Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-40103 | N/A | smb: client: Fix refcount leak for cifs_sb_tlink |
Linux |
Linux |
2025-10-30T09:48:08.421Z | 2026-04-18T08:57:06.416Z |
| cve-2025-40016 | N/A | media: uvcvideo: Mark invalid entities with id UVC_INV… |
Linux |
Linux |
2025-10-20T15:29:10.376Z | 2026-04-18T08:57:05.030Z |
| cve-2025-39930 | N/A | ASoC: simple-card-utils: Don't use __free(device_node)… |
Linux |
Linux |
2025-04-18T07:01:38.576Z | 2026-04-18T08:57:03.638Z |
| cve-2025-39764 | N/A | netfilter: ctnetlink: remove refcounting in expectatio… |
Linux |
Linux |
2025-09-11T16:52:32.060Z | 2026-04-18T08:57:02.272Z |
| cve-2025-39748 | N/A | bpf: Forget ranges when refining tnum after JSET |
Linux |
Linux |
2025-09-11T16:52:20.534Z | 2026-04-18T08:57:00.881Z |
| cve-2025-38693 | N/A | media: dvb-frontends: w7090p: fix null-ptr-deref in w7… |
Linux |
Linux |
2025-09-04T15:32:46.726Z | 2026-04-18T08:56:59.497Z |
| cve-2025-38562 | N/A | ksmbd: fix null pointer dereference error in generate_… |
Linux |
Linux |
2025-08-19T17:02:39.450Z | 2026-04-18T08:56:58.171Z |
| cve-2025-38436 | N/A | drm/scheduler: signal scheduled fence when kill job |
Linux |
Linux |
2025-07-25T14:32:09.945Z | 2026-04-18T08:56:56.830Z |
| cve-2025-38006 | N/A | net: mctp: Don't access ifa_index when missing |
Linux |
Linux |
2025-06-18T09:28:17.773Z | 2026-04-18T08:56:55.487Z |
| cve-2025-37778 | N/A | ksmbd: Fix dangling pointer in krb_authenticate |
Linux |
Linux |
2025-05-01T13:07:16.472Z | 2026-04-18T08:56:54.116Z |
| cve-2025-21739 | N/A | scsi: ufs: core: Fix use-after free in init error and … |
Linux |
Linux |
2025-02-27T02:12:14.581Z | 2026-04-18T08:56:52.762Z |
| cve-2024-56584 | N/A | io_uring/tctx: work around xa_store() allocation error issue |
Linux |
Linux |
2024-12-27T14:50:52.735Z | 2026-04-18T08:56:45.522Z |
| cve-2024-56557 | N/A | iio: adc: ad7923: Fix buffer overflow for tx_buf and r… |
Linux |
Linux |
2024-12-27T14:23:03.251Z | 2026-04-18T08:56:39.610Z |
| cve-2024-46715 | N/A | driver: iio: add missing checks on iio_info's callback… |
Linux |
Linux |
2024-09-18T06:32:15.466Z | 2026-04-18T08:56:38.256Z |
| cve-2024-36898 | N/A | gpiolib: cdev: fix uninitialised kfifo |
Linux |
Linux |
2024-05-30T15:29:02.011Z | 2026-04-18T08:56:36.639Z |
| cve-2024-26849 | N/A | netlink: add nla be16/32 types to minlen array |
Linux |
Linux |
2024-04-17T10:14:20.184Z | 2026-04-18T08:56:35.070Z |
| cve-2022-49752 | N/A | device property: fix of node refcount leak in fwnode_g… |
Linux |
Linux |
2025-03-27T16:43:00.584Z | 2026-04-18T08:56:33.591Z |
| cve-2023-6680 | 7.4 (v3.1) | Improper Certificate Validation in GitLab |
GitLab |
GitLab |
2023-12-15T16:02:40.371Z | 2026-04-18T04:06:06.413Z |
| cve-2026-6482 | 8.5 (v4.0) | Local Privilege Escalation via OpenSSL configuration f… |
Rapid7 |
Insight Agent |
2026-04-17T05:19:20.485Z | 2026-04-18T03:55:55.477Z |
| cve-2026-33392 | 7.2 (v3.1) | In JetBrains YouTrack before 2025.3.131383 high p… |
JetBrains |
YouTrack |
2026-04-17T07:46:11.710Z | 2026-04-18T03:55:54.262Z |
| cve-2026-23853 | 8.4 (v3.1) | Dell PowerProtect Data Domain with Data Domain Op… |
Dell |
PowerProtect Data Domain |
2026-04-17T07:16:26.138Z | 2026-04-18T03:55:52.619Z |
| cve-2025-36568 | 7.8 (v3.1) | Dell PowerProtect Data Domain BoostFS for client … |
Dell |
PowerProtect Data Domain BoostFS |
2026-04-17T08:12:17.696Z | 2026-04-18T03:55:51.109Z |
| cve-2026-23778 | 7.2 (v3.1) | Dell PowerProtect Data Domain with Data Domain Op… |
Dell |
PowerProtect Data Domain |
2026-04-17T08:33:21.569Z | 2026-04-18T03:55:49.150Z |
| cve-2026-23779 | 6.7 (v3.1) | Dell PowerProtect Data Domain with Data Domain Op… |
Dell |
PowerProtect Data Domain |
2026-04-17T09:04:37.716Z | 2026-04-18T03:55:45.896Z |
| cve-2026-35153 | 6.7 (v3.1) | Dell PowerProtect Data Domain, versions 7.7.1.0 t… |
Dell |
PowerProtect Data Domain |
2026-04-17T10:38:18.357Z | 2026-04-18T03:55:43.881Z |
| cve-2026-35074 | 6.7 (v3.1) | Dell PowerProtect Data Domain, versions 7.7.1.0 t… |
Dell |
PowerProtect Data Domain |
2026-04-17T10:57:20.150Z | 2026-04-18T03:55:42.483Z |
| cve-2026-35073 | 6.7 (v3.1) | Dell PowerProtect Data Domain, versions 7.7.1.0 t… |
Dell |
PowerProtect Data Domain |
2026-04-17T11:05:38.442Z | 2026-04-18T03:55:40.665Z |
| cve-2026-35072 | 6.7 (v3.1) | Dell PowerProtect Data Domain, versions 7.7.1.0 t… |
Dell |
PowerProtect Data Domain |
2026-04-17T10:48:48.167Z | 2026-04-18T03:55:38.963Z |
| cve-2025-46607 | 6.6 (v3.1) | Dell PowerProtect Data Domain with Data Domain Op… |
Dell |
PowerProtect Data Domain |
2026-04-17T11:13:08.869Z | 2026-04-18T03:55:37.071Z |
| cve-2025-46641 | 6.6 (v3.1) | Dell PowerProtect Data Domain with Data Domain Op… |
Dell |
PowerProtect Data Domain |
2026-04-17T11:19:52.871Z | 2026-04-18T03:55:34.970Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2017-000133 | Source code security studying tool iCodeChecker vulnerable to cross-site scripting | 2017-06-13T14:50+09:00 | 2018-02-14T13:48+09:00 |
| jvndb-2017-005208 | gSOAP vulnerable to stack-based buffer overflow | 2017-07-21T13:39+09:00 | 2018-02-14T13:44+09:00 |
| jvndb-2017-000202 | Multiple vulnerabilities in Cybozu Garoon | 2017-08-21T14:30+09:00 | 2018-02-14T12:25+09:00 |
| jvndb-2017-000192 | WCR-1166DS vulnerable to OS command injection | 2017-08-08T18:06+09:00 | 2018-02-14T12:21+09:00 |
| jvndb-2017-000199 | Installer of Shin Kikan Toukei Houkoku Data Nyuryokuyou Program may insecurely load Dynamic Link Libraries | 2017-08-17T17:29+09:00 | 2018-02-14T12:19+09:00 |
| jvndb-2017-000198 | Installer and self-extracting archive containing the installer of TDB CA TypeA use software may insecurely load Dynamic Link Libraries | 2017-08-18T13:41+09:00 | 2018-02-14T12:16+09:00 |
| jvndb-2017-000191 | Installer of Qua station connection tool for Windows may insecurely load Dynamic Link Libraries | 2017-08-08T15:35+09:00 | 2018-02-14T12:14+09:00 |
| jvndb-2017-000154 | Teikihoukokusho Sakuseishien Tool may insecurely load Dynamic Link Libraries | 2017-08-17T15:31+09:00 | 2018-02-14T12:11+09:00 |
| jvndb-2017-000159 | WordPress plugin "Responsive Lightbox" vulnerable to cross-site scripting | 2017-07-04T14:02+09:00 | 2018-02-14T12:10+09:00 |
| jvndb-2017-000151 | Cross-site request forgery vulnerability in Toshiba Lighting & Technology Corporation Home gateway | 2017-06-28T10:28+09:00 | 2018-02-14T12:10+09:00 |
| jvndb-2017-000150 | OS command injection vulnerability in Toshiba Lighting & Technology Corporation Home gateway | 2017-06-28T10:28+09:00 | 2018-02-14T12:10+09:00 |
| jvndb-2017-000149 | Hard-coded credentials vulnerability in Toshiba Lighting & Technology Corporation Home gateway | 2017-06-28T10:23+09:00 | 2018-02-14T12:10+09:00 |
| jvndb-2017-000148 | Improper access control vulnerability in Toshiba Lighting & Technology Corporation Home gateway | 2017-06-28T10:23+09:00 | 2018-02-14T12:10+09:00 |
| jvndb-2017-000147 | Non-documented developer's screen in Toshiba Lighting & Technology Corporation Home gateway | 2017-06-28T10:28+09:00 | 2018-02-14T12:10+09:00 |
| jvndb-2017-000141 | Multiple I-O DATA network camera products vulnerable to cross-site request forgery | 2017-06-20T13:59+09:00 | 2018-02-14T12:10+09:00 |
| jvndb-2017-000140 | WordPress plugin "Event Calendar WD" vulnerable to cross-site scripting | 2017-06-20T13:58+09:00 | 2018-02-14T12:10+09:00 |
| jvndb-2017-000201 | Installer of Shin Kinkyuji Houkoku Data Nyuryoku Program may insecurely load Dynamic Link Libraries | 2017-08-17T17:29+09:00 | 2018-02-14T12:08+09:00 |
| jvndb-2017-000200 | Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program may insecurely load Dynamic Link Libraries | 2017-08-17T17:29+09:00 | 2018-02-14T12:05+09:00 |
| jvndb-2017-000176 | SONY Portable Wireless Server WG-C10 fails to restrict access permissions | 2017-07-19T15:07+09:00 | 2018-02-14T12:02+09:00 |
| jvndb-2017-000138 | HOME SPOT CUBE2 vulnerable to improper authentication in WebUI | 2017-06-21T13:45+09:00 | 2018-02-14T11:59+09:00 |
| jvndb-2017-000137 | HOME SPOT CUBE2 vulnerable to OS command injection in WebUI | 2017-06-21T13:45+09:00 | 2018-02-14T11:59+09:00 |
| jvndb-2017-000136 | HOME SPOT CUBE2 vulnerable to buffer overflow in WebUI | 2017-06-21T13:44+09:00 | 2018-02-14T11:59+09:00 |
| jvndb-2017-000182 | WordPress plugin "Simple Custom CSS and JS" vulnerable to cross-site scripting | 2017-07-24T13:52+09:00 | 2018-02-14T11:58+09:00 |
| jvndb-2017-000117 | Installer of CASL II simulator(self-extract format) may insecurely load Dynamic Link Libraries | 2017-06-09T13:49+09:00 | 2018-02-14T11:58+09:00 |
| jvndb-2017-000116 | Installer of QuickTime for Windows may insecurely load Dynamic Link Libraries | 2017-06-13T13:51+09:00 | 2018-02-14T11:58+09:00 |
| jvndb-2017-000156 | Cybozu Garoon vulnerable to session fixation | 2017-07-03T15:22+09:00 | 2018-02-14T11:54+09:00 |
| jvndb-2017-000155 | Cybozu Garoon fails to restrict access permission | 2017-07-03T15:22+09:00 | 2018-02-14T11:54+09:00 |
| jvndb-2017-000135 | HOME SPOT CUBE2 vulnerable to OS command injection in clock settings | 2017-06-21T13:44+09:00 | 2018-02-14T11:54+09:00 |
| jvndb-2011-000020 | IBM Tivoli vulnerable to denial-of-service (DoS) | 2011-03-10T16:38+09:00 | 2018-02-07T17:10+09:00 |
| jvndb-2011-000018 | IBM Lotus vulnerable to denial-of-service (DoS) | 2011-03-04T19:28+09:00 | 2018-02-07T17:10+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0164 | Multiples vulnérabilités dans GitLab | 2025-02-27T00:00:00.000000 | 2025-02-27T00:00:00.000000 |
| certfr-2025-avi-0163 | Vulnérabilité dans les commutateurs Cisco Nexus | 2025-02-27T00:00:00.000000 | 2025-02-27T00:00:00.000000 |
| certfr-2025-avi-0162 | Multiples vulnérabilités dans GLPI | 2025-02-26T00:00:00.000000 | 2025-02-26T00:00:00.000000 |
| certfr-2025-avi-0161 | Vulnérabilité dans LibreOffice | 2025-02-26T00:00:00.000000 | 2025-02-26T00:00:00.000000 |
| certfr-2025-avi-0160 | Vulnérabilité dans Google Chrome | 2025-02-26T00:00:00.000000 | 2025-02-26T00:00:00.000000 |
| certfr-2025-avi-0159 | Vulnérabilité dans Progress Telerik Reporting | 2025-02-25T00:00:00.000000 | 2025-02-25T00:00:00.000000 |
| certfr-2025-avi-0158 | Multiples vulnérabilités dans les produits NetApp | 2025-02-24T00:00:00.000000 | 2025-02-24T00:00:00.000000 |
| certfr-2025-avi-0157 | Vulnérabilité dans Exim | 2025-02-24T00:00:00.000000 | 2025-02-24T00:00:00.000000 |
| certfr-2025-avi-0156 | Multiples vulnérabilités dans Microsoft Edge | 2025-02-24T00:00:00.000000 | 2025-02-24T00:00:00.000000 |
| certfr-2025-avi-0155 | Vulnérabilité dans les produits Moxa | 2025-02-24T00:00:00.000000 | 2025-02-24T00:00:00.000000 |
| certfr-2025-avi-0154 | Multiples vulnérabilités dans les produits IBM | 2025-02-21T00:00:00.000000 | 2025-02-21T00:00:00.000000 |
| certfr-2025-avi-0153 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-02-21T00:00:00.000000 | 2025-02-21T00:00:00.000000 |
| certfr-2025-avi-0152 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-02-21T00:00:00.000000 | 2025-02-21T00:00:00.000000 |
| certfr-2025-avi-0151 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-02-21T00:00:00.000000 | 2025-02-21T00:00:00.000000 |
| certfr-2025-avi-0150 | Multiples vulnérabilités dans Tenable Identity Exposure | 2025-02-21T00:00:00.000000 | 2025-02-21T00:00:00.000000 |
| certfr-2025-avi-0149 | Multiples vulnérabilités dans Drupal | 2025-02-20T00:00:00.000000 | 2025-02-20T00:00:00.000000 |
| certfr-2025-avi-0148 | Vulnérabilité dans Microsoft Power Pages | 2025-02-20T00:00:00.000000 | 2025-02-20T00:00:00.000000 |
| certfr-2025-avi-0147 | Vulnérabilité dans les produits Moxa | 2025-02-20T00:00:00.000000 | 2025-02-20T00:00:00.000000 |
| certfr-2025-avi-0146 | Vulnérabilité dans Symantec Diagnostic Tool | 2025-02-20T00:00:00.000000 | 2025-02-20T00:00:00.000000 |
| certfr-2025-avi-0145 | Vulnérabilité dans Wireshark | 2025-02-20T00:00:00.000000 | 2025-02-20T00:00:00.000000 |
| certfr-2025-avi-0144 | Multiples vulnérabilités dans les produits Atlassian | 2025-02-19T00:00:00.000000 | 2025-02-19T00:00:00.000000 |
| certfr-2025-avi-0143 | Multiples vulnérabilités dans Google Chrome | 2025-02-19T00:00:00.000000 | 2025-02-19T00:00:00.000000 |
| certfr-2025-avi-0142 | Multiples vulnérabilités dans les produits Citrix | 2025-02-19T00:00:00.000000 | 2025-02-19T00:00:00.000000 |
| certfr-2025-avi-0141 | Vulnérabilité dans Joomla! | 2025-02-19T00:00:00.000000 | 2025-02-19T00:00:00.000000 |
| certfr-2025-avi-0140 | Vulnérabilité dans Mozilla Firefox | 2025-02-19T00:00:00.000000 | 2025-02-19T00:00:00.000000 |
| certfr-2025-avi-0139 | Multiples vulnérabilités dans OpenSSH | 2025-02-18T00:00:00.000000 | 2025-02-18T00:00:00.000000 |
| certfr-2025-avi-0138 | Multiples vulnérabilités dans Moodle | 2025-02-18T00:00:00.000000 | 2025-02-18T00:00:00.000000 |
| certfr-2025-avi-0137 | Multiples vulnérabilités dans Microsoft Edge | 2025-02-17T00:00:00.000000 | 2025-02-17T00:00:00.000000 |
| certfr-2025-avi-0136 | Multiples vulnérabilités dans Synology Active Backup for Business | 2025-02-17T00:00:00.000000 | 2025-02-17T00:00:00.000000 |
| certfr-2025-avi-0129 | Multiples vulnérabilités dans OpenSSL | 2025-02-13T00:00:00.000000 | 2025-02-17T00:00:00.000000 |