Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-1999-0263 |
N/A
|
Solaris SUNWadmap can be exploited to obtain root… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.880Z |
| CVE-1999-0264 |
N/A
|
htmlscript CGI program allows remote read access … |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.886Z |
| CVE-1999-0265 |
N/A
|
ICMP redirect messages may crash or lock up a host. |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.686Z |
| CVE-1999-0266 |
N/A
|
The info2www CGI script allows remote file access… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.869Z |
| CVE-1999-0267 |
N/A
|
Buffer overflow in NCSA HTTP daemon v1.3 allows r… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.891Z |
| CVE-1999-0269 |
N/A
|
Netscape Enterprise servers may list files throug… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.771Z |
| CVE-1999-0272 |
N/A
|
Denial of service in Slmail v2.5 through the POP3 port. |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.865Z |
| CVE-1999-0273 |
N/A
|
Denial of service through Solaris 2.5.1 telnet by… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.940Z |
| CVE-1999-0274 |
N/A
|
Denial of service in Windows NT DNS servers throu… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.879Z |
| CVE-1999-0276 |
N/A
|
mSQL v2.0.1 and below allows remote execution thr… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.876Z |
| CVE-1999-0277 |
N/A
|
The WorkMan program can be used to overwrite any … |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.856Z |
| CVE-1999-0278 |
N/A
|
In IIS, remote attackers can obtain source code f… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.784Z |
| CVE-1999-0279 |
N/A
|
Excite for Web Servers (EWS) allows remote comman… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.831Z |
| CVE-1999-0281 |
N/A
|
Denial of service in IIS using long URLs. |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.953Z |
| CVE-1999-0288 |
N/A
|
The WINS server in Microsoft Windows NT 4.0 befor… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.732Z |
| CVE-1999-0289 |
N/A
|
The Apache web server for Win32 may provide acces… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.890Z |
| CVE-1999-0292 |
N/A
|
Denial of service through Winpopup using large us… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.902Z |
| CVE-1999-0293 |
N/A
|
AAA authentication on Cisco systems allows attack… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:52.019Z |
| CVE-1999-0294 |
N/A
|
All records in a WINS database can be deleted thr… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:52.021Z |
| CVE-1999-0295 |
N/A
|
Solaris sysdef command allows local users to read… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.770Z |
| CVE-1999-0296 |
N/A
|
Solaris volrmmount program allows attackers to re… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.898Z |
| CVE-1999-0299 |
N/A
|
Buffer overflow in FreeBSD lpd through long DNS h… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.882Z |
| CVE-1999-0300 |
N/A
|
nis_cachemgr for Solaris NIS+ allows attackers to… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.887Z |
| CVE-1999-0301 |
N/A
|
Buffer overflow in SunOS/Solaris ps command. |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.857Z |
| CVE-1999-0302 |
N/A
|
SunOS/Solaris FTP clients can be forced to execut… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:52.027Z |
| CVE-1999-0303 |
N/A
|
Buffer overflow in BNU UUCP daemon (uucpd) throug… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.974Z |
| CVE-1999-0305 |
N/A
|
The system configuration control (sysctl) facilit… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.894Z |
| CVE-1999-0308 |
N/A
|
HP-UX gwind program allows users to modify arbitr… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.885Z |
| CVE-1999-0309 |
N/A
|
HP-UX vgdisplay program gives root access to loca… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.856Z |
| CVE-1999-0310 |
N/A
|
SSH 1.2.25 on HP-UX allows access to new user accounts. |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.885Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-1999-0263 |
N/A
|
Solaris SUNWadmap can be exploited to obtain root… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.880Z |
| CVE-1999-0264 |
N/A
|
htmlscript CGI program allows remote read access … |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.886Z |
| CVE-1999-0265 |
N/A
|
ICMP redirect messages may crash or lock up a host. |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.686Z |
| CVE-1999-0266 |
N/A
|
The info2www CGI script allows remote file access… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.869Z |
| CVE-1999-0267 |
N/A
|
Buffer overflow in NCSA HTTP daemon v1.3 allows r… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.891Z |
| CVE-1999-0269 |
N/A
|
Netscape Enterprise servers may list files throug… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.771Z |
| CVE-1999-0272 |
N/A
|
Denial of service in Slmail v2.5 through the POP3 port. |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.865Z |
| CVE-1999-0273 |
N/A
|
Denial of service through Solaris 2.5.1 telnet by… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.940Z |
| CVE-1999-0274 |
N/A
|
Denial of service in Windows NT DNS servers throu… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.879Z |
| CVE-1999-0276 |
N/A
|
mSQL v2.0.1 and below allows remote execution thr… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.876Z |
| CVE-1999-0277 |
N/A
|
The WorkMan program can be used to overwrite any … |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.856Z |
| CVE-1999-0278 |
N/A
|
In IIS, remote attackers can obtain source code f… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.784Z |
| CVE-1999-0279 |
N/A
|
Excite for Web Servers (EWS) allows remote comman… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.831Z |
| CVE-1999-0281 |
N/A
|
Denial of service in IIS using long URLs. |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.953Z |
| CVE-1999-0288 |
N/A
|
The WINS server in Microsoft Windows NT 4.0 befor… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.732Z |
| CVE-1999-0289 |
N/A
|
The Apache web server for Win32 may provide acces… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.890Z |
| CVE-1999-0292 |
N/A
|
Denial of service through Winpopup using large us… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.902Z |
| CVE-1999-0293 |
N/A
|
AAA authentication on Cisco systems allows attack… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:52.019Z |
| CVE-1999-0294 |
N/A
|
All records in a WINS database can be deleted thr… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:52.021Z |
| CVE-1999-0295 |
N/A
|
Solaris sysdef command allows local users to read… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.770Z |
| CVE-1999-0296 |
N/A
|
Solaris volrmmount program allows attackers to re… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.898Z |
| CVE-1999-0299 |
N/A
|
Buffer overflow in FreeBSD lpd through long DNS h… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.882Z |
| CVE-1999-0300 |
N/A
|
nis_cachemgr for Solaris NIS+ allows attackers to… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.887Z |
| CVE-1999-0301 |
N/A
|
Buffer overflow in SunOS/Solaris ps command. |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.857Z |
| CVE-1999-0302 |
N/A
|
SunOS/Solaris FTP clients can be forced to execut… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:52.027Z |
| CVE-1999-0303 |
N/A
|
Buffer overflow in BNU UUCP daemon (uucpd) throug… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.974Z |
| CVE-1999-0305 |
N/A
|
The system configuration control (sysctl) facilit… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.894Z |
| CVE-1999-0308 |
N/A
|
HP-UX gwind program allows users to modify arbitr… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.885Z |
| CVE-1999-0309 |
N/A
|
HP-UX vgdisplay program gives root access to loca… |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.856Z |
| CVE-1999-0310 |
N/A
|
SSH 1.2.25 on HP-UX allows access to new user accounts. |
n/a |
n/a |
1999-09-29T04:00:00 | 2024-08-01T16:34:51.885Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-1999-1385 | Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via… | 1996-12-19T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1026 | aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via… | 1996-12-20T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0260 | The jj CGI program allows command execution via shell metacharacters. | 1996-12-24T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-1251 | Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause … | 1996-12-24T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0100 | Remote access in AIX innd 1.5.1, using control messages. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0163 | In older versions of Sendmail, an attacker could use a pipe character to execute root commands. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0166 | NFS allows users to use a "cd .." command to access other directories besides the exported file system. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0170 | Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0171 | Denial of service in syslog by sending it a large number of superfluous messages. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0173 | FormMail CGI program can be used by web servers other than the host server that the program resides on. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0178 | Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allow… | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0179 | Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0180 | in.rshd allows users to login with a NULL username and execute commands. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0201 | A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0202 | The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0204 | Sendmail 8.6.9 allows remote attackers to execute root commands, using ident. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0217 | Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0236 | ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs. | 1997-01-01T05:00:00.000 | 2025-04-20T01:37:25.860 |
| fkie_cve-1999-0249 | Windows NT RSHSVC program allows remote users to execute arbitrary commands. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0251 | Denial of service in talk program allows remote attackers to disrupt a user's display. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0252 | Buffer overflow in listserv allows arbitrary command execution. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0253 | IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP progr… | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0265 | ICMP redirect messages may crash or lock up a host. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0274 | Denial of service in Windows NT DNS servers through malicious packet which contains a response to a… | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0345 | Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0496 | A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regar… | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0499 | NETBIOS share information may be published through SNMP registry keys in NT. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0503 | A Windows NT local user or administrator account has a guessable password. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0504 | A Windows NT local user or administrator account has a default, null, blank, or missing password. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| fkie_cve-1999-0510 | A router or firewall allows source routed packets from arbitrary hosts. | 1997-01-01T05:00:00.000 | 2025-04-03T01:03:51.193 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-r7q2-5gqg-6c7q |
|
actionpack Improper Input Validation vulnerability | 2017-10-24T18:33:38Z | 2023-05-12T17:22:22Z |
| ghsa-rp63-jfmw-532w |
|
Mail Gem Improper Input Validation vulnerability | 2017-10-24T18:33:38Z | 2023-09-05T22:04:31Z |
| ghsa-rvpq-5xqx-pfpp |
|
Ruby on Rails vulnerable to code injection | 2017-10-24T18:33:38Z | 2025-04-03T14:27:51Z |
| ghsa-rxq3-gm4p-5fj4 |
9.8 (3.1)
|
rails vulnerable to improper authentication | 2017-10-24T18:33:38Z | 2024-02-14T21:33:07Z |
| ghsa-v5jg-558j-q67c |
|
actionpack Cross-site Scripting vulnerability | 2017-10-24T18:33:38Z | 2023-05-12T17:23:04Z |
| ghsa-v9v4-7jp6-8c73 |
|
rails Cross-site Scripting vulnerability | 2017-10-24T18:33:38Z | 2023-04-20T21:47:18Z |
| ghsa-vxf6-w9mp-95hm |
|
Puppet supports use of IP addresses in certnames without warning of potential risks | 2017-10-24T18:33:38Z | 2023-05-12T17:24:42Z |
| ghsa-wcm2-9c89-wmfm |
6.1 (3.1)
|
Cross-site Scripting in jquery-ui | 2017-10-24T18:33:38Z | 2025-04-14T21:53:50Z |
| ghsa-wwmf-6p58-6vj2 |
|
Remote code execution in rwiki | 2017-10-24T18:33:38Z | 2025-04-03T14:25:17Z |
| ghsa-xf96-32q2-9rw2 |
|
Rails ActiveRecord gem vulnerable to SQL injection | 2017-10-24T18:33:38Z | 2023-05-26T16:40:08Z |
| ghsa-xgj6-pgrm-x4r2 |
|
gtk2 vulnerable to Use of Externally-Controlled Format String | 2017-10-24T18:33:38Z | 2023-01-26T22:31:40Z |
| ghsa-xxr8-833v-c7wc |
|
Cross-site Scripting vulnerability in i18n translations helper method | 2017-10-24T18:33:38Z | 2023-05-26T21:06:30Z |
| ghsa-7qcx-jmrc-h2rr |
6.1 (3.1)
|
Cross-Site Scripting in keystone | 2017-11-15T19:44:16Z | 2021-09-03T21:41:16Z |
| ghsa-wmjf-jpjj-9f3j |
3.3 (3.1)
|
RuboCop gem Insecure use of /tmp | 2017-11-15T20:39:47Z | 2023-08-28T13:43:41Z |
| ghsa-5v3f-73gv-x7x5 |
5.5 (3.1)
|
cairo is vulnerable to denial of service due to a null pointer dereference | 2017-11-15T20:41:14Z | 2023-08-28T10:13:34Z |
| ghsa-mw35-24gh-f82w |
9.8 (3.1)
|
keycloak-connect and keycloak-js improperly handle invalid tokens | 2017-11-15T20:41:51Z | 2023-09-08T19:56:20Z |
| ghsa-6494-v9fq-fgq2 |
8.8 (3.1)
|
Keystone is vulnerable to CSV injection | 2017-11-16T01:46:50Z | 2022-04-25T22:05:05Z |
| ghsa-7cv6-gvx3-m54m |
4.8 (3.1)
|
Cross-Site Scripting in keystone | 2017-11-16T01:47:02Z | 2021-06-11T13:54:39Z |
| ghsa-q97v-764g-r2rp |
8.8 (3.1)
|
gollum and gollum-lib allow remote authenticated users to execute arbitrary code | 2017-11-16T01:47:37Z | 2023-01-23T21:34:16Z |
| ghsa-pjj4-w39g-pw54 |
7.5 (3.1)
|
Ox gem crashes due to a crafted input | 2017-11-21T18:26:40Z | 2023-01-26T21:23:13Z |
| ghsa-rph7-j9qr-h8q8 |
8.1 (3.1)
|
Potential Command Injection in codem-transcode | 2017-11-28T22:20:17Z | 2021-09-17T19:23:32Z |
| ghsa-wwh7-4jw9-33x6 |
7.5 (3.1)
|
yajl-ruby gem Denial of Service vulnerability | 2017-11-28T22:44:42Z | 2023-08-29T16:04:20Z |
| ghsa-5c8j-xr24-2665 |
9.8 (3.1)
|
Potential Command Injection in printer | 2017-11-28T22:44:52Z | 2021-09-01T21:34:20Z |
| ghsa-x7p2-x2j6-mwhr |
6.1 (3.1)
|
Gemirro Stored XSS in Gemspec "homepage" value | 2017-11-29T23:19:51Z | 2023-08-29T12:26:53Z |
| ghsa-653m-r33x-39ff |
6.1 (3.1)
|
Geminabox contains Cross-site Scripting | 2017-11-29T23:20:14Z | 2023-03-14T23:07:43Z |
| ghsa-hxhj-hp9m-qwc4 |
|
private_address_check vulnerable to bypass of Resolv.getaddresses method | 2017-11-29T23:21:05Z | 2023-01-23T17:38:44Z |
| ghsa-q43c-g2g7-6gxj |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) in keystone | 2017-11-30T23:14:47Z | 2021-06-10T21:18:39Z |
| ghsa-3v3c-r5v2-68ph |
|
private_address_check contains Incomplete List of Disallowed Inputs | 2017-11-30T23:14:55Z | 2023-01-20T22:07:25Z |
| ghsa-hwcf-pp87-7x6p |
6.1 (3.1)
|
mde ejs vulnerable to XSS | 2017-11-30T23:15:05Z | 2023-09-08T21:35:56Z |
| ghsa-3w5v-p54c-f74x |
9.8 (3.1)
|
ejs is vulnerable to remote code execution due to weak input validation | 2017-11-30T23:15:19Z | 2023-09-08T20:54:25Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2013-15 |
|
The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop grou… | salt | 2013-11-05T18:55:00Z | 2021-07-05T00:01:26.106423Z |
| pysec-2013-26 |
|
The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate t… | salt | 2013-11-05T18:55:00Z | 2021-07-25T23:34:53.687508Z |
| pysec-2013-27 |
|
Unspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impa… | salt | 2013-11-05T18:55:00Z | 2021-07-25T23:34:53.727680Z |
| pysec-2013-28 |
|
Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20… | tryton | 2013-11-18T02:55:00Z | 2021-07-25T23:34:56.639990Z |
| pysec-2013-45 |
|
keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an i… | nova | 2013-12-27T01:55:00Z | 2024-11-21T14:22:56.793365Z |
| pysec-2014-97 |
|
Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy Digi… | apache-libcloud | 2014-01-07T18:55:00Z | 2021-11-22T04:57:51.510127Z |
| pysec-2014-81 |
|
httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify th… | httplib2 | 2014-01-18T21:55:00Z | 2021-08-27T03:42:09.595120Z |
| pysec-2014-64 |
|
The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through 4.1, 4… | plone | 2014-01-21T16:06:00Z | 2021-07-25T23:34:47.517338Z |
| pysec-2014-69 |
|
python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not prop… | python-keystoneclient | 2014-01-21T18:55:00Z | 2021-07-25T23:34:51.958825Z |
| pysec-2014-116 |
|
The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 thr… | swift | 2014-01-23T01:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-17 |
|
The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7… | rply | 2014-01-28T00:55:00Z | 2021-07-05T00:01:25.895879Z |
| pysec-2014-95 |
|
Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allow… | pyxdg | 2014-01-28T00:55:00Z | 2021-08-27T03:22:18.849828Z |
| pysec-2014-111 |
|
The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver … | nova | 2014-02-06T17:00:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-88 |
|
python-bugzilla before 0.9.0 does not validate X.509 certificates, which allows man-in-th… | python-bugzilla | 2014-02-08T00:55:00Z | 2021-08-27T03:22:17.861270Z |
| pysec-2014-102 |
|
OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehou… | glance | 2014-02-14T15:55:00Z | 2024-11-25T18:35:18.357593Z |
| pysec-2014-12 |
|
The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does… | python-swiftclient | 2014-02-18T19:55:00Z | 2021-07-05T00:01:25.452828Z |
| pysec-2014-52 |
|
traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:45.751265Z |
| pysec-2014-53 |
|
Multiple unspecified vulnerabilities in (1) dataitems.py, (2) get.py, and (3) traverseNam… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:45.892869Z |
| pysec-2014-54 |
|
Multiple cross-site scripting (XSS) vulnerabilities in (1) spamProtect.py, (2) pts.py, an… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:46.028547Z |
| pysec-2014-55 |
|
zip.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not pr… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:46.176817Z |
| pysec-2014-56 |
|
sendto.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows r… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:46.316071Z |
| pysec-2014-57 |
|
typeswidget.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 doe… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:46.454886Z |
| pysec-2014-58 |
|
The WYSIWYG component (wysiwyg.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:46.598296Z |
| pysec-2014-59 |
|
Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) … | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:46.736480Z |
| pysec-2014-60 |
|
The object manager implementation (objectmanager.py) in Plone 2.1 through 4.1, 4.2.x thro… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:46.895458Z |
| pysec-2014-61 |
|
member_portrait.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:47.083456Z |
| pysec-2014-62 |
|
mail_password.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 a… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:47.220560Z |
| pysec-2014-63 |
|
(1) cb_decode.py and (2) linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, … | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:47.359775Z |
| pysec-2014-83 |
|
The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons… | logilab-common | 2014-03-11T19:37:00Z | 2021-08-27T03:22:06.075755Z |
| pysec-2014-84 |
|
The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, wh… | logilab-common | 2014-03-11T19:37:00Z | 2021-08-27T03:22:06.108554Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2022-2768 | Malicious code in epic-games-self-service-portal (npm) | 2022-05-18T06:29:44Z | 2022-05-18T06:29:54Z |
| MAL-2022-2769 | Malicious code in epic-support-prettier-config (npm) | 2022-05-18T06:29:44Z | 2022-05-18T06:29:44Z |
| MAL-2022-5243 | Malicious code in paypal-rest-sample (npm) | 2022-05-18T06:29:44Z | 2022-05-18T06:29:44Z |
| MAL-2022-5433 | Malicious code in pp-mp-connected-path (npm) | 2022-05-18T06:29:44Z | 2022-05-18T06:29:44Z |
| MAL-2022-5434 | Malicious code in pp-react-buttons (npm) | 2022-05-18T06:29:44Z | 2022-05-18T06:29:54Z |
| MAL-2022-6296 | Malicious code in starter-theme (npm) | 2022-05-18T06:29:44Z | 2022-05-18T06:29:54Z |
| mal-2022-2768 | Malicious code in epic-games-self-service-portal (npm) | 2022-05-18T06:29:44Z | 2022-05-18T06:29:54Z |
| mal-2022-2769 | Malicious code in epic-support-prettier-config (npm) | 2022-05-18T06:29:44Z | 2022-05-18T06:29:44Z |
| mal-2022-5243 | Malicious code in paypal-rest-sample (npm) | 2022-05-18T06:29:44Z | 2022-05-18T06:29:44Z |
| mal-2022-5433 | Malicious code in pp-mp-connected-path (npm) | 2022-05-18T06:29:44Z | 2022-05-18T06:29:44Z |
| mal-2022-5434 | Malicious code in pp-react-buttons (npm) | 2022-05-18T06:29:44Z | 2022-05-18T06:29:54Z |
| mal-2022-6296 | Malicious code in starter-theme (npm) | 2022-05-18T06:29:44Z | 2022-05-18T06:29:54Z |
| MAL-2022-7106 | Malicious code in website-404-error-page (npm) | 2022-05-19T08:37:21Z | 2022-05-19T08:37:22Z |
| mal-2022-7106 | Malicious code in website-404-error-page (npm) | 2022-05-19T08:37:21Z | 2022-05-19T08:37:22Z |
| MAL-2022-1212 | Malicious code in axp-base (npm) | 2022-05-19T08:37:22Z | 2022-05-19T08:37:27Z |
| MAL-2022-1213 | Malicious code in axp-shared-scripts (npm) | 2022-05-19T08:37:22Z | 2022-05-19T08:37:27Z |
| MAL-2022-1214 | Malicious code in axp-utility-belt (npm) | 2022-05-19T08:37:22Z | 2022-05-19T08:37:22Z |
| MAL-2022-2377 | Malicious code in ddc-classnames-js (npm) | 2022-05-19T08:37:22Z | 2022-05-19T08:37:28Z |
| MAL-2022-2378 | Malicious code in ddc-new-relic (npm) | 2022-05-19T08:37:22Z | 2022-05-19T08:37:28Z |
| MAL-2022-2464 | Malicious code in dgse-tools-mgm-elf-helper (npm) | 2022-05-19T08:37:22Z | 2022-05-19T08:37:28Z |
| MAL-2022-4669 | Malicious code in mollie-design-system (npm) | 2022-05-19T08:37:22Z | 2022-05-19T08:37:22Z |
| mal-2022-1212 | Malicious code in axp-base (npm) | 2022-05-19T08:37:22Z | 2022-05-19T08:37:27Z |
| mal-2022-1213 | Malicious code in axp-shared-scripts (npm) | 2022-05-19T08:37:22Z | 2022-05-19T08:37:27Z |
| mal-2022-1214 | Malicious code in axp-utility-belt (npm) | 2022-05-19T08:37:22Z | 2022-05-19T08:37:22Z |
| mal-2022-2377 | Malicious code in ddc-classnames-js (npm) | 2022-05-19T08:37:22Z | 2022-05-19T08:37:28Z |
| mal-2022-2378 | Malicious code in ddc-new-relic (npm) | 2022-05-19T08:37:22Z | 2022-05-19T08:37:28Z |
| mal-2022-2464 | Malicious code in dgse-tools-mgm-elf-helper (npm) | 2022-05-19T08:37:22Z | 2022-05-19T08:37:28Z |
| mal-2022-4669 | Malicious code in mollie-design-system (npm) | 2022-05-19T08:37:22Z | 2022-05-19T08:37:22Z |
| MAL-2022-377 | Malicious code in @kibt/operation-track (npm) | 2022-05-23T10:22:10Z | 2022-05-23T10:22:10Z |
| MAL-2022-378 | Malicious code in @kibt/weblogger (npm) | 2022-05-23T10:22:10Z | 2022-05-23T10:22:10Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0433 | Adobe ColdFusion: Mehrere Schwachstellen | 2017-04-25T22:00:00.000+00:00 | 2025-02-24T23:00:00.000+00:00 |
| wid-sec-w-2024-3067 | GNOME: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten | 2017-04-27T22:00:00.000+00:00 | 2024-10-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1234 | FreeType: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2017-04-27T22:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2024-2024 | QEMU: Mehrere Schwachstellen ermöglichen Denial of Service | 2017-05-03T22:00:00.000+00:00 | 2024-09-02T22:00:00.000+00:00 |
| wid-sec-w-2024-2023 | QEMU: Schwachstelle ermöglicht Privilegieneskalation | 2017-05-17T22:00:00.000+00:00 | 2024-09-02T22:00:00.000+00:00 |
| wid-sec-w-2025-0426 | libxml2: Mehrere Schwachstellen ermöglichen Denial of Service | 2017-05-18T22:00:00.000+00:00 | 2025-06-19T22:00:00.000+00:00 |
| wid-sec-w-2024-2085 | strongSwan: Mehrere Schwachstellen ermöglichen Denial of Service | 2017-05-30T22:00:00.000+00:00 | 2024-09-09T22:00:00.000+00:00 |
| wid-sec-w-2022-1439 | Perl: Schwachstelle ermöglicht Privilegieneskalation | 2017-06-05T22:00:00.000+00:00 | 2024-05-13T22:00:00.000+00:00 |
| wid-sec-w-2024-2022 | QEMU: Schwachstelle ermöglicht Denial of Service | 2017-06-11T22:00:00.000+00:00 | 2024-09-02T22:00:00.000+00:00 |
| wid-sec-w-2023-1648 | cURL: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2017-06-15T22:00:00.000+00:00 | 2023-07-04T22:00:00.000+00:00 |
| wid-sec-w-2023-2719 | PHP: Mehrere Schwachstellen | 2017-06-18T22:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2022-2037 | expat: Schwachstelle ermöglicht Denial of Service | 2017-06-26T22:00:00.000+00:00 | 2023-06-05T22:00:00.000+00:00 |
| wid-sec-w-2023-0999 | Cisco IOS: Mehrere Schwachstellen | 2017-06-29T22:00:00.000+00:00 | 2023-04-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1191 | Internet Systems Consortium BIND: Mehrere Schwachstellen | 2017-06-29T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2024-0960 | Red Hat Enterprise Virtualization (Ansible): Schwachstelle ermöglicht Umgehung von Sicherheitsrichtlinien | 2017-07-06T22:00:00.000+00:00 | 2024-05-06T22:00:00.000+00:00 |
| wid-sec-w-2023-2718 | PHP: Mehrere Schwachstellen | 2017-07-09T22:00:00.000+00:00 | 2023-12-04T23:00:00.000+00:00 |
| wid-sec-w-2024-2021 | QEMU: Schwachstelle ermöglicht Denial of Service | 2017-07-09T22:00:00.000+00:00 | 2024-09-02T22:00:00.000+00:00 |
| wid-sec-w-2023-2157 | ImageMagick: Mehrere Schwachstellen ermöglichen Denial of Service | 2017-07-10T22:00:00.000+00:00 | 2024-03-19T23:00:00.000+00:00 |
| wid-sec-w-2023-3200 | poppler: Mehrere Schwachstellen | 2017-07-10T22:00:00.000+00:00 | 2023-12-21T23:00:00.000+00:00 |
| wid-sec-w-2024-2020 | QEMU: Schwachstelle ermöglicht Denial of Service | 2017-07-16T22:00:00.000+00:00 | 2024-09-02T22:00:00.000+00:00 |
| wid-sec-w-2024-2019 | QEMU: Schwachstelle ermöglicht Denial of Service | 2017-07-17T22:00:00.000+00:00 | 2024-09-02T22:00:00.000+00:00 |
| wid-sec-w-2025-1210 | Oracle Java SE: Mehrere Schwachstellen | 2017-07-18T22:00:00.000+00:00 | 2025-06-02T22:00:00.000+00:00 |
| wid-sec-w-2023-2264 | docker: Schwachstelle ermöglicht Denial of Service | 2017-07-26T22:00:00.000+00:00 | 2023-09-04T22:00:00.000+00:00 |
| wid-sec-w-2023-3162 | IBM InfoSphere Information Server: Mehrere Schwachstellen | 2017-08-01T22:00:00.000+00:00 | 2023-12-17T23:00:00.000+00:00 |
| wid-sec-w-2024-0172 | ImageMagick: Mehrere Schwachstellen ermöglichen Denial of Service | 2017-08-06T22:00:00.000+00:00 | 2024-08-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0597 | SAP: Mehrere Schwachstellen | 2017-08-07T22:00:00.000+00:00 | 2025-03-19T23:00:00.000+00:00 |
| wid-sec-w-2023-1647 | cURL: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2017-08-08T22:00:00.000+00:00 | 2023-07-04T22:00:00.000+00:00 |
| wid-sec-w-2025-1211 | Mozilla Firefox: Mehrere Schwachstellen | 2017-08-08T22:00:00.000+00:00 | 2025-06-02T22:00:00.000+00:00 |
| wid-sec-w-2025-0269 | Linux Kernel: Mehrere Schwachstellen | 2017-08-10T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2024-2018 | QEMU: Schwachstelle ermöglicht Denial of Service | 2017-08-21T22:00:00.000+00:00 | 2024-09-02T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2024-0397 | Kwetsbaarheden verholpen in Microsoft System Center | 2024-10-08T20:02:55.249830Z | 2024-10-08T20:02:55.249830Z |
| ncsc-2024-0398 | Kwetsbaarheden verholpen in Ivanti Connect Secure en Policy Secure | 2024-10-09T09:47:33.556285Z | 2024-10-11T07:03:14.760313Z |
| ncsc-2024-0399 | Kwetsbaarheden verholpen in Ivanti Cloud Services Appliance | 2024-10-09T09:49:35.398654Z | 2024-10-09T09:49:35.398654Z |
| ncsc-2024-0400 | Kwetsbaarheden verholpen in Ivanti Avalanche | 2024-10-09T10:45:10.558311Z | 2024-10-09T10:45:10.558311Z |
| ncsc-2024-0401 | Kwetsbaarheid verholpen in Ivanti Endpoint Manager Mobile | 2024-10-09T11:21:34.434721Z | 2024-10-09T11:21:34.434721Z |
| ncsc-2024-0402 | Kwetsbaarheden verholpen in Adobe Commerce en Magento | 2024-10-09T13:38:09.912496Z | 2024-10-09T13:38:09.912496Z |
| ncsc-2024-0403 | Kwetsbaarheid verholpen in Mozilla Firefox | 2024-10-10T07:20:38.171954Z | 2024-10-10T07:20:38.171954Z |
| ncsc-2024-0404 | Kwetsbaarheden verholpen in Juniper JunOS en JunOS Evolved | 2024-10-10T11:19:54.515278Z | 2024-10-10T11:19:54.515278Z |
| ncsc-2024-0405 | Kwetsbaarheden verholpen in Palo Alto Expedition | 2024-10-10T12:02:12.890277Z | 2024-10-10T12:02:12.890277Z |
| ncsc-2024-0406 | Kwetsbaarheden verholpen in Gitlab Enterprise Edition en Community Edition | 2024-10-11T08:23:31.975727Z | 2024-10-11T08:23:31.975727Z |
| ncsc-2024-0407 | Kwetsbaarheden verholpen in Moxa systemen | 2024-10-14T12:14:38.572540Z | 2024-10-14T12:14:38.572540Z |
| ncsc-2024-0408 | Kwetsbaarheden verholpen in Splunk Enterprise | 2024-10-15T15:18:24.694416Z | 2024-10-15T15:18:24.694416Z |
| ncsc-2024-0409 | Kwetsbaarheid verholpen in Solarwinds Web Helpdesk | 2024-10-17T06:08:32.057774Z | 2024-10-17T06:08:32.057774Z |
| ncsc-2024-0410 | Kwetsbaarheden verholpen in Solarwinds Platform | 2024-10-17T06:09:32.053449Z | 2024-10-17T06:09:32.053449Z |
| ncsc-2024-0411 | Kwetsbaarheden verholpen in Oracle Database producten | 2024-10-17T13:15:19.595269Z | 2024-10-17T13:15:19.595269Z |
| ncsc-2024-0412 | Kwetsbaarheden verholpen in Oracle Peoplesoft | 2024-10-17T13:16:18.175855Z | 2024-10-17T13:16:18.175855Z |
| ncsc-2024-0413 | Kwetsbaarheden verholpen in Oracle Commerce | 2024-10-17T13:17:19.736602Z | 2024-10-17T13:17:19.736602Z |
| ncsc-2024-0414 | Kwetsbaarheden verholpen in Oracle Communications | 2024-10-17T13:17:52.103171Z | 2024-10-17T13:17:52.103171Z |
| ncsc-2024-0415 | Kwetsbaarheden verholpen in Oracle Enterprise Manager | 2024-10-17T13:18:06.611153Z | 2024-10-17T13:18:06.611153Z |
| ncsc-2024-0416 | Kwetsbaarheden verholpen in Oracle Financial Services Applications | 2024-10-17T13:18:45.385015Z | 2024-10-17T13:18:45.385015Z |
| ncsc-2024-0417 | Kwetsbaarheden verholpen in Oracle Fusion Middleware | 2024-10-17T13:19:16.185510Z | 2024-10-17T13:19:16.185510Z |
| ncsc-2024-0418 | Kwetsbaarheden verholpen in Oracle Analytics | 2024-10-17T13:19:50.583299Z | 2024-10-17T13:19:50.583299Z |
| ncsc-2024-0419 | Kwetsbaarheden verholpen in Oracle Java | 2024-10-17T13:20:07.759085Z | 2024-10-17T13:20:07.759085Z |
| ncsc-2024-0420 | Kwetsbaarheden verholpen in Oracle MySQL | 2024-10-17T13:20:42.437738Z | 2024-10-17T13:20:42.437738Z |
| ncsc-2024-0421 | Kwetsbaarheden verholpen in SolarWinds Serv-U | 2024-10-18T09:10:48.856424Z | 2024-10-18T09:10:48.856424Z |
| ncsc-2024-0422 | Kwetsbaarheden verholpen in Oracle E-Business Suite | 2024-10-18T09:26:29.690794Z | 2024-10-18T09:26:29.690794Z |
| ncsc-2024-0423 | Kwetsbaarheid ontdekt in Fortinet FortiManager | 2024-10-23T16:51:38.477778Z | 2024-11-15T10:52:37.440334Z |
| ncsc-2024-0424 | Kwetsbaarheden verholpen in Cisco Adaptive Security Appliance en Firepower Threat Defense | 2024-10-24T08:37:15.013231Z | 2024-10-24T08:37:15.013231Z |
| ncsc-2024-0425 | Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird | 2024-10-30T10:53:07.348476Z | 2024-10-30T10:53:07.348476Z |
| ncsc-2024-0426 | Kwetsbaarheden verholpen in Apple MacOS | 2024-10-30T11:26:13.535716Z | 2024-10-30T11:26:13.535716Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-496292 | SSA-496292: Remote Code Execution Vulnerability in POWER METER SICAM Q100 | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-523250 | SSA-523250: Improper Certificate Validation Vulnerability in SINUMERIK Edge | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-595101 | SSA-595101: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.2.0.5 | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-620288 | SSA-620288: Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic | 2021-12-14T00:00:00Z | 2025-03-11T00:00:00Z |
| ssa-802578 | SSA-802578: Multiple File Parsing Vulnerabilities in JTTK before V11.1.1.0 and JT Utilities before V13.1.1.0 | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-714170 | SSA-714170: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000 | 2021-12-16T00:00:00Z | 2022-02-08T00:00:00Z |
| ssa-501673 | SSA-501673: Apache Log4j Denial of Service Vulnerability (CVE-2021-45105) - Impact to Siemens Products | 2021-12-19T00:00:00Z | 2021-12-19T00:00:00Z |
| ssa-397453 | SSA-397453: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to Siemens Energy TraceAlertServerPLUS | 2021-12-20T00:00:00Z | 2021-12-20T00:00:00Z |
| ssa-479842 | SSA-479842: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer / Sensgear (Platform, Basic and Advanced) | 2021-12-21T00:00:00Z | 2021-12-23T00:00:00Z |
| ssa-784507 | SSA-784507: Apache Log4j Vulnerability (CVE-2021-44832) via JDBC Appender - Impact to Siemens Products | 2021-12-28T00:00:00Z | 2021-12-28T00:00:00Z |
| ssa-173318 | SSA-173318: Unquoted Search Path Vulnerability in SICAM PQ Analyzer | 2022-01-11T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-324998 | SSA-324998: Multiple Vulnerabilities in SICAM A8000 | 2022-01-11T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-439673 | SSA-439673: Information Disclosure Vulnerability in SIPROTEC 5 Devices | 2022-01-11T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-845392 | SSA-845392: Multiple Vulnerabilities in Nucleus RTOS based Siemens Energy PLUSCONTROL 1st Gen Devices | 2022-01-11T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-995338 | SSA-995338: Multiple Vulnerabilities in COMOS Web | 2022-01-11T00:00:00Z | 2022-04-12T00:00:00Z |
| ssa-244969 | SSA-244969: OpenSSL Vulnerability in Industrial Products | 2022-02-08T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-301589 | SSA-301589: Multiple File Parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization | 2022-02-08T00:00:00Z | 2022-06-14T00:00:00Z |
| ssa-539476 | SSA-539476: Siemens SIMATIC NET CP, SINEMA and SCALANCE Products Affected by Vulnerabilities in Third-Party Component strongSwan | 2022-02-08T00:00:00Z | 2023-03-14T00:00:00Z |
| ssa-609880 | SSA-609880: File Parsing Vulnerabilities in Simcenter Femap before V2022.1 | 2022-02-08T00:00:00Z | 2022-02-08T00:00:00Z |
| ssa-654775 | SSA-654775: Open Redirect Vulnerability in SINEMA Remote Connect Server | 2022-02-08T00:00:00Z | 2022-02-08T00:00:00Z |
| ssa-669737 | SSA-669737: Improper Access Control Vulnerability in SICAM TOOLBOX II | 2022-02-08T00:00:00Z | 2022-08-09T00:00:00Z |
| ssa-831168 | SSA-831168: Cross-Site Scripting Vulnerability in Spectrum Power 4 | 2022-02-08T00:00:00Z | 2022-02-08T00:00:00Z |
| ssa-838121 | SSA-838121: Multiple Denial of Service Vulnerabilities in Industrial Products | 2022-02-08T00:00:00Z | 2023-04-11T00:00:00Z |
| ssa-914168 | SSA-914168: Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products | 2022-02-08T00:00:00Z | 2022-08-09T00:00:00Z |
| ssa-949188 | SSA-949188: File Parsing Vulnerabilities in Simcenter Femap before V2022.1.1 | 2022-02-17T00:00:00Z | 2022-02-17T00:00:00Z |
| ssa-306654 | SSA-306654: Insyde BIOS Vulnerabilities in Siemens Industrial Products | 2022-02-22T00:00:00Z | 2025-04-08T00:00:00Z |
| ssa-134279 | SSA-134279: Vulnerability in Mendix Forgot Password Appstore module | 2022-03-08T00:00:00Z | 2022-03-08T00:00:00Z |
| ssa-148641 | SSA-148641: XPath Constraint Vulnerability in Mendix Runtime | 2022-03-08T00:00:00Z | 2024-10-08T00:00:00Z |
| ssa-155599 | SSA-155599: File Parsing Vulnerabilities in COMOS | 2022-03-08T00:00:00Z | 2022-03-08T00:00:00Z |
| ssa-166747 | SSA-166747: Scene File Parsing Vulnerability in Simcenter STAR-CCM+ Viewer before V2022.1 | 2022-03-08T00:00:00Z | 2022-03-08T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2002:211 | Red Hat Security Advisory: ggv security update | 2002-10-10T20:23:00+00:00 | 2025-11-21T17:25:07+00:00 |
| rhsa-2002_211 | Red Hat Security Advisory: ggv security update | 2002-10-10T20:23:00+00:00 | 2024-11-21T22:30:09+00:00 |
| rhsa-2002:195 | Red Hat Security Advisory: tetex security update | 2002-10-14T13:36:00+00:00 | 2025-11-21T17:25:06+00:00 |
| rhsa-2002_195 | Red Hat Security Advisory: tetex security update | 2002-10-14T13:36:00+00:00 | 2024-11-21T22:28:02+00:00 |
| rhsa-2002:196 | Red Hat Security Advisory: : Updated xinetd packages fix denial of service vulnerability | 2002-10-15T17:07:00+00:00 | 2025-11-21T17:25:06+00:00 |
| rhsa-2002_196 | Red Hat Security Advisory: : Updated xinetd packages fix denial of service vulnerability | 2002-10-15T17:07:00+00:00 | 2024-11-21T22:28:08+00:00 |
| rhsa-2002:192 | Red Hat Security Advisory: : Updated Mozilla packages fix security vulnerabilities | 2002-10-18T09:15:00+00:00 | 2025-11-21T17:25:05+00:00 |
| rhsa-2002_192 | Red Hat Security Advisory: : Updated Mozilla packages fix security vulnerabilities | 2002-10-18T09:15:00+00:00 | 2024-11-21T22:27:56+00:00 |
| rhsa-2002:223 | Red Hat Security Advisory: : Updated ypserv packages fixes memory leak | 2002-10-24T12:13:00+00:00 | 2025-11-21T17:25:09+00:00 |
| rhsa-2002_223 | Red Hat Security Advisory: : Updated ypserv packages fixes memory leak | 2002-10-24T12:13:00+00:00 | 2024-11-21T22:30:46+00:00 |
| rhsa-2002:224 | Red Hat Security Advisory: ypserv security update | 2002-10-25T12:24:00+00:00 | 2025-11-21T17:25:10+00:00 |
| rhsa-2002_224 | Red Hat Security Advisory: ypserv security update | 2002-10-25T12:24:00+00:00 | 2024-11-21T22:30:48+00:00 |
| rhsa-2002:227 | Red Hat Security Advisory: kernel security update | 2002-10-28T22:32:00+00:00 | 2025-11-21T17:25:10+00:00 |
| rhsa-2002_227 | Red Hat Security Advisory: kernel security update | 2002-10-28T22:32:00+00:00 | 2024-11-21T22:30:47+00:00 |
| rhsa-2002:218 | Red Hat Security Advisory: tomcat security update for Stronghold | 2002-11-05T00:00:00+00:00 | 2025-11-21T17:25:08+00:00 |
| rhsa-2002_218 | Red Hat Security Advisory: tomcat security update for Stronghold | 2002-11-05T00:00:00+00:00 | 2024-11-21T22:29:37+00:00 |
| rhsa-2002:242 | Red Hat Security Advisory: : Updated kerberos packages available | 2002-11-07T16:26:00+00:00 | 2025-11-21T17:25:10+00:00 |
| rhsa-2002_242 | Red Hat Security Advisory: : Updated kerberos packages available | 2002-11-07T16:26:00+00:00 | 2024-11-21T22:31:13+00:00 |
| rhsa-2002:250 | Red Hat Security Advisory: krb5 security update | 2002-11-07T17:35:00+00:00 | 2025-11-21T17:25:12+00:00 |
| rhsa-2002_250 | Red Hat Security Advisory: krb5 security update | 2002-11-07T17:35:00+00:00 | 2024-11-21T22:31:16+00:00 |
| rhsa-2002:248 | Red Hat Security Advisory: apache, mod_ssl, php security update for Stronghold | 2002-11-07T17:42:00+00:00 | 2025-11-21T17:25:12+00:00 |
| rhsa-2002_248 | Red Hat Security Advisory: apache, mod_ssl, php security update for Stronghold | 2002-11-07T17:42:00+00:00 | 2024-11-21T22:31:28+00:00 |
| rhsa-2002:243 | Red Hat Security Advisory: apache, mod_ssl, php security update for Stronghold | 2002-11-08T11:15:00+00:00 | 2025-11-21T17:25:11+00:00 |
| rhsa-2002:244 | Red Hat Security Advisory: apache, mod_ssl, php security update for Stronghold | 2002-11-08T11:15:00+00:00 | 2025-11-21T17:25:12+00:00 |
| rhsa-2002_243 | Red Hat Security Advisory: apache, mod_ssl, php security update for Stronghold | 2002-11-08T11:15:00+00:00 | 2024-11-21T22:31:21+00:00 |
| rhsa-2002_244 | Red Hat Security Advisory: apache, mod_ssl, php security update for Stronghold | 2002-11-08T11:15:00+00:00 | 2024-11-21T22:31:24+00:00 |
| rhsa-2002:217 | Red Hat Security Advisory: tomcat security update for Stronghold | 2002-11-08T11:16:00+00:00 | 2025-11-21T17:25:08+00:00 |
| rhsa-2002_217 | Red Hat Security Advisory: tomcat security update for Stronghold | 2002-11-08T11:16:00+00:00 | 2024-11-21T22:29:32+00:00 |
| rhsa-2002:263 | Red Hat Security Advisory: kernel security update | 2002-11-22T16:39:00+00:00 | 2025-11-21T17:25:15+00:00 |
| rhsa-2002_263 | Red Hat Security Advisory: kernel security update | 2002-11-22T16:39:00+00:00 | 2024-11-21T22:31:56+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-13-337-01 | Elecsys Director Gateway Improper Input Validation Vulnerability | 2013-09-05T06:00:00.000000Z | 2025-06-06T18:43:02.174857Z |
| icsa-13-338-01 | Siemens SINAMICS S/G Authentication Bypass Vulnerability | 2013-09-06T06:00:00.000000Z | 2025-06-06T18:43:08.603348Z |
| icsa-13-340-01 | RuggedCom ROS Multiple Vulnerabilities | 2013-09-08T06:00:00.000000Z | 2025-06-06T18:43:15.047736Z |
| icsa-13-344-01 | WellinTech Vulnerabilities | 2013-09-12T06:00:00.000000Z | 2025-06-06T22:55:13.840768Z |
| icsa-13-346-01 | Cooper Power Systems Improper Input Validation Vulnerability | 2013-09-14T06:00:00.000000Z | 2025-06-06T18:43:28.031039Z |
| icsa-13-346-02 | Cooper Power Systems Cybectec DNP3 Master OPC Server Improper Input Validation | 2013-09-14T06:00:00.000000Z | 2025-06-06T18:43:40.964007Z |
| icsa-13-347-01 | Siemens COMOS Privilege Escalation | 2013-09-15T06:00:00.000000Z | 2025-06-06T18:43:47.381681Z |
| icsa-13-350-01a | Schneider Electric CitectSCADA Products Exception Handler Vulnerability (Update A) | 2013-09-18T06:00:00.000000Z | 2025-06-06T18:43:53.863083Z |
| icsa-13-352-01 | NovaTech Orion DNP3 Improper Input Validation Vulnerability | 2013-09-20T06:00:00.000000Z | 2025-06-12T21:23:06.621585Z |
| icsa-13-011-02 | SpecView Directory Traversal | 2013-10-15T06:00:00.000000Z | 2025-06-06T16:03:10.814208Z |
| icsa-13-011-03 | Rockwell Automation ControlLogix PLC Vulnerabilities | 2013-10-15T06:00:00.000000Z | 2025-06-06T22:38:48.956870Z |
| icsa-13-014-01 | Siemens SIMATIC RF Manager ActiveX Buffer Overflow | 2013-10-18T06:00:00.000000Z | 2025-06-06T22:39:41.115500Z |
| icsa-13-016-01 | Schneider Electric Authenticated Communication Risk Vulnerability | 2013-10-20T06:00:00.000000Z | 2025-06-06T22:39:47.591594Z |
| icsa-13-018-01 | Schneider Electric IGSS Buffer Overflow | 2013-10-22T06:00:00.000000Z | 2025-06-06T16:03:49.784364Z |
| icsa-13-022-01 | GE Proficy Real-Time Information Portal Information Disclosure Vulnerabilities | 2013-10-26T06:00:00.000000Z | 2025-06-06T16:03:36.702045Z |
| icsa-13-022-02 | GE Intelligent Platforms Proficy Cimplicity Multiple Vulnerabilities | 2013-10-26T06:00:00.000000Z | 2025-06-18T19:25:08.106052Z |
| icsa-13-036-02 | Ecava IntegraXor ActiveX Buffer Overflow | 2013-11-09T07:00:00.000000Z | 2025-06-06T16:01:20.774008Z |
| icsa-13-038-01a | 360 Systems Image Server 2000 Series Remote Root Access | 2013-11-11T07:00:00.000000Z | 2025-06-06T16:01:33.673371Z |
| icsa-13-042-01 | MOXA EDR-G903 Series Multiple Vulnerabilities | 2013-11-15T07:00:00.000000Z | 2025-06-06T16:00:22.532306Z |
| icsa-13-043-01 | Schneider Electric Accutech Manager Heap Overflow | 2013-11-16T07:00:00.000000Z | 2025-06-06T16:03:56.204172Z |
| icsa-13-043-02a | WellinTech KingView KingMess Buffer Overflow | 2013-11-16T07:00:00.000000Z | 2025-06-06T16:02:25.604024Z |
| icsa-13-045-01 | Tridium NiagaraAX Directory Traversal Vulnerability | 2013-11-18T07:00:00.000000Z | 2025-06-06T16:01:27.241267Z |
| icsa-13-050-01a | 3S CODESYS Gateway-Server Vulnerabilities | 2013-11-23T07:00:00.000000Z | 2025-06-06T16:01:46.621212Z |
| icsa-13-053-01 | Emerson DeltaV Uncontroller Resource Consumption Vulnerability | 2013-11-26T07:00:00.000000Z | 2025-06-06T16:01:40.169351Z |
| icsa-13-053-02a | Honeywell EBI, SymmetrE, and ComfortPoint Open Manager Station | 2013-11-26T07:00:00.000000Z | 2025-06-06T16:03:23.822206Z |
| icsa-13-067-01 | InduSoft Advantech Studio Directory Traversal | 2013-12-10T07:00:00.000000Z | 2025-06-06T16:06:05.937479Z |
| icsa-13-067-02 | Invensys Wonderware Win-XML Exporter Improper Input Validation Vulnerability | 2013-12-10T07:00:00.000000Z | 2025-06-06T16:02:19.118517Z |
| icsa-13-077-01b | Schneider Electric PLCs Vulnerabilities | 2013-12-20T07:00:00.000000Z | 2025-06-06T22:40:07.027146Z |
| icsa-13-079-01 | Schweitzer Engineering Laboratories AcSELerator Improper Authorization Vulnerability | 2013-12-22T07:00:00.000000Z | 2025-06-06T16:04:02.714778Z |
| icsa-13-079-02 | Siemens WinCC 7.0 SP3 Multiple Vulnerabilities | 2013-12-22T07:00:00.000000Z | 2025-06-06T16:04:22.166710Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20180418-mate1 | Cisco MATE Live Directory Information Disclosure Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-pdng | Cisco Packet Data Network Gateway Peer-to-Peer Message Processing Denial of Service Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-staros | Cisco StarOS Interface Forwarding Denial of Service Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-starosasr | Cisco StarOS IPsec Manager Denial of Service Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-ucm | Cisco Unified Communications Manager HTTP Interface Information Disclosure Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-ucm1 | Cisco Unified Communications Manager LDAP Information Disclosure Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-uscd | Cisco UCS Director Virtual Machine Information Disclosure Vulnerability for End User Portal | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-wbs | Cisco WebEx Clients Remote Code Execution Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-05-02T14:08:00+00:00 |
| cisco-sa-20180418-webcon | Cisco WebEx Connect IM Cross-Site Scripting Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-wlc | Cisco Wireless LAN Controller Default Simple Network Management Protocol Community Strings | 2018-04-18T16:00:00+00:00 | 2018-04-23T21:00:00+00:00 |
| cisco-sa-20180502-acs1 | Cisco Secure Access Control System Remote Code Execution Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-02T16:00:00+00:00 |
| cisco-sa-20180502-aironet-auth | Cisco Wireless LAN Controller and Aironet Access Points IOS WebAuth Client Authentication Bypass Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-02T16:00:00+00:00 |
| cisco-sa-20180502-aironet-dos | Cisco Aironet 1800 Series Access Point 802.11 Denial of Service Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-02T20:34:00+00:00 |
| cisco-sa-20180502-aironet-ssh | Cisco Aironet 1800, 2800, and 3800 Series Access Points Secure Shell Privilege Escalation Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-02T16:00:00+00:00 |
| cisco-sa-20180502-ap-acl | Cisco Aironet Access Points Central Web Authentication FlexConnect Client ACL Bypass Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-02T16:00:00+00:00 |
| cisco-sa-20180502-ap-ptp | Cisco Aironet 1810, 1830, and 1850 Series Access Points Point-to-Point Tunneling Protocol Denial of Service Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-02T16:00:00+00:00 |
| cisco-sa-20180502-cms-cx | Cisco Meeting Server Remote Code Execution Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-02T16:00:00+00:00 |
| cisco-sa-20180502-fpwr-codp | Cisco Firepower System Software Transport Layer Security Denial of Service Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-02T16:00:00+00:00 |
| cisco-sa-20180502-fpwr-dos | Cisco Firepower System Software Cross-Origin Domain Protection Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-02T16:00:00+00:00 |
| cisco-sa-20180502-fpwr-txdos | Cisco Firepower System Software Transport Layer Security Extensions Denial of Service Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-02T16:00:00+00:00 |
| cisco-sa-20180502-iosxr | Cisco IOS XR Software netconf Denial of Service Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-02T16:00:00+00:00 |
| cisco-sa-20180502-prime-upload | Cisco Prime File Upload Servlet Path Traversal and Remote Code Execution Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-10-29T15:38:00+00:00 |
| cisco-sa-20180502-psc | Cisco Prime Service Catalog User Interface Denial of Service Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-02T16:00:00+00:00 |
| cisco-sa-20180502-war | Cisco WebEx Advanced Recording Format Remote Code Execution Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-02T16:00:00+00:00 |
| cisco-sa-20180502-webex-id | Cisco WebEx Recording Format Player Information Disclosure Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-08T16:31:00+00:00 |
| cisco-sa-20180502-webex-rce | Cisco WebEx Advanced Recording Format Player Remote Code Execution Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-02T16:00:00+00:00 |
| cisco-sa-20180502-wlc-id | Cisco 5500 and 8500 Series Wireless LAN Controller Information Disclosure Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-02T16:00:00+00:00 |
| cisco-sa-20180502-wlc-ip | Cisco Wireless LAN Controller IP Fragment Reassembly Denial of Service Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-02T16:00:00+00:00 |
| cisco-sa-20180502-wlc-mfdos | Cisco Wireless LAN Controller 802.11 Management Frame Denial of Service Vulnerability | 2018-05-02T16:00:00+00:00 | 2018-05-03T17:27:00+00:00 |
| cisco-sa-20180516-cucm-cup-xss | Cisco Unified Communications Manager and Cisco Unified Presence Cross-Site Scripting Vulnerability | 2018-05-16T16:00:00+00:00 | 2018-05-18T15:35:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2017-8363 | The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file. | 2017-04-02T00:00:00.000Z | 2021-01-28T00:00:00.000Z |
| msrc_cve-2017-8365 | The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file. | 2017-04-02T00:00:00.000Z | 2021-01-28T00:00:00.000Z |
| msrc_cve-2016-9840 | inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic | 2017-05-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2016-9841 | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic | 2017-05-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2016-9842 | The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact | 2017-05-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2016-9843 | The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation. | 2017-05-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2017-6519 | avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809. | 2017-05-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2017-8244 | In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel variable "dbg_buf" "dbg_buf->curr" and "dbg_buf->filled_size" could be modified by different threads at the same time but they are not protected with mutex or locks. Buffer overflow is possible on race conditions. "buffer->curr" itself could also be overwritten which means that it may point to anywhere of kernel memory (for write). | 2017-05-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2017-8245 | In all Android releases from CAF using the Linux kernel while processing a voice SVC request which is nonstandard by specifying a payload size that will overflow its own declared size an out of bounds memory copy occurs. | 2017-05-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2017-8246 | In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel prtd is assigned substream->runtime->private_data. Later prtd is freed. However prtd is not sanitized and set to NULL resulting in a dangling pointer. There are other functions that access the same memory (substream->runtime->private_data) with a NULL check such as msm_pcm_volume_ctl_put() which means this freed memory could be used. | 2017-05-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2017-8923 | The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string. | 2017-05-02T00:00:00.000Z | 2025-10-01T23:11:00.000Z |
| msrc_cve-2017-6892 | In libsndfile version 1.0.28 an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file. | 2017-06-02T00:00:00.000Z | 2021-01-28T00:00:00.000Z |
| msrc_cve-2017-10989 | The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact. | 2017-07-02T00:00:00.000Z | 2025-09-04T00:00:20.000Z |
| msrc_cve-2017-11548 | The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service | 2017-07-02T00:00:00.000Z | 2025-10-01T23:10:54.000Z |
| msrc_cve-2017-11550 | The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service | 2017-07-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2017-11551 | The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service | 2017-07-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2017-12562 | Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. | 2017-08-02T00:00:00.000Z | 2021-01-28T00:00:00.000Z |
| msrc_cve-2017-12678 | In TagLib 1.11.1 the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file. | 2017-08-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2017-14167 | Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values which trigger an out-of-bounds write. | 2017-09-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2017-14245 | An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure related to mishandling of the NAN and INFINITY floating-point values. | 2017-09-02T00:00:00.000Z | 2021-01-28T00:00:00.000Z |
| msrc_cve-2017-14246 | An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure related to mishandling of the NAN and INFINITY floating-point values. | 2017-09-02T00:00:00.000Z | 2021-01-28T00:00:00.000Z |
| msrc_cve-2017-14623 | In the ldap.v2 (aka go-ldap) package through 2.5.0 for Go an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: (1) it relies only on the return error of the Bind function call to determine whether a user is authorized (i.e. a nil return value is interpreted as successful authorization) and (2) it is used with an LDAP server allowing unauthenticated bind. | 2017-09-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2017-14634 | In libsndfile 1.0.28 a divide-by-zero error exists in the function double64_init() in double64.c which may lead to DoS when playing a crafted audio file. | 2017-09-02T00:00:00.000Z | 2021-01-28T00:00:00.000Z |
| msrc_cve-2017-14867 | Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands such as cvsserver, which allows attackers to execute arbitrary OS commands via shell metacharacters in a module name. The vulnerable code is reachable via git-shell even without CVS support. | 2017-09-02T00:00:00.000Z | 2025-09-03T19:28:37.000Z |
| msrc_cve-2014-0047 | Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage. | 2017-10-02T00:00:00.000Z | 2021-07-16T00:00:00.000Z |
| msrc_cve-2015-2158 | Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service | 2017-10-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2015-7504 | Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode. | 2017-10-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2017-1000097 | On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate. | 2017-10-02T00:00:00.000Z | 2025-09-03T21:38:46.000Z |
| msrc_cve-2017-1000118 | Akka HTTP versions <= 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service | 2017-10-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| msrc_cve-2017-1000256 | libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a failure to validate SSL/TLS certificates by default. | 2017-10-02T00:00:00.000Z | 2020-09-25T00:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202011-1571 | Beijing Wenwang Yilian Technology Co., Ltd. is a leading provider of network environment … | 2022-05-04T08:33:45.623000Z |
| var-202011-1593 | EPON RL821GWV is a router. Technxt EPON RL821GWV has an information disclosure vulner… | 2022-05-04T08:33:45.612000Z |
| var-202011-1276 | A CWE-326: Inadequate Encryption Strength vulnerability exists in Modicon M221 (all refer… | 2022-05-04T08:33:46.177000Z |
| var-202011-1277 | A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all referen… | 2022-05-04T08:33:46.015000Z |
| var-202011-1278 | A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all… | 2022-05-04T08:33:46.040000Z |
| var-202011-1279 | A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exist… | 2022-05-04T08:33:46.095000Z |
| var-202012-0814 | A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon … | 2022-05-04T08:33:46.147000Z |
| var-202010-1601 | New H3C Technology Co., Ltd. is committed to becoming the most reliable partner for custo… | 2022-05-04T08:33:51.837000Z |
| var-202010-1622 | CyberControl is a flexible and customizable automated monitoring software platform that c… | 2022-05-04T08:33:51.827000Z |
| var-202010-1643 | C2000-B2-SFE0101-BB1 is a serial device networking server. It provides data transmission … | 2022-05-04T08:33:51.816000Z |
| var-202009-1671 | Shenzhen Xing Fusion Technology Co., Ltd. was established in July 2018. The company's bus… | 2022-05-04T08:33:54.991000Z |
| var-202009-1692 | TP-LINK Technology Co., Ltd. (hereinafter referred to as "TP-LINK") is a global network c… | 2022-05-04T08:33:54.980000Z |
| var-202009-1125 | A vulnerability in the PROFINET feature of Cisco IOS Software and Cisco IOS XE Software c… | 2022-05-04T08:33:56.714000Z |
| var-202007-1499 | KingView (KingView) is an industrial automation configuration software produced by Beijin… | 2022-05-04T08:34:08.612000Z |
| var-202006-1902 | Haiwell cloud configuration software Cloud SCADA is a .NET Framework-based industrial aut… | 2022-05-04T08:34:18.934000Z |
| var-202006-1923 | AC9V3.0 upgrade software is a Gigabit Ethernet wireless router of Shenzhen Jixiang Tengda… | 2022-05-04T08:34:18.921000Z |
| var-202005-1070 | D-Link Dir-816 is a wireless router. D-Link DIR-816 has a command execution vulnerabi… | 2022-05-04T08:34:28.135000Z |
| var-202005-1091 | Codesys is a powerful PLC software programming tool. Codesys v3 has a denial of servi… | 2022-05-04T08:34:28.125000Z |
| var-202004-2239 | Shenzhen Hexin Automation Technology Co., Ltd. (referred to as "Hexin Technology") was es… | 2022-05-04T08:34:30.166000Z |
| var-202004-2260 | Shenzhen Dadian Technology Co., Ltd. is a company specializing in the research and develo… | 2022-05-04T08:34:30.156000Z |
| var-202002-1702 | The equipment room moving ring monitoring system is a monitoring function of the equipmen… | 2022-05-04T08:34:43.443000Z |
| var-202001-1957 | ZXR10 ZSR V2 series router is a next-generation intelligent access router product integra… | 2022-05-04T08:34:48.034000Z |
| var-202001-1978 | Wuxi Xinjie Electric Co., Ltd. is a well-known domestic company specializing in the devel… | 2022-05-04T08:34:48.022000Z |
| var-202001-0739 | The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, wh… | 2022-05-04T08:34:58.752000Z |
| var-201912-1997 | TP-Link Archer is a wireless router of China TP-Link company. The TP-Link Archer router … | 2022-05-04T08:35:02.659000Z |
| var-201911-1945 | Hikvision is a video-centric IoT solution provider, providing integrated security, smart … | 2022-05-04T08:35:13.659000Z |
| var-201912-0153 | IBM MQ and IBM MQ Appliance 9.1 CD, 9.1 LTS, 9.0 LTS, and 8.0 is vulnerable to a denial o… | 2022-05-04T08:35:13.396000Z |
| var-201910-1868 | Alibaba Cloud IoT platform is a cloud service platform for the IoT field. It communicates… | 2022-05-04T08:35:17.893000Z |
| var-201909-1669 | Sangfor Technology Co., Ltd. is a provider of products, services and solutions focusing o… | 2022-05-04T08:35:30.333000Z |
| var-201908-2203 | Xiamen Sixin Communication Technology Co., Ltd. is the research and development, producti… | 2022-05-04T08:35:36.677000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2007-000071 | Fresh Reader RSS feed cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000073 | Movable Type cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000074 | phpAdsNew cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000085 | CGI RESCUE WebFORM vulnerable to HTTP header injection | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000086 | CGI RESCUE WebFORM vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000087 | CGI RESCUE WebFORM missing mail content vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000088 | Shopping Basket Professional vulnerable to OS command injection | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000090 | b2evolution cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000091 | Sleipnir RSS bar vulnerable in handling RSS data in an inappropriate security zone | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000093 | Sleipnir RSS bar vulnerable in handling RSS data in an inappropriate security zone | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000094 | MODx cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000127 | CCC Cleaner buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000134 | Sage vulnerable to arbitrary script execution | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000135 | CCC Cleaner buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000159 | Adobe JRun cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000160 | ColdFusion cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000161 | ColdFusion error page cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000165 | Ariel AirOne series cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000176 | Mozilla Firefox cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000199 | CCC Cleaner division-by-zero vulnerability when scanning UPX-packed executables | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000200 | Trac cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000215 | FENCE-Pro and Systemwalker Desktop Encryption self-decoding file vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000218 | Interstage Application Server cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000225 | NewsGlue and Ikinari Jijyoutsuu arbitrary script execution vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000226 | BASP21 vulnerable to mail header injection | 2008-05-21T00:00+09:00 | 2016-10-13T14:45+09:00 |
| jvndb-2007-000227 | CruiseWorks and Minna De Office vulnerable in access restrictions | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000228 | MailDwarf cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000229 | MailDwarf vulnerability allows unauthorized sending of emails | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000236 | Overlay Weaver cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000259 | open-gorotto cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:20786-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-09-23T07:55:48Z | 2025-09-23T07:55:48Z |
| suse-su-2025:20787-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_6 | 2025-09-23T07:55:48Z | 2025-09-23T07:55:48Z |
| suse-su-2025:20788-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 | 2025-09-23T07:55:48Z | 2025-09-23T07:55:48Z |
| suse-su-2025:20789-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_8 | 2025-09-23T07:55:48Z | 2025-09-23T07:55:48Z |
| suse-su-2025:20790-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_9 | 2025-09-23T07:55:48Z | 2025-09-23T07:55:48Z |
| suse-su-2025:20791-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_10 | 2025-09-23T07:55:48Z | 2025-09-23T07:55:48Z |
| suse-su-2025:20737-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_3 | 2025-09-23T07:56:26Z | 2025-09-23T07:56:26Z |
| suse-su-2025:03297-1 | Security update for frr | 2025-09-23T08:35:15Z | 2025-09-23T08:35:15Z |
| suse-su-2025:03298-1 | Security update for rustup | 2025-09-23T09:01:29Z | 2025-09-23T09:01:29Z |
| suse-su-2025:03299-1 | Security update for vim | 2025-09-23T09:02:41Z | 2025-09-23T09:02:41Z |
| suse-su-2025:03300-1 | Security update for vim | 2025-09-23T09:03:45Z | 2025-09-23T09:03:45Z |
| suse-su-2025:03301-1 | Security update for the Linux Kernel | 2025-09-23T09:05:11Z | 2025-09-23T09:05:11Z |
| suse-su-2025:20755-1 | Security update for cloud-init | 2025-09-23T09:05:48Z | 2025-09-23T09:05:48Z |
| suse-su-2025:20756-1 | Security update for the Linux Kernel | 2025-09-23T09:17:23Z | 2025-09-23T09:17:23Z |
| suse-su-2025:20740-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_12 | 2025-09-23T09:51:38Z | 2025-09-23T09:51:38Z |
| suse-su-2025:20793-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_12 | 2025-09-23T09:51:38Z | 2025-09-23T09:51:38Z |
| suse-su-2025:20739-1 | Security update for the Linux Kernel | 2025-09-23T11:26:15Z | 2025-09-23T11:26:15Z |
| suse-su-2025:03306-1 | Security update for sevctl | 2025-09-23T13:13:44Z | 2025-09-23T13:13:44Z |
| suse-su-2025:03307-1 | Security update for sevctl | 2025-09-23T13:13:49Z | 2025-09-23T13:13:49Z |
| suse-su-2025:02359-1 | Security update for python312 | 2025-09-23T13:55:52Z | 2025-09-23T13:55:52Z |
| suse-su-2025:03271-1 | Security update for busybox, busybox-links | 2025-09-23T14:03:30Z | 2025-09-23T14:03:30Z |
| suse-su-2025:03271-2 | Security update for busybox, busybox-links | 2025-09-23T14:03:30Z | 2025-09-23T14:03:30Z |
| suse-su-2025:03309-1 | Security update for MozillaThunderbird | 2025-09-23T14:30:31Z | 2025-09-23T14:30:31Z |
| suse-su-2025:03310-1 | Security update for the Linux Kernel | 2025-09-23T14:35:15Z | 2025-09-23T14:35:15Z |
| suse-su-2025:20741-1 | Security update for nvidia-open-driver-G06-signed | 2025-09-23T15:49:58Z | 2025-09-23T15:49:58Z |
| suse-su-2025:20757-1 | Security update for nvidia-open-driver-G06-signed | 2025-09-23T15:49:58Z | 2025-09-23T15:49:58Z |
| suse-su-2025:03314-1 | Security update for the Linux Kernel | 2025-09-23T18:35:03Z | 2025-09-23T18:35:03Z |
| suse-su-2025:03315-1 | Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP6) | 2025-09-23T21:04:31Z | 2025-09-23T21:04:31Z |
| suse-su-2025:03317-1 | Security update for the Linux Kernel RT (Live Patch 4 for SLE 15 SP6) | 2025-09-23T21:34:19Z | 2025-09-23T21:34:19Z |
| suse-su-2025:03319-1 | Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP7) | 2025-09-23T22:05:39Z | 2025-09-23T22:05:39Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15631-1 | alloy-1.11.2-2.1 on GA media | 2025-10-14T00:00:00Z | 2025-10-14T00:00:00Z |
| opensuse-su-2025:15632-1 | firefox-esr-140.4.0-1.1 on GA media | 2025-10-14T00:00:00Z | 2025-10-14T00:00:00Z |
| opensuse-su-2025:15633-1 | libsoup-3_0-0-3.6.5-7.1 on GA media | 2025-10-14T00:00:00Z | 2025-10-14T00:00:00Z |
| opensuse-su-2025:15634-1 | python3-gi-docgen-2025.5-1.1 on GA media | 2025-10-14T00:00:00Z | 2025-10-14T00:00:00Z |
| opensuse-su-2025:15635-1 | libtiff-devel-32bit-4.7.1-2.1 on GA media | 2025-10-14T00:00:00Z | 2025-10-14T00:00:00Z |
| opensuse-su-2025:15636-1 | libwireshark18-4.4.10-2.1 on GA media | 2025-10-14T00:00:00Z | 2025-10-14T00:00:00Z |
| opensuse-su-2025:15637-1 | python311-ldap-3.4.5-1.1 on GA media | 2025-10-15T00:00:00Z | 2025-10-15T00:00:00Z |
| opensuse-su-2025-20013-1 | Recommended update of flake-pilot | 2025-10-15T12:01:21Z | 2025-10-15T12:01:21Z |
| opensuse-su-2025-20020-1 | Security update for chromium | 2025-10-15T13:33:21Z | 2025-10-15T13:33:21Z |
| opensuse-su-2025:15638-1 | ansible-core-2.18-2.18.10-2.1 on GA media | 2025-10-16T00:00:00Z | 2025-10-16T00:00:00Z |
| opensuse-su-2025:15639-1 | chromedriver-141.0.7390.107-1.1 on GA media | 2025-10-16T00:00:00Z | 2025-10-16T00:00:00Z |
| opensuse-su-2025:15640-1 | ffmpeg-4-4.4.6-9.1 on GA media | 2025-10-16T00:00:00Z | 2025-10-16T00:00:00Z |
| opensuse-su-2025:15641-1 | libexslt0-1.1.43-4.1 on GA media | 2025-10-16T00:00:00Z | 2025-10-16T00:00:00Z |
| opensuse-su-2025:15642-1 | ruby3.4-rubygem-rack-2.2-2.2.20-1.1 on GA media | 2025-10-16T00:00:00Z | 2025-10-16T00:00:00Z |
| opensuse-su-2025:15643-1 | git-lfs-3.7.1-1.1 on GA media | 2025-10-17T00:00:00Z | 2025-10-17T00:00:00Z |
| opensuse-su-2025:15644-1 | icinga2-2.15.1-1.1 on GA media | 2025-10-17T00:00:00Z | 2025-10-17T00:00:00Z |
| opensuse-su-2025:15645-1 | MozillaFirefox-144.0-1.1 on GA media | 2025-10-18T00:00:00Z | 2025-10-18T00:00:00Z |
| opensuse-su-2025:15646-1 | MozillaThunderbird-140.4.0-1.1 on GA media | 2025-10-18T00:00:00Z | 2025-10-18T00:00:00Z |
| opensuse-su-2025:15647-1 | ollama-0.12.6-1.1 on GA media | 2025-10-18T00:00:00Z | 2025-10-18T00:00:00Z |
| opensuse-su-2025:15648-1 | libpoppler-cpp2-25.09.1-2.1 on GA media | 2025-10-18T00:00:00Z | 2025-10-18T00:00:00Z |
| opensuse-su-2025:15649-1 | ctdb-4.22.5+git.431.dc5a539f124-1.1 on GA media | 2025-10-18T00:00:00Z | 2025-10-18T00:00:00Z |
| opensuse-su-2025:15650-1 | ImageMagick-7.1.2.7-1.1 on GA media | 2025-10-21T00:00:00Z | 2025-10-21T00:00:00Z |
| opensuse-su-2025:15651-1 | binutils-2.45-1.2 on GA media | 2025-10-21T00:00:00Z | 2025-10-21T00:00:00Z |
| opensuse-su-2025:15652-1 | cargo-audit-advisory-db-20251021-1.1 on GA media | 2025-10-21T00:00:00Z | 2025-10-21T00:00:00Z |
| opensuse-su-2025:15653-1 | fetchmail-6.5.6-1.1 on GA media | 2025-10-21T00:00:00Z | 2025-10-21T00:00:00Z |
| opensuse-su-2025:15654-1 | git-bug-0.10.1-2.1 on GA media | 2025-10-21T00:00:00Z | 2025-10-21T00:00:00Z |
| opensuse-su-2025:15655-1 | istioctl-1.27.3-1.1 on GA media | 2025-10-21T00:00:00Z | 2025-10-21T00:00:00Z |
| opensuse-su-2025:15656-1 | sccache-0.12.0~1-1.1 on GA media | 2025-10-21T00:00:00Z | 2025-10-21T00:00:00Z |
| opensuse-su-2025:15657-1 | bleachbit-5.0.0-1.1 on GA media | 2025-10-22T00:00:00Z | 2025-10-22T00:00:00Z |
| opensuse-su-2025:15658-1 | python311-uv-0.9.5-1.1 on GA media | 2025-10-22T00:00:00Z | 2025-10-22T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2015-00126 | GNU Emacs本地信息泄露漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00127 | EDK1 UEFI 'FSVariable.c'本地缓冲区溢出漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00128 | ARJ存在多个目录遍历漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00129 | HUAWEI MobiConnect存在多个漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00130 | CTS Projects & Software ClassAd SQL注入漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00131 | miniunzip 'minizip.c'目录遍历漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00132 | i.Ftp Server远程栈缓冲区溢出漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00133 | PHP 'cgi_main.c'越界读拒绝服务漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00134 | Perl a2p '/usr/bin/a2p'缓冲区溢出漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00135 | Dwarfdump内存错误引用拒绝服务漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00136 | Absolut Engine存在多个SQL注入漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00137 | mime-support Package 'run-mailcap'命令注入漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00138 | Info-ZIP UnZip越界读堆缓冲区溢出漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00139 | Info-ZIP UnZip越界写堆缓冲区溢出漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00140 | VDG Security SENSE存在多个缓冲区溢出漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00141 | PMB SQL注入漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00142 | Exiv riffvideo.cpp缓冲区溢出漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00143 | phpMyRecipes category参数SQL注入漏洞 | 2015-01-06 | 2015-01-07 |
| cnvd-2015-00149 | Absolut Engine跨站脚本漏洞 | 2015-01-06 | 2015-01-10 |
| cnvd-2015-00150 | gcab 'gcab-folder.c'本地目录遍历漏洞 | 2015-01-06 | 2015-01-09 |
| cnvd-2015-00088 | Linux Kernel 'keys/gc.c'本地内存破坏漏洞 | 2015-01-07 | 2015-01-08 |
| cnvd-2015-00089 | Apache Traffic Server 'HttpTransact.cc'拒绝服务漏洞 | 2015-01-07 | 2015-01-08 |
| cnvd-2015-00090 | EMC Documentum Web Development Kit (WDK)存在未明漏洞 | 2015-01-07 | 2015-01-08 |
| cnvd-2015-00091 | EMC Documentum Web Development Kit (WDK)存在未明框架注入漏洞 | 2015-01-07 | 2015-01-08 |
| cnvd-2015-00092 | EMC Documentum Web Development Kit (WDK)存在多个跨站脚本漏洞 | 2015-01-07 | 2015-01-08 |
| cnvd-2015-00093 | EMC Documentum Web Development Kit (WDK)URL重定向漏洞 | 2015-01-07 | 2015-01-08 |
| cnvd-2015-00094 | EMC Documentum Web Development Kit (WDK)跨站请求伪造漏洞 | 2015-01-07 | 2015-01-08 |
| cnvd-2015-00095 | AdaptCMS任意文件上传漏洞 | 2015-01-07 | 2015-01-08 |
| cnvd-2015-00096 | AdaptCMS 'Referer' Header Field HTTP开放重定向漏洞 | 2015-01-07 | 2015-01-08 |
| cnvd-2015-00097 | AdaptCMS存在多个HTML注入漏洞 | 2015-01-07 | 2015-01-08 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTA-2000-AVI-092 | Vulnérabilités de Solaris | 2000-12-20T00:00:00.000000 | 2000-12-20T00:00:00.000000 |
| certa-2000-avi-090 | Vulnérabilité dans le serveur d'indexation sous Microsoft | 2000-12-20T00:00:00.000000 | 2000-12-20T00:00:00.000000 |
| certa-2000-avi-091 | Vulnérabilité de « Fast Mode » sous Firewall-1 | 2000-12-20T00:00:00.000000 | 2000-12-20T00:00:00.000000 |
| certa-2000-avi-092 | Vulnérabilités de Solaris | 2000-12-20T00:00:00.000000 | 2000-12-20T00:00:00.000000 |
| CERTA-2000-AVI-093 | Vulnérabilité sous Microsoft IIS (Extensions FrontPage) | 2000-12-28T00:00:00.000000 | 2000-12-28T00:00:00.000000 |
| certa-2000-avi-093 | Vulnérabilité sous Microsoft IIS (Extensions FrontPage) | 2000-12-28T00:00:00.000000 | 2000-12-28T00:00:00.000000 |
| CERTA-2011-AVI-005 | Multiples vulnérabilités dans evince | 2001-01-11T00:00:00.000000 | 2011-01-07T00:00:00.000000 |
| certa-2011-avi-005 | Multiples vulnérabilités dans evince | 2001-01-11T00:00:00.000000 | 2011-01-07T00:00:00.000000 |
| CERTA-2001-AVI-001 | Vulnérabilité de Lotus Domino 5 | 2001-01-12T00:00:00.000000 | 2001-01-12T00:00:00.000000 |
| CERTA-2001-AVI-002 | Vulnérabilité de l'authentification NTLM sous Windows | 2001-01-12T00:00:00.000000 | 2001-01-12T00:00:00.000000 |
| CERTA-2001-AVI-003 | Accès privilégié oublié dans le code de Interbase Server de Borland | 2001-01-12T00:00:00.000000 | 2001-01-12T00:00:00.000000 |
| certa-2001-avi-001 | Vulnérabilité de Lotus Domino 5 | 2001-01-12T00:00:00.000000 | 2001-01-12T00:00:00.000000 |
| certa-2001-avi-002 | Vulnérabilité de l'authentification NTLM sous Windows | 2001-01-12T00:00:00.000000 | 2001-01-12T00:00:00.000000 |
| certa-2001-avi-003 | Accès privilégié oublié dans le code de Interbase Server de Borland | 2001-01-12T00:00:00.000000 | 2001-01-12T00:00:00.000000 |
| CERTA-2001-AVI-004 | Vulnérabilité dans ARP sous SunOS | 2001-01-15T00:00:00.000000 | 2001-01-15T00:00:00.000000 |
| certa-2001-avi-004 | Vulnérabilité dans ARP sous SunOS | 2001-01-15T00:00:00.000000 | 2001-01-15T00:00:00.000000 |
| CERTA-2001-AVI-005 | Vulnérabilité du système d'internationalisation sous SGI Irix. | 2001-01-19T00:00:00.000000 | 2001-01-19T00:00:00.000000 |
| certa-2001-avi-005 | Vulnérabilité du système d'internationalisation sous SGI Irix. | 2001-01-19T00:00:00.000000 | 2001-01-19T00:00:00.000000 |
| CERTA-2001-AVI-006 | Vulnérabilité sous Microsoft Power Point 2000 | 2001-01-24T00:00:00.000000 | 2001-01-24T00:00:00.000000 |
| CERTA-2001-AVI-007 | Mise à jour de Wu-FTPd | 2001-01-24T00:00:00.000000 | 2001-01-24T00:00:00.000000 |
| certa-2001-avi-006 | Vulnérabilité sous Microsoft Power Point 2000 | 2001-01-24T00:00:00.000000 | 2001-01-24T00:00:00.000000 |
| certa-2001-avi-007 | Mise à jour de Wu-FTPd | 2001-01-24T00:00:00.000000 | 2001-01-24T00:00:00.000000 |
| CERTA-2001-AVI-008 | Vulnérabilité sous Lotus Notes (Domino 5) | 2001-01-25T00:00:00.000000 | 2001-01-25T00:00:00.000000 |
| certa-2001-avi-008 | Vulnérabilité sous Lotus Notes (Domino 5) | 2001-01-25T00:00:00.000000 | 2001-01-25T00:00:00.000000 |
| CERTA-2001-AVI-009 | Vulnérabilité dans les permissions d'accès sous Windows NT 4 | 2001-01-30T00:00:00.000000 | 2001-01-30T00:00:00.000000 |
| CERTA-2001-AVI-010 | Multiples vulnérabilités dans le serveur DNS BIND | 2001-01-30T00:00:00.000000 | 2001-11-30T00:00:00.000000 |
| certa-2001-avi-009 | Vulnérabilité dans les permissions d'accès sous Windows NT 4 | 2001-01-30T00:00:00.000000 | 2001-01-30T00:00:00.000000 |
| certa-2001-avi-010 | Multiples vulnérabilités dans le serveur DNS BIND | 2001-01-30T00:00:00.000000 | 2001-11-30T00:00:00.000000 |
| CERTA-2001-AVI-011 | Vulnérabilités de MySQL 3.23.31 et du module PHP d'apache sous Linux | 2001-01-31T00:00:00.000000 | 2001-01-31T00:00:00.000000 |
| certa-2001-avi-011 | Vulnérabilités de MySQL 3.23.31 et du module PHP d'apache sous Linux | 2001-01-31T00:00:00.000000 | 2001-01-31T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTA-2006-ALE-014 | Vulnérabilités dans Microsoft Word | 2006-12-06T00:00:00.000000 | 2007-02-14T00:00:00.000000 |
| certa-2006-ale-014 | Vulnérabilités dans Microsoft Word | 2006-12-06T00:00:00.000000 | 2007-02-14T00:00:00.000000 |
| CERTA-2007-ALE-001 | Vulnérablité dans Apple Quicktime | 2007-01-04T00:00:00.000000 | 2007-01-24T00:00:00.000000 |
| certa-2007-ale-001 | Vulnérablité dans Apple Quicktime | 2007-01-04T00:00:00.000000 | 2007-01-24T00:00:00.000000 |
| CERTA-2007-ALE-002 | Vulnérabilité dans Windows | 2007-01-12T00:00:00.000000 | 2007-04-03T00:00:00.000000 |
| certa-2007-ale-002 | Vulnérabilité dans Windows | 2007-01-12T00:00:00.000000 | 2007-04-03T00:00:00.000000 |
| CERTA-2007-ALE-003 | Filoutage contre le site voyages-sncf.com | 2007-01-15T00:00:00.000000 | 2007-01-15T00:00:00.000000 |
| certa-2007-ale-003 | Filoutage contre le site voyages-sncf.com | 2007-01-15T00:00:00.000000 | 2007-01-15T00:00:00.000000 |
| CERTA-2007-ALE-004 | Vulnérabilité dans Microsoft Office | 2007-02-03T00:00:00.000000 | 2007-02-13T00:00:00.000000 |
| certa-2007-ale-004 | Vulnérabilité dans Microsoft Office | 2007-02-03T00:00:00.000000 | 2007-02-13T00:00:00.000000 |
| CERTA-2007-ALE-005 | Vulnérabilité de Sun Solaris | 2007-02-12T00:00:00.000000 | 2008-09-18T00:00:00.000000 |
| certa-2007-ale-005 | Vulnérabilité de Sun Solaris | 2007-02-12T00:00:00.000000 | 2008-09-18T00:00:00.000000 |
| CERTA-2007-ALE-006 | Vulnérabilité dans le logiciel Microsoft Word | 2007-02-16T00:00:00.000000 | 2007-05-09T00:00:00.000000 |
| certa-2007-ale-006 | Vulnérabilité dans le logiciel Microsoft Word | 2007-02-16T00:00:00.000000 | 2007-05-09T00:00:00.000000 |
| CERTA-2007-ALE-007 | Vulnérabilité de Microsoft Windows Explorer | 2007-03-09T00:00:00.000000 | 2008-10-09T00:00:00.000000 |
| certa-2007-ale-007 | Vulnérabilité de Microsoft Windows Explorer | 2007-03-09T00:00:00.000000 | 2008-10-09T00:00:00.000000 |
| CERTA-2007-ALE-008 | Vulnérabilité dans Mirosoft Windows | 2007-03-29T00:00:00.000000 | 2007-04-03T00:00:00.000000 |
| certa-2007-ale-008 | Vulnérabilité dans Mirosoft Windows | 2007-03-29T00:00:00.000000 | 2007-04-03T00:00:00.000000 |
| CERTA-2007-ALE-009 | Vulnérabilité dans BrightStor ARCServe Backup | 2007-03-30T00:00:00.000000 | 2007-04-27T00:00:00.000000 |
| certa-2007-ale-009 | Vulnérabilité dans BrightStor ARCServe Backup | 2007-03-30T00:00:00.000000 | 2007-04-27T00:00:00.000000 |
| CERTA-2007-ALE-010 | Vulnérabilité de Microsoft DNS Server | 2007-04-16T00:00:00.000000 | 2007-05-09T00:00:00.000000 |
| certa-2007-ale-010 | Vulnérabilité de Microsoft DNS Server | 2007-04-16T00:00:00.000000 | 2007-05-09T00:00:00.000000 |
| CERTA-2007-ALE-011 | Vulnérabilité du composant d'indexation des serveurs Microsoft IIS | 2007-06-06T00:00:00.000000 | 2013-02-19T00:00:00.000000 |
| CERTA-2007-ALE-012 | Multiples vulnérabilités dans Mozilla Firefox | 2007-06-06T00:00:00.000000 | 2007-07-18T00:00:00.000000 |
| certa-2007-ale-011 | Vulnérabilité du composant d'indexation des serveurs Microsoft IIS | 2007-06-06T00:00:00.000000 | 2013-02-19T00:00:00.000000 |
| certa-2007-ale-012 | Multiples vulnérabilités dans Mozilla Firefox | 2007-06-06T00:00:00.000000 | 2007-07-18T00:00:00.000000 |
| CERTA-2007-ALE-013 | Vulnérabilité dans Mozilla Firefox | 2007-07-27T00:00:00.000000 | 2007-07-31T00:00:00.000000 |
| certa-2007-ale-013 | Vulnérabilité dans Mozilla Firefox | 2007-07-27T00:00:00.000000 | 2007-07-31T00:00:00.000000 |
| CERTA-2007-ALE-014 | Vulnérabilité dans Apple QuickTime | 2007-09-13T00:00:00.000000 | 2007-10-12T00:00:00.000000 |
| certa-2007-ale-014 | Vulnérabilité dans Apple QuickTime | 2007-09-13T00:00:00.000000 | 2007-10-12T00:00:00.000000 |