Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-39763 |
N/A
|
ACPI: APEI: send SIGBUS to current task if synchronous… |
Linux |
Linux |
2025-09-11T16:52:31.350Z | 2026-02-19T15:39:19.151Z |
| CVE-2025-38643 |
N/A
|
wifi: cfg80211: Add missing lock in cfg80211_check_and… |
Linux |
Linux |
2025-08-22T16:00:49.172Z | 2026-02-19T15:39:17.927Z |
| CVE-2025-37920 |
N/A
|
xsk: Fix race condition in AF_XDP generic RX path |
Linux |
Linux |
2025-05-20T15:21:49.685Z | 2026-02-19T15:39:16.433Z |
| CVE-2019-25429 |
5.1 (4.0)
6.1 (3.1)
|
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Script… |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:43.707Z | 2026-02-19T15:39:15.276Z |
| CVE-2025-37786 |
N/A
|
net: dsa: free routing table on probe failure |
Linux |
Linux |
2025-05-01T13:07:20.980Z | 2026-02-19T15:39:14.921Z |
| CVE-2025-23155 |
N/A
|
net: stmmac: Fix accessing freed irq affinity_hint |
Linux |
Linux |
2025-05-01T12:55:41.607Z | 2026-02-19T15:39:13.612Z |
| CVE-2025-22026 |
N/A
|
nfsd: don't ignore the return code of svc_proc_register() |
Linux |
Linux |
2025-04-16T14:11:47.243Z | 2026-02-19T15:39:11.606Z |
| CVE-2024-57895 |
5.5 (3.1)
|
ksmbd: set ATTR_CTIME flags when setting mtime |
Linux |
Linux |
2025-01-15T13:05:47.632Z | 2026-02-19T15:39:09.939Z |
| CVE-2024-26822 |
N/A
|
smb: client: set correct id, uid and cruid for multius… |
Linux |
Linux |
2024-04-17T09:43:49.221Z | 2026-02-19T15:39:08.700Z |
| CVE-2023-53424 |
5.5 (3.1)
|
clk: mediatek: fix of_iomap memory leak |
Linux |
Linux |
2025-09-18T16:04:06.635Z | 2026-02-19T15:39:06.994Z |
| CVE-2022-50516 |
N/A
|
fs: dlm: fix invalid derefence of sb_lvbptr |
Linux |
Linux |
2025-10-07T15:19:11.657Z | 2026-02-19T15:39:05.444Z |
| CVE-2019-25430 |
5.1 (4.0)
6.1 (3.1)
|
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Script… |
Cdome |
Comodo Dome Firewall |
2026-02-19T12:02:44.636Z | 2026-02-19T15:36:44.611Z |
| CVE-2026-25527 |
5.3 (3.1)
|
changedetection.io vulnerable to unauthenticated stati… |
dgtlmoon |
changedetection.io |
2026-02-19T14:18:18.933Z | 2026-02-19T15:35:41.155Z |
| CVE-2019-25351 |
7.1 (4.0)
8.8 (3.1)
|
Centova Cast 3.2.11 - Arbitrary File Download |
Centova Technologies Inc. |
Centova Cast |
2026-02-18T21:54:57.670Z | 2026-02-19T15:32:41.538Z |
| CVE-2025-71245 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2026-02-19T14:58:16.963Z | 2026-02-19T15:26:13.697Z |
| CVE-2025-71246 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2026-02-19T14:58:17.715Z | 2026-02-19T15:25:46.903Z |
| CVE-2019-25350 |
4.6 (4.0)
7.5 (3.1)
|
XMedia Recode 3.4.8.6 - '.m3u' Denial Of Service |
XMedia Recode |
XMedia Recode |
2026-02-18T21:54:56.851Z | 2026-02-19T15:20:02.077Z |
| CVE-2019-25349 |
4.6 (4.0)
7.5 (3.1)
|
scadaApp for iOS 1.1.4.0 - 'Servername' Denial of Service |
scadaapp |
scadaApp for iOS |
2026-02-18T21:54:56.070Z | 2026-02-19T15:10:23.796Z |
| CVE-2019-25326 |
4.6 (4.0)
6.2 (3.1)
|
ipPulse 1.92 - 'Enter Key' Denial of Service |
Northwest Performance Software, Inc. |
ipPulse |
2026-02-18T21:54:55.158Z | 2026-02-19T15:06:37.732Z |
| CVE-2026-2672 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
Tsinghua Unigroup Electronic Archives System downLoad … |
Tsinghua Unigroup |
Electronic Archives System |
2026-02-18T21:32:07.412Z | 2026-02-19T15:03:03.632Z |
| CVE-2026-24743 |
5.7 (3.1)
|
InvoicePlane has a Stored Cross-Site Scripting (XSS) issue |
InvoicePlane |
InvoicePlane |
2026-02-18T20:59:16.103Z | 2026-02-19T14:58:46.031Z |
| CVE-2025-71242 |
5.3 (4.0)
4.3 (3.1)
|
SPIP < 4.3.6 Authorization Bypass Leading to Content D… |
SPIP |
SPIP |
2026-02-19T14:58:14.582Z | 2026-02-19T14:58:14.582Z |
| CVE-2026-22769 |
10 (3.1)
|
Dell RecoverPoint for Virtual Machines, versions … |
Dell |
RecoverPoint for Virtual Machines |
2026-02-17T19:19:34.178Z | 2026-02-19T14:57:37.892Z |
| CVE-2026-27182 |
8.6 (4.0)
8.4 (3.1)
|
Saturn Remote Mouse Server UDP Command Injection RCE |
saturnremote |
Saturn Remote Mouse Server |
2026-02-18T20:59:12.092Z | 2026-02-19T14:57:25.386Z |
| CVE-2019-25400 |
4.8 (4.0)
5.4 (3.1)
|
IPFire 2.21 Core Update 127 Multiple XSS via fwhosts.cgi |
Ipfire |
IPFire |
2026-02-18T20:59:11.293Z | 2026-02-19T14:55:01.065Z |
| CVE-2019-25399 |
5.1 (4.0)
6.4 (3.1)
|
IPFire 2.21 Core Update 127 Stored XSS via extrahd.cgi |
Ipfire |
IPFire |
2026-02-18T20:59:10.495Z | 2026-02-19T14:54:11.086Z |
| CVE-2025-2241 |
8.2 (3.1)
|
Hive: exposure of vcenter credentials via clusterprovi… |
|
|
2025-03-17T16:27:20.598Z | 2026-02-19T14:46:56.450Z |
| CVE-2019-25398 |
5.1 (4.0)
6.1 (3.1)
|
IPFire 2.21 Core Update 127 Cross-Site Scripting via o… |
Ipfire |
IPFire |
2026-02-18T20:59:09.712Z | 2026-02-19T14:43:29.706Z |
| CVE-2019-25397 |
5.1 (4.0)
6.1 (3.1)
|
IPFire 2.21 Core Update 127 Cross-Site Scripting via h… |
Ipfire |
IPFire |
2026-02-18T20:59:08.864Z | 2026-02-19T14:41:22.035Z |
| CVE-2019-25396 |
5.1 (4.0)
6.1 (3.1)
|
IPFire 2.21 Core Update 127 Reflected XSS via updatexl… |
Ipfire |
IPFire |
2026-02-18T20:59:07.991Z | 2026-02-19T14:39:20.005Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-14009 |
10 (3.0)
|
Zip Slip Vulnerability in nltk/nltk Leading to Remote … |
nltk |
nltk/nltk |
2026-02-18T17:45:17.573Z | 2026-02-19T04:55:48.396Z |
| CVE-2025-13930 |
5.3 (3.1)
|
Checkout Field Manager (Checkout Manager) for WooComme… |
quadlayers |
Checkout Field Manager (Checkout Manager) for WooCommerce |
2026-02-19T04:36:08.678Z | 2026-02-19T17:38:45.402Z |
| CVE-2025-13864 |
5.3 (3.1)
|
Breeze – WordPress Cache Plugin <= 2.2.21 - Missing Au… |
cloudways |
Breeze Cache |
2026-02-19T04:36:12.578Z | 2026-02-19T17:37:10.796Z |
| CVE-2025-13851 |
9.8 (3.1)
|
Buyent Theme (with Buyent Classified Plugin) <= 1.0.7 … |
scriptsbundle |
Buyent |
2026-02-19T04:36:27.334Z | 2026-02-19T21:24:16.175Z |
| CVE-2025-13842 |
5.3 (3.1)
|
Breadcrumb NavXT <= 7.5.0 - Missing Authorization to S… |
mtekk |
Breadcrumb NavXT |
2026-02-19T04:36:13.093Z | 2026-02-19T17:36:59.299Z |
| CVE-2025-13738 |
6.4 (3.1)
|
Easy Table of Contents <= 2.0.78 - Authenticated (Cont… |
magazine3 |
Easy Table of Contents |
2026-02-19T04:36:15.436Z | 2026-02-19T20:32:10.076Z |
| CVE-2025-13732 |
6.4 (3.1)
|
s2Member <= 251005 - Authenticated (Contributor+) Stor… |
clavaque |
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions |
2026-02-19T04:36:06.236Z | 2026-02-19T17:39:43.235Z |
| CVE-2025-13617 |
6.4 (3.1)
|
Apollo13 Framework Extension <= 1.9.8 - Authenticated … |
apollo13themes |
Apollo13 Framework Extensions |
2026-02-19T04:36:12.110Z | 2026-02-19T17:37:22.886Z |
| CVE-2025-13612 |
6.4 (3.1)
|
Album and Image Gallery Plus Lightbox <= 2.1.7 - Authe… |
essentialplugin |
Album and Image Gallery Plus Lightbox |
2026-02-19T04:36:09.665Z | 2026-02-19T17:38:20.655Z |
| CVE-2025-13603 |
8.8 (3.1)
|
WP AUDIO GALLERY <= 2.0 - Authenticated (Subscriber+) … |
husainali52 |
WP AUDIO GALLERY |
2026-02-19T04:36:17.771Z | 2026-02-19T21:10:57.709Z |
| CVE-2025-13587 |
6.5 (3.1)
|
Two Factor (2FA) Authentication via Email <= 1.9.8 - T… |
ss88_uk |
Two Factor (2FA) Authentication via Email |
2026-02-19T04:36:05.735Z | 2026-02-19T17:39:55.138Z |
| CVE-2025-13563 |
9.8 (3.1)
|
Lizza LMS Pro <= 1.0.3 - Unauthenticated Privilege Esc… |
BuddhaThemes |
Lizza LMS Pro |
2026-02-19T04:36:20.596Z | 2026-02-19T04:36:20.596Z |
| CVE-2025-13438 |
4.3 (3.1)
|
Page Title, Description & Open Graph Updater <= 1.02 -… |
dienodigital |
Page Title, Description & Open Graph Updater |
2026-02-19T04:36:14.713Z | 2026-02-19T17:36:21.533Z |
| CVE-2025-13413 |
4.3 (3.1)
|
Country Blocker for AdSense <= 1.0 - Cross-Site Reques… |
soyrodriguez |
Country Blocker for AdSense |
2026-02-19T04:36:06.743Z | 2026-02-19T17:39:31.661Z |
| CVE-2025-13113 |
5.3 (3.1)
|
Web Accessibility by accessiBe <= 2.11 - Unauthenticat… |
accessibewp |
Web Accessibility by accessiBe |
2026-02-19T03:25:18.315Z | 2026-02-19T17:41:06.589Z |
| CVE-2025-13091 |
4.3 (3.1)
|
Shopire <= 1.0.57 - Missing Authorization to Authentic… |
wpfable |
Shopire |
2026-02-19T04:36:18.231Z | 2026-02-19T21:10:09.099Z |
| CVE-2025-13079 |
5.3 (3.1)
|
Popup Builder - Create highly converting, mobile frien… |
popupbuilder |
Popup Builder – Create highly converting, mobile friendly marketing popups. |
2026-02-19T03:25:14.826Z | 2026-02-19T17:42:29.750Z |
| CVE-2025-13048 |
6.4 (3.1)
|
Official StatCounter Plugin <= 2.1.0 - Authenticated (… |
statcounter |
StatCounter – Free Real Time Visitor Stats |
2026-02-19T03:25:19.247Z | 2026-02-19T17:40:41.496Z |
| CVE-2025-12975 |
7.2 (3.1)
|
CTX Feed – WooCommerce Product Feed Manager <= 6.6.11 … |
wahid0003 |
Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels |
2026-02-19T04:36:10.601Z | 2026-02-19T17:37:56.018Z |
| CVE-2025-12884 |
4.3 (3.1)
|
Advanced Ads – Ad Manager & AdSense <= 2.0.14 - Missin… |
monetizemore |
Advanced Ads – Ad Manager & AdSense |
2026-02-19T03:25:17.396Z | 2026-02-19T17:41:30.633Z |
| CVE-2025-12882 |
9.8 (3.1)
|
Clasifico Listing <= 2.0 - Unauthenticated Privilege E… |
SmartDataSoft |
Clasifico Listing |
2026-02-19T03:25:15.804Z | 2026-02-19T17:42:05.893Z |
| CVE-2025-12845 |
8.8 (3.1)
|
Tablesome Table – Contact Form DB – WPForms, CF7, Grav… |
essekia |
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent |
2026-02-19T03:25:17.846Z | 2026-02-19T17:41:17.364Z |
| CVE-2025-12821 |
8.8 (3.1)
|
NewsBlogger <= 0.2.5.6 - 0.2.6.1 - Cross-Site Request … |
spicethemes |
NewsBlogger |
2026-02-19T03:25:16.877Z | 2026-02-19T17:41:41.142Z |
| CVE-2025-12812 |
5.3 (4.0)
|
Cloud Suite and Privilege Access Service – SQL Injection |
Delinea Inc. |
Cloud Suite and Privileged Access Service |
2026-02-18T22:10:35.049Z | 2026-02-19T16:09:52.937Z |
| CVE-2025-12811 |
6.9 (4.0)
|
Cloud Suite and Privilege Access Service– HTTP request… |
Delinea Inc. |
Cloud Suite and Privileged Access Service |
2026-02-18T22:08:25.254Z | 2026-02-19T16:04:19.494Z |
| CVE-2025-1272 |
7.7 (3.1)
|
Kernel: secure boot does not automatically enable kern… |
Fedora Project |
Fedora Linux |
2026-02-18T20:29:15.172Z | 2026-02-18T20:44:23.172Z |
| CVE-2025-12707 |
7.5 (3.1)
|
Library Management System <= 3.2.1 - Unauthenticated S… |
owthub |
Library Management System |
2026-02-19T03:25:15.322Z | 2026-02-19T17:42:18.990Z |
| CVE-2025-12500 |
5.3 (3.1)
|
Checkout Field Manager (Checkout Manager) for WooComme… |
quadlayers |
Checkout Field Manager (Checkout Manager) for WooCommerce |
2026-02-19T03:25:20.170Z | 2026-02-19T17:40:18.923Z |
| CVE-2025-12451 |
6.1 (3.1)
|
Easy SVG Support <= 4.0 - Authenticated (Author+) Stor… |
benjamin_zekavica |
Easy SVG Support |
2026-02-19T03:25:13.845Z | 2026-02-19T17:42:53.448Z |
| CVE-2025-12448 |
6.4 (3.1)
|
Smartsupp – live chat, AI shopping assistant and chatb… |
smartsupp |
Smartsupp – live chat, AI shopping assistant and chatbots |
2026-02-19T03:25:11.994Z | 2026-02-19T17:43:40.590Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-25329 | Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next … | 2026-02-19T09:16:17.453 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-25323 | Missing Authorization vulnerability in MiKa OSM osm allows Exploiting Incorrectly Configured Access… | 2026-02-19T09:16:16.770 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-25316 | Deserialization of Untrusted Data vulnerability in Brainstorm Force CartFlows cartflows allows Obje… | 2026-02-19T09:16:15.920 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-25305 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T09:16:14.783 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-2504 | The Dealia – Request a quote plugin for WordPress is vulnerable to unauthorized modification of dat… | 2026-02-19T07:17:46.740 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-2502 | The xmlrpc attacks blocker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in ver… | 2026-02-19T07:17:46.570 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-25006 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in 8the… | 2026-02-19T09:16:14.497 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-25004 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-02-19T09:16:14.210 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23805 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-02-19T09:16:13.360 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23803 | Server-Side Request Forgery (SSRF) vulnerability in Burhan Nasir Smart Auto Upload Images smart-aut… | 2026-02-19T09:16:13.067 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23548 | Missing Authorization vulnerability in designinvento DirectoryPress directorypress allows Exploitin… | 2026-02-19T09:16:12.787 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23545 | Missing Authorization vulnerability in Aruba.it Dev Aruba HiSpeed Cache aruba-hispeed-cache allows … | 2026-02-19T09:16:12.480 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23543 | Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-… | 2026-02-19T09:16:12.197 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-23541 | Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality… | 2026-02-19T09:16:11.903 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-2284 | The News Element Elementor Blog Magazine plugin for WordPress is vulnerable to Missing Authorizatio… | 2026-02-19T07:17:46.400 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-2282 | The Slidorion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings … | 2026-02-19T07:17:46.230 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-22333 | Deserialization of Untrusted Data vulnerability in YITHEMES YITH WooCommerce Compare yith-woocommer… | 2026-02-19T09:16:11.600 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-1994 | The s2Member plugin for WordPress is vulnerable to privilege escalation via account takeover in all… | 2026-02-19T07:17:44.403 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-1646 | The Advance Block Extend plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the … | 2026-02-19T07:17:44.233 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-1461 | The Simple Membership plugin for WordPress is vulnerable to Improper Handling of Missing Values in … | 2026-02-19T10:16:11.457 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-1455 | The Whatsiplus Scheduled Notification for Woocommerce plugin for WordPress is vulnerable to Cross-S… | 2026-02-19T07:17:44.060 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-1405 | The Slider Future plugin for WordPress is vulnerable to arbitrary file uploads due to missing file … | 2026-02-19T07:17:43.883 | 2026-02-19T15:52:39.260 |
| fkie_cve-2026-1219 | The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulne… | 2026-02-19T10:16:11.277 | 2026-02-19T15:52:39.260 |
| fkie_cve-2025-9953 | Authorization Bypass Through User-Controlled SQL Primary Key vulnerability in DATABASE Software Tra… | 2026-02-19T12:16:15.707 | 2026-02-19T15:52:39.260 |
| fkie_cve-2025-9062 | Authorization Bypass Through User-Controlled Key vulnerability in MeCODE Informatics and Engineerin… | 2026-02-19T11:15:57.120 | 2026-02-19T15:52:39.260 |
| fkie_cve-2025-8350 | Execution After Redirect (EAR), Missing Authentication for Critical Function vulnerability in Inrov… | 2026-02-19T12:16:14.697 | 2026-02-19T15:52:39.260 |
| fkie_cve-2025-55853 | SoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery (SSRF). The PDF conver… | 2026-02-19T15:16:11.190 | 2026-02-19T15:52:39.260 |
| fkie_cve-2025-41023 | An authentication bypass vulnerability has been found in Thesamur's AutoGPT. This vulnerability all… | 2026-02-19T09:16:11.243 | 2026-02-19T15:52:39.260 |
| fkie_cve-2025-40697 | Reflected Cross-Site Scripting (XSS) vulnerability in '/index.php' in Lewe WebMeasure, which allows… | 2026-02-19T09:16:11.060 | 2026-02-19T15:52:39.260 |
| fkie_cve-2025-15563 | Any unauthenticated user can reset the WorkTime on-prem database configuration by sending a specifi… | 2026-02-19T11:15:56.983 | 2026-02-19T15:52:39.260 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-4r69-36rj-xggj |
6.4 (3.1)
|
The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting … | 2026-02-18T06:30:19Z | 2026-02-18T06:30:19Z |
| ghsa-4292-3qv2-cv3v |
4.4 (3.1)
|
The WP 404 Auto Redirect to Similar Post plugin for WordPress is vulnerable to Stored Cross-Site Sc… | 2026-02-18T06:30:19Z | 2026-02-18T06:30:19Z |
| ghsa-vrm4-h3r4-hh29 |
|
Rejected reason: Not used | 2026-02-18T06:30:18Z | 2026-02-18T06:30:18Z |
| ghsa-vfcp-69jm-85xv |
|
Rejected reason: Not used | 2026-02-18T06:30:18Z | 2026-02-18T06:30:18Z |
| ghsa-m3jj-4hf6-wgch |
|
Rejected reason: Not used | 2026-02-18T06:30:18Z | 2026-02-18T06:30:18Z |
| ghsa-jg87-hjf9-gf64 |
|
Rejected reason: Not used | 2026-02-18T06:30:18Z | 2026-02-18T06:30:18Z |
| ghsa-h858-mf2m-8jf4 |
2.9 (3.1)
|
zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmod… | 2026-02-18T06:30:18Z | 2026-02-18T06:30:18Z |
| ghsa-ghf8-ggp8-97wj |
|
Rejected reason: Not used | 2026-02-18T06:30:18Z | 2026-02-18T06:30:18Z |
| ghsa-763r-9v7r-f8fj |
|
Rejected reason: Not used | 2026-02-18T06:30:18Z | 2026-02-18T06:30:18Z |
| ghsa-43j7-cmcw-j9hr |
5.3 (3.1)
|
The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, a… | 2026-02-18T06:30:18Z | 2026-02-18T06:30:18Z |
| ghsa-3gjc-g73c-46x5 |
|
Rejected reason: Not used | 2026-02-18T06:30:18Z | 2026-02-18T06:30:18Z |
| ghsa-354p-69pj-7hrh |
|
Rejected reason: Not used | 2026-02-18T06:30:18Z | 2026-02-18T06:30:18Z |
| ghsa-v6c6-vqqg-w888 |
7.2 (3.1)
|
OpenClaw affected by potential code execution via unsafe hook module path handling in Gateway | 2026-02-18T00:57:48Z | 2026-02-18T00:57:48Z |
| ghsa-5xfq-5mr7-426q |
5.5 (3.1)
|
OpenClaw's unsanitized session ID enables path traversal in transcript file operations | 2026-02-18T00:57:30Z | 2026-02-18T00:57:30Z |
| ghsa-w5c7-9qqw-6645 |
7.1 (4.0)
|
OpenClaw inter-session prompts could be treated as direct user instructions | 2026-02-18T00:56:51Z | 2026-02-18T00:56:51Z |
| ghsa-jqpq-mgvm-f9r6 |
8.8 (3.1)
|
OpenClaw: Command hijacking via unsafe PATH handling (bootstrapping + node-host PATH overrides) | 2026-02-18T00:55:50Z | 2026-02-18T00:55:50Z |
| ghsa-2x45-7fc3-mxwq |
7.3 (3.1)
|
php-jwt contains weak encryption | 2025-07-31T21:31:53Z | 2026-02-18T00:55:29Z |
| ghsa-pg2v-8xwh-qhcc |
6.5 (3.1)
|
OpenClaw affected by SSRF in optional Tlon (Urbit) extension authentication | 2026-02-18T00:55:00Z | 2026-02-18T00:55:00Z |
| ghsa-c37p-4qqg-3p76 |
6.5 (3.1)
|
OpenClaw Twilio voice-call webhook auth bypass when ngrok loopback compatibility is enabled | 2026-02-18T00:54:48Z | 2026-02-18T00:54:48Z |
| ghsa-mj5r-hh7j-4gxf |
5.9 (3.1)
|
OpenClaw Telegram allowlist authorization accepted mutable usernames | 2026-02-18T00:54:32Z | 2026-02-18T00:54:32Z |
| ghsa-rq6g-px6m-c248 |
8.3 (4.0)
|
OpenClaw Google Chat shared-path webhook target ambiguity allowed cross-account policy-context misrouting | 2026-02-18T00:54:14Z | 2026-02-18T00:54:14Z |
| ghsa-q447-rj3r-2cgh |
7.5 (3.1)
|
OpenClaw affected by denial of service via unbounded webhook request body buffering | 2026-02-18T00:53:07Z | 2026-02-18T00:53:07Z |
| ghsa-h89v-j3x9-8wqj |
6.5 (3.1)
|
OpenClaw affected by denial of service through unguarded archive extraction allowing high expansion… | 2026-02-18T00:52:54Z | 2026-02-18T00:52:54Z |
| ghsa-w2cg-vxx6-5xjg |
5.5 (3.1)
|
OpenClaw: denial of service through large base64 media files allocating large buffers before limit checks | 2026-02-18T00:52:36Z | 2026-02-18T00:52:36Z |
| ghsa-j27p-hq53-9wgc |
7.5 (3.1)
|
OpenClaw affected by denial of service via unbounded URL-backed media fetch | 2026-02-18T00:51:37Z | 2026-02-18T00:51:37Z |
| ghsa-v773-r54f-q32w |
4.8 (3.1)
|
OpenClaw Slack: dmPolicy=open allowed any DM sender to run privileged slash commands | 2026-02-18T00:51:03Z | 2026-02-18T00:51:03Z |
| ghsa-xvhf-x56f-2hpp |
5.7 (3.1)
|
OpenClaw exec approvals: safeBins could bypass stdin-only constraints via shell expansion | 2026-02-18T00:50:47Z | 2026-02-18T00:50:47Z |
| ghsa-wprr-57fw-46wj |
8.8 (3.1)
|
IBM DataStage on Cloud Pak for Data could allow an authenticated user to execute arbitrary commands… | 2026-02-18T00:30:16Z | 2026-02-18T00:30:16Z |
| ghsa-w5xc-rm8g-jf7m |
8.8 (3.1)
|
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges… | 2026-02-18T00:30:16Z | 2026-02-18T00:30:16Z |
| ghsa-vfjm-qj84-h7cw |
7.4 (3.1)
|
IBM Concert 1.0.0 through 2.1.0 could allow a local user with specific knowledge about the system's… | 2026-02-18T00:30:16Z | 2026-02-18T00:30:16Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-5 |
|
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This iss… | apache-iotdb | 2023-01-31T10:15:00Z | 2023-05-04T03:49:44.792097Z |
| pysec-2023-4 |
|
Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid… | apache-dolphinscheduler | 2023-01-04T15:15:00Z | 2023-05-04T03:49:44.740629Z |
| pysec-2023-3 |
|
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Dril… | apache-airflow | 2023-04-07T15:15:00Z | 2023-05-04T03:49:44.692400Z |
| pysec-2023-2 |
|
Generation of Error Message Containing Sensitive Information vulnerability in Apache Soft… | apache-airflow | 2023-03-15T10:15:00Z | 2023-05-04T03:49:44.630805Z |
| pysec-2021-333 |
|
sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and… | sqlparse | 2021-09-20T17:15:00Z | 2023-04-09T10:46:38.256842Z |
| pysec-2023-1 |
|
Adyen has utility methods for validating notification HMAC signatures. The is_valid_hmac … | adyen | 2023-01-24T00:00:00Z | 2023-01-24T00:00:00Z |
| pysec-2022-42979 |
|
Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplif… | pillow | 2022-11-14T07:15:00Z | 2022-11-14T11:29:25.508491Z |
| pysec-2022-42978 |
|
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7. | rdiffweb | 2022-10-26T21:15:00Z | 2022-11-10T23:34:43.369321Z |
| pysec-2021-126 |
|
A flaw was found in Ansible if an ansible user sets ANSIBLE_ASYNC_DIR to a subdirectory o… | ansible | 2021-06-09T12:15:00Z | 2022-11-10T04:31:24.270376Z |
| pysec-2022-42974 |
|
Jupyter Core is a package for the core common functionality of Jupyter projects. Jupyter … | jupyter-core | 2022-10-26T20:15:00Z | 2022-11-09T01:10:28.819496Z |
| pysec-2022-42977 |
|
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior … | rdiffweb | 2022-10-20T00:15:00Z | 2022-11-07T01:10:29.482920Z |
| pysec-2022-42976 |
|
A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and … | pyspark | 2022-11-01T16:15:00Z | 2022-11-07T01:10:29.334199Z |
| pysec-2022-42972 |
|
Apache IoTDB version 0.12.2 to 0.12.6, 0.13.0 to 0.13.2 are vulnerable to a Denial of Ser… | apache-iotdb | 2022-10-26T16:15:00Z | 2022-11-07T01:10:28.383734Z |
| pysec-2022-42971 |
|
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's … | apache-airflow | 2022-11-02T12:15:00Z | 2022-11-07T01:10:28.239756Z |
| pysec-2022-42970 |
|
In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susce… | apache-airflow | 2022-11-02T12:15:00Z | 2022-11-07T01:10:28.198195Z |
| pysec-2022-42969 |
|
The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regu… | py | 2022-11-04T11:00:00Z | 2022-11-04T11:00:00Z |
| pysec-2022-42973 |
|
Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vu… | flower | 2022-06-02T14:15:00Z | 2022-10-26T22:48:00Z |
| pysec-2022-42975 |
|
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) i… | octoprint | 2022-10-19T13:15:00Z | 2022-10-20T19:33:00Z |
| pysec-2022-304 |
|
In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized UR… | django | 2022-10-16T06:15:00Z | 2022-10-16T10:47:15.418796Z |
| pysec-2022-303 |
|
mfa/FIDO2.py in django-mfa2 before 2.5.1 and 2.6.x before 2.6.1 allows a replay attack th… | django-mfa2 | 2022-10-11T14:15:00Z | 2022-10-11T19:05:00Z |
| pysec-2022-288 |
|
The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via… | joblib | 2022-09-26T05:15:00Z | 2022-10-10T13:42:48.035346Z |
| pysec-2022-302 |
|
Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10. | rdiffweb | 2022-10-06T18:16:00Z | 2022-10-06T23:36:00Z |
| pysec-2022-301 |
|
dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a… | dparse | 2022-10-06T18:16:00Z | 2022-10-06T20:46:42.790036Z |
| pysec-2022-300 |
|
A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio … | label-studio | 2022-10-03T12:15:00Z | 2022-10-04T22:46:41.362638Z |
| pysec-2022-299 |
|
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-09-30T14:15:00Z | 2022-10-04T16:30:00Z |
| pysec-2022-298 |
|
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-09-29T21:15:00Z | 2022-10-04T13:14:00Z |
| pysec-2022-297 |
|
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9. | rdiffweb | 2022-09-29T00:15:00Z | 2022-10-03T14:07:00Z |
| pysec-2022-296 |
|
Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior… | rdiffweb | 2022-09-28T21:15:00Z | 2022-09-30T17:34:00Z |
| pysec-2022-295 |
|
Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8. | rdiffweb | 2022-09-26T11:15:00Z | 2022-09-28T20:45:53.940487Z |
| pysec-2022-294 |
|
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2022-09-26T22:15:00Z | 2022-09-28T18:56:44.617660Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33043 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.657078Z |
| gsd-2024-33042 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.673504Z |
| gsd-2024-33041 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.697200Z |
| gsd-2024-33040 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.715619Z |
| gsd-2024-33039 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.627850Z |
| gsd-2024-33038 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.746582Z |
| gsd-2024-33037 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.757663Z |
| gsd-2024-33036 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.724217Z |
| gsd-2024-33035 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.722939Z |
| gsd-2024-33034 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.656229Z |
| gsd-2024-33033 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.603102Z |
| gsd-2024-33032 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.662376Z |
| gsd-2024-33031 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.758739Z |
| gsd-2024-33030 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.677240Z |
| gsd-2024-33029 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.745140Z |
| gsd-2024-33028 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.725685Z |
| gsd-2024-33027 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.610461Z |
| gsd-2024-33026 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.700031Z |
| gsd-2024-33025 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.635178Z |
| gsd-2024-33024 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.720105Z |
| gsd-2024-33023 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.760968Z |
| gsd-2024-33022 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.601013Z |
| gsd-2024-33021 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.682562Z |
| gsd-2024-33020 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.709634Z |
| gsd-2024-33019 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.708836Z |
| gsd-2024-33018 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.723557Z |
| gsd-2024-33017 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.711408Z |
| gsd-2024-33016 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.744543Z |
| gsd-2024-33015 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.642215Z |
| gsd-2024-33014 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.668485Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2026-491 | Malicious code in test-on-other-again (npm) | 2026-01-23T12:02:07Z | 2026-01-23T18:48:56Z |
| mal-2026-488 | Malicious code in ntwsx (npm) | 2026-01-23T06:32:37Z | 2026-01-23T18:48:55Z |
| mal-2026-487 | Malicious code in ntwsc (npm) | 2026-01-23T06:32:37Z | 2026-01-23T18:48:55Z |
| MAL-2026-488 | Malicious code in ntwsx (npm) | 2026-01-23T06:32:37Z | 2026-01-23T18:48:55Z |
| MAL-2026-487 | Malicious code in ntwsc (npm) | 2026-01-23T06:32:37Z | 2026-01-23T18:48:55Z |
| mal-2026-486 | Malicious code in a5xm (npm) | 2026-01-23T06:32:37Z | 2026-01-23T18:48:54Z |
| mal-2026-485 | Malicious code in a4wu (npm) | 2026-01-23T06:32:36Z | 2026-01-23T18:48:54Z |
| MAL-2026-486 | Malicious code in a5xm (npm) | 2026-01-23T06:32:37Z | 2026-01-23T18:48:54Z |
| MAL-2026-485 | Malicious code in a4wu (npm) | 2026-01-23T06:32:36Z | 2026-01-23T18:48:54Z |
| mal-2026-497 | Malicious code in test-on-other (npm) | 2026-01-23T18:12:42Z | 2026-01-23T18:12:42Z |
| MAL-2026-497 | Malicious code in test-on-other (npm) | 2026-01-23T18:12:42Z | 2026-01-23T18:12:42Z |
| mal-2025-192877 | Malicious code in tdm-react (npm) | 2025-12-23T08:32:44Z | 2026-01-23T15:44:07Z |
| MAL-2025-192877 | Malicious code in tdm-react (npm) | 2025-12-23T08:32:44Z | 2026-01-23T15:44:07Z |
| mal-2026-434 | Malicious code in weaviate-js (npm) | 2026-01-21T04:49:30Z | 2026-01-23T01:39:05Z |
| mal-2026-433 | Malicious code in wallet-adapter-react (npm) | 2026-01-21T04:37:07Z | 2026-01-23T01:39:05Z |
| mal-2026-404 | Malicious code in worldposition (npm) | 2026-01-21T04:21:35Z | 2026-01-23T01:39:05Z |
| mal-2026-403 | Malicious code in worldnormal (npm) | 2026-01-21T04:21:35Z | 2026-01-23T01:39:05Z |
| mal-2026-402 | Malicious code in vworldviewdir (npm) | 2026-01-21T04:21:35Z | 2026-01-23T01:39:05Z |
| mal-2026-373 | Malicious code in webmd-debug (npm) | 2026-01-20T06:13:03Z | 2026-01-23T01:39:05Z |
| mal-2026-372 | Malicious code in webmd-cookie (npm) | 2026-01-20T06:13:02Z | 2026-01-23T01:39:05Z |
| mal-2026-346 | Malicious code in zod-js (npm) | 2026-01-19T00:46:16Z | 2026-01-23T01:39:05Z |
| mal-2026-335 | Malicious code in wac-react-relay (npm) | 2026-01-19T00:45:11Z | 2026-01-23T01:39:05Z |
| MAL-2026-434 | Malicious code in weaviate-js (npm) | 2026-01-21T04:49:30Z | 2026-01-23T01:39:05Z |
| MAL-2026-433 | Malicious code in wallet-adapter-react (npm) | 2026-01-21T04:37:07Z | 2026-01-23T01:39:05Z |
| MAL-2026-404 | Malicious code in worldposition (npm) | 2026-01-21T04:21:35Z | 2026-01-23T01:39:05Z |
| MAL-2026-403 | Malicious code in worldnormal (npm) | 2026-01-21T04:21:35Z | 2026-01-23T01:39:05Z |
| MAL-2026-402 | Malicious code in vworldviewdir (npm) | 2026-01-21T04:21:35Z | 2026-01-23T01:39:05Z |
| MAL-2026-373 | Malicious code in webmd-debug (npm) | 2026-01-20T06:13:03Z | 2026-01-23T01:39:05Z |
| MAL-2026-372 | Malicious code in webmd-cookie (npm) | 2026-01-20T06:13:02Z | 2026-01-23T01:39:05Z |
| MAL-2026-346 | Malicious code in zod-js (npm) | 2026-01-19T00:46:16Z | 2026-01-23T01:39:05Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1523 | GitLab: Mehrere Schwachstellen | 2025-07-09T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1512 | Keycloak: Kontoübernahme durch Manipulation des E-Mail-Verifizierungsprozesses | 2025-07-08T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1510 | Trend Micro Maximum Security: Schwachstelle ermöglicht Privilegieneskalation | 2025-07-08T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1506 | Zoom Video Communications Workplace und Rooms: Mehrere Schwachstellen | 2025-07-08T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1497 | Broadcom Brocade SANnav: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-07-08T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1393 | Red Hat Enterprise Linux: Schwachstelle ermöglicht Codeausführung | 2025-06-24T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1370 | Red Hat Enterprise Linux (yaml-libyam): Schwachstelle ermöglicht Manipulation von Dateien | 2025-06-22T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1069 | WebKitGTK: Mehrere Schwachstellen | 2025-05-14T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2024-1754 | Roundcube: Mehrere Schwachstellen | 2024-08-04T22:00:00.000+00:00 | 2025-07-09T22:00:00.000+00:00 |
| wid-sec-w-2025-1451 | Drupal: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-07-02T22:00:00.000+00:00 | 2025-07-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1430 | Linux Kernel: Mehrere Schwachstellen | 2025-06-30T22:00:00.000+00:00 | 2025-07-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1413 | Red Hat OpenShift Container Platform: Schwachstelle ermöglicht Denial of Service und Offenlegung | 2025-06-26T22:00:00.000+00:00 | 2025-07-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1371 | FreeRDP: Schwachstelle ermöglicht Denial of Service | 2025-06-22T22:00:00.000+00:00 | 2025-07-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1279 | Broadcom Fabric OS: Mehrere Schwachstellen | 2025-06-10T22:00:00.000+00:00 | 2025-07-08T22:00:00.000+00:00 |
| wid-sec-w-2025-1467 | Ruby on Rails: Mehrere Schwachstellen | 2019-03-13T23:00:00.000+00:00 | 2025-07-07T22:00:00.000+00:00 |
| wid-sec-w-2023-1042 | Ruby: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-04-19T22:00:00.000+00:00 | 2025-07-06T22:00:00.000+00:00 |
| wid-sec-w-2025-1455 | F5 BIG-IP: Mehrere Schwachstellen | 2019-05-23T22:00:00.000+00:00 | 2025-07-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1130 | Microsoft Edge: Schwachstelle ermöglicht Privilegieneskalation | 2025-05-22T22:00:00.000+00:00 | 2025-06-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1407 | McAfee Agent: Mehrere Schwachstellen | 2022-04-13T22:00:00.000+00:00 | 2025-06-26T22:00:00.000+00:00 |
| wid-sec-w-2025-1378 | Red Hat Enterprise Linux (mod_proxy_cluster): Schwachstelle ermöglicht Manipulation von Daten | 2025-06-23T22:00:00.000+00:00 | 2025-06-25T22:00:00.000+00:00 |
| wid-sec-w-2025-1308 | Mitel MiCollab: Schwachstelle ermöglicht Offenlegung von Informationen und Administrative Zugriffe | 2025-06-11T22:00:00.000+00:00 | 2025-06-24T22:00:00.000+00:00 |
| wid-sec-w-2025-1369 | Red Hat Enterprise Linux (mpfr): Schwachstelle ermöglicht Denial of Service | 2025-06-22T22:00:00.000+00:00 | 2025-06-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1368 | IBM Spectrum Protect: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-06-22T22:00:00.000+00:00 | 2025-06-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1367 | IBM InfoSphere Information Server: Mehrere Schwachstellen | 2025-06-22T22:00:00.000+00:00 | 2025-06-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1366 | F5 BIG-IP: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-06-22T22:00:00.000+00:00 | 2025-06-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1362 | ClamAV: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-06-19T22:00:00.000+00:00 | 2025-06-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1280 | Intel Firmware: Schwachstelle ermöglicht Denial of Service | 2025-06-10T22:00:00.000+00:00 | 2025-06-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1050 | Microsoft Windows Server: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-05-13T22:00:00.000+00:00 | 2025-06-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0638 | IBM WebSphere Application Server Liberty: Schwachstelle ermöglicht Denial of Service | 2025-03-25T23:00:00.000+00:00 | 2025-06-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0460 | Red Hat Enterprise Linux (Quarkus): Mehrere Schwachstellen | 2025-02-27T23:00:00.000+00:00 | 2025-06-22T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2022:1660 | Red Hat Security Advisory: Red Hat OpenShift support for Windows Containers 2.0.5 [security update] | 2022-05-02T05:51:54+00:00 | 2026-02-20T19:15:35+00:00 |
| rhsa-2022:1276 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.9 security update | 2022-04-07T18:02:07+00:00 | 2026-02-20T19:15:34+00:00 |
| rhsa-2022:0577 | Red Hat Security Advisory: Windows Container Support for Red Hat OpenShift 5.0.0 [security update] | 2022-03-28T09:34:15+00:00 | 2026-02-20T19:15:34+00:00 |
| rhsa-2022:0492 | Red Hat Security Advisory: OpenShift Container Platform 4.7.43 security update | 2022-02-16T11:18:29+00:00 | 2026-02-20T19:15:33+00:00 |
| rhsa-2022:0350 | Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update | 2022-02-01T21:18:22+00:00 | 2026-02-20T19:15:33+00:00 |
| rhsa-2022:0246 | Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update | 2022-01-25T09:28:51+00:00 | 2026-02-20T19:15:33+00:00 |
| rhsa-2021:5171 | Red Hat Security Advisory: nodejs:16 security, bug fix, and enhancement update | 2021-12-16T17:21:31+00:00 | 2026-02-20T19:15:32+00:00 |
| rhsa-2021:5110 | Red Hat Security Advisory: Cryostat security update | 2021-12-14T13:41:25+00:00 | 2026-02-20T19:15:31+00:00 |
| rhsa-2021:5038 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.10 security updates and bug fixes | 2021-12-09T00:46:25+00:00 | 2026-02-20T19:15:31+00:00 |
| rhsa-2021:4902 | Red Hat Security Advisory: ACS 3.67 security and enhancement update | 2021-12-01T17:22:46+00:00 | 2026-02-20T19:15:31+00:00 |
| rhsa-2021:4626 | Red Hat Security Advisory: RHV Manager (ovirt-engine) security update [ovirt-4.4.9] | 2021-11-16T14:30:33+00:00 | 2026-02-20T19:15:30+00:00 |
| rhsa-2021:3917 | Red Hat Security Advisory: Red Hat Quay v3.6.0 security, bug fix and enhancement update | 2021-10-19T12:09:35+00:00 | 2026-02-20T19:15:30+00:00 |
| rhsa-2021:3873 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.9 security, bug, and container updates | 2021-10-14T22:38:09+00:00 | 2026-02-20T19:15:30+00:00 |
| rhsa-2021:3666 | Red Hat Security Advisory: nodejs:14 security and bug fix update | 2021-09-27T07:40:58+00:00 | 2026-02-20T19:15:29+00:00 |
| rhsa-2021:3639 | Red Hat Security Advisory: nodejs:12 security and bug fix update | 2021-09-22T08:55:39+00:00 | 2026-02-20T19:15:29+00:00 |
| rhsa-2021:3638 | Red Hat Security Advisory: nodejs:12 security and bug fix update | 2021-09-22T09:06:26+00:00 | 2026-02-20T19:15:28+00:00 |
| rhsa-2021:3623 | Red Hat Security Advisory: nodejs:12 security and bug fix update | 2021-09-21T13:22:11+00:00 | 2026-02-20T19:15:27+00:00 |
| rhsa-2021:3454 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.3.2 security and bug fix update | 2021-09-07T22:21:44+00:00 | 2026-02-20T19:15:27+00:00 |
| rhsa-2021:3281 | Red Hat Security Advisory: rh-nodejs12-nodejs and rh-nodejs12-nodejs-nodemon security update | 2021-08-26T10:18:55+00:00 | 2026-02-20T19:15:26+00:00 |
| rhsa-2021:3280 | Red Hat Security Advisory: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update | 2021-08-26T10:21:32+00:00 | 2026-02-20T19:15:26+00:00 |
| rhsa-2021:3140 | Red Hat Security Advisory: Red Hat Fuse 7.9.0 release and security update | 2021-08-11T18:21:58+00:00 | 2026-02-20T19:15:26+00:00 |
| rhsa-2021:3074 | Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update | 2021-08-10T16:37:13+00:00 | 2026-02-20T19:15:25+00:00 |
| rhsa-2021:3073 | Red Hat Security Advisory: nodejs:12 security, bug fix, and enhancement update | 2021-08-10T16:37:04+00:00 | 2026-02-20T19:15:25+00:00 |
| rhsa-2021:3001 | Red Hat Security Advisory: Red Hat OpenShift Container Platform for Windows Containers 3.0.0 security and bug fix update | 2021-08-03T20:28:58+00:00 | 2026-02-20T19:15:25+00:00 |
| rhsa-2021:2932 | Red Hat Security Advisory: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update | 2021-07-28T08:38:46+00:00 | 2026-02-20T19:15:24+00:00 |
| rhsa-2021:2931 | Red Hat Security Advisory: rh-nodejs12-nodejs and rh-nodejs12-nodejs-nodemon security update | 2021-07-28T08:36:10+00:00 | 2026-02-20T19:15:23+00:00 |
| rhsa-2021:2865 | Red Hat Security Advisory: RHV Manager (ovirt-engine) security update [ovirt-4.4.7] | 2021-07-22T15:14:23+00:00 | 2026-02-20T19:15:23+00:00 |
| rhsa-2021:2543 | Red Hat Security Advisory: Red Hat OpenShift Jaeger 1.20.4 security update | 2021-06-24T15:19:30+00:00 | 2026-02-20T19:15:23+00:00 |
| rhsa-2021:2532 | Red Hat Security Advisory: Red Hat OpenShift Jaeger 1.17.9 security update | 2021-06-23T15:37:37+00:00 | 2026-02-20T19:15:23+00:00 |
| rhsa-2021:2920 | Red Hat Security Advisory: OpenShift Virtualization 4.8.0 Images | 2021-07-28T14:11:53+00:00 | 2026-02-20T19:15:22+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-16-042-01a | Moxa EDR-G903 Secure Router Vulnerabilities (Update A) | 2016-11-14T07:00:00.000000Z | 2025-06-05T21:36:42.937829Z |
| icsa-16-040-02 | Siemens SIMATIC S7-1500 CPU Vulnerabilities | 2016-11-12T07:00:00.000000Z | 2025-06-05T21:36:30.466787Z |
| icsa-16-040-01 | Tollgrade SmartGrid Sensor Management System Software Vulnerabilities | 2016-11-12T07:00:00.000000Z | 2025-06-05T21:36:05.594352Z |
| icsa-16-033-02 | GE SNMP/Web Interface Vulnerabilities | 2016-11-05T06:00:00.000000Z | 2025-06-05T21:35:53.140871Z |
| icsa-16-033-01 | Sauter moduWeb Vision Vulnerabilities | 2016-11-05T06:00:00.000000Z | 2025-06-05T21:35:34.424132Z |
| icsa-16-028-01a | Westermo Industrial Switch Hard-coded Certificate Vulnerability (Update A) | 2016-10-31T06:00:00.000000Z | 2025-06-05T21:35:27.841677Z |
| icsa-25-155-01 | CyberData 011209 SIP Emergency Intercom | 2025-06-05T06:00:00.000000Z | 2025-06-05T06:00:00.000000Z |
| icsa-21-049-02 | Mitsubishi Electric FA Engineering Software Products (Update H) | 2021-02-18T07:00:00.000000Z | 2025-06-05T06:00:00.000000Z |
| icsa-25-153-03 | Mitsubishi Electric MELSEC iQ-F Series | 2025-06-03T06:00:00.000000Z | 2025-06-03T06:00:00.000000Z |
| icsa-25-153-01 | Schneider Electric Wiser Home Automation | 2025-06-03T06:00:00.000000Z | 2025-06-03T06:00:00.000000Z |
| icsma-25-148-01 | Santesoft Sante DICOM Viewer Pro | 2025-05-29T06:00:00.000000Z | 2025-05-29T06:00:00.000000Z |
| va-25-147-01 | Craft CMS stores user-provided content session files | 2025-05-28T20:57:43Z | 2025-05-28T20:57:43Z |
| va-25-148-01 | ZKTeco BioTime multiple vulnerabilities | 2025-05-28T15:28:55Z | 2025-05-28T15:28:55Z |
| icsa-25-160-02 | Hitachi Energy Relion 670 650 SAM600-IO Series | 2023-06-27T12:30:00.000000Z | 2025-05-27T12:30:00.000000Z |
| icsa-25-155-02 | Hitachi Energy Relion 670 650 series and SAM600-IO Product | 2021-12-16T13:30:00.000000Z | 2025-05-27T12:30:00.000000Z |
| icsa-25-133-02 | Hitachi Energy Relion 670/650/SAM600-IO Series (Update A) | 2023-11-28T13:30:00.000000Z | 2025-05-27T12:30:00.000000Z |
| icsa-21-336-05 | Hitachi Energy Relion 670/650/SAM600-IO | 2021-11-04T13:30:00.000000Z | 2025-05-27T12:30:00.000000Z |
| icsa-25-146-01 | Johnson Controls iSTAR Configuration Utility (ICU) tool | 2025-05-27T06:00:00.000000Z | 2025-05-27T06:00:00.000000Z |
| icsa-25-142-02 | Rockwell Automation FactoryTalk Historian ThingWorx | 2025-05-22T06:00:00.000000Z | 2025-05-22T06:00:00.000000Z |
| icsa-25-142-01 | Lantronix Device Installer | 2025-05-22T06:00:00.000000Z | 2025-05-22T06:00:00.000000Z |
| icsa-25-140-10 | Vertiv Liebert RDU101 and UNITY | 2025-05-20T06:00:00.000000Z | 2025-05-20T06:00:00.000000Z |
| icsa-25-140-09 | AutomationDirect MB-Gateway | 2025-05-20T06:00:00.000000Z | 2025-05-20T06:00:00.000000Z |
| icsa-25-140-02 | National Instruments Circuit Design Suite | 2025-05-20T06:00:00.000000Z | 2025-05-20T06:00:00.000000Z |
| icsa-25-140-01 | ABUP IoT Cloud Platform | 2025-05-20T06:00:00.000000Z | 2025-05-20T06:00:00.000000Z |
| va-25-119-01 | MSP360 Backup insecure filesystem permissions | 2025-04-29T15:59:52Z | 2025-05-19T00:00:00Z |
| icsa-25-135-20 | Schneider Electric EcoStruxure Power Build Rapsody | 2025-05-15T06:00:00.000000Z | 2025-05-15T06:00:00.000000Z |
| icsa-24-200-01 | Mitsubishi Electric MELSOFT MaiLab and MELSOFT VIXIO (Update A) | 2024-07-18T06:00:00.000000Z | 2025-05-15T06:00:00.000000Z |
| icsa-25-140-05 | Siemens Siveillance Video | 2025-05-14T00:00:00.000000Z | 2025-05-14T00:00:00.000000Z |
| icsa-25-133-04 | ABB Automation Builder | 2025-05-13T06:00:00.000000Z | 2025-05-13T06:00:00.000000Z |
| icsa-25-153-02 | Schneider Electric EcoStruxure Power Build Rapsody | 2025-05-13T04:00:00.000000Z | 2025-05-13T04:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20180328-dhcpr1 | Cisco IOS and IOS XE Software DHCP Version 4 Relay Heap Overflow Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:52+00:00 |
| cisco-sa-20180207-rv13x | Cisco RV132W and RV134W Remote Code Execution and Denial of Service Vulnerability | 2018-02-07T16:00:00+00:00 | 2022-12-15T22:19:52+00:00 |
| cisco-sa-20180328-snmp | Cisco IOS Software Simple Network Management Protocol GET MIB Object ID Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:51+00:00 |
| cisco-sa-20191106-sbrv-cmd-x | Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability | 2019-11-06T16:00:00+00:00 | 2022-12-15T22:19:50+00:00 |
| cisco-sa-20180328-slogin | Cisco IOS Software Login Enhancements Login Block Denial of Service Vulnerabilities | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:49+00:00 |
| cisco-sa-hyperflex-rce-tjjnrkpr | Cisco HyperFlex HX Command Injection Vulnerabilities | 2021-05-05T16:00:00+00:00 | 2022-12-15T22:19:48+00:00 |
| cisco-sa-hyperflex-rce-TjjNrkpR | Cisco HyperFlex HX Command Injection Vulnerabilities | 2021-05-05T16:00:00+00:00 | 2022-12-15T22:19:48+00:00 |
| cisco-sa-20180328-ike | Cisco IOS and IOS XE Software Internet Key Exchange Memory Leak Vulnerability | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:48+00:00 |
| cisco-sa-20180328-lldp | Cisco IOS, IOS XE, and IOS XR Software Link Layer Discovery Protocol Buffer Overflow Vulnerabilities | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:45+00:00 |
| cisco-sa-20180328-dhcpr2 | Cisco IOS and IOS XE Software DHCP Version 4 Relay Reply Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:44+00:00 |
| cisco-sa-20180328-smi | Cisco IOS and IOS XE Software Smart Install Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:43+00:00 |
| cisco-sa-20180328-bfd | Cisco IOS and IOS XE Software Bidirectional Forwarding Detection Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2022-12-15T22:19:42+00:00 |
| cisco-sa-20180307-acs2 | Cisco Secure Access Control System Java Deserialization Vulnerability | 2018-03-07T16:00:00+00:00 | 2022-12-15T19:32:31+00:00 |
| cisco-sa-clamav-html-xauok8mr | ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: May 2022 | 2022-05-04T16:00:00+00:00 | 2022-12-15T19:13:16+00:00 |
| cisco-sa-clamav-html-XAuOK8mR | ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: May 2022 | 2022-05-04T16:00:00+00:00 | 2022-12-15T19:13:16+00:00 |
| cisco-sa-clamav-dos-zazbwrvg | ClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: May 2022 | 2022-05-04T16:00:00+00:00 | 2022-12-15T19:03:44+00:00 |
| cisco-sa-clamav-dos-ZAZBwRVG | ClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: May 2022 | 2022-05-04T16:00:00+00:00 | 2022-12-15T19:03:44+00:00 |
| cisco-sa-clamav-dos-prvgchld | ClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: May 2022 | 2022-05-04T16:00:00+00:00 | 2022-12-14T18:46:44+00:00 |
| cisco-sa-clamav-dos-prVGcHLd | ClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: May 2022 | 2022-05-04T16:00:00+00:00 | 2022-12-14T18:46:44+00:00 |
| cisco-sa-snort-smb-3nfhjtr | Multiple Cisco Products Snort SMB2 Detection Engine Policy Bypass and Denial of Service Vulnerabilities | 2022-11-09T16:00:00+00:00 | 2022-11-30T21:51:24+00:00 |
| cisco-sa-snort-smb-3nfhJtr | Multiple Cisco Products Snort SMB2 Detection Engine Policy Bypass and Denial of Service Vulnerabilities | 2022-11-09T16:00:00+00:00 | 2022-11-30T21:51:24+00:00 |
| cisco-sa-esasmawsa-vulns-yrusw5md | Cisco Email Security Appliance, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Next Generation Management Vulnerabilities | 2022-11-02T16:00:00+00:00 | 2022-11-30T12:49:53+00:00 |
| cisco-sa-esasmawsa-vulns-YRuSW5mD | Cisco Email Security Appliance, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Next Generation Management Vulnerabilities | 2022-11-02T16:00:00+00:00 | 2022-11-30T12:49:53+00:00 |
| cisco-sa-openssl-w9sdcc2a | Vulnerabilities in OpenSSL Affecting Cisco Products: November 2022 | 2022-10-28T16:00:00+00:00 | 2022-11-23T20:23:17+00:00 |
| cisco-sa-openssl-W9sdCc2a | Vulnerabilities in OpenSSL Affecting Cisco Products: November 2022 | 2022-10-28T16:00:00+00:00 | 2022-11-23T20:23:17+00:00 |
| cisco-sa-ise-stor-xss-kprbwxy | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-23T15:29:06+00:00 |
| cisco-sa-ise-stor-xss-kpRBWXY | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-23T15:29:06+00:00 |
| cisco-sa-ise-csrf-vgnttpas | Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-23T15:26:05+00:00 |
| cisco-sa-ise-csrf-vgNtTpAs | Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-23T15:26:05+00:00 |
| cisco-sa-ise-path-trav-f6m7cs6r | Cisco Identity Services Engine Path Traversal Vulnerability | 2022-11-02T16:00:00+00:00 | 2022-11-23T14:40:22+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38039 | net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled | 2025-06-02T00:00:00.000Z | 2026-02-18T01:57:16.000Z |
| msrc_cve-2023-30589 | The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). The CR character (without LF) is sufficient to delimit HTTP header fields in the llhttp parser. According to RFC7230 section 3 only the CRLF sequence should delimit each header-field. This impacts all Node.js active versions: v16 v18 and v20 | 2023-06-01T07:00:00.000Z | 2026-02-18T01:57:15.000Z |
| msrc_cve-2024-36013 | Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() | 2024-05-02T07:00:00.000Z | 2026-02-18T01:56:59.000Z |
| msrc_cve-2025-68324 | scsi: imm: Fix use-after-free bug caused by unfinished delayed work | 2025-12-02T00:00:00.000Z | 2026-02-18T01:56:58.000Z |
| msrc_cve-2025-38149 | net: phy: clear phydev->devlink when the link is deleted | 2025-07-02T00:00:00.000Z | 2026-02-18T01:56:51.000Z |
| msrc_cve-2024-50036 | net: do not delay dst_entries_add() in dst_release() | 2024-10-01T07:00:00.000Z | 2026-02-18T01:56:50.000Z |
| msrc_cve-2023-3817 | Excessive time spent checking DH q parameter value | 2023-07-01T07:00:00.000Z | 2026-02-18T01:56:50.000Z |
| msrc_cve-2024-56626 | ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write | 2024-12-02T00:00:00.000Z | 2026-02-18T01:56:44.000Z |
| msrc_cve-2024-50061 | i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition | 2024-10-01T07:00:00.000Z | 2026-02-18T01:56:34.000Z |
| msrc_cve-2022-34169 | Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets | 2022-07-02T00:00:00.000Z | 2026-02-18T01:56:29.000Z |
| msrc_cve-2025-37992 | net_sched: Flush gso_skb list too during ->change() | 2025-05-02T00:00:00.000Z | 2026-02-18T01:56:24.000Z |
| msrc_cve-2023-6546 | Kernel: gsm multiplexing race condition leads to privilege escalation | 2023-12-01T08:00:00.000Z | 2026-02-18T01:56:22.000Z |
| msrc_cve-2023-4504 | OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow | 2023-09-01T00:00:00.000Z | 2026-02-18T01:56:09.000Z |
| msrc_cve-2024-38541 | of: module: add buffer overflow check in of_modalias() | 2024-06-02T07:00:00.000Z | 2026-02-18T01:56:03.000Z |
| msrc_cve-2025-27152 | Possible SSRF and Credential Leakage via Absolute URL in axios Requests | 2025-03-02T00:00:00.000Z | 2026-02-18T01:56:01.000Z |
| msrc_cve-2025-38075 | scsi: target: iscsi: Fix timeout on deleted connection | 2025-06-02T00:00:00.000Z | 2026-02-18T01:55:55.000Z |
| msrc_cve-2024-6257 | HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation | 2024-06-02T07:00:00.000Z | 2026-02-18T01:55:50.000Z |
| msrc_cve-2025-38136 | usb: renesas_usbhs: Reorder clock handling and power management in probe | 2025-07-02T00:00:00.000Z | 2026-02-18T01:55:48.000Z |
| msrc_cve-2021-46023 | An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc. The vulnerability causes a segmentation fault and application crash. | 2023-02-01T00:00:00.000Z | 2026-02-18T01:55:48.000Z |
| msrc_cve-2025-21981 | ice: fix memory leak in aRFS after reset | 2025-04-02T00:00:00.000Z | 2026-02-18T01:55:34.000Z |
| msrc_cve-2022-46146 | Prometheus Exporter Toolkit vulnerable to basic authentication bypass | 2022-11-02T00:00:00.000Z | 2026-02-18T01:55:34.000Z |
| msrc_cve-2024-49883 | ext4: aovid use-after-free in ext4_ext_insert_extent() | 2024-10-01T07:00:00.000Z | 2026-02-18T01:55:27.000Z |
| msrc_cve-2025-37812 | usb: cdns3: Fix deadlock when using NCM gadget | 2025-05-02T00:00:00.000Z | 2026-02-18T01:55:20.000Z |
| msrc_cve-2023-5115 | Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files | 2023-12-01T08:00:00.000Z | 2026-02-18T01:55:20.000Z |
| msrc_cve-2024-34158 | Stack exhaustion in Parse in go/build/constraint | 2024-09-01T07:00:00.000Z | 2026-02-18T01:55:19.000Z |
| msrc_cve-2024-53170 | block: fix uaf for flush rq while iterating tags | 2024-12-02T00:00:00.000Z | 2026-02-18T01:55:06.000Z |
| msrc_cve-2024-39908 | Denial of service in REXML | 2024-07-01T07:00:00.000Z | 2026-02-18T01:55:05.000Z |
| msrc_cve-2023-52971 | MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan. | 2025-07-02T00:00:00.000Z | 2026-02-18T01:55:03.000Z |
| msrc_cve-2025-7546 | GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write | 2025-07-02T00:00:00.000Z | 2026-02-18T01:55:02.000Z |
| msrc_cve-2025-21715 | net: davicom: fix UAF in dm9000_drv_remove | 2025-02-02T00:00:00.000Z | 2026-02-18T01:54:56.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15174-1 | MozillaThunderbird-128.11.0-1.1 on GA media | 2025-05-30T00:00:00Z | 2025-05-30T00:00:00Z |
| opensuse-su-2025:15173-1 | s390-tools-2.37.0-4.1 on GA media | 2025-05-27T00:00:00Z | 2025-05-27T00:00:00Z |
| opensuse-su-2025:15172-1 | libmozjs-128-0-128.10.1-1.1 on GA media | 2025-05-27T00:00:00Z | 2025-05-27T00:00:00Z |
| opensuse-su-2025:15171-1 | grafana-11.6.1+security01-1.1 on GA media | 2025-05-27T00:00:00Z | 2025-05-27T00:00:00Z |
| opensuse-su-2025:15170-1 | firefox-esr-128.11.0-1.1 on GA media | 2025-05-27T00:00:00Z | 2025-05-27T00:00:00Z |
| opensuse-su-2025:15169-1 | containerd-1.7.27-1.1 on GA media | 2025-05-27T00:00:00Z | 2025-05-27T00:00:00Z |
| opensuse-su-2025:15168-1 | yelp-xsl-42.1-2.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15167-1 | libyelp0-42.2-4.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15166-1 | umoci-0.5.0-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15165-1 | libnss_slurm2-24.11.5-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15164-1 | screen-4.9.1-5.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15163-1 | python312-3.12.10-4.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15162-1 | prometheus-blackbox_exporter-0.24.0-3.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15161-1 | jq-1.7.1-3.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15160-1 | jetty-annotations-9.4.57-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15159-1 | govulncheck-vulndb-0.0.20250523T151856-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15158-1 | gh-2.73.0-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15157-1 | dnsdist-1.9.10-2.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15156-1 | bind-9.20.9-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15155-1 | transfig-3.2.9a-3.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15154-1 | python313-3.13.3-3.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15153-1 | python311-tornado6-6.5-1.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15152-1 | python311-Flask-3.1.1-1.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15151-1 | libecpg6-17.5-1.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15150-1 | audiofile-0.3.6-16.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15149-1 | MozillaThunderbird-128.10.2-1.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15148-1 | MozillaFirefox-138.0.4-1.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15147-1 | kubo-0.35.0-1.1 on GA media | 2025-05-22T00:00:00Z | 2025-05-22T00:00:00Z |
| opensuse-su-2025:15146-1 | kind-0.29.0-1.1 on GA media | 2025-05-22T00:00:00Z | 2025-05-22T00:00:00Z |
| opensuse-su-2025:15145-1 | grafana-11.6.1-1.1 on GA media | 2025-05-22T00:00:00Z | 2025-05-22T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2023-636 | Security exception in jflex.core.NFA.insertNFA | 2023-08-03T14:00:58.919043Z | 2023-08-03T14:00:58.919497Z |
| osv-2023-505 | UNKNOWN WRITE in regcomp | 2023-06-22T14:02:20.855256Z | 2023-08-01T14:06:27.325503Z |
| osv-2023-631 | Heap-buffer-overflow in test_verify | 2023-08-01T14:02:11.454420Z | 2023-08-01T14:02:11.454673Z |
| osv-2023-627 | Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton | 2023-07-31T14:00:58.902209Z | 2023-07-31T14:00:58.902458Z |
| osv-2023-623 | Heap-use-after-free in Elf32_free | 2023-07-28T14:01:31.646164Z | 2023-07-28T14:01:31.646403Z |
| osv-2023-619 | Security exception in java.base/java.util.regex.Pattern$GroupTail.match | 2023-07-27T14:00:54.002113Z | 2023-07-27T14:00:54.002341Z |
| osv-2023-618 | Security exception in java.base/java.util.regex.Pattern$Loop.match | 2023-07-27T14:00:53.785484Z | 2023-07-27T14:00:53.785737Z |
| osv-2023-610 | Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton | 2023-07-23T14:02:28.957945Z | 2023-07-23T14:02:28.958170Z |
| osv-2023-609 | Stack-buffer-overflow in sc_pkcs15_get_lastupdate | 2023-07-23T14:02:26.863116Z | 2023-07-23T14:02:26.863362Z |
| osv-2022-330 | Stack-use-after-return in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i | 2022-04-11T00:00:12.423473Z | 2023-07-22T14:11:03.219082Z |
| osv-2022-799 | Incorrect-function-pointer-type in grk::BufferedStream::read | 2022-08-28T00:02:06.609956Z | 2023-07-22T14:10:59.366573Z |
| osv-2022-336 | Use-of-uninitialized-value in grk::N_SCALAR::DecompressIrrev::vtrans | 2022-04-12T00:00:32.150063Z | 2023-07-22T14:10:59.966993Z |
| osv-2022-252 | Heap-buffer-overflow in grk::PacketLengthMarkers::readPLM | 2022-03-18T00:01:35.796630Z | 2023-07-22T14:10:55.592593Z |
| osv-2022-245 | Heap-buffer-overflow in grk::PacketIter::genPrecinctInfo | 2022-03-15T00:01:42.984652Z | 2023-07-22T14:10:55.061574Z |
| osv-2021-677 | Heap-buffer-overflow in grk::FileFormatDecompress::apply_palette_clr | 2021-04-23T00:00:13.554175Z | 2023-07-22T14:10:26.095692Z |
| osv-2021-510 | Heap-use-after-free in grk_object_unref | 2021-03-11T00:00:21.858475Z | 2023-07-22T14:10:14.782402Z |
| osv-2021-456 | Heap-buffer-overflow in grk::Quantizer::read_SQcd_SQcc | 2021-02-28T00:01:15.686942Z | 2023-07-22T14:10:08.300968Z |
| osv-2021-448 | Use-of-uninitialized-value in std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrev | 2021-02-26T00:00:17.945183Z | 2023-07-22T14:10:00.669714Z |
| osv-2021-426 | Use-of-uninitialized-value in std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrev | 2021-02-22T00:00:08.360778Z | 2023-07-22T14:09:55.891913Z |
| osv-2021-1344 | Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress | 2021-09-21T00:01:35.030626Z | 2023-07-22T14:06:09.433208Z |
| osv-2022-295 | Use-of-uninitialized-value in unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev> | 2022-04-02T00:01:43.648632Z | 2023-07-22T14:04:06.247397Z |
| osv-2023-598 | Heap-use-after-free in zval_call_destructor | 2023-07-20T14:01:52.569977Z | 2023-07-20T14:01:52.570218Z |
| osv-2023-586 | Heap-buffer-overflow in setcos_create_key | 2023-07-19T14:00:35.841154Z | 2023-07-19T14:00:35.841409Z |
| osv-2023-581 | Heap-buffer-overflow in wwunpack | 2023-07-18T14:00:33.759863Z | 2023-07-18T14:00:33.760126Z |
| osv-2023-580 | Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr | 2023-07-17T14:01:47.459416Z | 2023-07-17T14:01:47.459668Z |
| osv-2023-578 | Heap-buffer-overflow in cosm_new_file | 2023-07-17T14:00:32.356018Z | 2023-07-17T14:00:32.356264Z |
| osv-2023-576 | Heap-double-free in sc_pkcs15_free_object_content | 2023-07-16T14:02:13.225841Z | 2023-07-16T14:02:13.226071Z |
| osv-2023-573 | Negative-size-param in check_content_type_and_change_protocol | 2023-07-16T14:01:41.260979Z | 2023-07-16T14:01:41.261270Z |
| osv-2020-1540 | UNKNOWN READ in eval_expr | 2020-07-29T00:00:39.727472Z | 2023-07-15T14:10:54.665039Z |
| osv-2023-566 | Heap-buffer-overflow in check_content_type_and_change_protocol | 2023-07-14T14:01:52.369317Z | 2023-07-14T14:01:52.369590Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-libpython-2023-6507 | Groups not dropped before running subprocess when using empty 'extra_groups' parameter | 2025-08-11T13:52:31.237Z | 2025-08-11T14:19:40.295Z |
| bit-libpython-2023-41105 | 2025-08-11T13:52:29.288Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2023-36632 | 2025-08-11T13:52:24.684Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2022-48566 | 2025-08-11T13:52:16.768Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2022-48565 | 2025-08-11T13:52:14.793Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2022-48564 | 2025-08-11T13:52:12.981Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2022-48560 | 2025-08-11T13:52:10.924Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2022-37454 | 2025-08-11T13:52:04.668Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2022-26488 | 2025-08-11T13:52:02.378Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2021-3177 | 2025-08-11T13:51:48.817Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2021-23336 | Web Cache Poisoning | 2025-08-11T13:51:41.925Z | 2025-08-11T14:19:40.295Z |
| bit-libpython-2020-8492 | 2025-08-11T13:51:39.499Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2020-8315 | 2025-08-11T13:51:37.536Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2020-27619 | 2025-08-11T13:51:35.537Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2020-26116 | 2025-08-11T13:51:33.813Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2020-15801 | 2025-08-11T13:51:32.060Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2020-15523 | 2025-08-11T13:51:30.254Z | 2025-08-11T14:19:40.295Z | |
| bit-libpython-2020-14422 | 2025-08-11T13:51:28.699Z | 2025-08-11T14:19:40.295Z | |
| bit-libphp-2024-5585 | Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix) | 2025-08-11T13:54:23.045Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2024-2408 | PHP is vulnerable to the Marvin Attack | 2025-08-11T13:54:10.823Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2024-11235 | Reference counting in php_request_shutdown causes Use-After-Free | 2025-08-11T13:54:04.899Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2023-3824 | Buffer overflow and overread in phar_dir_read() | 2025-08-11T13:53:59.498Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2023-3823 | Security issue with external entity loading in XML without enabling it | 2025-08-11T13:53:57.829Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2023-3247 | Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP | 2025-08-11T13:53:55.851Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2023-0662 | DoS vulnerability when parsing multipart request body | 2025-08-11T13:53:54.096Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2023-0568 | Array overrun in common path resolve code | 2025-08-11T13:53:52.314Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2023-0567 | password_verify() always returns true for some invalid hashes | 2025-08-11T13:53:50.380Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2022-37454 | 2025-08-11T13:53:46.722Z | 2025-08-11T14:19:40.295Z | |
| bit-libphp-2022-31631 | PDO::quote() may return unquoted string | 2025-08-11T13:53:44.921Z | 2025-08-11T14:19:40.295Z |
| bit-libphp-2022-31630 | OOB read due to insufficient input validation in imageloadfont() | 2025-08-11T13:53:43.303Z | 2025-08-11T14:19:40.295Z |
| ID | Description | Updated |
|---|---|---|
| var-201302-0308 | Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … | 2024-07-23T20:07:21.585000Z |
| var-201904-1472 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:06:47.465000Z |
| var-200907-0693 | The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until co… | 2024-07-23T20:06:47.266000Z |
| var-201202-0066 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:06:42.920000Z |
| var-201806-1462 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari be… | 2024-07-23T20:06:41.667000Z |
| var-201203-0198 | Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers … | 2024-07-23T20:06:41.947000Z |
| var-202010-1245 | A logic issue was addressed with improved state management. This issue is fixed in iOS 13… | 2024-07-23T20:06:39.639000Z |
| var-201405-0542 | java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache To… | 2024-07-23T20:06:39.885000Z |
| var-200702-0382 | Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through… | 2024-07-23T20:06:39.539000Z |
| var-201006-1124 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 throug… | 2024-07-23T20:06:02.053000Z |
| var-200809-0006 | Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, … | 2024-07-23T20:06:02.113000Z |
| var-201912-0552 | A memory corruption issue was addressed with improved memory handling. This issue is fixe… | 2024-07-23T20:05:58.400000Z |
| var-201806-1458 | An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS b… | 2024-07-23T20:05:58.507000Z |
| var-201112-0046 | Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remo… | 2024-07-23T20:05:58.677000Z |
| var-200512-0678 | The Internet Key Exchange version 1 (IKEv1) implementations in Fortinet FortiOS 2.50, 2.8… | 2024-07-23T20:05:56.525000Z |
| var-200110-0349 | OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers t… | 2024-07-23T20:05:55.152000Z |
| var-201310-0345 | Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 an… | 2024-07-23T20:05:22.269000Z |
| var-201306-0250 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:05:01.335000Z |
| var-202103-0920 | An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be … | 2024-07-23T20:03:59.447000Z |
| var-201905-0710 | Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors ut… | 2024-07-23T20:03:59.004000Z |
| var-201607-0657 | PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts… | 2024-07-23T20:03:59.307000Z |
| var-201811-0912 | Simultaneous Multi-threading (SMT) in processors can enable local users to exploit softwa… | 2024-07-23T20:03:27.882000Z |
| var-202005-0022 | A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of … | 2024-07-23T20:03:21.822000Z |
| var-202004-1973 | A type confusion issue was addressed with improved memory handling. This issue is fixed i… | 2024-07-23T20:03:21.561000Z |
| var-201211-0365 | Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on … | 2024-07-23T20:03:18.542000Z |
| var-200807-0012 | WebCore in Apple Safari does not properly perform garbage collection of JavaScript docume… | 2024-07-23T20:03:18.209000Z |
| var-201210-0276 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:03:15.594000Z |
| var-201910-1503 | The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_pr… | 2024-07-23T20:03:14.578000Z |
| var-201605-0076 | Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL bef… | 2024-07-23T20:02:36.076000Z |
| var-201302-0134 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:02:36.483000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2020-000024 | Joomla! plugin "AcyMailing" vulnerable to arbitrary file uploads | 2020-04-07T14:49+09:00 | 2020-04-07T14:49+09:00 |
| jvndb-2020-000021 | Multiple Yamaha network devices vulnerable to denial-of-service (DoS) | 2020-03-31T17:44+09:00 | 2020-04-01T18:38+09:00 |
| jvndb-2019-000014 | The installer of Microsoft Teams may insecurely load Dynamic Link Libraries | 2019-04-02T14:18+09:00 | 2020-04-01T16:55+09:00 |
| jvndb-2020-002958 | Denial-of-service (DoS) vulnerability in Mitsubishi Electric MELSOFT transmission port | 2020-03-31T13:37+09:00 | 2020-04-01T14:45+09:00 |
| jvndb-2020-000907 | WL-Enq (WEB Enquete) vulnerable to OS command injection | 2020-03-25T09:50+09:00 | 2020-03-25T09:50+09:00 |
| jvndb-2020-000908 | Keijiban Tsumiki vulnerable to OS command injection | 2020-03-24T18:14+09:00 | 2020-03-24T18:14+09:00 |
| jvndb-2020-000900 | mailform vulnerable to cross-site scripting | 2020-03-24T18:05+09:00 | 2020-03-24T18:05+09:00 |
| jvndb-2020-000901 | mailform vulnerable to PHP code execution | 2020-03-24T17:59+09:00 | 2020-03-24T17:59+09:00 |
| jvndb-2020-000902 | Multiple vulnerabilities in Shihonkanri Plus GOOUT | 2020-03-24T17:53+09:00 | 2020-03-24T17:53+09:00 |
| jvndb-2020-000903 | Shihonkanri Plus GOOUT vulnerable to OS command injection | 2020-03-24T17:47+09:00 | 2020-03-24T17:47+09:00 |
| jvndb-2020-000904 | CuteNews vulnerable to cross-site scripting | 2020-03-24T17:42+09:00 | 2020-03-24T17:42+09:00 |
| jvndb-2020-000905 | Cute News vulnerable to PHP code execution | 2020-03-24T17:40+09:00 | 2020-03-24T17:40+09:00 |
| jvndb-2020-002278 | Cross-site Scripting Vulnerability in JP1/Performance Management - Manager [Web Console] | 2020-03-11T14:16+09:00 | 2020-03-11T14:16+09:00 |
| jvndb-2020-002219 | Multiple Vulnerabilities in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center | 2020-03-09T11:23+09:00 | 2020-03-09T11:23+09:00 |
| jvndb-2020-002220 | Improper LDAPS Certificate Validation in Hitachi Ops Center Common Services | 2020-03-09T11:21+09:00 | 2020-03-09T11:21+09:00 |
| jvndb-2020-000013 | Multiple Trend Micro products vulnerable to denial-of-service (DoS) | 2020-02-14T13:39+09:00 | 2020-03-06T13:56+09:00 |
| jvndb-2020-000020 | Multiple vulnerabilities in OpenBlocks IoT VX2 | 2020-03-03T17:50+09:00 | 2020-03-03T17:50+09:00 |
| jvndb-2020-000019 | GRANDIT vulnerable to session management | 2020-03-02T14:39+09:00 | 2020-03-02T14:39+09:00 |
| jvndb-2019-000058 | Multiple buffer overflow vulnerabilities in multiple Ricoh printers and Multifunction Printers (MFPs) | 2019-09-13T14:29+09:00 | 2020-02-25T17:27+09:00 |
| jvndb-2019-014138 | Improper Authentication Vulnerability in RICOH printers | 2020-02-25T15:47+09:00 | 2020-02-25T15:47+09:00 |
| jvndb-2019-014137 | Improper Access Control Vulnerability in RICOH printers | 2020-02-25T15:44+09:00 | 2020-02-25T15:44+09:00 |
| jvndb-2019-014437 | Privilege escalation vulnerability in multiple RICOH printer drivers | 2020-02-25T15:29+09:00 | 2020-02-25T15:29+09:00 |
| jvndb-2019-014031 | Cross-site Request Forgery Vulnerability in RICOH printers | 2020-02-25T14:06+09:00 | 2020-02-25T14:06+09:00 |
| jvndb-2019-014136 | Information Disclosure Vulnerability in RICOH printers | 2020-02-25T14:02+09:00 | 2020-02-25T14:02+09:00 |
| jvndb-2020-000016 | Multiple OS command injection vulnerabilities in Aterm WF1200C, Aterm WG1200CR, and Aterm WG2600HS | 2020-02-19T14:39+09:00 | 2020-02-19T14:39+09:00 |
| jvndb-2020-000015 | Multiple vulnerabilities in Aterm WG2600HS | 2020-02-19T14:34+09:00 | 2020-02-19T14:34+09:00 |
| jvndb-2020-000012 | WordPress Plugin "Easy Property Listings" vulnerable to cross-site request forgery | 2020-02-18T13:42+09:00 | 2020-02-18T13:42+09:00 |
| jvndb-2020-001591 | Multiple vulnerabilities in TCP/IP function on Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 | 2020-02-18T12:10+09:00 | 2020-02-18T12:10+09:00 |
| jvndb-2020-001545 | Security information for Hitachi Disk Array Systems | 2020-02-14T15:34+09:00 | 2020-02-14T15:34+09:00 |
| jvndb-2020-000014 | ilbo App vulnerable to authentication bypass | 2020-02-14T13:43+09:00 | 2020-02-14T13:43+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:3742-1 | Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6) | 2025-10-23T06:06:49Z | 2025-10-23T06:06:49Z |
| suse-su-2025:3741-1 | Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP5) | 2025-10-23T05:46:36Z | 2025-10-23T05:46:36Z |
| suse-su-2025:3740-1 | Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP5) | 2025-10-23T05:46:28Z | 2025-10-23T05:46:28Z |
| suse-su-2025:3736-1 | Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP5) | 2025-10-22T22:41:33Z | 2025-10-22T22:41:33Z |
| suse-su-2025:3733-1 | Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP5) | 2025-10-22T18:34:34Z | 2025-10-22T18:34:34Z |
| suse-su-2025:3734-1 | Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP5) | 2025-10-22T17:04:43Z | 2025-10-22T17:04:43Z |
| suse-su-2025:3731-1 | Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP5) | 2025-10-22T13:34:30Z | 2025-10-22T13:34:30Z |
| suse-su-2025:3729-1 | Security update for krb5 | 2025-10-22T13:19:35Z | 2025-10-22T13:19:35Z |
| suse-su-2025:20869-1 | Security update for podman | 2025-10-22T12:25:33Z | 2025-10-22T12:25:33Z |
| suse-su-2025:20896-1 | Security update for openssl-3 | 2025-10-22T12:18:32Z | 2025-10-22T12:18:32Z |
| suse-su-2025:20895-1 | Security update for expat | 2025-10-22T12:11:31Z | 2025-10-22T12:11:31Z |
| suse-su-2025:20868-1 | Security update for expat | 2025-10-22T12:00:46Z | 2025-10-22T12:00:46Z |
| suse-su-2025:3725-1 | Security update for the Linux Kernel | 2025-10-22T11:48:19Z | 2025-10-22T11:48:19Z |
| suse-su-2025:3723-1 | Security update for libqt5-qtbase | 2025-10-22T11:22:11Z | 2025-10-22T11:22:11Z |
| suse-su-2025:3722-1 | Security update for protobuf | 2025-10-22T11:20:32Z | 2025-10-22T11:20:32Z |
| suse-su-2025:3721-1 | Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5) | 2025-10-22T11:06:14Z | 2025-10-22T11:06:14Z |
| suse-su-2025:3720-1 | Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP4) | 2025-10-22T09:45:17Z | 2025-10-22T09:45:17Z |
| suse-su-2025:3717-1 | Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP4) | 2025-10-22T09:45:07Z | 2025-10-22T09:45:07Z |
| suse-su-2025:3716-1 | Security update for the Linux Kernel | 2025-10-22T07:11:59Z | 2025-10-22T07:11:59Z |
| suse-su-2025:3715-1 | Security update for ffmpeg-4 | 2025-10-22T07:11:25Z | 2025-10-22T07:11:25Z |
| suse-su-2025:3712-1 | Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP4) | 2025-10-21T23:36:04Z | 2025-10-21T23:36:04Z |
| suse-su-2025:3706-1 | Security update for python313 | 2025-10-21T15:07:41Z | 2025-10-21T15:07:41Z |
| suse-su-2025:3705-1 | Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4) | 2025-10-21T13:34:07Z | 2025-10-21T13:34:07Z |
| suse-su-2025:3704-1 | Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4) | 2025-10-21T12:04:31Z | 2025-10-21T12:04:31Z |
| suse-su-2025:3703-1 | Security update for the Linux Kernel (Live Patch 71 for SLE 12 SP5) | 2025-10-21T11:13:27Z | 2025-10-21T11:13:27Z |
| suse-su-2025:3701-1 | Security update for webkit2gtk3 | 2025-10-21T10:10:20Z | 2025-10-21T10:10:20Z |
| suse-su-2025:3700-1 | Security update for webkit2gtk3 | 2025-10-21T10:09:34Z | 2025-10-21T10:09:34Z |
| suse-su-2025:3699-1 | Security update for krb5 | 2025-10-21T10:07:48Z | 2025-10-21T10:07:48Z |
| suse-su-2025:3698-1 | Security update for krb5 | 2025-10-21T10:07:22Z | 2025-10-21T10:07:22Z |
| suse-su-2025:3684-1 | Security update for the Linux Kernel (Live Patch 72 for SLE 12 SP5) | 2025-10-20T18:03:48Z | 2025-10-20T18:03:48Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-00531 | Simple Shopping Cart register.php文件SQL注入漏洞 | 2025-07-21 | 2026-01-06 |
| cnvd-2026-00530 | E-Commerce Site任意文件上传漏洞 | 2025-07-21 | 2026-01-06 |
| cnvd-2026-00529 | Online Ordering System edit_product.php文件文件上传漏洞 | 2025-07-25 | 2026-01-06 |
| cnvd-2026-00528 | E-Commerce Site跨站请求伪造漏洞 | 2025-07-25 | 2026-01-06 |
| cnvd-2026-00527 | Online Ordering System user.php文件SQL注入漏洞 | 2025-07-28 | 2026-01-06 |
| cnvd-2026-00526 | Online Ordering System文件上传漏洞 | 2025-07-30 | 2026-01-06 |
| cnvd-2026-00525 | Simple Shopping Cart settings.php文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00524 | Simple Shopping Cart adminlogin.php文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00523 | Simple Shopping Cart additems.php文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00522 | Online Ordering System user_school.php文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00521 | Online Ordering System user_contact.php文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00520 | Online Ordering System /admin文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00519 | Employee Profile Management System代码问题漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00518 | Employee Profile Management System /view_personnel.php文件跨站脚本漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00517 | Employee Profile Management System /view_personnel.php文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00516 | Employee Profile Management System print_personnel_report.php文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00515 | Currency Exchange System /edittrns.php文件SQL注入漏洞 | 2025-12-10 | 2026-01-06 |
| cnvd-2026-00840 | Student File Management System update_user.php文件跨站脚本漏洞 | 2025-12-18 | 2026-01-05 |
| cnvd-2026-00839 | Student File Management System user_id参数SQL注入漏洞 | 2025-12-18 | 2026-01-05 |
| cnvd-2026-00835 | Student File Management System跨站脚本漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00834 | Student File Management System user_id参数SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00833 | Student File Management System update_student.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00832 | Student File Management System save_user.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00831 | Student File Management System /save_student.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00830 | Student File Management System stud_no参数SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00829 | Student File Management System login_query.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00828 | Student File Management System /delete_student.php文件SQL注入漏洞 | 2025-12-25 | 2026-01-05 |
| cnvd-2026-00542 | Student File Management System download.php文件SQL注入漏洞 | 2025-12-31 | 2026-01-05 |
| cnvd-2026-00447 | Huawei HarmonyOS多线程竞争条件漏洞 | 2025-12-10 | 2026-01-05 |
| cnvd-2026-00446 | Class and Exam Timetable Management /index.php文件SQL注入漏洞 | 2025-12-18 | 2026-01-05 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0804 | Multiples vulnérabilités dans Microsoft Windows | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0766 | Multiples vulnérabilités dans les produits Liferay | 2025-09-09T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| CERTFR-2025-AVI-0808 | Multiples vulnérabilités dans les produits IBM | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| CERTFR-2025-AVI-0807 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| CERTFR-2025-AVI-0806 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| CERTFR-2025-AVI-0805 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| CERTFR-2025-AVI-0804 | Multiples vulnérabilités dans Microsoft Windows | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| CERTFR-2025-AVI-0766 | Multiples vulnérabilités dans les produits Liferay | 2025-09-09T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0803 | Vulnérabilité dans HPE Aruba Networking ClearPass Policy Manager | 2025-09-18T00:00:00.000000 | 2025-09-18T00:00:00.000000 |
| certfr-2025-avi-0802 | Multiples vulnérabilités dans Google Chrome | 2025-09-18T00:00:00.000000 | 2025-09-18T00:00:00.000000 |
| CERTFR-2025-AVI-0803 | Vulnérabilité dans HPE Aruba Networking ClearPass Policy Manager | 2025-09-18T00:00:00.000000 | 2025-09-18T00:00:00.000000 |
| CERTFR-2025-AVI-0802 | Multiples vulnérabilités dans Google Chrome | 2025-09-18T00:00:00.000000 | 2025-09-18T00:00:00.000000 |
| certfr-2025-avi-0800 | Multiples vulnérabilités dans Liferay | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0799 | Vulnérabilité dans les produits Microsoft | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0798 | Vulnérabilité dans Microsoft Edge | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0797 | Multiples vulnérabilités dans les produits Mozilla | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0796 | Multiples vulnérabilités dans Suricata | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0795 | Multiples vulnérabilités dans HPE Aruba Networking EdgeConnect SD-WAN Gateways | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0794 | Multiples vulnérabilités dans les produits Atlassian | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| CERTFR-2025-AVI-0800 | Multiples vulnérabilités dans Liferay | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| CERTFR-2025-AVI-0799 | Vulnérabilité dans les produits Microsoft | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| CERTFR-2025-AVI-0798 | Vulnérabilité dans Microsoft Edge | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| CERTFR-2025-AVI-0797 | Multiples vulnérabilités dans les produits Mozilla | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| CERTFR-2025-AVI-0796 | Multiples vulnérabilités dans Suricata | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| CERTFR-2025-AVI-0795 | Multiples vulnérabilités dans HPE Aruba Networking EdgeConnect SD-WAN Gateways | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| CERTFR-2025-AVI-0794 | Multiples vulnérabilités dans les produits Atlassian | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0793 | Multiples vulnérabilités dans Liferay | 2025-09-16T00:00:00.000000 | 2025-09-16T00:00:00.000000 |
| certfr-2025-avi-0792 | Multiples vulnérabilités dans les produits Spring | 2025-09-16T00:00:00.000000 | 2025-09-16T00:00:00.000000 |
| certfr-2025-avi-0791 | Multiples vulnérabilités dans les produits Apple | 2025-09-16T00:00:00.000000 | 2025-09-16T00:00:00.000000 |
| certfr-2025-avi-0707 | Multiples vulnérabilités dans Mattermost Server | 2025-08-18T00:00:00.000000 | 2025-09-16T00:00:00.000000 |