Recent vulnerabilities
Recent vulnerabilities from
Select from 69 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-68853 |
8.8 (3.1)
|
WordPress Contact Manager plugin <= 9.1.1 - PHP Object… |
Kleor |
Contact Manager |
2026-02-20T15:46:43.488Z | 2026-04-24T17:56:59.745Z |
| CVE-2025-69063 |
8.6 (3.1)
|
WordPress New User Approve plugin <= 3.2.0 - Broken Ac… |
Saad Iqbal |
New User Approve |
2026-02-20T15:46:45.384Z | 2026-04-24T17:56:59.583Z |
| CVE-2025-69298 |
7.5 (3.1)
|
WordPress Gauge theme <= 6.56.4 - Broken Access Contro… |
GhostPool |
Gauge |
2026-02-20T15:46:46.307Z | 2026-04-24T17:56:59.410Z |
| CVE-2025-69303 |
7.5 (3.1)
|
WordPress ModelTheme Framework plugin < 2.0.0 - Broken… |
modeltheme |
ModelTheme Framework |
2026-02-20T15:46:47.100Z | 2026-04-24T17:56:59.221Z |
| CVE-2025-69373 |
7.5 (3.1)
|
WordPress VidoRev theme <= 2.9.9.9.9.9.7 - Local File … |
beeteam368 |
VidoRev |
2026-02-20T15:46:51.695Z | 2026-04-24T17:56:59.058Z |
| CVE-2025-69378 |
7.2 (3.1)
|
WordPress Product Filter for WooCommerce plugin <= 9.1… |
XforWooCommerce |
Product Filter for WooCommerce |
2026-02-20T15:46:53.046Z | 2026-04-24T17:56:58.892Z |
| CVE-2026-22471 |
8.8 (3.1)
|
WordPress Secudeal Payments for Ecommerce plugin <= 1.… |
maximsecudeal |
Secudeal Payments for Ecommerce |
2026-03-05T05:53:46.338Z | 2026-04-24T17:56:58.713Z |
| CVE-2025-69393 |
7.5 (3.1)
|
WordPress Exzo theme <= 1.2.4 - Broken Access Control … |
Jthemes |
Exzo |
2026-02-20T15:46:55.856Z | 2026-04-24T17:56:58.507Z |
| CVE-2026-42043 |
7.2 (3.1)
|
Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY P… |
axios |
axios |
2026-04-24T17:54:42.668Z | 2026-04-24T17:54:42.668Z |
| CVE-2025-69394 |
7.5 (3.1)
|
WordPress Cnvrse plugin < 026.02.10.20 - Insecure Dire… |
cnvrse |
Cnvrse |
2026-02-20T15:46:56.050Z | 2026-04-24T17:46:48.705Z |
| CVE-2025-69401 |
7.5 (3.1)
|
WordPress WooODT Lite plugin <= 2.5.2 - Payment Bypass… |
mdalabar |
WooODT Lite |
2026-02-20T15:46:57.345Z | 2026-04-24T17:46:48.529Z |
| CVE-2026-22341 |
6.7 (3.1)
|
WordPress Booked plugin <= 3.0.0 - Account Takeover vu… |
Case-Themes |
Booked |
2026-02-20T15:46:59.242Z | 2026-04-24T17:46:48.321Z |
| CVE-2026-22350 |
6.5 (3.1)
|
WordPress PDF for Elementor Forms + Drag And Drop Temp… |
add-ons.org |
PDF for Elementor Forms + Drag And Drop Template Builder |
2026-02-20T15:47:00.543Z | 2026-04-24T17:46:48.141Z |
| CVE-2026-22351 |
7.5 (3.1)
|
WordPress WP FullCalendar plugin <= 1.6 - Broken Acces… |
Marcus (aka @msykes) |
WP FullCalendar |
2026-02-20T15:47:00.722Z | 2026-04-24T17:46:47.863Z |
| CVE-2026-22365 |
8.1 (3.1)
|
WordPress Soleng theme <= 1.0.5 - Local File Inclusion… |
axiomthemes |
Soleng |
2026-02-20T15:47:02.847Z | 2026-04-24T17:46:47.678Z |
| CVE-2026-22383 |
7.5 (3.1)
|
WordPress PawFriends - Pet Shop and Veterinary WordPre… |
Mikado-Themes |
PawFriends - Pet Shop and Veterinary WordPress Theme |
2026-02-20T15:47:06.889Z | 2026-04-24T17:46:47.474Z |
| CVE-2026-22384 |
9.8 (3.1)
|
WordPress Applay - Shortcodes plugin <= 3.7 - PHP Obje… |
leafcolor |
Applay - Shortcodes |
2026-02-20T15:47:07.059Z | 2026-04-24T17:46:47.205Z |
| CVE-2026-28083 |
6.5 (3.1)
|
WordPress Flatsome theme <= 3.20.5 - Cross Site Script… |
UX-themes |
Flatsome |
2026-02-26T08:33:36.172Z | 2026-04-24T17:46:46.883Z |
| CVE-2025-69340 |
7.5 (3.1)
|
WordPress WeDesignTech Ultimate Booking Addon plugin <… |
BuddhaThemes |
WeDesignTech Ultimate Booking Addon |
2026-03-05T05:53:32.008Z | 2026-04-24T17:46:46.710Z |
| CVE-2026-22389 |
8.1 (3.1)
|
WordPress Cocco theme <= 2.0 - Local File Inclusion vu… |
Mikado-Themes |
Cocco |
2026-03-05T05:53:33.113Z | 2026-04-24T17:46:46.516Z |
| CVE-2026-22403 |
8.1 (3.1)
|
WordPress Innovio theme <= 1.9 - Local File Inclusion … |
Mikado-Themes |
Innovio |
2026-03-05T05:53:35.418Z | 2026-04-24T17:46:46.286Z |
| CVE-2026-22459 |
6.5 (3.1)
|
WordPress WordPress CTA plugin <= 2.1.2 - Broken Acces… |
Blend Media |
WordPress CTA |
2026-03-05T05:53:45.404Z | 2026-04-24T17:46:46.118Z |
| CVE-2026-22397 |
8.1 (3.1)
|
WordPress Fleur theme <= 2.2.1 - Local File Inclusion … |
Mikado-Themes |
Fleur |
2026-03-05T05:53:34.263Z | 2026-04-24T17:46:45.904Z |
| CVE-2026-22494 |
8.1 (3.1)
|
WordPress Good Homes theme <= 1.3.13 - Local File Incl… |
ThemeREX |
Good Homes |
2026-03-25T16:14:23.360Z | 2026-04-24T17:46:45.663Z |
| CVE-2026-40897 |
8.8 (3.1)
|
Math.js: Unsafe object property setter in mathjs |
josdejong |
mathjs |
2026-04-24T16:48:34.849Z | 2026-04-24T17:44:59.520Z |
| CVE-2026-41411 |
6.6 (3.1)
|
Vim: Command injection via backtick expansion in tag f… |
vim |
vim |
2026-04-24T16:51:39.657Z | 2026-04-24T17:44:09.587Z |
| CVE-2026-41676 |
7.2 (4.0)
|
rust-openssl: Deriver::derive and PkeyCtxRef::derive c… |
rust-openssl |
rust-openssl |
2026-04-24T17:16:20.539Z | 2026-04-24T17:43:20.693Z |
| CVE-2026-41681 |
8.1 (4.0)
|
rust-openssl: MdCtxRef::digest_final() writes past cal… |
rust-openssl |
rust-openssl |
2026-04-24T17:19:15.187Z | 2026-04-24T17:42:54.765Z |
| CVE-2026-42040 |
3.7 (3.1)
|
Axios: Null Byte Injection via Reverse-Encoding in Axi… |
axios |
axios |
2026-04-24T17:40:31.125Z | 2026-04-24T17:40:31.125Z |
| CVE-2026-23799 |
6.5 (3.1)
|
WordPress Tutor LMS plugin <= 3.9.5 - Broken Access Co… |
Themeum |
Tutor LMS |
2026-03-05T05:53:48.754Z | 2026-04-24T17:06:31.833Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62233 |
N/A
|
Apache DolphinScheduler: Deserialization of untrusted … |
Apache Software Foundation |
Apache DolphinScheduler |
2026-04-24T10:54:55.162Z | 2026-04-24T16:09:59.535Z |
| CVE-2026-34067 |
3.1 (3.1)
|
nimiq-transaction vulnerable to panic via `HistoryTree… |
nimiq |
nimiq-transaction |
2026-04-22T19:52:43.916Z | 2026-04-23T14:17:59.735Z |
| CVE-2026-34066 |
5.3 (3.1)
|
nimiq-blockchain: Peer-triggerable panic during history sync |
nimiq |
nimiq-blockchain |
2026-04-22T19:47:49.249Z | 2026-04-23T12:57:06.467Z |
| CVE-2026-34065 |
7.5 (3.1)
|
nimiq-primitives: Node crash due to missing interlink … |
nimiq |
nimiq-primitives |
2026-04-22T19:45:01.171Z | 2026-04-23T14:17:01.654Z |
| CVE-2026-34064 |
5.3 (3.1)
|
nimiq-account: Vesting insufficient funds error can panic |
nimiq |
nimiq-account |
2026-04-22T19:43:04.453Z | 2026-04-23T16:25:19.186Z |
| CVE-2026-34063 |
7.5 (3.1)
|
network-libp2p: Peer can crash the node by opening dis… |
nimiq |
network-libp2p |
2026-04-22T19:40:26.837Z | 2026-04-23T13:54:06.421Z |
| CVE-2026-34062 |
5.3 (3.1)
|
Nimiq has Allocation of Resources Without Limits or Th… |
nimiq |
network-libp2p |
2026-04-22T19:23:36.838Z | 2026-04-23T12:57:42.075Z |
| CVE-2026-33471 |
9.6 (3.1)
|
nimiq-block has skip block quorum bypass via out-of-ra… |
nimiq |
nimiq-block |
2026-04-22T19:13:04.687Z | 2026-04-23T14:15:20.570Z |
| CVE-2026-32605 |
7.5 (3.1)
|
Nimiq: Remote crash via off-by-one signer bounds check… |
nimiq |
core-rs-albatross |
2026-04-13T18:54:58.542Z | 2026-04-16T13:26:40.930Z |
| CVE-2026-40093 |
8.1 (3.1)
|
nimiq-blockchain is missing a wall-clock upper bound o… |
nimiq |
core-rs-albatross |
2026-04-09T20:29:46.026Z | 2026-04-13T15:38:14.634Z |
| CVE-2026-34069 |
5.3 (3.1)
|
nimiq-consensus panics via RequestMacroChain micro-blo… |
nimiq |
core-rs-albatross |
2026-04-13T23:55:52.994Z | 2026-04-14T16:28:14.091Z |
| CVE-2026-34068 |
6.8 (3.1)
|
nimiq-transaction: UpdateValidator transactions allows… |
nimiq |
nimiq-transaction |
2026-04-22T19:55:08.219Z | 2026-04-23T12:56:27.980Z |
| CVE-2026-40070 |
8.1 (3.1)
|
bsv-sdk and bsv-wallet persist unverified certifier si… |
sgbett |
bsv-ruby-sdk |
2026-04-09T17:26:51.495Z | 2026-04-13T15:38:58.154Z |
| CVE-2026-40477 |
9.1 (3.1)
|
Improper restriction of the scope of accessible object… |
thymeleaf |
thymeleaf |
2026-04-17T21:53:47.271Z | 2026-04-22T03:55:41.093Z |
| CVE-2026-40478 |
9.1 (3.1)
|
Improper neutralization of specific syntax patterns fo… |
thymeleaf |
thymeleaf |
2026-04-17T21:57:01.560Z | 2026-04-22T03:55:42.682Z |
| CVE-2026-40481 |
8.2 (4.0)
|
monetr: Unauthenticated Stripe webhook reads attacker-… |
monetr |
monetr |
2026-04-17T22:54:57.545Z | 2026-04-20T13:36:05.862Z |
| CVE-2026-40347 |
5.3 (3.1)
|
Python-Multipart affected by Denial of Service via lar… |
Kludex |
python-multipart |
2026-04-17T23:56:50.777Z | 2026-04-20T15:46:40.011Z |
| CVE-2026-22683 |
8.7 (4.0)
8.8 (3.1)
|
Windmill < 1.615.0 Operator Role Missing Authorization… |
Windmill Labs |
Windmill CE (Community Edition) |
2026-04-07T16:50:30.297Z | 2026-04-13T13:04:17.928Z |
| CVE-2026-33594 |
5.3 (3.1)
|
Outgoing DoH excessive memory allocation |
PowerDNS |
DNSdist |
2026-04-22T13:48:14.166Z | 2026-04-22T14:36:48.875Z |
| CVE-2026-35582 |
8.8 (3.1)
|
Emissary has an OS Command Injection via Unvalidated I… |
NationalSecurityAgency |
emissary |
2026-04-18T01:16:27.661Z | 2026-04-20T15:48:51.543Z |
| CVE-2026-40925 |
8.3 (3.1)
|
WWBN AVideo has CSRF in configurationUpdate.json.php E… |
WWBN |
AVideo |
2026-04-21T19:58:29.854Z | 2026-04-21T20:35:55.243Z |
| CVE-2026-35241 |
5.7 (3.1)
|
Vulnerability in the PeopleSoft Enterprise CS Stu… |
Oracle Corporation |
PeopleSoft Enterprise CS Student Records |
2026-04-21T20:35:49.320Z | 2026-04-22T15:33:01.531Z |
| CVE-2026-35243 |
7.8 (3.1)
|
Vulnerability in the Oracle Application Developme… |
Oracle Corporation |
Oracle Application Development Framework (ADF) |
2026-04-21T20:35:50.273Z | 2026-04-22T15:32:50.205Z |
| CVE-2026-34279 |
9.1 (3.1)
|
Vulnerability in the Oracle Enterprise Manager Ba… |
Oracle Corporation |
Oracle Enterprise Manager Base Platform |
2026-04-21T20:35:20.053Z | 2026-04-22T14:20:26.979Z |
| CVE-2026-22003 |
6 (3.1)
|
Vulnerability in the Oracle Java SE, Oracle Graal… |
Oracle Corporation |
Oracle Java SE |
2026-04-21T20:35:02.518Z | 2026-04-22T14:10:38.643Z |
| CVE-2025-12474 |
2.3 (4.0)
|
libjxl: Uninitialized memory read in decoder due to in… |
Google |
libjxl |
2026-02-11T15:27:24.118Z | 2026-02-11T21:41:40.223Z |
| CVE-2026-6919 |
9.6 (3.1)
|
Use after free in DevTools in Google Chrome prior… |
Google |
Chrome |
2026-04-23T16:12:22.841Z | 2026-04-24T13:37:36.823Z |
| CVE-2026-6920 |
9.6 (3.1)
|
Out of bounds read in GPU in Google Chrome on And… |
Google |
Chrome |
2026-04-23T16:12:23.660Z | 2026-04-24T03:55:28.732Z |
| CVE-2026-6921 |
8.3 (3.1)
|
Race in GPU in Google Chrome on Windows prior to … |
Google |
Chrome |
2026-04-23T16:12:24.489Z | 2026-04-24T13:38:08.991Z |
| CVE-2026-23407 |
7.8 (3.1)
|
apparmor: fix missing bounds check on DEFAULT table in… |
Linux |
Linux |
2026-04-01T08:36:37.197Z | 2026-04-18T08:58:41.909Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-34065 | nimiq-primitives contains primitives (e.g., block, account, transaction) to be used in Nimiq's Rust… | 2026-04-22T20:16:41.077 | 2026-04-24T17:12:37.357 |
| fkie_cve-2026-34064 | nimiq-account contains account primitives to be used in Nimiq's Rust implementation. Prior to versi… | 2026-04-22T20:16:40.900 | 2026-04-24T17:12:30.763 |
| fkie_cve-2026-34063 | Nimiq's network-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, `… | 2026-04-22T20:16:40.713 | 2026-04-24T17:12:23.350 |
| fkie_cve-2026-34062 | nimiq-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, `MessageCod… | 2026-04-22T20:16:40.530 | 2026-04-24T17:11:49.060 |
| fkie_cve-2026-33471 | nimiq-block contains block primitives to be used in Nimiq's Rust implementation. `SkipBlockProof::v… | 2026-04-22T20:16:40.317 | 2026-04-24T17:11:40.037 |
| fkie_cve-2026-32605 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the … | 2026-04-13T20:16:33.787 | 2026-04-24T17:11:26.693 |
| fkie_cve-2026-40093 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In 1.3.0 and ea… | 2026-04-09T21:16:11.937 | 2026-04-24T17:11:14.347 |
| fkie_cve-2026-34069 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the … | 2026-04-14T00:16:07.023 | 2026-04-24T17:10:45.767 |
| fkie_cve-2026-34068 | nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Pri… | 2026-04-22T21:17:08.197 | 2026-04-24T17:10:07.777 |
| fkie_cve-2026-40070 | BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.3.1 to before 0.8.2, BSV::Wallet::Walle… | 2026-04-09T18:17:03.203 | 2026-04-24T17:03:39.437 |
| fkie_cve-2026-40477 | Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3… | 2026-04-17T22:16:33.500 | 2026-04-24T16:58:57.837 |
| fkie_cve-2026-40478 | Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3… | 2026-04-17T22:16:33.650 | 2026-04-24T16:58:33.957 |
| fkie_cve-2026-40481 | monetr is a budgeting application for recurring expenses. In versions 1.12.3 and below, the public … | 2026-04-17T23:16:12.457 | 2026-04-24T16:57:39.337 |
| fkie_cve-2026-40347 | Python-Multipart is a streaming multipart parser for Python. Versions prior to 0.0.26 have a denial… | 2026-04-18T00:16:38.520 | 2026-04-24T16:51:19.917 |
| fkie_cve-2026-22683 | Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows … | 2026-04-07T17:16:27.037 | 2026-04-24T16:49:50.443 |
| fkie_cve-2026-33594 | A client can trigger excessive memory allocation by generating a lot of queries that are routed to … | 2026-04-22T14:16:53.837 | 2026-04-24T16:48:39.007 |
| fkie_cve-2026-35582 | Emissary is a P2P based data-driven workflow engine. In versions 8.42.0 and below, Executrix.getCom… | 2026-04-18T02:16:11.510 | 2026-04-24T16:48:25.797 |
| fkie_cve-2026-40925 | WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/configurationUpd… | 2026-04-21T21:16:45.903 | 2026-04-24T16:46:18.467 |
| fkie_cve-2026-35241 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (compone… | 2026-04-21T21:16:39.983 | 2026-04-24T16:44:02.000 |
| fkie_cve-2026-35243 | Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middle… | 2026-04-21T21:16:40.260 | 2026-04-24T16:43:37.050 |
| fkie_cve-2026-34279 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (… | 2026-04-21T21:16:32.180 | 2026-04-24T16:43:19.373 |
| fkie_cve-2026-22003 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (c… | 2026-04-21T21:16:25.650 | 2026-04-24T16:42:55.780 |
| fkie_cve-2025-12474 | A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allo… | 2026-02-11T16:15:53.647 | 2026-04-24T16:42:18.960 |
| fkie_cve-2026-6919 | Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who h… | 2026-04-23T18:16:30.520 | 2026-04-24T16:39:50.947 |
| fkie_cve-2026-6920 | Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote atta… | 2026-04-23T18:16:30.640 | 2026-04-24T16:39:41.147 |
| fkie_cve-2026-6921 | Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potent… | 2026-04-23T18:16:30.790 | 2026-04-24T16:39:30.307 |
| fkie_cve-2026-23407 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix missing bounds c… | 2026-04-01T09:16:16.527 | 2026-04-24T16:38:39.543 |
| fkie_cve-2026-23369 | In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Revert "i2c: i801: … | 2026-03-25T11:16:36.347 | 2026-04-24T16:38:18.080 |
| fkie_cve-2026-23370 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman:… | 2026-03-25T11:16:36.527 | 2026-04-24T16:37:55.187 |
| fkie_cve-2026-41271 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3… | 2026-04-23T20:16:15.683 | 2026-04-24T16:37:54.877 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-phf4-w5j6-499q |
5.3 (3.1)
|
Authentication Bypass by Spoofing vulnerability in Michal Novák Secure Admin IP allows Functionalit… | 2024-12-13T15:30:42Z | 2026-04-23T15:33:50Z |
| ghsa-89p6-5p4m-h2pv |
4.3 (3.1)
|
Missing Authorization vulnerability in bqworks Accordion Slider allows Exploiting Incorrectly Confi… | 2024-12-13T15:30:42Z | 2026-04-23T15:33:50Z |
| ghsa-685g-7w4h-726p |
8.1 (3.1)
|
Missing Authorization vulnerability in Premmerce Premmerce User Roles allows Exploiting Incorrectly… | 2024-12-13T15:30:42Z | 2026-04-23T15:33:50Z |
| ghsa-476h-737f-mc4w |
4.3 (3.1)
|
Missing Authorization vulnerability in MailMunch MailChimp Forms by MailMunch allows Exploiting Inc… | 2024-12-13T15:30:42Z | 2026-04-23T15:33:50Z |
| ghsa-q966-x4v8-whfm |
4.3 (3.1)
|
Missing Authorization vulnerability in Mateusz Czardybon Justified Gallery allows Exploiting Incorr… | 2024-12-13T15:30:42Z | 2026-04-23T15:33:49Z |
| ghsa-pfw8-vjxx-7qhh |
5.4 (3.1)
|
Missing Authorization vulnerability in StylemixThemes Cost Calculator Builder allows Exploiting Inc… | 2024-12-13T15:30:42Z | 2026-04-23T15:33:49Z |
| ghsa-mvr3-fvpv-v5pf |
4.3 (3.1)
|
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Portfolio and Projects al… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:49Z |
| ghsa-mv8m-8gw4-6jh3 |
4.3 (3.1)
|
Missing Authorization vulnerability in SolidWP iThemes Sync allows Exploiting Incorrectly Configure… | 2024-12-13T15:30:42Z | 2026-04-23T15:33:49Z |
| ghsa-m9cr-g8p8-8x4r |
6.5 (3.1)
|
Missing Authorization vulnerability in weDevs WP Project Manager allows Exploiting Incorrectly Conf… | 2024-12-13T15:30:42Z | 2026-04-23T15:33:49Z |
| ghsa-j6f4-g5vh-36v8 |
5.3 (3.1)
|
Missing Authorization vulnerability in supsystic.com Popup by Supsystic allows Exploiting Incorrect… | 2024-12-13T15:30:42Z | 2026-04-23T15:33:49Z |
| ghsa-c4vc-qwpj-cgw6 |
5.3 (3.1)
|
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Accordion and Accordion S… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:49Z |
| ghsa-5hgq-g4w5-rwmf |
7.5 (3.1)
|
Missing Authorization vulnerability in Themeisle Redirection for Contact Form 7 allows Exploiting I… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:49Z |
| ghsa-485q-m5hh-2rqx |
5.3 (3.1)
|
Missing Authorization vulnerability in Easy Digital Downloads Easy Digital Downloads allows Exploit… | 2024-12-13T15:30:42Z | 2026-04-23T15:33:49Z |
| ghsa-xx6h-c2fx-v78f |
5.4 (3.1)
|
Missing Authorization vulnerability in OnTheGoSystems Language allows Exploiting Incorrectly Config… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ghsa-wm3h-3hjp-64v8 |
5.4 (3.1)
|
Missing Authorization vulnerability in Suresh Chand CHP Ads Block Detector allows Exploiting Incorr… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ghsa-w9vc-q9hh-6g37 |
4.3 (3.1)
|
Missing Authorization vulnerability in ExpressTech Quiz And Survey Master allows Exploiting Incorre… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ghsa-w4r8-222j-w435 |
5.3 (3.1)
|
Missing Authorization vulnerability in YetAnotherStarsRating.com Yet Another Stars Rating allows Ex… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ghsa-w43h-737f-6x4q |
6.5 (3.1)
|
Missing Authorization vulnerability in miniOrange YourMembership Single Sign On allows Exploiting I… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ghsa-r235-444x-j59r |
6.5 (3.1)
|
Missing Authorization vulnerability in WPSchoolPress Team WPSchoolPress allows Exploiting Incorrect… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ghsa-qv2x-7mqw-c4mf |
4.3 (3.1)
|
Missing Authorization vulnerability in LiquidPoll LiquidPoll – Advanced Polls for Creators and Bran… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ghsa-p77r-v683-34m4 |
4.3 (3.1)
|
Missing Authorization vulnerability in social share pro Social Share Icons & Social Share Buttons a… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ghsa-jf99-j3rv-qp5p |
4.3 (3.1)
|
Missing Authorization vulnerability in Hugh Lashbrooke Post Hit Counter allows Exploiting Incorrect… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ghsa-j5q9-7xqm-r9fg |
5.3 (3.1)
|
Missing Authorization vulnerability in The African Boss Checkout with Zelle on Woocommerce allows E… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ghsa-j3qr-gw2j-fj2r |
5.3 (3.1)
|
Missing Authorization vulnerability in Codents Simple Googlebot Visit allows Exploiting Incorrectly… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ghsa-gvpq-4fvc-8q2q |
5.4 (3.1)
|
Missing Authorization vulnerability in Easyship Easyship WooCommerce Shipping Rates allows Exploiti… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ghsa-gq4m-hx6p-2rp5 |
5.4 (3.1)
|
Missing Authorization vulnerability in wpthemego SW Product Bundles allows Exploiting Incorrectly C… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ghsa-8fg5-f59f-ph4f |
6.5 (3.1)
|
Missing Authorization vulnerability in Designinvento DirectoryPress allows Exploiting Incorrectly C… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ghsa-8f9w-g33v-vmxc |
5.3 (3.1)
|
Missing Authorization vulnerability in Certain Dev Booster Elementor Addons allows Exploiting Incor… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ghsa-8f38-9x5m-gx9w |
7.3 (3.1)
|
Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Exploit… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ghsa-7v6h-292g-jmmf |
5.4 (3.1)
|
Missing Authorization vulnerability in Dylan Blokhuis Instant CSS allows Exploiting Incorrectly Con… | 2024-12-13T15:30:41Z | 2026-04-23T15:33:48Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2022-43037 |
|
The d8s-lists package for Python, as distributed on PyPI, included a potential code-execu… | democritus-dicts | 2022-10-11T22:15:00Z | 2023-06-05T01:12:50.022993Z |
| pysec-2022-43036 |
|
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execut… | democritus-csv | 2022-10-11T22:15:00Z | 2023-06-05T01:12:49.913597Z |
| pysec-2022-43035 |
|
The d8s-urls package for Python, as distributed on PyPI, included a potential code-execut… | democritus-csv | 2022-10-11T22:15:00Z | 2023-06-05T01:12:49.835906Z |
| pysec-2022-43034 |
|
The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execut… | d8s-yaml | 2022-10-11T22:15:00Z | 2023-06-05T01:12:49.718747Z |
| pysec-2022-43033 |
|
The d8s-xml package for Python, as distributed on PyPI, included a potential code-executi… | d8s-xml | 2022-10-11T22:15:00Z | 2023-06-05T01:12:49.587712Z |
| pysec-2022-43032 |
|
The d8s-utility package for Python, as distributed on PyPI, included a potential code-exe… | d8s-utility | 2022-10-11T22:15:00Z | 2023-06-05T01:12:49.473097Z |
| pysec-2022-43031 |
|
The d8s-utility package for Python, as distributed on PyPI, included a potential code-exe… | d8s-utility | 2022-10-11T22:15:00Z | 2023-06-05T01:12:49.395893Z |
| pysec-2022-43030 |
|
The d8s-urls package for Python, as distributed on PyPI, included a potential code-execut… | d8s-urls | 2022-10-11T22:15:00Z | 2023-06-05T01:12:49.291206Z |
| pysec-2022-43029 |
|
The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execut… | d8s-pdfs | 2022-10-11T22:15:00Z | 2023-06-05T01:12:49.177857Z |
| pysec-2022-43028 |
|
The d8s-networking package for Python, as distributed on PyPI, included a potential code-… | d8s-networking | 2022-10-11T22:15:00Z | 2023-06-05T01:12:49.075232Z |
| pysec-2022-43027 |
|
The d8s-lists package for Python, as distributed on PyPI, included a potential code-execu… | d8s-lists | 2022-10-11T22:15:00Z | 2023-06-05T01:12:48.913872Z |
| pysec-2022-43026 |
|
The d8s-json package for Python, as distributed on PyPI, included a potential code-execut… | d8s-json | 2022-10-11T22:15:00Z | 2023-06-05T01:12:48.769675Z |
| pysec-2022-43025 |
|
The d8s-html package for Python, as distributed on PyPI, included a potential code-execut… | d8s-html | 2022-10-11T22:15:00Z | 2023-06-05T01:12:48.578719Z |
| pysec-2022-43024 |
|
The d8s-file-system package for Python, as distributed on PyPI, included a potential code… | d8s-file-system | 2022-10-11T22:15:00Z | 2023-06-05T01:12:48.460219Z |
| pysec-2022-43023 |
|
The d8s-domains package for Python, as distributed on PyPI, included a potential code-exe… | d8s-domains | 2022-10-11T22:15:00Z | 2023-06-05T01:12:48.349619Z |
| pysec-2022-43022 |
|
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execut… | d8s-asns | 2022-10-11T22:15:00Z | 2023-06-05T01:12:48.247277Z |
| pysec-2022-43021 |
|
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execut… | d8s-asns | 2022-10-11T22:15:00Z | 2023-06-05T01:12:48.172299Z |
| pysec-2022-43020 |
|
The d8s-archives package for Python, as distributed on PyPI, included a potential code-ex… | d8s-archives | 2022-10-11T22:15:00Z | 2023-06-05T01:12:48.057391Z |
| pysec-2022-43019 |
|
The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-… | d8s-algorithms | 2022-10-11T22:15:00Z | 2023-06-05T01:12:47.946780Z |
| pysec-2023-60 |
|
Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apa… | apache-airflow | 2023-05-08T10:15:00Z | 2023-06-05T01:12:45.763850Z |
| pysec-2023-59 |
|
Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airf… | apache-airflow | 2023-05-08T12:15:00Z | 2023-06-05T01:12:45.655810Z |
| pysec-2021-427 |
|
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.… | mpmath | 2021-06-21T20:15:00Z | 2023-05-31T06:15:00Z |
| pysec-2022-42980 |
|
Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL. | pillow | 2022-11-14T07:15:00Z | 2023-05-25T05:07:00Z |
| pysec-2022-234 |
|
Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes t… | poetry | 2022-03-21T22:15:00Z | 2023-05-25T05:07:00Z |
| pysec-2022-233 |
|
openssh_key_parser is an open source Python package providing utilities to parse and pack… | openssh-key-parser | 2022-07-06T18:15:00Z | 2023-05-25T05:07:00Z |
| pysec-2022-230 |
|
NULL Pointer Dereference allows attackers to cause a denial of service (or application cr… | lxml | 2022-07-05T10:15:00Z | 2023-05-25T05:07:00Z |
| pysec-2022-229 |
|
`gradio` is an open source framework for building interactive machine learning models and… | gradio | 2022-03-17T21:15:00Z | 2023-05-25T05:07:00Z |
| pysec-2022-228 |
|
An Access Control vunerabiity exists in Gerapy v 0.9.7 via the spider parameter in projec… | gerapy | 2022-03-10T21:15:00Z | 2023-05-25T05:07:00Z |
| pysec-2022-227 |
|
Bottle before 0.12.20 mishandles errors during early request binding. | bottle | 2022-06-02T14:15:00Z | 2023-05-25T05:07:00Z |
| pysec-2021-874 |
|
pytorch-lightning is vulnerable to Deserialization of Untrusted Data | pytorch-lightning | 2021-12-23T18:15:00Z | 2023-05-25T05:07:00Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33163 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.691394Z |
| gsd-2024-33162 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.736744Z |
| gsd-2024-33161 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.747995Z |
| gsd-2024-33160 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.698437Z |
| gsd-2024-33159 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.732504Z |
| gsd-2024-33158 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.688050Z |
| gsd-2024-33157 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.746799Z |
| gsd-2024-33156 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.718799Z |
| gsd-2024-33155 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.707542Z |
| gsd-2024-33154 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.704633Z |
| gsd-2024-33153 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.662915Z |
| gsd-2024-33152 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.669552Z |
| gsd-2024-33151 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.706908Z |
| gsd-2024-33150 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.617332Z |
| gsd-2024-33149 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.633232Z |
| gsd-2024-33148 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.705420Z |
| gsd-2024-33147 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.758533Z |
| gsd-2024-33146 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.703789Z |
| gsd-2024-33145 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.603403Z |
| gsd-2024-33144 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.671183Z |
| gsd-2024-33143 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.755388Z |
| gsd-2024-33142 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.695922Z |
| gsd-2024-33141 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.694744Z |
| gsd-2024-33140 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.690890Z |
| gsd-2024-33139 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.720304Z |
| gsd-2024-33138 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.712826Z |
| gsd-2024-33137 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.732911Z |
| gsd-2024-33136 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.757468Z |
| gsd-2024-33135 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.734589Z |
| gsd-2024-33134 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.754805Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192725 | Malicious code in chai-pack (npm) | 2025-12-23T08:02:18Z | 2026-04-01T12:28:01Z |
| mal-2025-191567 | Malicious code in chai-sync (npm) | 2025-12-01T13:05:09Z | 2026-04-01T12:28:01Z |
| mal-2026-1302 | Malicious code in @platform-growth/guidance-channel-provider (npm) | 2026-03-10T01:04:15Z | 2026-04-01T12:28:00Z |
| mal-2026-1247 | Malicious code in @imhuman/corp-build-utils-poc (npm) | 2026-03-05T16:49:33Z | 2026-04-01T12:28:00Z |
| mal-2026-1187 | Malicious code in @twilio-client/twilio-client (npm) | 2026-03-03T06:32:39Z | 2026-04-01T12:28:00Z |
| mal-2026-1170 | Malicious code in @global-dax-ad-platform/dax-utils (npm) | 2026-03-03T05:13:37Z | 2026-04-01T12:28:00Z |
| mal-2026-1169 | Malicious code in @global-dax-ad-platform/dax-types (npm) | 2026-03-03T05:13:37Z | 2026-04-01T12:28:00Z |
| mal-2026-1168 | Malicious code in @global-dax-ad-platform/dax-styles (npm) | 2026-03-03T05:13:37Z | 2026-04-01T12:28:00Z |
| mal-2026-1167 | Malicious code in @global-dax-ad-platform/dax-modules (npm) | 2026-03-03T05:13:37Z | 2026-04-01T12:28:00Z |
| mal-2026-1166 | Malicious code in @global-dax-ad-platform/dax-hooks (npm) | 2026-03-03T05:13:37Z | 2026-04-01T12:28:00Z |
| mal-2026-1165 | Malicious code in @global-dax-ad-platform/dax-components (npm) | 2026-03-03T05:13:37Z | 2026-04-01T12:28:00Z |
| mal-2026-2316 | Malicious code in openai-async-helpers (PyPI) | 2026-04-01T06:00:26Z | 2026-04-01T06:00:27Z |
| mal-2026-2317 | Malicious code in pygithub-async-utils (PyPI) | 2026-04-01T05:58:39Z | 2026-04-01T05:58:40Z |
| mal-2026-2315 | Malicious code in latinum-wallet-mcp (PyPI) | 2026-03-31T20:37:05Z | 2026-03-31T21:18:58Z |
| mal-2026-2313 | Malicious code in coredxloader (PyPI) | 2026-03-31T17:07:08Z | 2026-03-31T17:07:08Z |
| mal-2026-2274 | Malicious code in autoshipment-public-front (npm) | 2026-03-28T10:54:19Z | 2026-03-31T11:35:12Z |
| mal-2026-2311 | Malicious code in officepyai (PyPI) | 2026-03-31T09:26:34Z | 2026-03-31T09:28:16Z |
| mal-2026-2310 | Malicious code in lakeflow-community-connectors (PyPI) | 2026-03-31T05:36:24Z | 2026-03-31T05:36:24Z |
| mal-2026-2306 | Malicious code in plain-crypto-js (npm) | 2026-03-31T02:07:58Z | 2026-03-31T05:26:30Z |
| mal-2026-2309 | Malicious code in zzzzthisisitwantsafecheckitzzzz (PyPI) | 2026-03-31T03:35:47Z | 2026-03-31T05:19:14Z |
| mal-2026-2308 | Malicious code in workingitme (PyPI) | 2026-03-31T03:40:48Z | 2026-03-31T05:19:14Z |
| mal-2026-2257 | Malicious code in xpna-context (npm) | 2026-03-27T12:10:43Z | 2026-03-31T03:12:05Z |
| mal-2026-2227 | Malicious code in validator-lut-sdk (npm) | 2026-03-26T00:52:19Z | 2026-03-31T03:12:05Z |
| mal-2026-2190 | Malicious code in ts-bign (npm) | 2026-03-25T11:59:23Z | 2026-03-31T03:12:05Z |
| mal-2026-2162 | Malicious code in svg-sizer-responsive (npm) | 2026-03-25T01:49:22Z | 2026-03-31T03:12:05Z |
| mal-2026-2157 | Malicious code in transitive_lib (npm) | 2026-03-25T00:31:36Z | 2026-03-31T03:12:05Z |
| mal-2026-2156 | Malicious code in tailwind-animationbasis (npm) | 2026-03-25T00:35:42Z | 2026-03-31T03:12:05Z |
| mal-2026-2136 | Malicious code in yelp-react-component-rating (npm) | 2026-03-24T12:48:28Z | 2026-03-31T03:12:05Z |
| mal-2026-2135 | Malicious code in yelp-react-component-photo-upload (npm) | 2026-03-24T12:48:27Z | 2026-03-31T03:12:05Z |
| mal-2026-2134 | Malicious code in yelp-biz-action-constants-js-generated (npm) | 2026-03-24T12:48:27Z | 2026-03-31T03:12:05Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1077 | VMware Tanzu Spring Framework: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-15T22:00:00.000+00:00 | 2025-10-08T22:00:00.000+00:00 |
| wid-sec-w-2025-0954 | Apache ActiveMQ: Schwachstelle ermöglicht Denial of Service | 2025-05-06T22:00:00.000+00:00 | 2025-10-08T22:00:00.000+00:00 |
| wid-sec-w-2025-2181 | Logback: Schwachstelle ermöglicht Codeausführung | 2025-10-01T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-2171 | Red Hat Enterprise Linux (JSON-XS Perl): Schwachstelle ermöglicht Denial of Service | 2025-09-30T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-2164 | Red Hat Enterprise Linux (FreeIPA): Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-09-30T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-2075 | Podman: Schwachstelle ermöglicht Manipulation von Dateien | 2025-09-16T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-2043 | IBM QRadar SIEM: Mehrere Schwachstellen | 2025-09-11T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1980 | IBM MQ: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-04T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1968 | pgAdmin: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-03T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1817 | NGINX: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-08-13T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-2716 | docker: Mehrere Schwachstellen | 2021-02-02T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-1751 | systemd: Schwachstelle ermöglicht Manipulation von Einträgen | 2023-07-13T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-1183 | docker: Mehrere Schwachstellen | 2023-05-09T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-1124 | docker: Mehrere Schwachstellen | 2021-10-04T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-0157 | Red Hat OpenShift: Mehrere Schwachstellen | 2023-01-19T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-0152 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2023-01-18T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-0089 | Python: Schwachstelle ermöglicht Denial of Service | 2023-01-12T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-0066 | sudo: Schwachstelle ermöglicht Privilegieneskalation | 2021-01-26T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2022-0243 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2021-06-27T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2022-0242 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2021-05-26T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2022-0214 | Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2021-07-21T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-2157 | Apple iOS, iPadOS and macOS (Font Parser): Schwachstelle ermöglicht Denial of Service | 2025-09-29T22:00:00.000+00:00 | 2025-09-30T22:00:00.000+00:00 |
| wid-sec-w-2025-2149 | IBM License Metric Tool: Mehrere Schwachstellen | 2025-09-28T22:00:00.000+00:00 | 2025-09-29T22:00:00.000+00:00 |
| wid-sec-w-2025-2117 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen | 2025-09-23T22:00:00.000+00:00 | 2025-09-29T22:00:00.000+00:00 |
| wid-sec-w-2025-2074 | Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen | 2025-09-16T22:00:00.000+00:00 | 2025-09-29T22:00:00.000+00:00 |
| wid-sec-w-2025-2073 | ESRI ArcGIS: Mehrere Schwachstellen | 2025-09-16T22:00:00.000+00:00 | 2025-09-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1981 | ImageMagick (MagickCore blob): Schwachstelle ermöglicht Codeausführung | 2025-09-04T22:00:00.000+00:00 | 2025-09-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1863 | libTIFF: Schwachstelle ermöglicht Denial of Service | 2025-08-19T22:00:00.000+00:00 | 2025-09-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1847 | libTIFF: Schwachstelle ermöglicht Denial of Service | 2025-08-14T22:00:00.000+00:00 | 2025-09-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1721 | OWASP ModSecurity: Schwachstelle ermöglicht Cross-Site Scripting | 2025-08-05T22:00:00.000+00:00 | 2025-09-29T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-14-107-01 | Siemens SINEMA Vulnerabilities | 2014-01-18T07:00:00.000000Z | 2025-06-06T18:44:58.592001Z |
| icsa-14-016-01 | Ecava IntegraXor Buffer Overflow Vulnerability | 2014-10-19T06:00:00.000000Z | 2025-06-06T18:44:52.152987Z |
| icsa-14-014-01 | Schneider Electric ClearSCADA Uncontrolled Resource Consumption Vulnerability | 2014-10-17T06:00:00.000000Z | 2025-06-06T18:44:45.696445Z |
| icsa-14-010-01 | MatrikonOPC Improper Input Validation | 2014-10-13T06:00:00.000000Z | 2025-06-06T18:44:39.268482Z |
| icsa-14-008-01 | Ecava Sdn Bhd IntegraXor Project Directory Information Disclosure Vulnerability | 2014-10-11T06:00:00.000000Z | 2025-06-06T18:44:32.855266Z |
| icsa-14-007-01b | Sierra Wireless AirLink Raven X EV-DO Vulnerabilities (Update B) | 2014-10-10T06:00:00.000000Z | 2025-06-06T18:44:19.916379Z |
| icsa-14-006-01 | Schneider Electric Telvent SAGE RTU DNP3 Improper Input Validation Vulnerability | 2014-10-09T06:00:00.000000Z | 2025-06-06T18:44:13.497573Z |
| icsa-13-350-01a | Schneider Electric CitectSCADA Products Exception Handler Vulnerability (Update A) | 2013-09-18T06:00:00.000000Z | 2025-06-06T18:43:53.863083Z |
| icsa-13-347-01 | Siemens COMOS Privilege Escalation | 2013-09-15T06:00:00.000000Z | 2025-06-06T18:43:47.381681Z |
| icsa-13-346-02 | Cooper Power Systems Cybectec DNP3 Master OPC Server Improper Input Validation | 2013-09-14T06:00:00.000000Z | 2025-06-06T18:43:40.964007Z |
| icsa-13-346-01 | Cooper Power Systems Improper Input Validation Vulnerability | 2013-09-14T06:00:00.000000Z | 2025-06-06T18:43:28.031039Z |
| icsa-13-340-01 | RuggedCom ROS Multiple Vulnerabilities | 2013-09-08T06:00:00.000000Z | 2025-06-06T18:43:15.047736Z |
| icsa-13-338-01 | Siemens SINAMICS S/G Authentication Bypass Vulnerability | 2013-09-06T06:00:00.000000Z | 2025-06-06T18:43:08.603348Z |
| icsa-13-337-01 | Elecsys Director Gateway Improper Input Validation Vulnerability | 2013-09-05T06:00:00.000000Z | 2025-06-06T18:43:02.174857Z |
| icsa-13-329-01 | Triangle Research Nano-10 PLC Improper Input Validation | 2013-08-28T06:00:00.000000Z | 2025-06-06T18:42:55.702902Z |
| icsa-13-297-02 | GE Proficy DNP3 Improper Input Validation | 2013-07-27T06:00:00.000000Z | 2025-06-06T18:42:42.774163Z |
| icsa-13-297-01 | Catapult Software DNP3 Driver Improper Input Validation | 2013-07-27T06:00:00.000000Z | 2025-06-06T18:42:29.914784Z |
| icsa-13-295-01 | WellinTech KingView ActiveX Vulnerabilities | 2013-07-25T06:00:00.000000Z | 2025-06-06T18:42:17.056042Z |
| icsa-13-282-01a | Alstom e-Terracontrol DNP3 Master Improper Input Validation (Update A) | 2013-07-12T06:00:00.000000Z | 2025-06-06T18:42:03.985605Z |
| icsa-13-277-01 | Philips Xper Buffer Overflow Vulnerability | 2013-07-07T06:00:00.000000Z | 2025-06-06T18:41:57.477223Z |
| icsa-13-276-01 | Invensys Wonderware InTouch Improper Input Validation Vulnerability | 2013-07-06T06:00:00.000000Z | 2025-06-06T18:41:51.044803Z |
| icsa-13-274-01 | Siemens SCALANCE X-200 Authentication Bypass Vulnerability | 2013-07-04T06:00:00.000000Z | 2025-06-06T18:41:44.564454Z |
| icsa-13-259-01b | Emerson ROC800 Multiple Vulnerabilities (Update B) | 2013-06-19T06:00:00.000000Z | 2025-06-06T18:41:12.361598Z |
| icsa-13-259-01a | Emerson ROC800 Multiple Vulnerabilities (Update A) | 2013-06-19T06:00:00.000000Z | 2025-06-06T18:40:40.005036Z |
| icsa-13-252-01 | SUBNET Solutions Inc. SubSTATION Server DNP3 Outstation Improper Input Validation | 2013-06-12T06:00:00.000000Z | 2025-06-06T18:40:27.160098Z |
| icsa-13-248-01 | ProSoft Technology RadioLinx ControlScape PRNG Vulnerability | 2013-06-08T06:00:00.000000Z | 2025-06-06T18:40:20.749066Z |
| icsa-13-240-01 | Triangle MicroWorks Improper Input Validation | 2013-05-31T06:00:00.000000Z | 2025-06-06T18:40:07.718354Z |
| icsa-13-234-02 | Top Server OPC Improper Input Validation Vulnerability | 2013-05-25T06:00:00.000000Z | 2025-06-06T18:40:01.237007Z |
| icsa-13-234-01 | Schneider Electric Trio J-Series Radio Encryption | 2013-05-25T06:00:00.000000Z | 2025-06-06T18:39:54.739781Z |
| icsa-13-233-01 | Siemens COMOS Privilege Escalation Vulnerability | 2013-05-24T06:00:00.000000Z | 2025-06-06T18:39:48.283414Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-pi-epnm-erpwaxle | Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities | 2023-04-05T16:00:00+00:00 | 2023-05-15T13:11:25+00:00 |
| cisco-sa-pi-epnm-eRPWAXLe | Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities | 2023-04-05T16:00:00+00:00 | 2023-05-15T13:11:25+00:00 |
| cisco-sa-c9300-spi-ace-yejygnnq | Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-05-11T15:34:52+00:00 |
| cisco-sa-c9300-spi-ace-yejYgnNQ | Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-05-11T15:34:52+00:00 |
| cisco-sa-iox-priv-escalate-xg8zkypk | Cisco IOS XE Software IOx Application Hosting Environment Privilege Escalation Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-05-08T15:01:45+00:00 |
| cisco-sa-iox-priv-escalate-Xg8zkyPk | Cisco IOS XE Software IOx Application Hosting Environment Privilege Escalation Vulnerability | 2023-03-22T16:00:00+00:00 | 2023-05-08T15:01:45+00:00 |
| cisco-sa-spa-unauth-upgrade-uqhytww | Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability | 2023-05-03T16:00:00+00:00 | 2023-05-03T16:00:00+00:00 |
| cisco-sa-spa-unauth-upgrade-UqhyTWW | Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability | 2023-05-03T16:00:00+00:00 | 2023-05-03T16:00:00+00:00 |
| cisco-sa-ipp-oobwrite-8cmf5r7u | Cisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol Stack Overflow Vulnerability | 2022-12-08T16:00:00+00:00 | 2023-04-27T21:07:18+00:00 |
| cisco-sa-ipp-oobwrite-8cMF5r7U | Cisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol Stack Overflow Vulnerability | 2022-12-08T16:00:00+00:00 | 2023-04-27T21:07:18+00:00 |
| cisco-sa-pcd-xss-jdxpjm7 | Cisco Prime Collaboration Deployment Cross-Site Scripting Vulnerability | 2023-04-26T16:00:00+00:00 | 2023-04-26T16:00:00+00:00 |
| cisco-sa-pcd-xss-jDXpjm7 | Cisco Prime Collaboration Deployment Cross-Site Scripting Vulnerability | 2023-04-26T16:00:00+00:00 | 2023-04-26T16:00:00+00:00 |
| cisco-sa-cisco-pdng-dos-kmzwey2q | Cisco Packet Data Network Gateway IPsec ICMP Denial of Service Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-19T20:31:01+00:00 |
| cisco-sa-cisco-pdng-dos-KmzwEy2Q | Cisco Packet Data Network Gateway IPsec ICMP Denial of Service Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-19T20:31:01+00:00 |
| cisco-sa-staros-ssh-privesc-bmwejc3h | Cisco StarOS Software Key-Based SSH Authentication Privilege Escalation Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-staros-ssh-privesc-BmWeJC3h | Cisco StarOS Software Key-Based SSH Authentication Privilege Escalation Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-sdwan-vmanage-wfnqmyhn | Cisco SD-WAN vManage Software Arbitrary File Deletion Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-sdwan-vmanage-wfnqmYhN | Cisco SD-WAN vManage Software Arbitrary File Deletion Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-roomos-file-write-rhkwegkf | Cisco TelePresence Collaboration Endpoint and RoomOS Arbitrary File Write Vulnerabilities | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-roomos-file-write-rHKwegKf | Cisco TelePresence Collaboration Endpoint and RoomOS Arbitrary File Write Vulnerabilities | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-ind-caelfk6v | Cisco Industrial Network Director Vulnerabilities | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-ind-CAeLFk6V | Cisco Industrial Network Director Vulnerabilities | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-cml-auth-bypass-4fucceg5 | Cisco Modeling Labs External Authentication Bypass Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-cml-auth-bypass-4fUCCeG5 | Cisco Modeling Labs External Authentication Bypass Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-bw-tcp-dos-kedjcxls | Cisco BroadWorks Network Server TCP Denial of Service Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-bw-tcp-dos-KEdJCxLs | Cisco BroadWorks Network Server TCP Denial of Service Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-cisco-pi-epnm-xss-mzshh2j | Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability | 2023-03-01T16:00:00+00:00 | 2023-04-06T15:31:34+00:00 |
| cisco-sa-cisco-pi-epnm-xss-mZShH2J | Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability | 2023-03-01T16:00:00+00:00 | 2023-04-06T15:31:34+00:00 |
| cisco-sa-sb-rv01x_rv32x_rce-nzagwwdd | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Remote Command Execution Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-05T20:30:30+00:00 |
| cisco-sa-sb-rv01x_rv32x_rce-nzAGWWDD | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Remote Command Execution Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-05T20:30:30+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38704 | rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access | 2025-09-02T00:00:00.000Z | 2026-03-31T15:01:57.000Z |
| msrc_cve-2025-22057 | net: decrease cached dst counters in dst_release | 2025-04-02T00:00:00.000Z | 2026-03-31T15:01:56.000Z |
| msrc_cve-2025-68745 | scsi: qla2xxx: Clear cmds after chip reset | 2025-12-02T00:00:00.000Z | 2026-03-31T15:01:55.000Z |
| msrc_cve-2022-49531 | loop: implement ->free_disk | 2025-02-02T00:00:00.000Z | 2026-03-31T15:01:52.000Z |
| msrc_cve-2026-23157 | btrfs: do not strictly require dirty metadata threshold for metadata writepages | 2026-02-02T00:00:00.000Z | 2026-03-31T15:01:50.000Z |
| msrc_cve-2025-37834 | mm/vmscan: don't try to reclaim hwpoison folio | 2025-05-02T00:00:00.000Z | 2026-03-31T15:01:45.000Z |
| msrc_cve-2024-26947 | ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses | 2024-05-02T07:00:00.000Z | 2026-03-31T15:01:37.000Z |
| msrc_cve-2024-49904 | drm/amdgpu: add list empty check to avoid null pointer issue | 2024-10-01T07:00:00.000Z | 2026-03-31T15:01:35.000Z |
| msrc_cve-2025-68736 | landlock: Fix handling of disconnected directories | 2025-12-02T00:00:00.000Z | 2026-03-31T15:01:33.000Z |
| msrc_cve-2026-23399 | nf_tables: nft_dynset: fix possible stateful expression memleak in error path | 2026-03-02T00:00:00.000Z | 2026-03-31T15:01:32.000Z |
| msrc_cve-2025-21899 | tracing: Fix bad hist from corrupting named_triggers list | 2025-04-02T00:00:00.000Z | 2026-03-31T15:01:32.000Z |
| msrc_cve-2023-53152 | drm/amdgpu: fix calltrace warning in amddrm_buddy_fini | 2025-09-02T00:00:00.000Z | 2026-03-31T15:01:32.000Z |
| msrc_cve-2024-26680 | net: atlantic: Fix DMA mapping for PTP hwts ring | 2024-04-02T07:00:00.000Z | 2026-03-31T15:01:31.000Z |
| msrc_cve-2024-35887 | ax25: fix use-after-free bugs caused by ax25_ds_del_timer | 2024-05-02T07:00:00.000Z | 2026-03-31T15:01:30.000Z |
| msrc_cve-2026-23154 | net: fix segmentation of forwarding fraglist GRO | 2026-02-02T00:00:00.000Z | 2026-03-31T15:01:27.000Z |
| msrc_cve-2024-53219 | virtiofs: use pages instead of pointer for kernel direct IO | 2024-12-02T00:00:00.000Z | 2026-03-31T15:01:19.000Z |
| msrc_cve-2024-26938 | drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode() | 2024-05-02T07:00:00.000Z | 2026-03-31T15:01:13.000Z |
| msrc_cve-2026-25645 | Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function | 2026-03-02T00:00:00.000Z | 2026-03-31T15:01:09.000Z |
| msrc_cve-2024-35868 | smb: client: fix potential UAF in cifs_stats_proc_write() | 2024-05-02T07:00:00.000Z | 2026-03-31T15:01:09.000Z |
| msrc_cve-2022-49177 | hwrng: cavium - fix NULL but dereferenced coccicheck error | 2025-02-02T00:00:00.000Z | 2026-03-31T15:01:09.000Z |
| msrc_cve-2024-38594 | net: stmmac: move the EST lock to struct stmmac_priv | 2024-06-02T07:00:00.000Z | 2026-03-31T15:01:08.000Z |
| msrc_cve-2025-38162 | netfilter: nft_set_pipapo: prevent overflow in lookup table allocation | 2025-07-02T00:00:00.000Z | 2026-03-31T15:01:06.000Z |
| msrc_cve-2026-23126 | netdevsim: fix a race issue related to the operation on bpf_bound_progs list | 2026-02-02T00:00:00.000Z | 2026-03-31T15:01:02.000Z |
| msrc_cve-2024-50012 | cpufreq: Avoid a bad reference count on CPU node | 2024-10-01T07:00:00.000Z | 2026-03-31T15:00:58.000Z |
| msrc_cve-2025-38422 | net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices | 2025-07-02T00:00:00.000Z | 2026-03-31T15:00:54.000Z |
| msrc_cve-2022-48668 | smb3: fix temporary data corruption in collapse range | 2024-04-02T07:00:00.000Z | 2026-03-31T15:00:50.000Z |
| msrc_cve-2024-57974 | udp: Deal with race between UDP socket address change and rehash | 2025-02-02T00:00:00.000Z | 2026-03-31T15:00:46.000Z |
| msrc_cve-2024-56738 | GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks. | 2024-12-02T00:00:00.000Z | 2026-03-31T15:00:44.000Z |
| msrc_cve-2025-21907 | mm: memory-failure: update ttu flag inside unmap_poisoned_folio | 2025-04-02T00:00:00.000Z | 2026-03-31T15:00:43.000Z |
| msrc_cve-2024-26706 | parisc: Fix random data corruption from exception handler | 2024-04-02T07:00:00.000Z | 2026-03-31T15:00:43.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:20132-1 | Security update for strongswan | 2025-12-02T13:11:59Z | 2025-12-02T13:11:59Z |
| opensuse-su-2025-20132-1 | Security update for strongswan | 2025-12-02T13:11:59Z | 2025-12-02T13:11:59Z |
| opensuse-su-2025:15793-1 | gegl-0.4.64-3.1 on GA media | 2025-12-02T00:00:00Z | 2025-12-02T00:00:00Z |
| opensuse-su-2025:15792-1 | python39-3.9.24-2.1 on GA media | 2025-12-01T00:00:00Z | 2025-12-01T00:00:00Z |
| opensuse-su-2025:15791-1 | python315-3.15.0~a1-2.1 on GA media | 2025-12-01T00:00:00Z | 2025-12-01T00:00:00Z |
| opensuse-su-2025:15790-1 | python-mistralclient-doc-6.1.0-1.1 on GA media | 2025-12-01T00:00:00Z | 2025-12-01T00:00:00Z |
| opensuse-su-2025:15789-1 | libecpg6-18.1-1.1 on GA media | 2025-12-01T00:00:00Z | 2025-12-01T00:00:00Z |
| opensuse-su-2025:15788-1 | lightdm-kde-greeter-6.0.5-1.1 on GA media | 2025-12-01T00:00:00Z | 2025-12-01T00:00:00Z |
| opensuse-su-2025-20130-1 | Security update for bash-git-prompt | 2025-11-28T13:38:03Z | 2025-11-28T13:38:03Z |
| opensuse-su-2025-20128-1 | Security update for shadowsocks-v2ray-plugin, v2ray-core | 2025-11-28T13:38:03Z | 2025-11-28T13:38:03Z |
| opensuse-su-2025:20125-1 | Security update for java-17-openjdk | 2025-11-28T10:27:02Z | 2025-11-28T10:27:02Z |
| opensuse-su-2025-20125-1 | Security update for java-17-openjdk | 2025-11-28T10:27:02Z | 2025-11-28T10:27:02Z |
| opensuse-su-2025:20123-1 | Security update for java-21-openjdk | 2025-11-28T09:35:08Z | 2025-11-28T09:35:08Z |
| opensuse-su-2025-20123-1 | Security update for java-21-openjdk | 2025-11-28T09:35:08Z | 2025-11-28T09:35:08Z |
| opensuse-su-2025:20122-1 | Security update for openssh | 2025-11-28T07:46:24Z | 2025-11-28T07:46:24Z |
| opensuse-su-2025-20122-1 | Security update for openssh | 2025-11-28T07:46:24Z | 2025-11-28T07:46:24Z |
| opensuse-su-2025:15787-1 | python311-salt-3006.0-52.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15786-1 | postgresql17-17.7-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15785-1 | postgresql16-16.11-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15784-1 | postgresql15-15.15-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15783-1 | postgresql14-14.20-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15782-1 | postgresql13-13.23-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15781-1 | libpng16-16-1.6.51-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15780-1 | libcoap-devel-4.3.5a-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15779-1 | helm3-3.19.2-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:20113-1 | Security update for dovecot24 | 2025-11-27T20:17:17Z | 2025-11-27T20:17:17Z |
| opensuse-su-2025-20113-1 | Security update for dovecot24 | 2025-11-27T20:17:17Z | 2025-11-27T20:17:17Z |
| opensuse-su-2025:20114-1 | Security update for himmelblau | 2025-11-27T20:16:29Z | 2025-11-27T20:16:29Z |
| opensuse-su-2025-20114-1 | Security update for himmelblau | 2025-11-27T20:16:29Z | 2025-11-27T20:16:29Z |
| opensuse-su-2025-20121-1 | Security update for redis | 2025-11-27T15:53:18Z | 2025-11-27T15:53:18Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:5677 | Red Hat Security Advisory: OpenShift Container Platform 4.12.39 bug fix and security update | 2023-10-18T03:01:21+00:00 | 2026-04-25T13:41:06+00:00 |
| rhsa-2023:5675 | Red Hat Security Advisory: OpenShift Container Platform 4.13.17 packages and security update | 2023-10-17T18:26:04+00:00 | 2026-04-25T13:41:05+00:00 |
| rhsa-2023:5672 | Red Hat Security Advisory: OpenShift Container Platform 4.13.17 bug fix and security update | 2023-10-17T18:07:15+00:00 | 2026-04-25T13:41:05+00:00 |
| rhsa-2023:5542 | Red Hat Security Advisory: Logging Subsystem 5.5.17 - Red Hat OpenShift security update | 2023-10-24T12:02:15+00:00 | 2026-04-25T13:41:05+00:00 |
| rhsa-2023:5541 | Red Hat Security Advisory: Logging Subsystem 5.6.12 - Red Hat OpenShift security update | 2023-10-20T04:11:50+00:00 | 2026-04-25T13:41:02+00:00 |
| rhsa-2023:5530 | Red Hat Security Advisory: Logging Subsystem 5.7.7 - Red Hat OpenShift security update | 2023-10-20T05:04:43+00:00 | 2026-04-25T13:41:02+00:00 |
| rhsa-2023:5009 | Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security update | 2023-10-31T14:06:15+00:00 | 2026-04-25T13:41:01+00:00 |
| rhsa-2023:5005 | Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security and extras update | 2023-10-31T10:41:03+00:00 | 2026-04-25T13:41:01+00:00 |
| rhsa-2023:3642 | Red Hat Security Advisory: Red Hat Ceph Storage 6.1 Container security and bug fix update | 2023-06-15T15:59:41+00:00 | 2026-04-25T13:40:59+00:00 |
| rhsa-2023:2802 | Red Hat Security Advisory: container-tools:4.0 security and bug fix update | 2023-05-16T08:59:44+00:00 | 2026-04-25T13:40:57+00:00 |
| rhsa-2023:2758 | Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update | 2023-05-16T08:49:00+00:00 | 2026-04-25T13:40:57+00:00 |
| rhsa-2023:1529 | Red Hat Security Advisory: Service Telemetry Framework 1.5 security update | 2023-03-30T00:42:39+00:00 | 2026-04-25T13:40:57+00:00 |
| rhsa-2023:0727 | Red Hat Security Advisory: OpenShift Container Platform 4.12.3 security update | 2023-02-16T16:12:02+00:00 | 2026-04-25T13:40:57+00:00 |
| rhsa-2023:1042 | Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift (with security updates) | 2023-03-06T18:38:53+00:00 | 2026-04-25T13:40:56+00:00 |
| rhsa-2023:0408 | Red Hat Security Advisory: OpenShift Virtualization 4.12.0 Images security update | 2023-01-25T11:11:29+00:00 | 2026-04-25T13:40:56+00:00 |
| rhsa-2023:0407 | Red Hat Security Advisory: OpenShift Virtualization 4.12.0 RPMs security update | 2023-01-24T12:51:07+00:00 | 2026-04-25T13:40:55+00:00 |
| rhsa-2022:8250 | Red Hat Security Advisory: grafana-pcp security update | 2022-11-15T15:16:26+00:00 | 2026-04-25T13:40:55+00:00 |
| rhsa-2022:8098 | Red Hat Security Advisory: toolbox security and bug fix update | 2022-11-15T15:12:42+00:00 | 2026-04-25T13:40:54+00:00 |
| rhsa-2022:8057 | Red Hat Security Advisory: grafana security, bug fix, and enhancement update | 2022-11-15T10:31:43+00:00 | 2026-04-25T13:40:53+00:00 |
| rhsa-2022:7648 | Red Hat Security Advisory: grafana-pcp security update | 2022-11-08T09:46:12+00:00 | 2026-04-25T13:40:53+00:00 |
| rhsa-2022:7529 | Red Hat Security Advisory: container-tools:3.0 security update | 2022-11-08T09:43:29+00:00 | 2026-04-25T13:40:53+00:00 |
| rhsa-2022:7519 | Red Hat Security Advisory: grafana security, bug fix, and enhancement update | 2022-11-08T09:34:04+00:00 | 2026-04-25T13:40:53+00:00 |
| rhsa-2022:7398 | Red Hat Security Advisory: OpenShift Container Platform 4.12.0 packages and security update | 2023-01-17T19:29:22+00:00 | 2026-04-25T13:40:52+00:00 |
| rhsa-2022:6714 | Red Hat Security Advisory: RHACS 3.72 enhancement and security update | 2022-09-26T15:26:11+00:00 | 2026-04-25T13:40:52+00:00 |
| rhsa-2022:6560 | Red Hat Security Advisory: Openshift Logging Bug Fix Release and Security Update (5.3.12) | 2022-09-26T09:39:08+00:00 | 2026-04-25T13:40:51+00:00 |
| rhsa-2022:6517 | Red Hat Security Advisory: Release of containers for OSP 16.2.z director operator tech preview | 2022-09-14T12:46:52+00:00 | 2026-04-25T13:40:51+00:00 |
| rhsa-2022:6430 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.4 security and bug fix update | 2022-09-13T02:09:43+00:00 | 2026-04-25T13:40:51+00:00 |
| rhsa-2022:6429 | Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.4 security and bug fix update | 2022-09-13T00:58:09+00:00 | 2026-04-25T13:40:50+00:00 |
| rhsa-2022:6370 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.0 security updates and bug fixes | 2022-09-06T22:27:58+00:00 | 2026-04-25T13:40:49+00:00 |
| rhsa-2022:6348 | Red Hat Security Advisory: Gatekeeper Operator v0.2 security and container updates | 2022-09-06T13:43:08+00:00 | 2026-04-25T13:40:49+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:20647-1 | Security update for libxml2, libxslt | 2026-03-04T10:51:03Z | 2026-03-04T10:51:03Z |
| suse-su-2026:20631-1 | Security update for libxml2, libxslt | 2026-03-04T10:51:03Z | 2026-03-04T10:51:03Z |
| suse-su-2026:20646-1 | Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) | 2026-03-04T10:44:08Z | 2026-03-04T10:44:08Z |
| suse-su-2026:20636-1 | Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) | 2026-03-04T10:44:08Z | 2026-03-04T10:44:08Z |
| suse-su-2026:20645-1 | Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16) | 2026-03-04T10:13:56Z | 2026-03-04T10:13:56Z |
| suse-su-2026:20644-1 | Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) | 2026-03-04T09:41:19Z | 2026-03-04T09:41:19Z |
| suse-su-2026:20635-1 | Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) | 2026-03-04T09:41:19Z | 2026-03-04T09:41:19Z |
| suse-su-2026:20652-1 | Security update for ca-certificates-mozilla | 2026-03-04T09:36:46Z | 2026-03-04T09:36:46Z |
| suse-su-2026:0796-1 | Security update for libsoup | 2026-03-04T09:33:40Z | 2026-03-04T09:33:40Z |
| suse-su-2026:20643-1 | Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) | 2026-03-04T09:20:51Z | 2026-03-04T09:20:51Z |
| suse-su-2026:20634-1 | Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) | 2026-03-04T09:20:51Z | 2026-03-04T09:20:51Z |
| suse-su-2026:20696-1 | Security update for ca-certificates-mozilla | 2026-03-04T08:37:59Z | 2026-03-04T08:37:59Z |
| suse-su-2026:20651-1 | Security update for docker | 2026-03-04T06:50:07Z | 2026-03-04T06:50:07Z |
| suse-su-2026:20695-1 | Security update for cockpit-machines | 2026-03-04T06:24:37Z | 2026-03-04T06:24:37Z |
| suse-su-2026:20694-1 | Security update for docker | 2026-03-04T06:24:37Z | 2026-03-04T06:24:37Z |
| suse-su-2026:0792-1 | Security update for libsoup | 2026-03-04T01:04:14Z | 2026-03-04T01:04:14Z |
| suse-su-2026:20629-1 | Security update for go1.24-openssl | 2026-03-03T17:51:15Z | 2026-03-03T17:51:15Z |
| suse-su-2026:20642-1 | Security update for expat | 2026-03-03T16:04:58Z | 2026-03-03T16:04:58Z |
| suse-su-2026:20641-1 | Security update for podman | 2026-03-03T16:04:58Z | 2026-03-03T16:04:58Z |
| suse-su-2026:20627-1 | Security update for expat | 2026-03-03T16:04:58Z | 2026-03-03T16:04:58Z |
| suse-su-2026:20626-1 | Security update for podman | 2026-03-03T16:04:58Z | 2026-03-03T16:04:58Z |
| suse-su-2026:0790-1 | Security update for go1.25-openssl | 2026-03-03T15:52:22Z | 2026-03-03T15:52:22Z |
| suse-su-2026:0789-1 | Security update for go1.24-openssl | 2026-03-03T15:51:34Z | 2026-03-03T15:51:34Z |
| suse-su-2026:0788-1 | Security update for libsoup | 2026-03-03T15:15:16Z | 2026-03-03T15:15:16Z |
| suse-su-2026:20650-1 | Security update for cockpit-machines | 2026-03-03T15:11:38Z | 2026-03-03T15:11:38Z |
| suse-su-2026:20649-1 | Security update for libsoup | 2026-03-03T15:01:12Z | 2026-03-03T15:01:12Z |
| suse-su-2026:0787-1 | Security update for postgresql17 | 2026-03-03T14:48:34Z | 2026-03-03T14:48:34Z |
| suse-su-2026:0786-1 | Security update for postgresql14 | 2026-03-03T14:47:10Z | 2026-03-03T14:47:10Z |
| suse-su-2026:0785-1 | Security update for postgresql18 | 2026-03-03T14:01:35Z | 2026-03-03T14:01:35Z |
| suse-su-2026:0784-1 | Security update for postgresql16 | 2026-03-03T13:42:32Z | 2026-03-03T13:42:32Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| alsa-2025:10140 | Important: python3.12 security update | 2025-07-01T00:00:00Z | 2025-07-03T07:53:50Z |
| alsa-2025:10189 | Important: python3.12 security update | 2025-07-02T00:00:00Z | 2025-07-02T13:57:56Z |
| alsa-2025:10148 | Important: python3.11 security update | 2025-07-01T00:00:00Z | 2025-07-02T13:55:59Z |
| alsa-2025:6977 | Moderate: python3.9 security update | 2025-05-13T00:00:00Z | 2025-07-02T13:51:48Z |
| alsa-2025:6990 | Moderate: grub2 security update | 2025-05-13T00:00:00Z | 2025-07-02T13:49:48Z |
| alsa-2025:7043 | Moderate: microcode_ctl security update | 2025-05-13T00:00:00Z | 2025-07-02T13:47:48Z |
| alsa-2025:7049 | Moderate: python-requests security update | 2025-05-13T00:00:00Z | 2025-07-02T13:46:12Z |
| alsa-2025:7050 | Moderate: rsync security update | 2025-05-13T00:00:00Z | 2025-07-02T13:44:15Z |
| alsa-2025:7064 | Moderate: iptraf-ng security update | 2025-05-13T00:00:00Z | 2025-07-02T13:42:29Z |
| alsa-2025:7067 | Moderate: krb5 security update | 2025-05-13T00:00:00Z | 2025-07-02T13:41:00Z |
| alsa-2025:7076 | Moderate: gnutls security update | 2025-05-13T00:00:00Z | 2025-07-02T13:39:03Z |
| alsa-2025:7077 | Moderate: libtasn1 security update | 2025-05-13T00:00:00Z | 2025-07-02T13:37:08Z |
| alsa-2025:7107 | Moderate: python3.12 security update | 2025-05-13T00:00:00Z | 2025-07-02T13:35:29Z |
| alsa-2025:7094 | Moderate: aardvark-dns security update | 2025-05-13T00:00:00Z | 2025-07-02T13:33:31Z |
| alsa-2025:7109 | Moderate: python3.11 security update | 2025-05-13T00:00:00Z | 2025-07-02T13:32:00Z |
| alsa-2025:7118 | Important: osbuild and osbuild-composer security update | 2025-05-13T00:00:00Z | 2025-07-02T13:30:04Z |
| alsa-2025:7138 | Moderate: protobuf security update | 2025-05-13T00:00:00Z | 2025-07-02T13:27:31Z |
| alsa-2025:7147 | Moderate: rpm-ostree security update | 2025-05-13T00:00:00Z | 2025-07-02T13:25:32Z |
| alsa-2025:7160 | Moderate: bootc security update | 2025-05-13T00:00:00Z | 2025-07-02T13:23:57Z |
| alsa-2025:7165 | Moderate: xorg-x11-server-Xwayland security update | 2025-05-13T00:00:00Z | 2025-07-02T13:22:24Z |
| alsa-2025:7163 | Moderate: xorg-x11-server security update | 2025-05-13T00:00:00Z | 2025-07-02T13:20:45Z |
| alsa-2025:7178 | Moderate: gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server security update | 2025-05-13T00:00:00Z | 2025-07-02T13:18:46Z |
| alsa-2025:7201 | Moderate: corosync security update | 2025-05-13T00:00:00Z | 2025-07-02T13:16:42Z |
| alsa-2025:7241 | Moderate: rust-bootupd security update | 2025-05-13T00:00:00Z | 2025-07-02T13:14:49Z |
| alsa-2025:7242 | Moderate: gstreamer1-plugins-good security update | 2025-05-13T00:00:00Z | 2025-07-02T13:13:21Z |
| alsa-2025:7243 | Moderate: gstreamer1-plugins-base security update | 2025-05-13T00:00:00Z | 2025-07-02T13:11:45Z |
| alsa-2025:7256 | Moderate: git-lfs security update | 2025-05-13T00:00:00Z | 2025-07-02T13:09:54Z |
| alsa-2025:7309 | Moderate: openjpeg2 security update | 2025-05-13T00:00:00Z | 2025-07-02T13:08:12Z |
| alsa-2025:7313 | Moderate: keylime-agent-rust security update | 2025-05-13T00:00:00Z | 2025-07-02T13:06:35Z |
| alsa-2025:7317 | Moderate: python3.12-cryptography security update | 2025-05-13T00:00:00Z | 2025-07-02T13:05:05Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2023-1179 | Index-out-of-bounds in iaace_calc_sfb_dist | 2023-11-18T13:02:51.211821Z | 2023-11-18T13:02:51.213081Z |
| osv-2023-1177 | Heap-buffer-overflow in Gfx::ICC::TextDescriptionTagData::from_bytes | 2023-11-18T13:01:39.155430Z | 2023-11-18T13:01:39.155768Z |
| osv-2023-1174 | Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch | 2023-11-17T13:00:58.541560Z | 2023-11-17T13:00:58.541823Z |
| osv-2023-1173 | Heap-buffer-overflow in fill_lines | 2023-11-17T13:00:49.902117Z | 2023-11-17T13:00:49.902383Z |
| osv-2023-1172 | Heap-buffer-overflow in pcpp::TLVRecordReader<pcpp::TcpOption>::getTLVRecord | 2023-11-16T13:03:00.976378Z | 2023-11-16T13:03:00.976647Z |
| osv-2023-1171 | Heap-buffer-overflow in pcpp::SomeIpSdLayer::SomeIpSdLayer | 2023-11-16T13:02:56.384461Z | 2023-11-16T13:02:56.384702Z |
| osv-2023-1169 | Heap-buffer-overflow in epassNUMBER_pkcs15_generate_key | 2023-11-16T13:02:37.833543Z | 2023-11-16T13:02:37.833956Z |
| osv-2023-1163 | Invalid-free in sc_file_clear_acl_entries | 2023-11-15T13:00:41.204460Z | 2023-11-15T13:00:41.204717Z |
| osv-2023-1160 | Heap-buffer-overflow in IEC104Stats::processPacket | 2023-11-14T13:03:05.864884Z | 2023-11-14T13:03:05.865182Z |
| osv-2023-1154 | Heap-buffer-overflow in pcpp::SomeIpSdEntry::SomeIpSdEntry | 2023-11-13T13:03:20.948897Z | 2023-11-13T13:03:20.949199Z |
| osv-2023-1153 | Heap-buffer-overflow in pcpp::SSLClientHelloMessage::getCipherSuite | 2023-11-13T13:03:01.636510Z | 2023-11-13T13:03:01.636801Z |
| osv-2023-1152 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2023-11-13T13:02:00.256484Z | 2023-11-13T13:02:00.256878Z |
| osv-2023-1149 | Heap-buffer-overflow in bit_read_fixed | 2023-11-13T13:01:37.087461Z | 2023-11-13T13:01:37.087873Z |
| osv-2023-1146 | Negative-size-param in pcpp::RawPacket::insertData | 2023-11-13T13:00:39.716145Z | 2023-11-13T13:00:39.716577Z |
| osv-2023-1145 | Heap-buffer-overflow in pcpp::GREv1Layer::computeCalculateFields | 2023-11-13T13:00:35.546722Z | 2023-11-13T13:00:35.547021Z |
| osv-2023-1136 | Security exception in org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord | 2023-11-11T13:00:42.865311Z | 2023-11-11T13:00:42.865622Z |
| osv-2023-1122 | Stack-buffer-overflow in dxf_header_read | 2023-11-07T13:01:32.550733Z | 2023-11-10T14:16:56.272618Z |
| osv-2023-1126 | Heap-buffer-overflow in iasecc_parse_acls | 2023-11-08T13:03:19.402769Z | 2023-11-08T13:03:19.403118Z |
| osv-2023-1124 | UNKNOWN READ in cmsIT8GetDataRowColDbl | 2023-11-08T13:00:59.655386Z | 2023-11-08T13:00:59.655691Z |
| osv-2023-1119 | Segv on unknown address in FunctionCompiler::compileReturn | 2023-11-06T13:02:57.494372Z | 2023-11-06T13:02:57.494689Z |
| osv-2023-1117 | Heap-buffer-overflow in cmsMLUsetWide | 2023-11-05T13:02:43.507558Z | 2023-11-05T13:02:43.507897Z |
| osv-2023-1115 | Use-of-uninitialized-value in fp_uninit | 2023-11-05T13:01:21.842426Z | 2023-11-05T13:01:21.842714Z |
| osv-2023-1075 | Segv on unknown address in cleanup_live_vars | 2023-10-27T13:01:43.631205Z | 2023-11-04T18:09:50.793423Z |
| osv-2023-1110 | Stack-buffer-overflow in dynapi_set_helper | 2023-11-04T13:01:06.700754Z | 2023-11-04T13:01:06.701003Z |
| osv-2023-507 | Heap-buffer-overflow in IEC104Stats::processPacket | 2023-06-24T14:00:16.342283Z | 2023-11-03T14:22:10.838616Z |
| osv-2023-1104 | Heap-buffer-overflow in bit_read_RC | 2023-11-03T13:00:39.940872Z | 2023-11-03T13:00:39.941107Z |
| osv-2023-1103 | Heap-buffer-overflow in OpenType::be_u32 | 2023-11-03T13:00:16.931853Z | 2023-11-03T13:00:16.932069Z |
| osv-2023-1079 | Heap-buffer-overflow in Calc_Length | 2023-10-28T13:02:49.535222Z | 2023-11-02T14:24:53.849577Z |
| osv-2023-397 | Heap-buffer-overflow in json_write_TF | 2023-05-14T14:02:14.802227Z | 2023-11-02T14:21:15.660519Z |
| osv-2023-1101 | Heap-buffer-overflow in decode_preR13_entities | 2023-11-02T13:00:18.006273Z | 2023-11-02T13:00:18.006480Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2023-0004 | bzip2 Denial of Service (DoS) | 2023-01-09T12:00:00Z | 2023-02-04T13:29:07Z |
| rustsec-2022-0077 | `claim` is Unmaintained | 2022-12-04T12:00:00Z | 2023-02-04T10:58:43Z |
| rustsec-2022-0087 | Slack Webhooks secrets leak in debug logs | 2022-10-10T12:00:00Z | 2023-02-02T11:45:24Z |
| rustsec-2022-0086 | Slack OAuth Secrets leak in debug logs | 2022-07-22T12:00:00Z | 2023-02-02T11:43:48Z |
| rustsec-2022-0085 | matrix-sdk Impersonation of room keys | 2022-09-29T12:00:00Z | 2023-02-02T11:35:31Z |
| rustsec-2022-0084 | libp2p Lack of resource management DoS | 2022-07-12T12:00:00Z | 2023-02-02T11:22:51Z |
| rustsec-2022-0083 | evm incorrect state transition | 2022-10-25T12:00:00Z | 2023-02-02T11:20:42Z |
| rustsec-2020-0166 | personnummer Input validation error | 2020-09-04T12:00:00Z | 2023-02-02T10:57:52Z |
| rustsec-2023-0003 | git2 does not verify SSH keys by default | 2023-01-20T12:00:00Z | 2023-01-20T23:06:55Z |
| rustsec-2022-0080 | parity-util-mem Unmaintained | 2022-11-30T12:00:00Z | 2023-01-16T09:26:23Z |
| rustsec-2022-0075 | Bug in pooling instance allocator | 2022-11-10T12:00:00Z | 2023-01-14T00:56:30Z |
| rustsec-2022-0073 | crate has been renamed to `embedded-alloc` | 2022-12-21T12:00:00Z | 2022-12-23T16:46:57Z |
| rustsec-2022-0071 | Rusoto is unmaintained | 2022-04-24T12:00:00Z | 2022-12-18T12:08:00Z |
| rustsec-2022-0068 | out-of-bounds read possible when setting list-of-pointers | 2022-11-30T12:00:00Z | 2022-11-30T22:16:39Z |
| rustsec-2019-0024 | Test advisory with associated example crate | 2019-10-08T12:00:00Z | 2022-11-05T17:45:24Z |
| rustsec-2022-0066 | Denial of Service from unchecked request length | 2022-10-30T12:00:00Z | 2022-11-02T22:38:38Z |
| rustsec-2022-0061 | Crate `parity-wasm` deprecated by the author | 2022-10-01T12:00:00Z | 2022-10-23T11:05:06Z |
| rustsec-2022-0060 | orbtk is Unmaintained | 2022-10-13T12:00:00Z | 2022-10-19T01:14:12Z |
| rustsec-2022-0058 | Library exclusively intended to inject UB into safe Rust. | 2022-09-28T12:00:00Z | 2022-10-11T10:32:22Z |
| rustsec-2022-0056 | clipboard is Unmaintained | 2022-06-25T12:00:00Z | 2022-09-24T11:52:27Z |
| rustsec-2021-0143 | kamadak-exif DoS with untrusted PNG data | 2021-01-04T12:00:00Z | 2022-09-08T10:52:02Z |
| rustsec-2021-0142 | dotenv is Unmaintained | 2021-12-24T12:00:00Z | 2022-08-30T19:40:13Z |
| rustsec-2021-0141 | dotenv is Unmaintained | 2021-12-24T12:00:00Z | 2022-08-30T19:40:13Z |
| rustsec-2020-0077 | memmap is unmaintained | 2020-12-02T12:00:00Z | 2022-08-25T07:09:30Z |
| rustsec-2022-0050 | Interledger is Unmaintained | 2022-08-04T12:00:00Z | 2022-08-19T05:34:11Z |
| rustsec-2020-0055 | Please see RUSTSEC-2018-0020 | 2020-10-21T12:00:00Z | 2022-08-16T02:38:08Z |
| rustsec-2020-0054 | directories is unmaintained, use directories-next instead | 2020-10-16T12:00:00Z | 2022-08-16T02:38:08Z |
| rustsec-2020-0053 | dirs is unmaintained, use dirs-next instead | 2020-10-16T12:00:00Z | 2022-08-16T02:38:08Z |
| rustsec-2019-0031 | spin is no longer actively maintained | 2019-11-21T12:00:00Z | 2022-08-16T02:38:08Z |
| rustsec-2021-0137 | sodiumoxide is deprecated | 2021-10-22T12:00:00Z | 2022-08-10T04:01:59Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2025-12716 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-12-18T12:04:33.134Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12562 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-18T12:04:25.675Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-12029 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-12-18T12:04:20.332Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-11984 | Authentication Bypass Using an Alternate Path or Channel in GitLab | 2025-12-18T12:04:14.698Z | 2025-12-18T12:08:20.703Z |
| bit-gitlab-2025-11247 | Authorization Bypass Through User-Controlled Key in GitLab | 2025-12-18T12:03:59.823Z | 2025-12-18T12:08:20.703Z |
| bit-elk-2025-37732 | Kibana Cross-site Scripting via the Integration Package Upload Functionality | 2025-12-18T11:37:43.350Z | 2025-12-18T12:08:20.703Z |
| bit-vault-2025-6013 | Vault LDAP MFA Enforcement Bypass When Using Username As Alias | 2025-08-08T06:04:14.175Z | 2025-12-16T15:14:22.118Z |
| bit-airflow-2025-66388 | Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI | 2025-12-16T14:37:51.384Z | 2025-12-16T15:14:22.118Z |
| bit-mongodb-2025-12657 | Malformed KMIP response may result in access violation | 2025-12-13T11:42:23.275Z | 2025-12-13T12:05:53.698Z |
| bit-django-2025-13372 | Potential SQL injection in FilteredRelation column aliases on PostgreSQL | 2025-12-13T11:36:31.883Z | 2025-12-13T12:05:53.698Z |
| bit-mongodb-2025-14345 | Cross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server | 2025-12-12T17:42:48.437Z | 2025-12-12T18:06:16.411Z |
| bit-jenkins-2025-67639 | 2025-12-12T11:23:52.749Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67638 | 2025-12-12T11:23:47.516Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67637 | 2025-12-12T11:23:42.761Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67636 | 2025-12-12T11:23:36.617Z | 2025-12-12T11:51:34.315Z | |
| bit-jenkins-2025-67635 | 2025-12-12T11:23:31.286Z | 2025-12-12T11:51:34.315Z | |
| bit-gitlab-2025-7449 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-02T12:05:42.978Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2025-6195 | Direct Request ('Forced Browsing') in GitLab | 2025-12-02T12:05:25.518Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2025-12653 | Authentication Bypass by Spoofing in GitLab | 2025-12-02T12:03:41.060Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2025-12571 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-12-02T12:03:39.208Z | 2025-12-11T12:06:55.559Z |
| bit-gitlab-2024-9183 | Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab | 2025-12-09T12:02:49.276Z | 2025-12-11T12:06:55.559Z |
| bit-django-2025-64460 | Potential denial-of-service vulnerability in XML serializer text extraction | 2025-12-11T11:37:12.400Z | 2025-12-11T12:06:55.559Z |
| bit-golang-2025-61725 | Excessive CPU consumption in ParseAddress in net/mail | 2025-11-06T12:58:41.872Z | 2025-12-10T12:06:24.101Z |
| bit-pgbouncer-2025-2291 | PgBouncer default auth_query does not take Postgres password expiry into account | 2025-04-18T19:19:16.416Z | 2025-12-09T12:08:00.393Z |
| bit-envoy-2025-66220 | Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte | 2025-12-06T11:38:21.122Z | 2025-12-09T12:08:00.393Z |
| bit-envoy-2025-64763 | Envoy forwards early CONNECT data in TCP proxy mode | 2025-12-06T11:38:19.488Z | 2025-12-09T12:08:00.393Z |
| bit-envoy-2025-64527 | Envoy crashes when JWT authentication is configured with the remote JWKS fetching | 2025-12-06T11:38:17.923Z | 2025-12-09T12:08:00.393Z |
| bit-apache-2025-66200 | Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo | 2025-12-09T11:38:20.150Z | 2025-12-09T12:08:00.393Z |
| bit-apache-2025-65082 | Apache HTTP Server: CGI environment variable override | 2025-12-09T11:38:18.501Z | 2025-12-09T12:08:00.393Z |
| bit-apache-2025-59775 | Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF | 2025-12-09T11:38:16.754Z | 2025-12-09T12:08:00.393Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-1019 | Multiples vulnérabilités dans Mattermost Server | 2025-11-18T00:00:00.000000 | 2025-11-18T00:00:00.000000 |
| CERTFR-2025-AVI-1018 | Multiples vulnérabilités dans Google Chrome | 2025-11-18T00:00:00.000000 | 2025-11-18T00:00:00.000000 |
| certfr-2025-avi-1017 | Multiples vulnérabilités dans Mattermost Server | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| certfr-2025-avi-1016 | Multiples vulnérabilités dans Mozilla Thunderbird | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| certfr-2025-avi-1015 | Multiples vulnérabilités dans les produits NetApp | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| CERTFR-2025-AVI-1017 | Multiples vulnérabilités dans Mattermost Server | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| CERTFR-2025-AVI-1016 | Multiples vulnérabilités dans Mozilla Thunderbird | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| CERTFR-2025-AVI-1015 | Multiples vulnérabilités dans les produits NetApp | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| certfr-2025-avi-1014 | Vulnérabilité dans Fortinet FortiWeb | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1013 | Multiples vulnérabilités dans les produits IBM | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1012 | Vulnérabilité dans Microsoft Edge | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1011 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1010 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1009 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1008 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1007 | Multiples vulnérabilités dans PostgreSQL | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-1006 | Vulnérabilité dans Cisco Catalyst Center | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-0954 | Multiples vulnérabilités dans Liferay | 2025-11-03T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-0888 | Multiples vulnérabilités dans les produits Mattermost | 2025-10-16T00:00:00.000000 | 2025-10-16T00:00:00.000000 |
| CERTFR-2025-AVI-1014 | Vulnérabilité dans Fortinet FortiWeb | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-1013 | Multiples vulnérabilités dans les produits IBM | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-1012 | Vulnérabilité dans Microsoft Edge | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-1011 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-1010 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-1009 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-1008 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-1007 | Multiples vulnérabilités dans PostgreSQL | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-1006 | Vulnérabilité dans Cisco Catalyst Center | 2025-11-14T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-0954 | Multiples vulnérabilités dans Liferay | 2025-11-03T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| CERTFR-2025-AVI-0888 | Multiples vulnérabilités dans les produits Mattermost | 2025-10-16T00:00:00.000000 | 2025-10-16T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2021-000078 | The installers of multiple Sony products may insecurely load Dynamic Link Libraries | 2021-08-24T14:30+09:00 | 2021-08-24T14:30+09:00 |
| jvndb-2021-002282 | Multiple vulnerabilities in Navigate CMS | 2021-08-20T14:25+09:00 | 2021-08-20T14:25+09:00 |
| jvndb-2021-002279 | Incorrect permission assignment vulnerability in multiple Trend Micro Endpoint security products for enterprises | 2021-08-19T15:01+09:00 | 2021-08-19T15:01+09:00 |
| jvndb-2021-000077 | Huawei EchoLife HG8045Q vulnerable to OS command injection | 2021-08-17T14:24+09:00 | 2021-08-17T14:24+09:00 |
| jvndb-2021-002273 | Multiple vulnerabilities in D-Link router DSL-2750U | 2021-08-17T14:09+09:00 | 2021-08-17T14:09+09:00 |
| jvndb-2021-000076 | Plone vulnerable to open redirect | 2021-08-12T14:05+09:00 | 2021-08-12T14:05+09:00 |
| jvndb-2021-000075 | WordPress Plugin "Quiz And Survey Master" vulnerable to cross-site scripting | 2021-08-10T14:40+09:00 | 2021-08-10T14:40+09:00 |
| jvndb-2021-002077 | Multiple vulnerabilities in multiple Trend Micro Endpoint security products for enterprises | 2021-08-04T11:15+09:00 | 2021-08-04T11:15+09:00 |
| jvndb-2020-000071 | Cybozu Garoon vulnerable to improper input validation | 2020-11-05T11:43+09:00 | 2021-08-02T11:08+09:00 |
| jvndb-2020-000087 | Management software for NEC Storage disk array system vulnerable to improper server certificate verification | 2020-12-18T17:00+09:00 | 2021-07-21T16:21+09:00 |
| jvndb-2021-000072 | Minecraft Java Edition vulnerable to directory traversal | 2021-07-21T15:12+09:00 | 2021-07-21T15:12+09:00 |
| jvndb-2021-002005 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) vulnerable to cross-site scripting | 2021-07-19T16:53+09:00 | 2021-07-19T16:53+09:00 |
| jvndb-2021-000069 | Optical BB unit E-WMTA2.3 vulnerable to cross-site request forgery | 2021-07-14T17:13+09:00 | 2021-07-14T17:13+09:00 |
| jvndb-2021-001977 | Multiple vulnerabilities in Elecom routers | 2021-07-07T14:03+09:00 | 2021-07-12T16:04+09:00 |
| jvndb-2021-000067 | voidtools "Everything" vulnerable to HTTP header injection | 2021-07-09T14:40+09:00 | 2021-07-09T14:40+09:00 |
| jvndb-2021-000065 | WordPress Plugin "WordPress Meta Data Filter & Taxonomies Filter" vulnerable to cross-site request forgery | 2021-07-08T14:29+09:00 | 2021-07-08T14:29+09:00 |
| jvndb-2021-000066 | WordPress Plugin "Software License Manager" vulnerable to cross-site request forgery | 2021-07-08T13:45+09:00 | 2021-07-08T13:45+09:00 |
| jvndb-2021-000064 | GU App for Android fails to restrict access permissions | 2021-07-07T13:16+09:00 | 2021-07-07T13:16+09:00 |
| jvndb-2021-001968 | Multiple vulnerabilities in Trend Micro Password Manager | 2021-07-06T16:08+09:00 | 2021-07-06T16:08+09:00 |
| jvndb-2021-000063 | WordPress Plugin "WordPress Email Template Designer - WP HTML Mail" vulnerable to cross-site request forgery | 2021-07-06T14:50+09:00 | 2021-07-06T14:50+09:00 |
| jvndb-2021-000062 | WordPress Plugin "WPCS - WordPress Currency Switcher" vulnerable to cross-site request forgery | 2021-07-06T14:11+09:00 | 2021-07-06T14:11+09:00 |
| jvndb-2021-000061 | A-Stage SCT-40CM01SR and AT-40CM01SR vulnerable to authentication bypass | 2021-07-05T14:28+09:00 | 2021-07-05T14:28+09:00 |
| jvndb-2021-000059 | EC-CUBE fails to restrict access permissions | 2021-07-01T15:49+09:00 | 2021-07-01T15:49+09:00 |
| jvndb-2007-002102 | boastMachine vulnerable to cross-site scripting | 2021-06-30T14:32+09:00 | 2021-06-30T14:32+09:00 |
| jvndb-2021-000058 | IkaIka RSS Reader vulnerable to cross-site scripting | 2021-06-30T14:21+09:00 | 2021-06-30T14:21+09:00 |
| jvndb-2021-000056 | WordPress Plugin "WordPress Popular Posts" vulnerable to cross-site scripting | 2021-06-30T11:36+09:00 | 2021-06-30T11:36+09:00 |
| jvndb-2021-000057 | Multiple cross-site scripting vulnerabilities in EC-CUBE | 2021-06-23T15:15+09:00 | 2021-06-23T15:15+09:00 |
| jvndb-2021-000055 | WordPress plugin "Fudousan plugin" series vulnerable to cross-site scripting | 2021-06-22T15:06+09:00 | 2021-06-22T15:06+09:00 |
| jvndb-2021-000054 | Inkdrop vulnerable to OS command injection | 2021-06-22T15:06+09:00 | 2021-06-22T15:06+09:00 |
| jvndb-2021-000053 | Hitachi Virtual File Platform vulnerable to OS command injection | 2021-06-18T15:45+09:00 | 2021-06-18T15:45+09:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-12556 | Microsoft Hyper-V缓冲区溢出漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12555 | Microsoft Hyper-V访问控制错误漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12554 | Microsoft GitHub Copilot for JetBrains命令注入漏洞 | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12553 | Microsoft Excel缓冲区溢出漏洞(CNVD-2026-12553) | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12552 | Microsoft Excel缓冲区溢出漏洞(CNVD-2026-12552) | 2026-03-02 | 2026-03-04 |
| cnvd-2026-12374 | NVIDIA NVTabular反序列化漏洞 | 2025-12-15 | 2026-03-03 |
| cnvd-2026-12373 | NVIDIA Merlin Transformers4Rec反序列化漏洞 | 2025-12-15 | 2026-03-03 |
| cnvd-2026-12372 | NVIDIA Nemo Framework代码问题漏洞(CNVD-2026-1237200) | 2025-12-25 | 2026-03-03 |
| cnvd-2026-12371 | NVIDIA Nemo Framework代码问题漏洞 | 2025-12-25 | 2026-03-03 |
| cnvd-2026-12370 | NVIDIA Isaac Launchable信任管理问题漏洞 | 2025-12-29 | 2026-03-03 |
| cnvd-2026-12369 | NVIDIA Isaac Launchable任意代码执行漏洞 | 2025-12-29 | 2026-03-03 |
| cnvd-2026-12368 | NVIDIA NSIGHT Graphics操作系统命令注入漏洞 | 2026-01-23 | 2026-03-03 |
| cnvd-2026-12367 | NVIDIA Merlin Transformers4Rec代码注入漏洞 | 2026-01-26 | 2026-03-03 |
| cnvd-2026-12366 | NVIDIA CUDA toolkit代码问题漏洞 | 2026-01-30 | 2026-03-03 |
| cnvd-2026-12365 | NVIDIA CUDA toolkit gfx_hotspot模块命令注入漏洞 | 2026-01-30 | 2026-03-03 |
| cnvd-2026-12363 | WordPress FAPI Member plugin授权绕过漏洞 | 2025-12-22 | 2026-03-02 |
| cnvd-2026-12362 | Scholars Tracking System delete_user.php文件SQL注入漏洞 | 2025-12-25 | 2026-03-02 |
| cnvd-2026-12361 | WordPress Vimeotheque跨站请求伪造漏洞 | 2025-12-26 | 2026-03-02 |
| cnvd-2026-12360 | WordPress Fast User Switching跨站请求伪造漏洞 | 2025-12-26 | 2026-03-02 |
| cnvd-2026-12359 | WordPress Funnelforms Free缺少授权漏洞 | 2025-12-26 | 2026-03-02 |
| cnvd-2026-12357 | WordPress My auctions allegro跨站脚本漏洞 | 2025-12-26 | 2026-03-02 |
| cnvd-2026-12356 | WordPress Category Icon跨站脚本漏洞 | 2025-12-26 | 2026-03-02 |
| cnvd-2026-12355 | WordPress Spiffy Calendar缺少授权漏洞 | 2025-12-26 | 2026-03-02 |
| cnvd-2026-12354 | WordPress WpStream缺少授权漏洞 | 2025-12-26 | 2026-03-02 |
| cnvd-2026-12353 | WordPress WC Builder跨站脚本漏洞 | 2025-12-30 | 2026-03-02 |
| cnvd-2026-12205 | 用友网络科技股份有限公司U8 Cloud存在远程代码执行漏洞 | 2025-11-04 | 2026-02-28 |
| cnvd-2026-12149 | 用友网络科技股份有限公司U8 Cloud存在SQL注入漏洞(CNVD-2026-12149) | 2025-11-26 | 2026-02-28 |
| cnvd-2026-12146 | 深圳极速创想科技有限公司FastAdmin任意文件读取漏洞 | 2025-11-27 | 2026-02-28 |
| cnvd-2026-11810 | Microsoft Windows Routing and Remote Access Service远程代码执行漏洞(CNVD-2026-11810) | 2025-08-15 | 2026-02-28 |
| cnvd-2026-11809 | Microsoft Windows Routing and Remote Access Service远程代码执行漏洞 | 2025-12-12 | 2026-02-28 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-04573 | Уязвимость библиотеки для анализа XML-файлов libexpat, связанная с переполнением буфера в… | 15.04.2025 | 16.02.2026 |
| bdu:2025-04572 | Уязвимость функций urllib.parse.urlsplit() и urlparse() интерпретатора языка программиров… | 15.04.2025 | 16.02.2026 |
| bdu:2025-04488 | Уязвимость компонента ftrace функции function_stat_show ядра операционной системы Linux, … | 14.04.2025 | 16.02.2026 |
| bdu:2025-04477 | Уязвимость компонента hugetlb функции try_get_folio() ядра операционной системы Linux, по… | 14.04.2025 | 16.02.2026 |
| bdu:2025-04396 | Уязвимость функции get_firmware_info_v3_2() модуля drivers/gpu/drm/amd/display/dc/bios/bi… | 14.04.2025 | 16.02.2026 |
| bdu:2025-04386 | Уязвимость компонента tracing функции event_trigger_write ядра операционной системы Linux… | 14.04.2025 | 16.02.2026 |
| bdu:2025-04089 | Уязвимость функции slim_do_transfer() драйвера (drivers/slimbus/messaging.c) ядра операци… | 09.04.2025 | 16.02.2026 |
| bdu:2025-04088 | Уязвимость функции usbhsc_notify_hotplug() драйвера USB (drivers/usb/renesas_usbhs/common… | 09.04.2025 | 16.02.2026 |
| bdu:2025-04087 | Уязвимость драйвера USB (drivers/usb/typec/ucsi/ucsi.c) ядра операционных систем Linux, п… | 09.04.2025 | 16.02.2026 |
| bdu:2025-03890 | Уязвимость функции usb_find_common_endpoints() драйвера USB (drivers/usb/atm/cxacru.c) яд… | 08.04.2025 | 16.02.2026 |
| bdu:2025-03888 | Уязвимость функции amd_get_mmconfig_range() модуля arch/x86/kernel/amd_nb.c ядра операцио… | 09.06.2025 | 16.02.2026 |
| bdu:2025-03866 | Уязвимость функции lzma_stream_decoder_mt() библиотеки liblzma пакета для сжатия данных X… | 09.06.2025 | 16.02.2026 |
| bdu:2025-03840 | Уязвимость файла fs/hfs.c компонента hfs загрузчика операционных систем Grub2, позволяюща… | 07.04.2025 | 16.02.2026 |
| bdu:2025-03816 | Уязвимость функции !defined() (kernel/sched/core.c) ядра операционной системы Linux, позв… | 07.04.2025 | 16.02.2026 |
| bdu:2025-03812 | Уязвимость функции npcm_i2c_probe_bus() (drivers/i2c/busses/i2c-npcm7xx.c) ядра операцион… | 07.04.2025 | 16.02.2026 |
| bdu:2025-03811 | Уязвимость функции optee_supp_thrd_req() (drivers/tee/optee/supp.c) ядра операционной сис… | 07.04.2025 | 16.02.2026 |
| bdu:2025-03809 | Уязвимость функции mptcp_nl_remove_subflow_and_signal_addr() (net/mptcp/pm_netlink.c) ядр… | 07.04.2025 | 16.02.2026 |
| bdu:2025-03742 | Уязвимость функции genelink_bind() (drivers/net/usb/gl620a.c) ядра операционной системы L… | 03.04.2025 | 16.02.2026 |
| bdu:2025-03711 | Уязвимость функции txt_get_unicode() файла devices/vector/doc_common.c набора программног… | 02.04.2025 | 16.02.2026 |
| bdu:2025-03710 | Уязвимость файлов base/write_t1.c и psi/zfapi.c компонента DollarBlend набора программног… | 02.04.2025 | 16.02.2026 |
| bdu:2025-03707 | Уязвимость функции bj10v_print_page() файла contrib/japanese/gdev10v.c компонента BJ10V D… | 02.04.2025 | 16.02.2026 |
| bdu:2025-03706 | Уязвимость файла psi/zbfont.c набора программного обеспечения для обработки, преобразован… | 02.04.2025 | 16.02.2026 |
| bdu:2025-03705 | Уязвимость файла contrib/japanese/gdevnpdl.c компонента NPDL Device набора программного … | 02.04.2025 | 16.02.2026 |
| bdu:2025-03704 | Уязвимость функции Type 4 файла pdf/pdf_func.c набора программного обеспечения для обрабо… | 02.04.2025 | 16.02.2026 |
| bdu:2025-03683 | Уязвимость функции uprobe_write_opcode() модуля kernel/events/uprobes.c ядра операционных… | 02.04.2025 | 16.02.2026 |
| bdu:2025-03641 | Уязвимость функции xsltGetInheritedNsList библиотеки libxslt, позволяющая нарушителю оказ… | 01.04.2025 | 16.02.2026 |
| bdu:2025-03640 | Уязвимость файла numbers.ct библиотеки libxslt, позволяющая нарушителю выполнить произвол… | 01.04.2025 | 16.02.2026 |
| bdu:2025-03534 | Уязвимость почтового сервера Exim, связанная с использованием памяти после ее освобождени… | 23.04.2025 | 16.02.2026 |
| bdu:2025-03465 | Уязвимость библиотеки для кодирования и декодирования изображений OpenJPEG, связанная с п… | 27.03.2025 | 16.02.2026 |
| bdu:2025-03459 | Уязвимость компонента Hash Handler пакета 389-ds-base, позволяющая нарушителю вызвать отк… | 27.03.2025 | 16.02.2026 |
| ID | Description | Updated |
|---|---|---|
| var-200505-0354 | Buffer overflow in the Foundation framework for Mac OS X 10.3.9 allows local users to exe… | 2024-07-23T20:17:16.312000Z |
| var-201206-0054 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:17:15.929000Z |
| var-200901-0726 | Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0… | 2024-07-23T20:17:14.213000Z |
| var-200904-0800 | The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before… | 2024-07-23T20:17:13.895000Z |
| var-201809-0686 | curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication c… | 2024-07-23T20:17:09.201000Z |
| var-201705-3873 | In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 me… | 2024-07-23T20:17:09.711000Z |
| var-201006-1234 | Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X… | 2024-07-23T20:17:09.441000Z |
| var-201903-0442 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:17:08.574000Z |
| var-200811-0321 | The plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from… | 2024-07-23T20:17:08.920000Z |
| var-202004-0345 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between seriali… | 2024-07-23T20:17:07.679000Z |
| var-202109-1966 | There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a mal… | 2024-07-23T20:16:30.843000Z |
| var-200701-0341 | The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428… | 2024-07-23T20:16:29.180000Z |
| var-201904-1411 | A cross-origin issue existed with "iframe" elements. This was addressed with improved tra… | 2024-07-23T20:16:28.429000Z |
| var-201912-0532 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed … | 2024-07-23T20:16:27.834000Z |
| var-201805-0967 | Systems with microprocessors utilizing speculative execution and that perform speculative… | 2024-07-23T20:16:27.316000Z |
| var-201409-1147 | The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remot… | 2024-07-23T20:16:26.490000Z |
| var-201403-0275 | sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd… | 2024-07-23T20:15:55.666000Z |
| var-202112-1782 | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not pro… | 2024-07-23T20:15:54.690000Z |
| var-200505-0350 | The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an ap… | 2024-07-23T20:15:49.782000Z |
| var-201707-0556 | Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whites… | 2024-07-23T20:15:16.169000Z |
| var-201806-1456 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS befor… | 2024-07-23T20:15:15.076000Z |
| var-201011-0178 | The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and poss… | 2024-07-23T20:15:12.423000Z |
| var-200505-0351 | Bluetooth-enabled systems in Mac OS X 10.3.9 enables the Bluetooth file exchange service … | 2024-07-23T20:15:10.160000Z |
| var-200701-0518 | The CFUserNotificationSendRequest function in UserNotificationCenter.app in Apple Mac OS … | 2024-07-23T20:15:09.518000Z |
| var-202204-0432 | Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based … | 2024-07-23T20:15:05.279000Z |
| var-201912-0496 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:15:05.516000Z |
| var-200901-0714 | OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFi… | 2024-07-23T20:15:05.042000Z |
| var-200709-0495 | Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server bef… | 2024-07-23T20:15:05.431000Z |
| var-202210-1202 | Git is an open source, scalable, distributed revision control system. Versions prior to 2… | 2024-07-23T20:15:03.784000Z |
| var-201306-0256 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:15:01.919000Z |