-66220 Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte 2025-12-06T11:38:21.122Z 2025-12-09T12:08:00.393Z
bit-envoy-2025-64763 Envoy forwards early CONNECT data in TCP proxy mode 2025-12-06T11:38:19.488Z 2025-12-09T12:08:00.393Z
bit-envoy-2025-64527 Envoy crashes when JWT authentication is configured with the remote JWKS fetching 2025-12-06T11:38:17.923Z 2025-12-09T12:08:00.393Z
bit-apache-2025-66200 Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo 2025-12-09T11:38:20.150Z 2025-12-09T12:08:00.393Z
bit-apache-2025-65082 Apache HTTP Server: CGI environment variable override 2025-12-09T11:38:18.501Z 2025-12-09T12:08:00.393Z
bit-apache-2025-59775 Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF 2025-12-09T11:38:16.754Z 2025-12-09T12:08:00.393Z
ID Description Updated
ID Description Published Updated
CERTFR-2025-AVI-1019 Multiples vulnérabilités dans Mattermost Server 2025-11-18T00:00:00.000000 2025-11-18T00:00:00.000000
CERTFR-2025-AVI-1018 Multiples vulnérabilités dans Google Chrome 2025-11-18T00:00:00.000000 2025-11-18T00:00:00.000000
certfr-2025-avi-1017 Multiples vulnérabilités dans Mattermost Server 2025-11-17T00:00:00.000000 2025-11-17T00:00:00.000000
certfr-2025-avi-1016 Multiples vulnérabilités dans Mozilla Thunderbird 2025-11-17T00:00:00.000000 2025-11-17T00:00:00.000000
certfr-2025-avi-1015 Multiples vulnérabilités dans les produits NetApp 2025-11-17T00:00:00.000000 2025-11-17T00:00:00.000000
CERTFR-2025-AVI-1017 Multiples vulnérabilités dans Mattermost Server 2025-11-17T00:00:00.000000 2025-11-17T00:00:00.000000
CERTFR-2025-AVI-1016 Multiples vulnérabilités dans Mozilla Thunderbird 2025-11-17T00:00:00.000000 2025-11-17T00:00:00.000000
CERTFR-2025-AVI-1015 Multiples vulnérabilités dans les produits NetApp 2025-11-17T00:00:00.000000 2025-11-17T00:00:00.000000
certfr-2025-avi-1014 Vulnérabilité dans Fortinet FortiWeb 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
certfr-2025-avi-1013 Multiples vulnérabilités dans les produits IBM 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
certfr-2025-avi-1012 Vulnérabilité dans Microsoft Edge 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
certfr-2025-avi-1011 Multiples vulnérabilités dans le noyau Linux de Red Hat 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
certfr-2025-avi-1010 Multiples vulnérabilités dans le noyau Linux de Debian 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
certfr-2025-avi-1009 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
certfr-2025-avi-1008 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
certfr-2025-avi-1007 Multiples vulnérabilités dans PostgreSQL 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
certfr-2025-avi-1006 Vulnérabilité dans Cisco Catalyst Center 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
certfr-2025-avi-0954 Multiples vulnérabilités dans Liferay 2025-11-03T00:00:00.000000 2025-11-14T00:00:00.000000
certfr-2025-avi-0888 Multiples vulnérabilités dans les produits Mattermost 2025-10-16T00:00:00.000000 2025-10-16T00:00:00.000000
CERTFR-2025-AVI-1014 Vulnérabilité dans Fortinet FortiWeb 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
CERTFR-2025-AVI-1013 Multiples vulnérabilités dans les produits IBM 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
CERTFR-2025-AVI-1012 Vulnérabilité dans Microsoft Edge 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
CERTFR-2025-AVI-1011 Multiples vulnérabilités dans le noyau Linux de Red Hat 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
CERTFR-2025-AVI-1010 Multiples vulnérabilités dans le noyau Linux de Debian 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
CERTFR-2025-AVI-1009 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
CERTFR-2025-AVI-1008 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
CERTFR-2025-AVI-1007 Multiples vulnérabilités dans PostgreSQL 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
CERTFR-2025-AVI-1006 Vulnérabilité dans Cisco Catalyst Center 2025-11-14T00:00:00.000000 2025-11-14T00:00:00.000000
CERTFR-2025-AVI-0954 Multiples vulnérabilités dans Liferay 2025-11-03T00:00:00.000000 2025-11-14T00:00:00.000000
CERTFR-2025-AVI-0888 Multiples vulnérabilités dans les produits Mattermost 2025-10-16T00:00:00.000000 2025-10-16T00:00:00.000000
ID Description Published Updated
jvndb-2021-000078 The installers of multiple Sony products may insecurely load Dynamic Link Libraries 2021-08-24T14:30+09:00 2021-08-24T14:30+09:00
jvndb-2021-002282 Multiple vulnerabilities in Navigate CMS 2021-08-20T14:25+09:00 2021-08-20T14:25+09:00
jvndb-2021-002279 Incorrect permission assignment vulnerability in multiple Trend Micro Endpoint security products for enterprises 2021-08-19T15:01+09:00 2021-08-19T15:01+09:00
jvndb-2021-000077 Huawei EchoLife HG8045Q vulnerable to OS command injection 2021-08-17T14:24+09:00 2021-08-17T14:24+09:00
jvndb-2021-002273 Multiple vulnerabilities in D-Link router DSL-2750U 2021-08-17T14:09+09:00 2021-08-17T14:09+09:00
jvndb-2021-000076 Plone vulnerable to open redirect 2021-08-12T14:05+09:00 2021-08-12T14:05+09:00
jvndb-2021-000075 WordPress Plugin "Quiz And Survey Master" vulnerable to cross-site scripting 2021-08-10T14:40+09:00 2021-08-10T14:40+09:00
jvndb-2021-002077 Multiple vulnerabilities in multiple Trend Micro Endpoint security products for enterprises 2021-08-04T11:15+09:00 2021-08-04T11:15+09:00
jvndb-2020-000071 Cybozu Garoon vulnerable to improper input validation 2020-11-05T11:43+09:00 2021-08-02T11:08+09:00
jvndb-2020-000087 Management software for NEC Storage disk array system vulnerable to improper server certificate verification 2020-12-18T17:00+09:00 2021-07-21T16:21+09:00
jvndb-2021-000072 Minecraft Java Edition vulnerable to directory traversal 2021-07-21T15:12+09:00 2021-07-21T15:12+09:00
jvndb-2021-002005 Trend Micro InterScan Web Security Virtual Appliance (IWSVA) vulnerable to cross-site scripting 2021-07-19T16:53+09:00 2021-07-19T16:53+09:00
jvndb-2021-000069 Optical BB unit E-WMTA2.3 vulnerable to cross-site request forgery 2021-07-14T17:13+09:00 2021-07-14T17:13+09:00
jvndb-2021-001977 Multiple vulnerabilities in Elecom routers 2021-07-07T14:03+09:00 2021-07-12T16:04+09:00
jvndb-2021-000067 voidtools "Everything" vulnerable to HTTP header injection 2021-07-09T14:40+09:00 2021-07-09T14:40+09:00
jvndb-2021-000065 WordPress Plugin "WordPress Meta Data Filter & Taxonomies Filter" vulnerable to cross-site request forgery 2021-07-08T14:29+09:00 2021-07-08T14:29+09:00
jvndb-2021-000066 WordPress Plugin "Software License Manager" vulnerable to cross-site request forgery 2021-07-08T13:45+09:00 2021-07-08T13:45+09:00
jvndb-2021-000064 GU App for Android fails to restrict access permissions 2021-07-07T13:16+09:00 2021-07-07T13:16+09:00
jvndb-2021-001968 Multiple vulnerabilities in Trend Micro Password Manager 2021-07-06T16:08+09:00 2021-07-06T16:08+09:00
jvndb-2021-000063 WordPress Plugin "WordPress Email Template Designer - WP HTML Mail" vulnerable to cross-site request forgery 2021-07-06T14:50+09:00 2021-07-06T14:50+09:00
jvndb-2021-000062 WordPress Plugin "WPCS - WordPress Currency Switcher" vulnerable to cross-site request forgery 2021-07-06T14:11+09:00 2021-07-06T14:11+09:00
jvndb-2021-000061 A-Stage SCT-40CM01SR and AT-40CM01SR vulnerable to authentication bypass 2021-07-05T14:28+09:00 2021-07-05T14:28+09:00
jvndb-2021-000059 EC-CUBE fails to restrict access permissions 2021-07-01T15:49+09:00 2021-07-01T15:49+09:00
jvndb-2007-002102 boastMachine vulnerable to cross-site scripting 2021-06-30T14:32+09:00 2021-06-30T14:32+09:00
jvndb-2021-000058 IkaIka RSS Reader vulnerable to cross-site scripting 2021-06-30T14:21+09:00 2021-06-30T14:21+09:00
jvndb-2021-000056 WordPress Plugin "WordPress Popular Posts" vulnerable to cross-site scripting 2021-06-30T11:36+09:00 2021-06-30T11:36+09:00
jvndb-2021-000057 Multiple cross-site scripting vulnerabilities in EC-CUBE 2021-06-23T15:15+09:00 2021-06-23T15:15+09:00
jvndb-2021-000055 WordPress plugin "Fudousan plugin" series vulnerable to cross-site scripting 2021-06-22T15:06+09:00 2021-06-22T15:06+09:00
jvndb-2021-000054 Inkdrop vulnerable to OS command injection 2021-06-22T15:06+09:00 2021-06-22T15:06+09:00
jvndb-2021-000053 Hitachi Virtual File Platform vulnerable to OS command injection 2021-06-18T15:45+09:00 2021-06-18T15:45+09:00
ID Description Published Updated
cnvd-2026-12556 Microsoft Hyper-V缓冲区溢出漏洞 2026-03-02 2026-03-04
cnvd-2026-12555 Microsoft Hyper-V访问控制错误漏洞 2026-03-02 2026-03-04
cnvd-2026-12554 Microsoft GitHub Copilot for JetBrains命令注入漏洞 2026-03-02 2026-03-04
cnvd-2026-12553 Microsoft Excel缓冲区溢出漏洞(CNVD-2026-12553) 2026-03-02 2026-03-04
cnvd-2026-12552 Microsoft Excel缓冲区溢出漏洞(CNVD-2026-12552) 2026-03-02 2026-03-04
cnvd-2026-12374 NVIDIA NVTabular反序列化漏洞 2025-12-15 2026-03-03
cnvd-2026-12373 NVIDIA Merlin Transformers4Rec反序列化漏洞 2025-12-15 2026-03-03
cnvd-2026-12372 NVIDIA Nemo Framework代码问题漏洞(CNVD-2026-1237200) 2025-12-25 2026-03-03
cnvd-2026-12371 NVIDIA Nemo Framework代码问题漏洞 2025-12-25 2026-03-03
cnvd-2026-12370 NVIDIA Isaac Launchable信任管理问题漏洞 2025-12-29 2026-03-03
cnvd-2026-12369 NVIDIA Isaac Launchable任意代码执行漏洞 2025-12-29 2026-03-03
cnvd-2026-12368 NVIDIA NSIGHT Graphics操作系统命令注入漏洞 2026-01-23 2026-03-03
cnvd-2026-12367 NVIDIA Merlin Transformers4Rec代码注入漏洞 2026-01-26 2026-03-03
cnvd-2026-12366 NVIDIA CUDA toolkit代码问题漏洞 2026-01-30 2026-03-03
cnvd-2026-12365 NVIDIA CUDA toolkit gfx_hotspot模块命令注入漏洞 2026-01-30 2026-03-03
cnvd-2026-12363 WordPress FAPI Member plugin授权绕过漏洞 2025-12-22 2026-03-02
cnvd-2026-12362 Scholars Tracking System delete_user.php文件SQL注入漏洞 2025-12-25 2026-03-02
cnvd-2026-12361 WordPress Vimeotheque跨站请求伪造漏洞 2025-12-26 2026-03-02
cnvd-2026-12360 WordPress Fast User Switching跨站请求伪造漏洞 2025-12-26 2026-03-02
cnvd-2026-12359 WordPress Funnelforms Free缺少授权漏洞 2025-12-26 2026-03-02
cnvd-2026-12357 WordPress My auctions allegro跨站脚本漏洞 2025-12-26 2026-03-02
cnvd-2026-12356 WordPress Category Icon跨站脚本漏洞 2025-12-26 2026-03-02
cnvd-2026-12355 WordPress Spiffy Calendar缺少授权漏洞 2025-12-26 2026-03-02
cnvd-2026-12354 WordPress WpStream缺少授权漏洞 2025-12-26 2026-03-02
cnvd-2026-12353 WordPress WC Builder跨站脚本漏洞 2025-12-30 2026-03-02
cnvd-2026-12205 用友网络科技股份有限公司U8 Cloud存在远程代码执行漏洞 2025-11-04 2026-02-28
cnvd-2026-12149 用友网络科技股份有限公司U8 Cloud存在SQL注入漏洞(CNVD-2026-12149) 2025-11-26 2026-02-28
cnvd-2026-12146 深圳极速创想科技有限公司FastAdmin任意文件读取漏洞 2025-11-27 2026-02-28
cnvd-2026-11810 Microsoft Windows Routing and Remote Access Service远程代码执行漏洞(CNVD-2026-11810) 2025-08-15 2026-02-28
cnvd-2026-11809 Microsoft Windows Routing and Remote Access Service远程代码执行漏洞 2025-12-12 2026-02-28
ID Description Published Updated
bdu:2025-04573 Уязвимость библиотеки для анализа XML-файлов libexpat, связанная с переполнением буфера в… 15.04.2025 16.02.2026
bdu:2025-04572 Уязвимость функций urllib.parse.urlsplit() и urlparse() интерпретатора языка программиров… 15.04.2025 16.02.2026
bdu:2025-04488 Уязвимость компонента ftrace функции function_stat_show ядра операционной системы Linux, … 14.04.2025 16.02.2026
bdu:2025-04477 Уязвимость компонента hugetlb функции try_get_folio() ядра операционной системы Linux, по… 14.04.2025 16.02.2026
bdu:2025-04396 Уязвимость функции get_firmware_info_v3_2() модуля drivers/gpu/drm/amd/display/dc/bios/bi… 14.04.2025 16.02.2026
bdu:2025-04386 Уязвимость компонента tracing функции event_trigger_write ядра операционной системы Linux… 14.04.2025 16.02.2026
bdu:2025-04089 Уязвимость функции slim_do_transfer() драйвера (drivers/slimbus/messaging.c) ядра операци… 09.04.2025 16.02.2026
bdu:2025-04088 Уязвимость функции usbhsc_notify_hotplug() драйвера USB (drivers/usb/renesas_usbhs/common… 09.04.2025 16.02.2026
bdu:2025-04087 Уязвимость драйвера USB (drivers/usb/typec/ucsi/ucsi.c) ядра операционных систем Linux, п… 09.04.2025 16.02.2026
bdu:2025-03890 Уязвимость функции usb_find_common_endpoints() драйвера USB (drivers/usb/atm/cxacru.c) яд… 08.04.2025 16.02.2026
bdu:2025-03888 Уязвимость функции amd_get_mmconfig_range() модуля arch/x86/kernel/amd_nb.c ядра операцио… 09.06.2025 16.02.2026
bdu:2025-03866 Уязвимость функции lzma_stream_decoder_mt() библиотеки liblzma пакета для сжатия данных X… 09.06.2025 16.02.2026
bdu:2025-03840 Уязвимость файла fs/hfs.c компонента hfs загрузчика операционных систем Grub2, позволяюща… 07.04.2025 16.02.2026
bdu:2025-03816 Уязвимость функции !defined() (kernel/sched/core.c) ядра операционной системы Linux, позв… 07.04.2025 16.02.2026
bdu:2025-03812 Уязвимость функции npcm_i2c_probe_bus() (drivers/i2c/busses/i2c-npcm7xx.c) ядра операцион… 07.04.2025 16.02.2026
bdu:2025-03811 Уязвимость функции optee_supp_thrd_req() (drivers/tee/optee/supp.c) ядра операционной сис… 07.04.2025 16.02.2026
bdu:2025-03809 Уязвимость функции mptcp_nl_remove_subflow_and_signal_addr() (net/mptcp/pm_netlink.c) ядр… 07.04.2025 16.02.2026
bdu:2025-03742 Уязвимость функции genelink_bind() (drivers/net/usb/gl620a.c) ядра операционной системы L… 03.04.2025 16.02.2026
bdu:2025-03711 Уязвимость функции txt_get_unicode() файла devices/vector/doc_common.c набора программног… 02.04.2025 16.02.2026
bdu:2025-03710 Уязвимость файлов base/write_t1.c и psi/zfapi.c компонента DollarBlend набора программног… 02.04.2025 16.02.2026
bdu:2025-03707 Уязвимость функции bj10v_print_page() файла contrib/japanese/gdev10v.c компонента BJ10V D… 02.04.2025 16.02.2026
bdu:2025-03706 Уязвимость файла psi/zbfont.c набора программного обеспечения для обработки, преобразован… 02.04.2025 16.02.2026
bdu:2025-03705 Уязвимость файла contrib/japanese/gdevnpdl.c компонента NPDL Device набора программного … 02.04.2025 16.02.2026
bdu:2025-03704 Уязвимость функции Type 4 файла pdf/pdf_func.c набора программного обеспечения для обрабо… 02.04.2025 16.02.2026
bdu:2025-03683 Уязвимость функции uprobe_write_opcode() модуля kernel/events/uprobes.c ядра операционных… 02.04.2025 16.02.2026
bdu:2025-03641 Уязвимость функции xsltGetInheritedNsList библиотеки libxslt, позволяющая нарушителю оказ… 01.04.2025 16.02.2026
bdu:2025-03640 Уязвимость файла numbers.ct библиотеки libxslt, позволяющая нарушителю выполнить произвол… 01.04.2025 16.02.2026
bdu:2025-03534 Уязвимость почтового сервера Exim, связанная с использованием памяти после ее освобождени… 23.04.2025 16.02.2026
bdu:2025-03465 Уязвимость библиотеки для кодирования и декодирования изображений OpenJPEG, связанная с п… 27.03.2025 16.02.2026
bdu:2025-03459 Уязвимость компонента Hash Handler пакета 389-ds-base, позволяющая нарушителю вызвать отк… 27.03.2025 16.02.2026
ID Description Updated
var-200505-0354 Buffer overflow in the Foundation framework for Mac OS X 10.3.9 allows local users to exe… 2024-07-23T20:17:16.312000Z
var-201206-0054 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-07-23T20:17:15.929000Z
var-200901-0726 Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0… 2024-07-23T20:17:14.213000Z
var-200904-0800 The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before… 2024-07-23T20:17:13.895000Z
var-201809-0686 curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication c… 2024-07-23T20:17:09.201000Z
var-201705-3873 In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 me… 2024-07-23T20:17:09.711000Z
var-201006-1234 Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X… 2024-07-23T20:17:09.441000Z
var-201903-0442 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T20:17:08.574000Z
var-200811-0321 The plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from… 2024-07-23T20:17:08.920000Z
var-202004-0345 FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between seriali… 2024-07-23T20:17:07.679000Z
var-202109-1966 There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a mal… 2024-07-23T20:16:30.843000Z
var-200701-0341 The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428… 2024-07-23T20:16:29.180000Z
var-201904-1411 A cross-origin issue existed with "iframe" elements. This was addressed with improved tra… 2024-07-23T20:16:28.429000Z
var-201912-0532 A buffer overflow issue was addressed with improved memory handling. This issue is fixed … 2024-07-23T20:16:27.834000Z
var-201805-0967 Systems with microprocessors utilizing speculative execution and that perform speculative… 2024-07-23T20:16:27.316000Z
var-201409-1147 The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remot… 2024-07-23T20:16:26.490000Z
var-201403-0275 sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd… 2024-07-23T20:15:55.666000Z
var-202112-1782 Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not pro… 2024-07-23T20:15:54.690000Z
var-200505-0350 The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an ap… 2024-07-23T20:15:49.782000Z
var-201707-0556 Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whites… 2024-07-23T20:15:16.169000Z
var-201806-1456 An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS befor… 2024-07-23T20:15:15.076000Z
var-201011-0178 The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and poss… 2024-07-23T20:15:12.423000Z
var-200505-0351 Bluetooth-enabled systems in Mac OS X 10.3.9 enables the Bluetooth file exchange service … 2024-07-23T20:15:10.160000Z
var-200701-0518 The CFUserNotificationSendRequest function in UserNotificationCenter.app in Apple Mac OS … 2024-07-23T20:15:09.518000Z
var-202204-0432 Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based … 2024-07-23T20:15:05.279000Z
var-201912-0496 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T20:15:05.516000Z
var-200901-0714 OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFi… 2024-07-23T20:15:05.042000Z
var-200709-0495 Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server bef… 2024-07-23T20:15:05.431000Z
var-202210-1202 Git is an open source, scalable, distributed revision control system. Versions prior to 2… 2024-07-23T20:15:03.784000Z
var-201306-0256 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-07-23T20:15:01.919000Z
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated