Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2000-0156 |
N/A
|
Internet Explorer 4.x and 5.x allows remote web s… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:53.834Z |
| CVE-2000-0161 |
N/A
|
Sample web sites on Microsoft Site Server 3.0 Com… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.192Z |
| CVE-2000-0162 |
N/A
|
The Microsoft virtual machine (VM) in Internet Ex… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:53.926Z |
| CVE-2000-0173 |
N/A
|
Vulnerability in the EELS system in SCO UnixWare … |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:53.928Z |
| CVE-2000-0176 |
N/A
|
The default configuration of Serv-U 2.5d and earl… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.219Z |
| CVE-2000-0177 |
N/A
|
DNSTools CGI applications allow remote attackers … |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.075Z |
| CVE-2000-0187 |
N/A
|
EZShopper 3.0 loadpage.cgi CGI script allows remo… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.114Z |
| CVE-2000-0188 |
N/A
|
EZShopper 3.0 search.cgi CGI script allows remote… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.101Z |
| CVE-2000-0190 |
N/A
|
AOL Instant Messenger (AIM) client allows remote … |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.105Z |
| CVE-2000-0197 |
N/A
|
The Windows NT scheduler uses the drive mapping o… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.210Z |
| CVE-2000-0198 |
N/A
|
Buffer overflow in POP3 and IMAP servers in the M… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.146Z |
| CVE-2000-0199 |
N/A
|
When a new SQL Server is registered in Enterprise… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.118Z |
| CVE-2000-0203 |
N/A
|
The Trend Micro OfficeScan client tmlisten.exe al… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.109Z |
| CVE-2000-0204 |
N/A
|
The Trend Micro OfficeScan client allows remote a… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.122Z |
| CVE-2000-0205 |
N/A
|
Trend Micro OfficeScan allows remote attackers to… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.100Z |
| CVE-2000-0213 |
N/A
|
The Sambar server includes batch files ECHO.BAT a… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.209Z |
| CVE-2000-0214 |
N/A
|
FTP Explorer uses weak encryption for storing the… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.320Z |
| CVE-2000-0216 |
N/A
|
Microsoft email clients in Outlook, Exchange, and… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.073Z |
| CVE-2000-0219 |
N/A
|
Red Hat 6.0 allows local users to gain root acces… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.111Z |
| CVE-2000-0220 |
N/A
|
ZoneAlarm sends sensitive system and network info… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.196Z |
| CVE-2000-0170 |
N/A
|
Buffer overflow in the man program in Linux allow… |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:54.100Z |
| CVE-2000-0172 |
N/A
|
The mtr program only uses a seteuid call when att… |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:53.917Z |
| CVE-2000-0178 |
N/A
|
ServerIron switches by Foundry Networks have pred… |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:53.968Z |
| CVE-2000-0182 |
N/A
|
iPlanet Web Server 4.1 allows remote attackers to… |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:54.169Z |
| CVE-2000-0186 |
N/A
|
Buffer overflow in the dump utility in the Linux … |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:54.163Z |
| CVE-2000-0189 |
N/A
|
ColdFusion Server 4.x allows remote attackers to … |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:54.106Z |
| CVE-2000-0194 |
N/A
|
buildxconf in Corel Linux allows local users to m… |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:54.169Z |
| CVE-2000-0196 |
N/A
|
Buffer overflow in mhshow in the Linux nmh packag… |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:54.115Z |
| CVE-2000-0200 |
N/A
|
Buffer overflow in Microsoft Clip Art Gallery all… |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:54.091Z |
| CVE-2000-0201 |
N/A
|
The window.showHelp() method in Internet Explorer… |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:54.113Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2000-0156 |
N/A
|
Internet Explorer 4.x and 5.x allows remote web s… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:53.834Z |
| CVE-2000-0161 |
N/A
|
Sample web sites on Microsoft Site Server 3.0 Com… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.192Z |
| CVE-2000-0162 |
N/A
|
The Microsoft virtual machine (VM) in Internet Ex… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:53.926Z |
| CVE-2000-0173 |
N/A
|
Vulnerability in the EELS system in SCO UnixWare … |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:53.928Z |
| CVE-2000-0176 |
N/A
|
The default configuration of Serv-U 2.5d and earl… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.219Z |
| CVE-2000-0177 |
N/A
|
DNSTools CGI applications allow remote attackers … |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.075Z |
| CVE-2000-0187 |
N/A
|
EZShopper 3.0 loadpage.cgi CGI script allows remo… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.114Z |
| CVE-2000-0188 |
N/A
|
EZShopper 3.0 search.cgi CGI script allows remote… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.101Z |
| CVE-2000-0190 |
N/A
|
AOL Instant Messenger (AIM) client allows remote … |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.105Z |
| CVE-2000-0197 |
N/A
|
The Windows NT scheduler uses the drive mapping o… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.210Z |
| CVE-2000-0198 |
N/A
|
Buffer overflow in POP3 and IMAP servers in the M… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.146Z |
| CVE-2000-0199 |
N/A
|
When a new SQL Server is registered in Enterprise… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.118Z |
| CVE-2000-0203 |
N/A
|
The Trend Micro OfficeScan client tmlisten.exe al… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.109Z |
| CVE-2000-0204 |
N/A
|
The Trend Micro OfficeScan client allows remote a… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.122Z |
| CVE-2000-0205 |
N/A
|
Trend Micro OfficeScan allows remote attackers to… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.100Z |
| CVE-2000-0213 |
N/A
|
The Sambar server includes batch files ECHO.BAT a… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.209Z |
| CVE-2000-0214 |
N/A
|
FTP Explorer uses weak encryption for storing the… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.320Z |
| CVE-2000-0216 |
N/A
|
Microsoft email clients in Outlook, Exchange, and… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.073Z |
| CVE-2000-0219 |
N/A
|
Red Hat 6.0 allows local users to gain root acces… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.111Z |
| CVE-2000-0220 |
N/A
|
ZoneAlarm sends sensitive system and network info… |
n/a |
n/a |
2000-03-22T05:00:00 | 2024-08-08T05:05:54.196Z |
| CVE-2000-0170 |
N/A
|
Buffer overflow in the man program in Linux allow… |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:54.100Z |
| CVE-2000-0172 |
N/A
|
The mtr program only uses a seteuid call when att… |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:53.917Z |
| CVE-2000-0178 |
N/A
|
ServerIron switches by Foundry Networks have pred… |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:53.968Z |
| CVE-2000-0182 |
N/A
|
iPlanet Web Server 4.1 allows remote attackers to… |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:54.169Z |
| CVE-2000-0186 |
N/A
|
Buffer overflow in the dump utility in the Linux … |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:54.163Z |
| CVE-2000-0189 |
N/A
|
ColdFusion Server 4.x allows remote attackers to … |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:54.106Z |
| CVE-2000-0194 |
N/A
|
buildxconf in Corel Linux allows local users to m… |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:54.169Z |
| CVE-2000-0196 |
N/A
|
Buffer overflow in mhshow in the Linux nmh packag… |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:54.115Z |
| CVE-2000-0200 |
N/A
|
Buffer overflow in Microsoft Clip Art Gallery all… |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:54.091Z |
| CVE-2000-0201 |
N/A
|
The window.showHelp() method in Internet Explorer… |
n/a |
n/a |
2000-04-10T04:00:00 | 2024-08-08T05:05:54.113Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-1999-0382 | The screen saver in Windows NT does not verify that its security context has been changed properly,… | 1999-03-12T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0420 | umapfs allows local users to gain root privileges by changing their uid through a malicious mount_u… | 1999-03-17T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0421 | During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root acc… | 1999-03-17T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0422 | In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that … | 1999-03-17T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0462 | suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users… | 1999-03-17T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0424 | talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Net… | 1999-03-18T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0425 | talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Net… | 1999-03-18T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0433 | XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in r… | 1999-03-21T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0482 | OpenBSD kernel crash through TSS handling, as caused by the crashme program. | 1999-03-21T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0428 | OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls. | 1999-03-22T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0481 | Denial of service in "poll" in OpenBSD. | 1999-03-22T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1370 | The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which coul… | 1999-03-23T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1397 | Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of… | 1999-03-23T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-2000-0153 | FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack. | 1999-03-26T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0434 | XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in rest… | 1999-03-30T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1559 | Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (cont… | 1999-03-31T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0443 | Patrol management software allows a remote attacker to conduct a replay attack to steal the adminis… | 1999-04-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0445 | In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by i… | 1999-04-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0447 | Local users can gain privileges using the debug utility in the MPE/iX operating system. | 1999-04-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0467 | The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitra… | 1999-04-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0469 | Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web … | 1999-04-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0480 | Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack. | 1999-04-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0605 | An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private … | 1999-04-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0606 | An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could discl… | 1999-04-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0608 | An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose privat… | 1999-04-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0609 | An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information. | 1999-04-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0610 | An incorrect configuration of the Webcart CGI program could disclose private information. | 1999-04-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0921 | BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service. | 1999-04-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0439 | Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute command… | 1999-04-05T04:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0474 | The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's… | 1999-04-05T04:00:00.000 | 2025-04-03T01:03:51.193 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-mh6f-8j2x-4483 |
9.8 (3.1)
|
Critical severity vulnerability that affects event-stream and flatmap-stream | 2018-11-26T23:58:21Z | 2021-09-15T20:08:26Z |
| ghsa-q3jg-4c82-j4xh |
8.1 (3.1)
|
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Pivotal CredHub Service Broker | 2018-11-29T21:30:30Z | 2022-09-14T22:09:19Z |
| ghsa-32w7-9whp-cjp9 |
5.9 (3.1)
8.2 (4.0)
|
Session Fixation in Tryton | 2018-11-29T21:30:56Z | 2024-11-13T22:54:09Z |
| ghsa-7rr7-rcjw-56vj |
6.5 (3.1)
|
Exposure of Sensitive Information to an Unauthorized Actor in activestorage | 2018-12-05T17:17:02Z | 2023-07-05T19:08:30Z |
| ghsa-q2qw-rmrh-vv42 |
7.5 (3.1)
|
Improper Access Control in activejob | 2018-12-05T17:24:27Z | 2023-06-30T19:52:40Z |
| ghsa-vwr2-wj63-86gr |
5.3 (3.1)
|
Path Traversal in simplehttpserver | 2018-12-06T15:49:10Z | 2023-09-12T21:07:28Z |
| ghsa-www2-v7xj-xrc6 |
9.8 (3.1)
9.3 (4.0)
|
Exposure of Sensitive Information to an Unauthorized Actor in urllib3 | 2018-12-12T15:52:07Z | 2024-12-27T18:30:25Z |
| ghsa-cq27-v7xp-c356 |
9.8 (3.1)
9.3 (4.0)
|
Buffer Overflow in pycrypto | 2018-12-14T18:51:38Z | 2024-10-18T21:59:58Z |
| ghsa-894g-6j7q-2hx6 |
6.1 (3.1)
5.3 (4.0)
|
Flask-Admin Cross-site Scripting vulnerability | 2018-12-19T19:23:52Z | 2024-09-20T17:45:11Z |
| ghsa-mxr5-p36v-479m |
9.8 (3.1)
|
Unrestricted Upload of File with Dangerous Type in jquery-file-upload | 2018-12-19T19:24:03Z | 2022-09-14T22:11:51Z |
| ghsa-9fcp-vcq9-9h2h |
8.8 (3.1)
|
OS Command Injection in craftercms:crafter-studio | 2018-12-19T19:24:18Z | 2022-09-14T22:12:13Z |
| ghsa-rmm5-g63h-m6g9 |
9.8 (3.1)
|
Improper Restriction of XML External Entity Reference in pippo-core | 2018-12-19T19:24:39Z | 2024-03-04T22:41:23Z |
| ghsa-5p52-j8pw-j7x5 |
7.5 (3.1)
|
Improper Restriction of XML External Entity Reference in bedework:bw-webdav | 2018-12-19T19:24:52Z | 2024-05-15T06:56:33Z |
| ghsa-8j39-fgfp-vxh8 |
7.5 (3.1)
|
XXL-CONF Path Traversal vulnerability | 2018-12-19T19:25:04Z | 2023-09-11T20:39:33Z |
| ghsa-8r8j-xvfj-36f9 |
9.8 (3.1)
9.3 (4.0)
|
Code injection in ymlref | 2018-12-19T19:25:14Z | 2024-11-19T18:07:18Z |
| ghsa-wg5w-vv93-3f7w |
6.5 (3.1)
|
Moderate severity vulnerability that affects org.apache.oozie:oozie-core | 2018-12-20T22:01:18Z | 2021-09-21T19:44:14Z |
| ghsa-27xw-p8v6-9jjr |
7.4 (3.1)
|
Spring Security vulnerable to Authorization Bypass | 2018-12-20T22:01:31Z | 2024-03-14T21:02:34Z |
| ghsa-p69g-f978-xxv9 |
8.8 (3.1)
8.6 (4.0)
|
Cross-Site Request Forgery (CSRF) in Luigi | 2018-12-20T22:01:39Z | 2024-09-30T16:56:51Z |
| ghsa-mr4x-c4v9-x729 |
6.5 (3.1)
7.1 (4.0)
|
aiohttp-session creates non-expiring sessions | 2018-12-20T22:01:46Z | 2025-03-14T20:26:12Z |
| ghsa-j5rj-g695-342r |
6.1 (3.1)
|
Fat Free CRM vulnerable to Cross-site Scripting | 2018-12-20T22:01:54Z | 2023-08-25T21:22:06Z |
| ghsa-r2pp-x4mm-4999 |
10.0 (3.1)
|
XML External Entity (XXE) vulnerability in neo4j.procedure:apoc | 2018-12-20T22:02:02Z | 2022-09-14T22:20:27Z |
| ghsa-77hp-pfxw-4w63 |
10.0 (3.1)
|
XML External Entity (XXE) vulnerability in codelibs fess | 2018-12-20T22:02:09Z | 2022-09-14T22:20:53Z |
| ghsa-jxm5-5xcw-h57q |
10.0 (3.1)
|
exist-db:exist-core XML External Entity (XXE) vulnerability | 2018-12-20T22:02:17Z | 2022-11-15T16:07:28Z |
| ghsa-2xpp-75vr-22vq |
6.5 (3.1)
|
Improper Restriction of Rendered UI Layers or Frames in Apache nifif | 2018-12-20T22:02:24Z | 2024-03-04T21:34:03Z |
| ghsa-43fp-vwwg-qgv6 |
7.5 (3.1)
|
Apache NiFi Improper Input Validation vulnerability | 2018-12-20T22:02:32Z | 2024-03-04T21:40:53Z |
| ghsa-4qq9-rrq6-48ff |
6.1 (3.1)
|
Cross site scripting in org.apache.nifi:nifi | 2018-12-20T22:02:39Z | 2024-03-04T21:35:23Z |
| ghsa-3jq8-jg75-rqv6 |
7.5 (3.1)
|
Cleartext Transmission of Sensitive Information in Apache nifi | 2018-12-20T22:02:45Z | 2024-03-04T22:06:28Z |
| ghsa-xmvg-w4f9-99r7 |
9.0 (3.1)
|
XML External Entity (XXE) vulnerability in bw-calendar-engine | 2018-12-20T22:02:51Z | 2022-09-14T22:23:07Z |
| ghsa-c289-47qf-rvrr |
6.1 (3.1)
|
Cross Site Scripting (XSS) vulnerability in easymon | 2018-12-21T17:46:03Z | 2022-09-14T22:23:27Z |
| ghsa-hjm9-576q-399p |
9.8 (3.1)
|
Remote Code Execution in esigate-core | 2018-12-21T17:46:23Z | 2022-09-14T22:24:11Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2020-56 |
|
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API does… | keystone | 2020-05-07T00:15:00Z | 2020-09-02T16:15:00Z |
| pysec-2020-97 |
|
In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows … | qutebrowser | 2020-05-07T21:15:00Z | 2020-09-21T02:15:00Z |
| pysec-2020-1 |
|
A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 … | ansible | 2020-05-11T14:15:00Z | 2020-06-13T04:15:00Z |
| pysec-2020-13 |
|
A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7… | ansible | 2020-05-12T18:15:00Z | 2020-05-26T17:38:00Z |
| pysec-2020-208 |
|
An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure tempo… | ansible | 2020-05-15T14:15:00Z | 2021-07-02T02:41:34.927743Z |
| pysec-2020-66 |
|
MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-tra… | misp-maltego | 2020-05-15T18:15:00Z | 2020-05-19T13:38:00Z |
| pysec-2020-107 |
|
** DISPUTED ** scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute comm… | scikit-learn | 2020-05-15T19:15:00Z | 2020-05-19T19:05:00Z |
| pysec-2020-73 |
|
** DISPUTED ** pandas through 1.0.3 can unserialize and execute commands from an untruste… | pandas | 2020-05-15T19:15:00Z | 2020-05-19T19:12:00Z |
| pysec-2020-46 |
|
In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `htt… | httplib2 | 2020-05-20T16:15:00Z | 2020-08-19T18:56:00Z |
| pysec-2020-242 |
|
netius prior to 1.17.58 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues a… | netius | 2020-05-21T15:15:00Z | 2021-11-23T06:07:22.013113Z |
| pysec-2020-239 |
|
meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues a… | meinheld | 2020-05-22T16:15:00Z | 2021-08-27T03:22:06.793758Z |
| pysec-2020-341 |
|
An exploitable vulnerability exists in the configuration-loading functionality of the jw.… | jw.util | 2020-05-22T17:15:00Z | 2022-01-05T02:16:25.743194Z |
| pysec-2020-99 |
|
Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This co… | rsa | 2020-06-01T19:15:00Z | 2020-09-02T16:15:00Z |
| pysec-2020-42 |
|
An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the… | fastecdsa | 2020-06-02T21:15:00Z | 2020-06-03T13:47:00Z |
| pysec-2020-31 |
|
An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where … | django | 2020-06-03T14:15:00Z | 2021-01-20T15:15:00Z |
| pysec-2020-32 |
|
An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. Query parameter… | django | 2020-06-03T14:15:00Z | 2021-01-20T15:15:00Z |
| pysec-2020-228 |
|
An insecure-credentials flaw was found in all openstack-cinder versions before openstack-… | cinder | 2020-06-10T17:15:00Z | 2021-08-27T03:21:56.949334Z |
| pysec-2020-47 |
|
In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy No… | indy-node | 2020-06-11T00:15:00Z | 2020-06-22T16:36:00Z |
| pysec-2020-240 |
|
A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to an… | mistral | 2020-06-15T15:15:00Z | 2021-08-27T03:22:07.520532Z |
| pysec-2020-244 |
|
OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to… | omero-web | 2020-06-17T17:15:00Z | 2021-08-27T03:22:09.833484Z |
| pysec-2020-250 |
|
Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json … | rtslib-fb | 2020-06-19T11:15:00Z | 2021-08-27T03:22:19.931800Z |
| pysec-2020-112 |
|
Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py. | tendenci | 2020-06-21T15:15:00Z | 2020-06-26T19:34:00Z |
| pysec-2020-95 |
|
In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configur… | pyspark | 2020-06-23T22:15:00Z | 2021-04-02T12:15:00Z |
| pysec-2020-37 |
|
In django-basic-auth-ip-whitelist before 0.3.4, a potential timing attack exists on websi… | django-basic-auth-ip-whitelist | 2020-06-24T13:15:00Z | 2020-07-09T14:11:00Z |
| pysec-2020-76 |
|
Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c. | pillow | 2020-06-25T19:15:00Z | 2020-08-08T20:15:00Z |
| pysec-2020-77 |
|
In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when re… | pillow | 2020-06-25T19:15:00Z | 2020-07-27T19:15:00Z |
| pysec-2020-78 |
|
In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c. | pillow | 2020-06-25T19:15:00Z | 2020-07-27T19:15:00Z |
| pysec-2020-79 |
|
In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds rea… | pillow | 2020-06-25T19:15:00Z | 2020-07-27T19:15:00Z |
| pysec-2020-80 |
|
In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exi… | pillow | 2020-06-25T19:15:00Z | 2020-07-27T19:15:00Z |
| pysec-2020-216 |
|
The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted … | beaker | 2020-06-26T20:15:00Z | 2021-07-25T23:34:27.636176Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2022-7075 | Malicious code in web-scripts-monorepo (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:28:03Z |
| MAL-2022-7076 | Malicious code in web-sdk-mono-repo (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:27:56Z |
| MAL-2022-7222 | Malicious code in workers-airtable-form (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:27:55Z |
| MAL-2022-7223 | Malicious code in workers-airtable-form-handler (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:28:02Z |
| MAL-2022-7224 | Malicious code in workers.cloudflare.com (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:27:56Z |
| MAL-2022-7225 | Malicious code in workerskv.gui (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:27:56Z |
| MAL-2022-7246 | Malicious code in wwi-app (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:28:03Z |
| MAL-2022-7292 | Malicious code in xp-ui (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:28:02Z |
| MAL-2022-834 | Malicious code in action-require-additional-reviewer (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:28:04Z |
| MAL-2022-946 | Malicious code in alpaca-oas (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:28:02Z |
| mal-2022-1004 | Malicious code in angular-cloudinary-photo (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:27:56Z |
| mal-2022-1071 | Malicious code in apps-showcase (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:27:56Z |
| mal-2022-1143 | Malicious code in assign-issue (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:28:02Z |
| mal-2022-1144 | Malicious code in assign-pr (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:28:02Z |
| mal-2022-1161 | Malicious code in atomic-angular (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:28:02Z |
| mal-2022-1163 | Malicious code in atomic-next (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:27:56Z |
| mal-2022-1611 | Malicious code in blockchain-classic-wallet (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:28:02Z |
| mal-2022-1614 | Malicious code in blockchain-wallet-ios (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:27:56Z |
| mal-2022-1642 | Malicious code in boilerplate-fig-autocomplete (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:28:02Z |
| mal-2022-1871 | Malicious code in chain-desktop-wallet (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:28:03Z |
| mal-2022-1921 | Malicious code in cli-e2e (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:27:56Z |
| mal-2022-1926 | Malicious code in client-sdk-contract-tests (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:27:56Z |
| mal-2022-1934 | Malicious code in cloudflare-docs (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:28:02Z |
| mal-2022-1935 | Malicious code in cloudflare-docs-engine (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:27:56Z |
| mal-2022-1937 | Malicious code in cloudinary-sample-angular (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:27:56Z |
| mal-2022-2251 | Malicious code in crypto-com-chain-wallet (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:28:02Z |
| mal-2022-2261 | Malicious code in cs-task-runner (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:28:03Z |
| mal-2022-2531 | Malicious code in discourse-prepend-tags-in-topic-slug (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:28:03Z |
| mal-2022-2544 | Malicious code in do-worker (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:27:56Z |
| mal-2022-2570 | Malicious code in doom-workers-site (npm) | 2022-06-20T07:27:55Z | 2022-06-20T07:27:56Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2022-1852 | cpio: Schwachstelle ermöglicht Codeausführung | 2021-08-08T22:00:00.000+00:00 | 2024-06-30T22:00:00.000+00:00 |
| wid-sec-w-2023-1822 | Lynx: Schwachstelle ermöglicht Offenlegung von Informationen | 2021-08-08T22:00:00.000+00:00 | 2023-07-19T22:00:00.000+00:00 |
| wid-sec-w-2022-0941 | Red Hat OpenShift: Mehrere Schwachstellen | 2021-08-09T22:00:00.000+00:00 | 2024-12-18T23:00:00.000+00:00 |
| wid-sec-w-2024-3476 | Perl: Schwachstelle ermöglicht Codeausführung | 2021-08-09T22:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2022-0451 | Red Hat Enterprise Linux (389-ds-base): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2021-08-10T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2023-1748 | QT: Mehrere Schwachstellen ermöglichen Codeausführung | 2021-08-10T22:00:00.000+00:00 | 2023-07-13T22:00:00.000+00:00 |
| wid-sec-w-2025-0214 | Red Hat Enterprise Linux (cloud-init): Schwachstelle ermöglicht Offenlegung von Informationen | 2021-08-10T22:00:00.000+00:00 | 2025-01-29T23:00:00.000+00:00 |
| wid-sec-w-2022-1083 | Node.js: Mehrere Schwachstellen | 2021-08-11T22:00:00.000+00:00 | 2024-05-09T22:00:00.000+00:00 |
| wid-sec-w-2022-0195 | PostgreSQL: Schwachstelle ermöglicht Offenlegung von Informationen | 2021-08-12T22:00:00.000+00:00 | 2023-04-02T22:00:00.000+00:00 |
| wid-sec-w-2022-0216 | ffmpeg: Schwachstelle ermöglicht Denial of Service | 2021-08-12T22:00:00.000+00:00 | 2024-09-03T22:00:00.000+00:00 |
| wid-sec-w-2022-0610 | QT: Schwachstelle ermöglicht Denial of Service | 2021-08-12T22:00:00.000+00:00 | 2024-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-3051 | GNU libc: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2021-08-12T22:00:00.000+00:00 | 2023-12-04T23:00:00.000+00:00 |
| wid-sec-w-2022-1640 | Red Hat Enterprise Linux (exiv2): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2021-08-15T22:00:00.000+00:00 | 2022-11-28T23:00:00.000+00:00 |
| wid-sec-w-2023-0877 | Exim: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2021-08-15T22:00:00.000+00:00 | 2024-10-28T23:00:00.000+00:00 |
| wid-sec-w-2023-0878 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2021-08-15T22:00:00.000+00:00 | 2023-04-05T22:00:00.000+00:00 |
| wid-sec-w-2022-0722 | Apache HTTP Server: Schwachstelle ermöglicht Denial of Service | 2021-08-16T22:00:00.000+00:00 | 2023-03-05T23:00:00.000+00:00 |
| wid-sec-w-2022-2065 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2021-08-16T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2022-2354 | cURL + libcurl: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2021-08-16T22:00:00.000+00:00 | 2023-07-04T22:00:00.000+00:00 |
| wid-sec-w-2022-1119 | QEMU: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten | 2021-08-17T22:00:00.000+00:00 | 2024-09-02T22:00:00.000+00:00 |
| wid-sec-w-2023-0336 | Cisco Produkte und Snort: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2021-08-18T22:00:00.000+00:00 | 2023-02-12T23:00:00.000+00:00 |
| wid-sec-w-2025-0888 | Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Denial of Service | 2021-08-18T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2022-1851 | Icinga: Schwachstelle ermöglicht Offenlegung von Informationen | 2021-08-19T22:00:00.000+00:00 | 2024-12-08T23:00:00.000+00:00 |
| wid-sec-w-2023-0618 | Ruby on Rails: Schwachstelle ermöglicht Manipulation von Dateien | 2021-08-19T22:00:00.000+00:00 | 2023-03-12T23:00:00.000+00:00 |
| wid-sec-w-2022-1153 | GNOME: Schwachstelle ermöglichen Umgehen von Sicherheitsvorkehrungen | 2021-08-22T22:00:00.000+00:00 | 2023-10-19T22:00:00.000+00:00 |
| wid-sec-w-2023-0678 | MIT Kerberos: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2021-08-23T22:00:00.000+00:00 | 2024-07-02T22:00:00.000+00:00 |
| wid-sec-w-2022-0400 | OpenSSL: Mehrere Schwachstellen ermöglichen Denial of Service | 2021-08-24T22:00:00.000+00:00 | 2025-05-22T22:00:00.000+00:00 |
| wid-sec-w-2023-0064 | Apache Portable Runtime (APR): Schwachstelle ermöglicht Denial of Service | 2021-08-24T22:00:00.000+00:00 | 2023-02-14T23:00:00.000+00:00 |
| wid-sec-w-2022-0001 | libssh: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2021-08-26T22:00:00.000+00:00 | 2024-05-07T22:00:00.000+00:00 |
| wid-sec-w-2022-0217 | Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen | 2021-08-26T22:00:00.000+00:00 | 2024-06-24T22:00:00.000+00:00 |
| wid-sec-w-2022-0218 | ffmpeg: Schwachstelle ermöglicht Privilegieneskalation | 2021-08-30T22:00:00.000+00:00 | 2023-12-26T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2004:447 | Red Hat Security Advisory: gdk-pixbuf security update | 2004-09-15T15:27:00+00:00 | 2025-11-21T17:27:43+00:00 |
| rhsa-2004_447 | Red Hat Security Advisory: gdk-pixbuf security update | 2004-09-15T15:27:00+00:00 | 2024-11-21T23:11:04+00:00 |
| rhsa-2004:446 | Red Hat Security Advisory: openoffice.org security update | 2004-09-15T15:40:00+00:00 | 2025-11-21T17:27:42+00:00 |
| rhsa-2004_446 | Red Hat Security Advisory: openoffice.org security update | 2004-09-15T15:40:00+00:00 | 2024-11-21T23:10:43+00:00 |
| rhsa-2004:434 | Red Hat Security Advisory: redhat-config-nfs security update | 2004-09-22T17:57:00+00:00 | 2025-11-21T17:27:41+00:00 |
| rhsa-2004_434 | Red Hat Security Advisory: redhat-config-nfs security update | 2004-09-22T17:57:00+00:00 | 2024-11-21T23:10:25+00:00 |
| rhsa-2004:467 | Red Hat Security Advisory: samba security update | 2004-09-22T18:08:00+00:00 | 2025-11-21T17:27:47+00:00 |
| rhsa-2004_467 | Red Hat Security Advisory: samba security update | 2004-09-22T18:08:00+00:00 | 2024-11-21T23:12:03+00:00 |
| rhsa-2004:486 | Red Hat Security Advisory: mozilla security update | 2004-09-30T14:23:00Z | 2004-09-30T00:00:00Z |
| rhsa-2004_486 | Red Hat Security Advisory: mozilla security update | 2004-09-30T14:23:00Z | 2004-09-30T00:00:00Z |
| rhsa-2004:441 | Red Hat Security Advisory: ruby security update | 2004-09-30T14:25:00+00:00 | 2025-11-21T17:27:42+00:00 |
| rhsa-2004_441 | Red Hat Security Advisory: ruby security update | 2004-09-30T14:25:00+00:00 | 2024-11-21T23:10:39+00:00 |
| rhsa-2004:451 | Red Hat Security Advisory: spamassassin security update | 2004-09-30T14:27:00+00:00 | 2025-11-21T17:27:44+00:00 |
| rhsa-2004_451 | Red Hat Security Advisory: spamassassin security update | 2004-09-30T14:27:00+00:00 | 2024-11-21T23:11:21+00:00 |
| rhsa-2004:462 | Red Hat Security Advisory: squid security update | 2004-09-30T14:28:00+00:00 | 2025-11-21T17:27:45+00:00 |
| rhsa-2004_462 | Red Hat Security Advisory: squid security update | 2004-09-30T14:28:00+00:00 | 2024-11-21T23:11:25+00:00 |
| rhsa-2004:498 | Red Hat Security Advisory: samba security update | 2004-10-04T15:15:00+00:00 | 2025-11-21T17:27:49+00:00 |
| rhsa-2004_498 | Red Hat Security Advisory: samba security update | 2004-10-04T15:15:00+00:00 | 2024-11-21T23:13:13+00:00 |
| rhsa-2004:412 | Red Hat Security Advisory: kdelibs, kdebase security update | 2004-10-04T15:32:00+00:00 | 2025-11-21T17:27:37+00:00 |
| rhsa-2004_412 | Red Hat Security Advisory: kdelibs, kdebase security update | 2004-10-04T15:32:00+00:00 | 2024-11-21T23:09:07+00:00 |
| rhsa-2004:478 | Red Hat Security Advisory: XFree86 security update | 2004-10-04T15:56:00+00:00 | 2025-11-21T17:27:47+00:00 |
| rhsa-2004_478 | Red Hat Security Advisory: XFree86 security update | 2004-10-04T15:56:00+00:00 | 2024-11-21T23:14:20+00:00 |
| rhsa-2004:479 | Red Hat Security Advisory: XFree86 security update | 2004-10-06T13:29:00+00:00 | 2025-11-21T17:27:48+00:00 |
| rhsa-2004_479 | Red Hat Security Advisory: XFree86 security update | 2004-10-06T13:29:00+00:00 | 2024-11-21T23:14:26+00:00 |
| rhsa-2004:546 | Red Hat Security Advisory: cyrus-sasl security update | 2004-10-07T14:55:00+00:00 | 2025-11-21T17:27:52+00:00 |
| rhsa-2004_546 | Red Hat Security Advisory: cyrus-sasl security update | 2004-10-07T14:55:00+00:00 | 2024-11-21T23:14:52+00:00 |
| rhsa-2004:597 | Red Hat Security Advisory: mysql security update | 2004-10-20T19:16:00+00:00 | 2025-11-21T17:27:56+00:00 |
| rhsa-2004_597 | Red Hat Security Advisory: mysql security update | 2004-10-20T19:16:00+00:00 | 2024-11-21T23:15:37+00:00 |
| rhsa-2004:494 | Red Hat Security Advisory: ImageMagick security update | 2004-10-20T19:17:00+00:00 | 2025-11-21T17:27:48+00:00 |
| rhsa-2004_494 | Red Hat Security Advisory: ImageMagick security update | 2004-10-20T19:17:00+00:00 | 2024-11-21T23:12:35+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-18-333-02 | ICSA-18-333-02_Tridium Niagara Enterprise Security, Niagara AX, and Niagara 4 | 2018-11-29T00:00:00.000000Z | 2019-01-10T00:00:00.000000Z |
| icsa-18-338-01 | Omron CX-One | 2018-12-04T00:00:00.000000Z | 2018-12-04T00:00:00.000000Z |
| icsa-18-338-02 | SpiderControl SCADA WebServer | 2018-12-04T00:00:00.000000Z | 2018-12-04T00:00:00.000000Z |
| icsa-18-340-01 | GE Proficy GDS | 2018-12-06T00:00:00.000000Z | 2018-12-06T00:00:00.000000Z |
| icsma-18-340-01 | Philips HealthSuite Health Android App | 2018-12-06T00:00:00.000000Z | 2018-12-06T00:00:00.000000Z |
| icsa-18-345-01 | McAfee SINAMICS PERFECT HARMONY GH180 | 2018-12-11T00:00:00.000000Z | 2018-12-11T00:00:00.000000Z |
| icsa-18-345-02 | Siemens SINUMERIK Controllers (Update A) | 2018-12-11T00:00:00.000000Z | 2019-03-12T00:00:00.000000Z |
| icsa-18-352-05 | Siemens TIM 1531 IRC Modules | 2018-12-11T00:00:00.000000Z | 2020-02-10T00:00:00.000000Z |
| icsa-18-347-01 | Schneider Electric GUIcon Eurotherm | 2018-12-13T00:00:00.000000Z | 2018-12-13T00:00:00.000000Z |
| icsa-18-347-02 | Siemens EN100 Ethernet Communication Module and SIPROTEC 5 Relays (Update A) | 2018-12-13T00:00:00.000000Z | 2019-02-12T00:00:00.000000Z |
| icsa-18-347-03 | Geutebrück GmbH E2 Series IP Cameras | 2018-12-13T00:00:00.000000Z | 2018-12-13T00:00:00.000000Z |
| icsa-18-347-04 | GE Mark VIe, EX2100e, EX2100e | 2018-12-13T00:00:00.000000Z | 2018-12-13T00:00:00.000000Z |
| icsma-18-347-01 | Medtronic 9790, 2090 CareLink, and 29901 Encore Programmers | 2018-12-13T00:00:00.000000Z | 2018-12-13T00:00:00.000000Z |
| icsa-18-352-01 | ABB GATE-E2 | 2018-12-18T00:00:00.000000Z | 2018-12-18T00:00:00.000000Z |
| icsa-18-352-02 | Advantech WebAccess/SCADA | 2018-12-18T00:00:00.000000Z | 2018-12-18T00:00:00.000000Z |
| icsa-18-352-03 | 3S-Smart Software Solutions GmbH CODESYS Control V3 Products | 2018-12-18T00:00:00.000000Z | 2018-12-18T00:00:00.000000Z |
| icsa-18-352-04 | 3S-Smart Software Solutions GmbH CODESYS V3 Products | 2018-12-18T00:00:00.000000Z | 2018-12-18T00:00:00.000000Z |
| icsa-18-352-06 | ABB CMS-770 | 2018-12-18T00:00:00.000000Z | 2018-12-18T00:00:00.000000Z |
| icsa-18-352-07 | ABB M2M ETHERNET | 2018-12-18T00:00:00.000000Z | 2018-12-18T00:00:00.000000Z |
| icsa-18-354-01 | Horner Automation Cscape | 2018-12-20T00:00:00.000000Z | 2018-12-20T00:00:00.000000Z |
| icsa-18-354-02 | Schneider Electric EcoStruxure | 2018-12-20T00:00:00.000000Z | 2018-12-20T00:00:00.000000Z |
| icsa-19-003-01 | Schneider Electric Pro-face GP-Pro EX | 2019-01-03T00:00:00.000000Z | 2019-01-03T00:00:00.000000Z |
| icsa-19-003-02 | Yokogawa Vnet/IP Open Communication Driver | 2019-01-03T00:00:00.000000Z | 2019-01-03T00:00:00.000000Z |
| icsa-19-003-03 | Hetronic Nova-M | 2019-01-03T00:00:00.000000Z | 2019-01-03T00:00:00.000000Z |
| icsa-19-008-01 | Schneider Electric Zelio Soft 2 | 2019-01-08T00:00:00.000000Z | 2019-01-08T00:00:00.000000Z |
| icsa-19-008-02 | Schneider Electric IIoT Monitor (Update A) | 2019-01-08T00:00:00.000000Z | 2019-01-15T00:00:00.000000Z |
| icsa-19-036-04 | Siemens SIMATIC S7-1500 CPU | 2019-01-08T00:00:00.000000Z | 2020-02-10T00:00:00.000000Z |
| icsa-19-038-01 | ICSA-19-038-01 Siemens SICAM A8000 RTU Series | 2019-01-08T00:00:00.000000Z | 2019-02-12T00:00:00.000000Z |
| icsa-19-038-02 | ICSA-19-038-02 Siemens EN100 Ethernet Module | 2019-01-08T00:00:00.000000Z | 2019-01-08T00:00:00.000000Z |
| icsa-19-043-04 | Siemens SIMATIC S7-300 CPU | 2019-01-08T00:00:00.000000Z | 2020-02-10T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20191106-sbrv-cmd-x | Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability | 2019-11-06T16:00:00+00:00 | 2022-12-15T22:19:50+00:00 |
| cisco-sa-20191106-spa500-script | Cisco Small Business SPA500 Series IP Phones Local Script Execution Vulnerability | 2019-11-06T16:00:00+00:00 | 2019-11-06T16:00:00+00:00 |
| cisco-sa-20191106-telece-ros-eve | Cisco TelePresence Collaboration Endpoint and RoomOS Audio Eavesdropping Vulnerability | 2019-11-06T16:00:00+00:00 | 2019-11-06T16:00:00+00:00 |
| cisco-sa-20191106-telepres-roomos-dos | Cisco TelePresence Collaboration Endpoint and RoomOS Software Denial of Service Vulnerabilities | 2019-11-06T16:00:00+00:00 | 2019-11-06T16:00:00+00:00 |
| cisco-sa-20191106-telepres-roomos-privesc | Cisco TelePresence Collaboration Endpoint, TelePresence Codec, and RoomOS Software Privilege Escalation Vulnerability | 2019-11-06T16:00:00+00:00 | 2019-11-06T16:00:00+00:00 |
| cisco-sa-20191106-wbs-privilege | Cisco Webex Network Recording Admin Page Privilege Escalation Vulnerability | 2019-11-06T16:00:00+00:00 | 2019-11-06T16:00:00+00:00 |
| cisco-sa-20191106-webex-player | Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities | 2019-11-06T16:00:00+00:00 | 2019-11-06T16:00:00+00:00 |
| cisco-sa-20191106-wlc-dos | Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability | 2019-11-06T16:00:00+00:00 | 2020-05-11T15:58:49+00:00 |
| cisco-sa-20191106-wsa-unauth-devreset | Cisco Web Security Appliance Unauthorized Device Reset Vulnerability | 2019-11-06T16:00:00+00:00 | 2019-11-06T16:00:00+00:00 |
| cisco-sa-20191106-wsa-xss | Cisco Web Security Appliance Management Interface Cross-Site Scripting Vulnerability | 2019-11-06T16:00:00+00:00 | 2019-11-06T16:00:00+00:00 |
| cisco-sa-20191112-asa-ftd-lua-rce | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Code Execution Vulnerability | 2019-11-12T13:15:00+00:00 | 2021-01-11T19:14:20+00:00 |
| cisco-sa-20191120-cucm-sql | Cisco Unified Communications Manager SQL Injection Vulnerability | 2019-11-20T16:00:00+00:00 | 2020-02-06T17:00:15+00:00 |
| cisco-sa-20191120-dna-cmd-injection | Cisco DNA Spaces: Connector Command Injection Vulnerability | 2019-11-20T16:00:00+00:00 | 2019-11-20T16:00:00+00:00 |
| cisco-sa-20191120-dna-priv-esca | Cisco DNA Spaces: Connector Privilege Escalation Vulnerability | 2019-11-20T16:00:00+00:00 | 2019-11-20T16:00:00+00:00 |
| cisco-sa-20191120-dna-sqlinjection | Cisco DNA Spaces: Connector SQL Injection Vulnerability | 2019-11-20T16:00:00+00:00 | 2019-11-20T16:00:00+00:00 |
| cisco-sa-20191120-esa-mp3-bypass | Cisco Email Security Appliance MP3 Content Filter Bypass Vulnerability | 2019-11-20T16:00:00+00:00 | 2019-11-20T16:00:00+00:00 |
| cisco-sa-20191120-esa-url-bypass | Cisco Email Security Appliance URL Filtering Bypass Vulnerability | 2019-11-20T16:00:00+00:00 | 2019-11-20T16:00:00+00:00 |
| cisco-sa-20191120-iosxr-ssh-bypass | Cisco IOS XR Software NETCONF Over Secure Shell ACL Bypass Vulnerability | 2019-11-20T16:00:00+00:00 | 2019-11-23T02:24:36+00:00 |
| cisco-sa-20191120-sbr-rv-infodis | Cisco Small Business Routers RV016, RV042, RV042G, and RV082 Information Disclosure Vulnerability | 2019-11-20T16:00:00+00:00 | 2019-11-20T16:00:00+00:00 |
| cisco-sa-20191120-stealth-xss | Cisco Stealthwatch Enterprise Cross-Site Scripting Vulnerability | 2019-11-20T16:00:00+00:00 | 2019-11-20T16:00:00+00:00 |
| cisco-sa-20191120-ucdm-xss | Cisco Unified Communications Domain Manager Persistent Cross-Site Scripting Vulnerability | 2019-11-20T16:00:00+00:00 | 2019-11-20T16:00:00+00:00 |
| cisco-sa-20191120-unity-exp-comm-inject | Cisco Unity Express Command Injection Vulnerability | 2019-11-20T16:00:00+00:00 | 2019-11-20T16:00:00+00:00 |
| cisco-sa-20191120-vman-csrf | Cisco SD-WAN Solution vManage Cross-Site Request Forgery Vulnerability | 2019-11-20T16:00:00+00:00 | 2019-11-20T16:00:00+00:00 |
| cisco-sa-20191120-webex-centers-infodis | Cisco WebEx Centers Username Enumeration Information Disclosure Vulnerability | 2019-11-20T16:00:00+00:00 | 2019-11-20T16:00:00+00:00 |
| cisco-sa-20191120-webex-teams-dll | Cisco Webex Teams and Cisco Webex Meetings Client DLL Hijacking Vulnerability | 2019-11-20T16:00:00+00:00 | 2019-12-02T16:36:24+00:00 |
| cisco-sa-20200102-dcnm-auth-bypass | Cisco Data Center Network Manager Authentication Bypass Vulnerabilities | 2020-01-02T16:00:00+00:00 | 2020-01-15T15:58:03+00:00 |
| cisco-sa-20200102-dcnm-comm-inject | Cisco Data Center Network Manager Command Injection Vulnerabilities | 2020-01-02T16:00:00+00:00 | 2020-01-15T15:58:02+00:00 |
| cisco-sa-20200102-dcnm-path-trav | Cisco Data Center Network Manager Path Traversal Vulnerabilities | 2020-01-02T16:00:00+00:00 | 2020-01-15T15:58:01+00:00 |
| cisco-sa-20200102-dcnm-sql-inject | Cisco Data Center Network Manager SQL Injection Vulnerabilities | 2020-01-02T16:00:00+00:00 | 2020-01-15T15:57:59+00:00 |
| cisco-sa-20200102-dcnm-unauth-access | Cisco Data Center Network Manager JBoss EAP Unauthorized Access Vulnerability | 2020-01-02T16:00:00+00:00 | 2020-01-15T15:57:58+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2021-27212 | In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime. | 2021-02-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-27218 | An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform the length would be truncated modulo 2**32 causing unintended length truncation. | 2021-02-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-27219 | An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption. | 2021-02-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-27367 | Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal. | 2021-02-02T00:00:00.000Z | 2025-10-01T23:11:09.000Z |
| msrc_cve-2021-27378 | An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into mishandle certain buffer-length checks a random number generator may be seeded with too little data. | 2021-02-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2021-27803 | A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code) for an attacker within radio range. | 2021-02-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-3348 | nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup aka CID-b98e762e3d71. | 2021-02-02T00:00:00.000Z | 2021-02-06T00:00:00.000Z |
| msrc_cve-2020-14372 | A flaw was found in grub2 in versions prior to 2.06 where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table (SSDT) containing code to overwrite the Linux kernel lockdown variable content directly into memory. The table is further loaded and executed by the kernel defeating its Secure Boot lockdown and allowing the attacker to load unsigned code. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-17525 | Remote unauthenticated denial-of-service in Subversion mod_authz_svn | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-25632 | A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed or a bypass of Secure Boot protections. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-25639 | A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-25647 | A flaw was found in grub2 in versions prior to 2.06. During USB device initialization descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited an attacker could trigger memory corruption leading to arbitrary code execution allowing a bypass of the Secure Boot mechanism. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-27170 | An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory aka CID-f232326f6966. This affects pointer types that do not define a ptr_limit. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-27171 | An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory aka CID-10d2bb2e6b1d. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-27749 | A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents using a 1kB stack buffer for temporary storage without sufficient bounds checking. If the function is called with a command line that references a variable with a sufficiently large payload it is possible to overflow the stack buffer corrupt the stack frame and control execution which could also circumvent Secure Boot protections. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-27779 | A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker to remove address ranges from memory creating an opportunity to circumvent SecureBoot protections after proper triage about grub's memory layout. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-27827 | A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs potentially causing a denial of service. The highest threat from this vulnerability is to system availability. | 2021-03-02T00:00:00.000Z | 2022-08-06T00:00:00.000Z |
| msrc_cve-2020-35492 | A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor (for example by convincing a user to open a file in an application using cairo or if an application uses cairo on untrusted input) to cause a stack buffer overflow -> out-of-bounds WRITE. The highest impact from this vulnerability is to confidentiality integrity as well as system availability. | 2021-03-02T00:00:00.000Z | 2021-03-30T00:00:00.000Z |
| msrc_cve-2020-35508 | A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-35521 | A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c a crafted TIFF file can lead to an abort resulting in denial of service. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-35522 | In LibTIFF there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-35523 | An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality integrity as well as system availability. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2020-35524 | A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality integrity as well as system availability. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-20197 | There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar objcopy strip ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users) an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink. | 2021-03-02T00:00:00.000Z | 2023-03-10T00:00:00.000Z |
| msrc_cve-2021-20225 | A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-20227 | A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability. | 2021-03-02T00:00:00.000Z | 2021-03-27T00:00:00.000Z |
| msrc_cve-2021-20231 | A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-20232 | A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-20233 | A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumption that expressing a quoted single quote will require 3 characters while it actually requires 4 characters which allows an attacker to corrupt memory by one byte for each quote in the input. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. | 2021-03-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-20255 | A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host resulting in a denial of service. The highest threat from this vulnerability is to system availability. | 2021-03-02T00:00:00.000Z | 2023-03-10T00:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201910-1869 | Baidu Tiangong Intelligent Platform is a cloud service platform for the Internet of Thing… | 2022-05-04T09:22:10.087000Z |
| var-201908-2197 | Shenzhen Youfang Technology Co., Ltd. is a company specializing in M2M IoT wireless commu… | 2022-05-04T09:22:16.520000Z |
| var-201908-2199 | D-Link Dir-816 is a wireless router. The D-Link Dir-816 management system has an unautho… | 2022-05-04T09:22:16.510000Z |
| var-201906-1347 | Youxun Electronic Equipment (Shanghai) Co., Ltd. is a company mainly engaged in network e… | 2022-05-04T09:22:23.935000Z |
| var-201905-1429 | Aviosoft DVD X Player Standard is a DVD player from Aviosoft, USA. Aviosoft DVD X Player… | 2022-05-04T09:22:25.526000Z |
| var-201903-1644 | Kodak Video Cloud MCU Device search function exists SQL Inject holes. Allows an attacker … | 2022-05-04T09:22:28.302000Z |
| var-201811-1130 | TendaAC7 and others are wireless router products of Tenda. Httpd is one of the HTTP serve… | 2022-05-04T09:22:36.485000Z |
| var-201810-1607 | Xiaomi router is a router. There is a code execution vulnerability in the Xiaomi router.… | 2022-05-04T09:22:40.280000Z |
| var-201809-1329 | HP Color LaserJet Pro M252 is a color laser printer manufactured by HP Trading (Shanghai)… | 2022-05-04T09:22:41.598000Z |
| var-201805-1238 | DrayTek is a Taiwanese broadband CPE (client device) manufacturer that manufactures devic… | 2022-05-04T09:22:51.597000Z |
| var-201803-2356 | Zhongkong Taike (Shanghai) Electronic Technology Co., Ltd. is a sales and service organiz… | 2022-05-04T09:22:57.509000Z |
| var-201801-1832 | pelco Sarix Professional is a video camera. A command execution vulnerability exists in … | 2022-05-04T09:23:01.115000Z |
| var-201709-1253 | NETS9 is a multi-satellite reference station receiver. There is a SQL injection vulnerab… | 2022-05-04T09:23:09.947000Z |
| var-201707-1346 | The D-LinkDIR-100 is a small broadband router with integrated firewall capabilities. A cr… | 2022-05-04T09:23:15.511000Z |
| var-201706-1125 | Foscamcamera is a webcam that can push messages to mobile phones and directly implement v… | 2022-05-04T09:23:16.862000Z |
| var-201706-1146 | HuaweiY6Pro is a smartphone from China's Huawei company. A memory leak vulnerability exis… | 2022-05-04T09:23:16.850000Z |
| var-201610-0722 | AVTECH, founded in 1996, is one of the world's leading manufacturers of CCTV. The main pr… | 2022-05-04T09:23:32.878000Z |
| var-201611-0398 | Anke digital camera has weak password, allowing initial password login | 2022-05-04T09:23:32.554000Z |
| var-201611-0419 | Beijing Yuanwei Software Co., Ltd. Security Isolation Gateway is a multi-network security… | 2022-05-04T09:23:32.544000Z |
| var-201612-0649 | ZyXELP660HN-Tv2 is a router manufactured by ZyXEL. The ZyXELP660HN-Tv2 router has an unau… | 2022-05-04T09:23:32.173000Z |
| var-201609-0700 | Automation DCISoft is a dedicated electronic drawing software. Automation DCISoft has a … | 2022-05-04T09:23:33.874000Z |
| var-201608-0493 | Beijing Dingfeng Gold Technology Co., Ltd. library system is widely used in various enter… | 2022-05-04T09:23:34.268000Z |
| var-201606-0550 | The Fixon K2 wireless router is a wireless router for home use. The Fixon K2 wireless ro… | 2022-05-04T09:23:35.031000Z |
| var-201501-0542 | XML external entity vulnerability in the Extended Computer Aided Test Tool (eCATT) in SAP… | 2022-05-04T09:23:49.379000Z |
| var-201409-1260 | Bangxun Wlan AC is a wireless controller product produced by Bangxun Technology Co., Ltd.… | 2022-05-04T09:23:52.380000Z |
| var-201401-0732 | Huawei B593u-12 / T-Mobile HOME NET Router is an LTE wireless router series. Huawei B593u… | 2022-05-04T09:24:04.462000Z |
| var-201309-0595 | The NetVanta 3430 is a router device. The NetVanta 3430 has a default user account \"admi… | 2022-05-04T09:24:06.743000Z |
| var-201310-0799 | The TP-LINK TL-WDR4300 Router is a wireless router device. The TP-LINK TL-WDR4300 Router … | 2022-05-04T09:24:06.167000Z |
| var-201310-0801 | HP is the world's leading high-tech provider, offering a full line of notebooks, desktops… | 2022-05-04T09:24:06.155000Z |
| var-201009-0328 | A vulnerability in the file transfer feature in the JP1/NETM/Remote Control Agent may all… | 2022-05-04T09:24:29.788000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2013-000103 | Ichitaro series vulnerable to arbitrary code execution | 2013-11-12T14:33+09:00 | 2013-11-15T10:22+09:00 |
| jvndb-2011-003557 | ASP.NET vulnerable to open redirect | 2013-11-15T15:54+09:00 | 2013-11-15T15:54+09:00 |
| jvndb-2013-000104 | EC-CUBE vulnerable to information disclosure | 2013-11-20T15:19+09:00 | 2013-11-22T14:42+09:00 |
| jvndb-2013-000105 | EC-CUBE vulnerable to cross-site scripting | 2013-11-20T15:34+09:00 | 2013-11-22T14:40+09:00 |
| jvndb-2013-000097 | EC-CUBE vulnerable to cross-site request forgery | 2013-11-20T15:40+09:00 | 2013-11-22T14:37+09:00 |
| jvndb-2013-000098 | EC-CUBE information disclosure vulnerability | 2013-11-20T15:48+09:00 | 2013-11-22T14:35+09:00 |
| jvndb-2013-000107 | EC-CUBE vulnerable to cross-site scripting | 2013-11-20T15:56+09:00 | 2013-11-22T13:57+09:00 |
| jvndb-2013-000106 | EC-CUBE information disclosure vulnerability | 2013-11-20T16:14+09:00 | 2013-11-22T14:18+09:00 |
| jvndb-2013-000109 | D-Link DES-3800 Series vulnerable to denial-of-service (DoS) | 2013-11-22T14:50+09:00 | 2013-11-26T16:09+09:00 |
| jvndb-2013-000110 | D-Link DES-3800 Series vulnerable to denial-of-service (DoS) | 2013-11-22T14:51+09:00 | 2013-11-26T16:15+09:00 |
| jvndb-2013-000108 | KDrive Personal for Windows contains an issue where it fails to verify SSL server certificates | 2013-11-22T17:39+09:00 | 2013-11-26T16:02+09:00 |
| jvndb-2013-005262 | Buffer Overflow Vulnerability in the log function of Interstage HTTP Server | 2013-11-28T16:38+09:00 | 2013-12-18T16:16+09:00 |
| jvndb-2013-000112 | TOWN (modified version) vulnerable to directory traversal | 2013-11-29T14:23+09:00 | 2013-12-06T10:38+09:00 |
| jvndb-2013-000113 | Multiple cross-site scripting vulnerabilities in Cybozu Garoon | 2013-12-03T13:37+09:00 | 2013-12-06T10:42+09:00 |
| jvndb-2013-000114 | Cybozu Garoon vulnerable to SQL injection | 2013-12-03T13:45+09:00 | 2013-12-06T10:47+09:00 |
| jvndb-2013-000115 | Cybozu Garoon vulnerable to denial-of-service (DoS) | 2013-12-03T13:46+09:00 | 2013-12-06T10:48+09:00 |
| jvndb-2013-000116 | Cybozu Garoon vulnerable to mail header injection | 2013-12-03T13:49+09:00 | 2013-12-06T10:50+09:00 |
| jvndb-2013-000117 | Cybozu Garoon vulnerable to session fixation | 2013-12-03T13:51+09:00 | 2013-12-06T10:52+09:00 |
| jvndb-2013-000118 | Cybozu Dezie vulnerable to cross-site scripting | 2013-12-10T14:13+09:00 | 2013-12-18T14:51+09:00 |
| jvndb-2013-000119 | Juniper ScreenOS vulnerable to denial-of-service (DoS) | 2013-12-13T12:23+09:00 | 2013-12-18T15:23+09:00 |
| jvndb-2013-000111 | Android OS vulnerable to arbitrary Java method execution | 2013-12-17T13:57+09:00 | 2014-03-05T17:27+09:00 |
| jvndb-2013-000120 | IrfanView vulnerable to buffer overflow | 2013-12-24T15:02+09:00 | 2014-01-07T19:25+09:00 |
| jvndb-2013-000123 | VMware ESX and ESXi may allow access to arbitrary files | 2013-12-24T15:02+09:00 | 2013-12-25T14:01+09:00 |
| jvndb-2013-000124 | Cybozu Garoon vulnerable to SQL injection | 2013-12-25T12:21+09:00 | 2014-01-07T19:22+09:00 |
| jvndb-2013-000125 | Cybozu Garoon Keitai vulnerable to authentication bypass | 2013-12-25T12:22+09:00 | 2014-01-07T16:12+09:00 |
| jvndb-2013-005669 | Xml eXternal Entity Vulnerability in Hitachi Cosminexus | 2013-12-25T19:13+09:00 | 2013-12-25T19:13+09:00 |
| jvndb-2013-000126 | HP Autonomy Ultraseek vulnerable to cross-site scripting | 2013-12-26T12:32+09:00 | 2013-12-26T12:32+09:00 |
| jvndb-2014-000001 | ZIP with Pass vulnerable to directory traversal | 2014-01-10T14:34+09:00 | 2014-01-10T14:34+09:00 |
| jvndb-2014-000002 | tetra filer vulnerable to directory traversal | 2014-01-10T14:41+09:00 | 2014-01-10T14:41+09:00 |
| jvndb-2014-000003 | Security File Manager vulnerable to directory traversal | 2014-01-10T14:42+09:00 | 2014-01-10T14:42+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:21096-1 | Security update for kernel-livepatch-MICRO-6-0_Update_7 | 2025-11-28T08:19:28Z | 2025-11-28T08:19:28Z |
| suse-su-2025:21097-1 | Security update for kernel-livepatch-MICRO-6-0_Update_8 | 2025-11-28T08:19:28Z | 2025-11-28T08:19:28Z |
| suse-su-2025:21098-1 | Security update for kernel-livepatch-MICRO-6-0_Update_9 | 2025-11-28T08:19:28Z | 2025-11-28T08:19:28Z |
| suse-su-2025:21107-1 | Security update for kernel-livepatch-MICRO-6-0_Update_4 | 2025-11-28T08:19:28Z | 2025-11-28T08:19:28Z |
| suse-su-2025:21108-1 | Security update for kernel-livepatch-MICRO-6-0_Update_5 | 2025-11-28T08:19:28Z | 2025-11-28T08:19:28Z |
| suse-su-2025:21109-1 | Security update for kernel-livepatch-MICRO-6-0_Update_6 | 2025-11-28T08:19:28Z | 2025-11-28T08:19:28Z |
| suse-su-2025:21110-1 | Security update for kernel-livepatch-MICRO-6-0_Update_7 | 2025-11-28T08:19:28Z | 2025-11-28T08:19:28Z |
| suse-su-2025:21111-1 | Security update for kernel-livepatch-MICRO-6-0_Update_8 | 2025-11-28T08:19:28Z | 2025-11-28T08:19:28Z |
| suse-su-2025:21112-1 | Security update for kernel-livepatch-MICRO-6-0_Update_9 | 2025-11-28T08:19:28Z | 2025-11-28T08:19:28Z |
| suse-su-2025:21086-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21087-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21088-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_6 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21089-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21090-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_8 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21091-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_9 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21116-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21117-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21118-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_6 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21119-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21120-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_8 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21121-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_9 | 2025-11-28T08:19:29Z | 2025-11-28T08:19:29Z |
| suse-su-2025:21101-1 | Security update for kernel-livepatch-MICRO-6-0_Update_11 | 2025-11-28T08:20:11Z | 2025-11-28T08:20:11Z |
| suse-su-2025:21113-1 | Security update for kernel-livepatch-MICRO-6-0_Update_11 | 2025-11-28T08:20:11Z | 2025-11-28T08:20:11Z |
| suse-su-2025:21100-1 | Security update for kernel-livepatch-MICRO-6-0_Update_10 | 2025-11-28T08:20:28Z | 2025-11-28T08:20:28Z |
| suse-su-2025:21114-1 | Security update for kernel-livepatch-MICRO-6-0_Update_10 | 2025-11-28T08:20:28Z | 2025-11-28T08:20:28Z |
| suse-su-2025:21102-1 | Security update for kernel-livepatch-MICRO-6-0_Update_12 | 2025-11-28T08:20:42Z | 2025-11-28T08:20:42Z |
| suse-su-2025:21115-1 | Security update for kernel-livepatch-MICRO-6-0_Update_12 | 2025-11-28T08:20:42Z | 2025-11-28T08:20:42Z |
| suse-su-2025:21099-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_10 | 2025-11-28T08:21:02Z | 2025-11-28T08:21:02Z |
| suse-su-2025:21122-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_10 | 2025-11-28T08:21:02Z | 2025-11-28T08:21:02Z |
| suse-su-2025:21103-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_11 | 2025-11-28T08:21:31Z | 2025-11-28T08:21:31Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2015-00922 | Cisco Unified IP Phones 9900 Series信息泄露漏洞 | 2015-02-05 | 2015-02-06 |
| cnvd-2015-00923 | Cisco Unified IP Phones 9900 Series拒绝服务漏洞（CNVD-2015-00923） | 2015-02-05 | 2015-02-06 |
| cnvd-2015-00924 | Libmspack空指针引用拒绝服务漏洞 | 2015-02-05 | 2015-02-06 |
| cnvd-2015-00925 | Libmspack内存破坏漏洞 | 2015-02-05 | 2015-02-06 |
| cnvd-2015-00926 | Libmspack 'mspack/mszipd.c'缓冲区溢出漏洞 | 2015-02-05 | 2015-02-06 |
| cnvd-2015-00927 | MIT krb5 kadmind远程代码执行漏洞 | 2015-02-05 | 2015-02-06 |
| cnvd-2015-00928 | MIT krb5 kadmind安全绕过漏洞 | 2015-02-05 | 2015-02-06 |
| cnvd-2015-00936 | NPDS Revolution SQL注入漏洞 | 2015-02-05 | 2015-02-06 |
| cnvd-2015-00937 | Aruba Networks Instant堆缓冲区溢出漏洞 | 2015-02-05 | 2015-02-06 |
| cnvd-2015-00938 | puppetlabs-rabbitmq存在漏洞 | 2015-02-05 | 2015-02-06 |
| cnvd-2015-00939 | ManageEngine Desktop Central跨站请求伪造漏洞 | 2015-02-05 | 2015-02-06 |
| cnvd-2015-00940 | ArticleFR 'videouploader.php'任意文件上传漏洞 | 2015-02-05 | 2015-02-06 |
| cnvd-2015-01013 | Cisco Unified Computing System on C-Series Rack Servers跨框架脚本漏洞 | 2015-02-05 | 2015-02-11 |
| cnvd-2015-01014 | SerVision HVG Video Gateway devices with firmware权限提升漏洞 | 2015-02-05 | 2015-02-11 |
| cnvd-2015-01015 | My Little Forum存在多个跨站脚本漏洞 | 2015-02-05 | 2015-02-11 |
| cnvd-2015-01016 | EcommerceMajor存在多个SQL注入漏洞 | 2015-02-05 | 2015-02-11 |
| cnvd-2015-01017 | AVG Internet Security权限提升漏洞 | 2015-02-05 | 2015-02-11 |
| cnvd-2015-01018 | BullGuard多个产品存在任意写入权限提升漏洞 | 2015-02-05 | 2015-02-11 |
| cnvd-2015-01019 | K7 Computing多款产品存在任意写入权限提升漏洞 | 2015-02-05 | 2015-02-11 |
| cnvd-2015-01020 | Pragyan CMS SQL注入漏洞 | 2015-02-05 | 2015-02-11 |
| cnvd-2015-01021 | OptimalSite CMS 'display_dialog.php'跨站脚本漏洞 | 2015-02-05 | 2015-02-11 |
| cnvd-2015-01022 | ownCloud Server身份验证漏洞 | 2015-02-05 | 2015-02-11 |
| cnvd-2015-01023 | Ansible Tower信息泄露漏洞 | 2015-02-05 | 2015-02-11 |
| cnvd-2015-01024 | Ansible Tower远程权限提升漏洞 | 2015-02-05 | 2015-02-11 |
| cnvd-2015-01029 | SnipSnap 'query'参数跨站脚本漏洞 | 2015-02-05 | 2015-02-11 |
| cnvd-2015-01030 | Adobe Flash Player存在未明内存破坏漏洞（CNVD-2015-01030） | 2015-02-05 | 2015-02-11 |
| cnvd-2015-01034 | ownCloud 'OC_Util::getUrlContent()' 本地信息泄露漏洞 | 2015-02-05 | 2015-02-11 |
| cnvd-2015-01107 | Fortinet FortiAuthenticator权限提升漏洞 | 2015-02-05 | 2015-02-12 |
| cnvd-2015-01108 | Fortinet FortiAuthenticator目录遍历漏洞 | 2015-02-05 | 2015-02-12 |
| cnvd-2015-01109 | Fortinet FortiAuthenticator跨站脚本漏洞 | 2015-02-05 | 2015-02-12 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2002-avi-221 | Vulnérabilités de la fonction d'aide sous Windows | 2002-10-03T00:00:00.000000 | 2002-10-03T00:00:00.000000 |
| certa-2002-avi-222 | Multiples vulnérabilités dans <SPAN class="textit">Services for Unix</SPAN> 3.0 de Microsoft | 2002-10-03T00:00:00.000000 | 2002-10-03T00:00:00.000000 |
| CERTA-2002-AVI-223 | Vulnérabilité dans Microsoft Outlook Express | 2002-10-11T00:00:00.000000 | 2002-10-11T00:00:00.000000 |
| CERTA-2002-AVI-224 | Vulnérabilités des serveurs HTTP Apache et Oracle | 2002-10-11T00:00:00.000000 | 2002-10-15T00:00:00.000000 |
| certa-2002-avi-223 | Vulnérabilité dans Microsoft Outlook Express | 2002-10-11T00:00:00.000000 | 2002-10-11T00:00:00.000000 |
| certa-2002-avi-224 | Vulnérabilités des serveurs HTTP Apache et Oracle | 2002-10-11T00:00:00.000000 | 2002-10-15T00:00:00.000000 |
| CERTA-2002-AVI-225 | Vulnérabilité dans Oracle Listener | 2002-10-15T00:00:00.000000 | 2002-10-16T00:00:00.000000 |
| CERTA-2002-AVI-226 | Vulnérabilité dans les gardes-barrières Symantec | 2002-10-15T00:00:00.000000 | 2002-10-15T00:00:00.000000 |
| CERTA-2002-AVI-227 | Débordement de variable dans gv | 2002-10-15T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| CERTA-2002-AVI-228 | Vulnérabilité des systèmes AIX de IBM | 2002-10-15T00:00:00.000000 | 2002-10-15T00:00:00.000000 |
| CERTA-2002-AVI-229 | Vulnérabilité de fetchmail | 2002-10-15T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| certa-2002-avi-225 | Vulnérabilité dans Oracle Listener | 2002-10-15T00:00:00.000000 | 2002-10-16T00:00:00.000000 |
| certa-2002-avi-226 | Vulnérabilité dans les gardes-barrières Symantec | 2002-10-15T00:00:00.000000 | 2002-10-15T00:00:00.000000 |
| certa-2002-avi-227 | Débordement de variable dans gv | 2002-10-15T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| certa-2002-avi-228 | Vulnérabilité des systèmes AIX de IBM | 2002-10-15T00:00:00.000000 | 2002-10-15T00:00:00.000000 |
| certa-2002-avi-229 | Vulnérabilité de fetchmail | 2002-10-15T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| CERTA-2002-AVI-230 | Multiples vulnérabilités sous IRIX | 2002-10-16T00:00:00.000000 | 2002-10-16T00:00:00.000000 |
| certa-2002-avi-230 | Multiples vulnérabilités sous IRIX | 2002-10-16T00:00:00.000000 | 2002-10-16T00:00:00.000000 |
| CERTA-2002-AVI-231 | Vulnérabilité du serveur HTTP des commutateurs Catalyst de Cisco | 2002-10-17T00:00:00.000000 | 2002-10-17T00:00:00.000000 |
| CERTA-2002-AVI-232 | Elévation de privilèges dans SQL Server Web Tasks | 2002-10-17T00:00:00.000000 | 2002-10-17T00:00:00.000000 |
| CERTA-2002-AVI-233 | Vulnérabilité dans le système d'aide de Windows XP | 2002-10-17T00:00:00.000000 | 2002-10-17T00:00:00.000000 |
| CERTA-2002-AVI-234 | Vulnérabilité dans les applications Microsoft Word et Excel | 2002-10-17T00:00:00.000000 | 2002-10-17T00:00:00.000000 |
| CERTA-2002-AVI-235 | Vulnérabilité des services <TT>ypserv</TT> et <TT>ypxfrd</TT> sous Unix | 2002-10-17T00:00:00.000000 | 2002-11-06T00:00:00.000000 |
| certa-2002-avi-231 | Vulnérabilité du serveur HTTP des commutateurs Catalyst de Cisco | 2002-10-17T00:00:00.000000 | 2002-10-17T00:00:00.000000 |
| certa-2002-avi-232 | Elévation de privilèges dans SQL Server Web Tasks | 2002-10-17T00:00:00.000000 | 2002-10-17T00:00:00.000000 |
| certa-2002-avi-233 | Vulnérabilité dans le système d'aide de Windows XP | 2002-10-17T00:00:00.000000 | 2002-10-17T00:00:00.000000 |
| certa-2002-avi-234 | Vulnérabilité dans les applications Microsoft Word et Excel | 2002-10-17T00:00:00.000000 | 2002-10-17T00:00:00.000000 |
| certa-2002-avi-235 | Vulnérabilité des services <TT>ypserv</TT> et <TT>ypxfrd</TT> sous Unix | 2002-10-17T00:00:00.000000 | 2002-11-06T00:00:00.000000 |
| CERTA-2002-AVI-236 | Multiples vulnérabilités de X Window sous SGI Irix | 2002-10-21T00:00:00.000000 | 2002-10-21T00:00:00.000000 |
| certa-2002-avi-236 | Multiples vulnérabilités de X Window sous SGI Irix | 2002-10-21T00:00:00.000000 | 2002-10-21T00:00:00.000000 |