Ooo-red-soft
8,346 CVEs tracked since 2015. Since Feb 2021, 57 of them reached CISA KEV.
Ooo-red-soft CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2021-02 | 27 | 0 |
| 2021-03 | null or fewer | |
| 2021-04 | 22 | 0 |
| 2021-05 | 55 | 0 |
| 2021-06 | 38 | 0 |
| 2021-07 | 27 | 1 |
| 2021-08 | 28 | 0 |
| 2021-09 | 9 | 0 |
| 2021-10 | 28 | 0 |
| 2021-11 | 36 | 0 |
| 2021-12 | 41 | 2 |
| 2022-01 | 53 | 1 |
| 2022-02 | 53 | 2 |
| 2022-03 | 64 | 2 |
| 2022-04 | 72 | 0 |
| 2022-05 | 68 | 1 |
| 2022-06 | 48 | 0 |
| 2022-07 | 62 | 0 |
| 2022-08 | 60 | 0 |
| 2022-09 | 83 | 1 |
| 2022-10 | 53 | 0 |
| 2022-11 | 67 | 1 |
| 2022-12 | 122 | 2 |
| 2023-01 | 58 | 1 |
| 2023-02 | 72 | 0 |
| 2023-03 | null or fewer | |
| 2023-04 | 54 | 0 |
| 2023-05 | 92 | 1 |
| 2023-06 | 86 | 0 |
| 2023-07 | 76 | 0 |
| 2023-08 | 96 | 0 |
| 2023-09 | 100 | 3 |
| 2023-10 | 116 | 3 |
| 2023-11 | 130 | 1 |
| 2023-12 | 106 | 1 |
| 2024-01 | 143 | 4 |
| 2024-02 | 205 | 0 |
| 2024-03 | 178 | 0 |
| 2024-04 | 333 | 0 |
| 2024-05 | 743 | 4 |
| 2024-06 | 286 | 2 |
| 2024-07 | 410 | 0 |
| 2024-08 | 338 | 3 |
| 2024-09 | 223 | 0 |
| 2024-10 | 302 | 1 |
| 2024-11 | 246 | 1 |
| 2024-12 | 256 | 3 |
| 2025-01 | 195 | 1 |
| 2025-02 | 157 | 0 |
| 2025-03 | 202 | 2 |
| 2025-04 | 239 | 1 |
| 2025-05 | 288 | 0 |
| 2025-06 | 154 | 4 |
| 2025-07 | 395 | 3 |
| 2025-08 | 238 | 0 |
| 2025-09 | 133 | 2 |
| 2025-10 | 100 | 0 |
| 2025-11 | 114 | 1 |
| 2025-12 | 86 | 2 |
| 2026-01 | 66 | 0 |
| 2026-02 | 48 | 0 |
| 2026-03 | null or fewer | |
| 2026-04 | null or fewer | |
| 2026-05 | 28 | 0 |
Products
The products that kept showing up in Ooo-red-soft's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Ooo-red-soft.
- BDU:2026-08412Уязвимость параметра cli_history инструмента командной строки для взаимодействия с сервисами Amazon Web Services AWS CLI, позволяющая нарушителю вызвать отказ в обслуживании5.9
- CVE-2024-21944Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root o...5.3
- CVE-2026-46520ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions7.5
- CVE-2026-45664ImageMagick: Policy Bypass in MNG coder could5.3
- BDU:2026-07974Уязвимость функционала форматирования модуля парсера SQL для Python Sqlparse, позволяющая нарушителю вызвать отказ в обслуживании5.3
- CVE-2026-46243smb: client: reject userspace cifs.spnego descriptions7.1
- CVE-2026-44881Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update9.9
- CVE-2026-44848Portainer: Missing authorization on Docker plugin endpoints allows host RCE8.8
- CVE-2026-44849Portainer: Endpoint security bypass via Swarm service create/update8.8
- CVE-2026-44850Portainer: Bind-mount restriction bypass via HostConfig.Mounts8.5
- CVE-2026-44882Portainer: Kubernetes middleware continues after token validation failure, bypassing endpoint authorization8.1
- BDU:2026-07378Уязвимость функции skb_gro_receive() ядра операционных систем Linux, позволяющая нарушителю, позволяющая нарушителю получить root-привилегии7.8
- CVE-2026-46300net: skbuff: preserve shared-frag marker during coalescing7.8
- CVE-2026-9256NGINX ngx_http_rewrite_module vulnerability8.1
- CVE-2026-46333ptrace: slightly saner 'get_dumpable()' logic7.1
The record
- Peak rank
- #2 in Aug 2025
- Busiest month shown
- May 2024, 743 CVEs
- Months with a KEV entry
- 30 since Feb 2021
- Monthly snapshots
- 85 since 2015