Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

11,999 record changes · 5,026 advisory changes · newest first · grouped by dayCSV JSON RSS

SinceKindVendorSort

Counted changes, newest first, one line per change to a CVE record or a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Record or advisory, Which record was edited: a CVE id where the change was to the CVE catalog or the CISA KEV list, a GHSA id where it was to a GitHub advisory. The two are different units and are never counted together.	Vendor or package, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Mon 11 Sep 2023· 10 advisory changes
2023-09-11published 2019-02-07	Advisory severity changed	GHSA-649c-x44h-4q7vCVE-2018-16480	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	not dated
2023-09-11published 2019-09-11	Advisory severity changed	GHSA-xf27-jqwv-gf3rCVE-2019-5479	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
2023-09-11published 2018-09-17	Advisory severity changed	GHSA-cfhg-9x44-78h2CVE-2018-16460	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	not dated
2023-09-11published 2022-02-09	Advisory severity changed	GHSA-926x-m6m5-3mmpCVE-2019-10803	whole advisorycritical	stated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	not dated
2023-09-11published 2020-09-01	Advisory severity changed	GHSA-2r7f-4h2c-5x73CVE-2016-1000249	whole advisoryhigh	stated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
2023-09-11published 2021-01-19	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	not dated
2023-09-11published 2021-01-19	same kind of change as the line above	GHSA-vfxj-qg93-7wwcCVE-2018-10189	same package and registry as the line abovehigh	same change as the line above	not dated
2023-09-11published 2021-01-19	same kind of change as the line above	GHSA-6x98-fx9j-7c78CVE-2017-1000489	same package and registry as the line abovehigh	same change as the line above	not dated
2023-09-11published 2021-01-19	Advisory severity changed	GHSA-5w74-jx7m-x6hvCVE-2018-8071	whole advisorymoderate	stated at publication LOW, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	not dated
2023-09-11published 2021-01-19	Advisory severity changed	GHSA-xcf7-cj8q-pcjmCVE-2018-11198	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	not dated
2023-09-11published 2021-01-19	Advisory severity changed	GHSA-qpgw-2c72-4c89CVE-2017-1000490	whole advisorymoderate	stated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	not dated
Sat 9 Sep 2023· 1 advisory change
2023-09-09published 2018-08-06	Advisory severity changed	GHSA-fv9m-f7w4-889cCVE-2017-16207	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
Fri 8 Sep 2023· 1 record change · 13 advisory changes
2023-09-08	CVSS base score changed	CVE-2023-3572	whole record CERTVDE	stated at publication 9.9, now states 10.0CVSS v3.1 · base scoreCriticalCritical	Days to revision 31
2023-09-08published 2019-11-12	Package added to advisory	GHSA-g996-q5r8-w7g2CVE-2019-10909	packagist moderate	not named as affected when the advisory was published, now names drupal/core	not dated
2023-09-08published 2018-08-09 to 2018-10-09	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: LOW → MODERATEHide the 2 advisories in this change: Advisory severity changed: LOW → MODERATE	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	not dated
2023-09-08published 2018-08-09	same kind of change as the line above	GHSA-8225-6cvr-8pqpCVE-2017-16129	same package and registry as the line abovemoderate	same change as the line above	not dated
2023-09-08published 2018-10-09	same kind of change as the line above	GHSA-6g33-f262-xjp4CVE-2017-16028	same package and registry as the line abovemoderate	same change as the line above	not dated
2023-09-08published 2018-11-01	Advisory severity changed	GHSA-rwg6-3fmj-w4wxCVE-2017-16061	whole advisoryhigh	stated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
2023-09-08published 2018-11-09	Advisory severity changed	GHSA-q257-vv4p-fg92CVE-2017-16005	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
2023-09-08published 2018-07-23 to 2018-08-29	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
2023-09-08published 2018-08-29	same kind of change as the line above	GHSA-j866-8vxx-27hxCVE-2017-16072	same package and registry as the line abovehigh	same change as the line above	not dated
2023-09-08published 2018-07-23	same kind of change as the line above	GHSA-8qp3-pvwc-2g4pCVE-2017-16054	same package and registry as the line abovehigh	same change as the line above	not dated
2023-09-08published 2019-02-18	Advisory severity changed	GHSA-m8pw-h8qj-rgj9CVE-2016-10673	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
2023-09-08published 2023-09-07	Advisory severity changed	GHSA-w8vq-3hf9-xppxCVE-2023-41317	whole advisorymoderate	stated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 1
2023-09-08published 2018-09-18	Advisory severity changed	GHSA-4wch-fwmx-cf47CVE-2017-0930	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	not dated
2023-09-08published 2020-06-05	Advisory severity changed	GHSA-v8v8-6859-qxm4CVE-2020-8149	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	not dated
2023-09-08published 2017-11-15	Advisory severity changed	GHSA-mw35-24gh-f82wCVE-2017-7474	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	not dated
2023-09-08published 2023-09-04	Advisory severity changed	GHSA-4hg4-9mf5-wxxqCVE-2023-41052	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Days to revision 4
Thu 7 Sep 2023· 34 advisory changes
2023-09-07published 2020-06-15	Package added to advisory	GHSA-mvr2-9pj6-7w5jShow all 5 packages in this change: Package added to advisory: 5 packages named as affected in GHSA-mvr2-9pj6-7w5jHide the 5 packages in this change: Package added to advisory: 5 packages named as affected in GHSA-mvr2-9pj6-7w5j	maven moderate	not named as affected when the advisory was published, now names com.google.guava:guava-jdk5 and 4 more	not dated
2023-09-07published 2020-06-15	same kind of change as the line above	GHSA-mvr2-9pj6-7w5jCVE-2018-10237	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names com.google.guava:guava-jdk5	not dated
2023-09-07published 2020-06-15	same kind of change as the line above	GHSA-mvr2-9pj6-7w5jCVE-2018-10237	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names com.googlecode.guava-osgi:guava-osgi	not dated
2023-09-07published 2020-06-15	same kind of change as the line above	GHSA-mvr2-9pj6-7w5jCVE-2018-10237	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names de.mhus.ports:vaadin-shared-deps	not dated
2023-09-07published 2020-06-15	same kind of change as the line above	GHSA-mvr2-9pj6-7w5jCVE-2018-10237	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names org.hudsonci.lib.guava:guava	not dated
2023-09-07published 2020-06-15	same kind of change as the line above	GHSA-mvr2-9pj6-7w5jCVE-2018-10237	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names org.sonatype.sisu:sisu-guava	not dated
2023-09-07published 2018-11-06	Advisory severity changed	GHSA-23xp-j737-282vCVE-2018-16473	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	not dated
2023-09-07published 2018-07-18 to 2018-11-09	Advisory severity changed	Show all 12 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 12 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
2023-09-07published 2018-11-09	same kind of change as the line above	GHSA-3p8f-j2vw-7hw9CVE-2017-16059	same package and registry as the line abovehigh	same change as the line above	not dated
2023-09-07published 2018-10-10	same kind of change as the line above	GHSA-j68r-23hj-xf9cCVE-2017-16064	same package and registry as the line abovehigh	same change as the line above	not dated
2023-09-07published 2018-10-09	same kind of change as the line above	GHSA-cqjg-whmm-8gv6CVE-2017-16013	same package and registry as the line abovehigh	same change as the line above	not dated
2023-09-07published 2018-08-29	same kind of change as the line above	GHSA-xh56-3f5w-9h25CVE-2017-16071	same package and registry as the line abovehigh	same change as the line above	not dated
2023-09-07published 2018-07-23	same kind of change as the line above	GHSA-22j5-38qv-pxx7CVE-2017-16051	same package and registry as the line abovehigh	same change as the line above	not dated
2023-09-07published 2018-09-17	same kind of change as the line above	GHSA-5cv7-r488-wc5xCVE-2017-16073	same package and registry as the line abovehigh	same change as the line above	not dated
2023-09-07published 2018-08-29	same kind of change as the line above	GHSA-3wxq-7r8m-qpmgCVE-2017-16068	same package and registry as the line abovehigh	same change as the line above	not dated
2023-09-07published 2018-08-29	same kind of change as the line above	GHSA-5hxw-r847-qfwpCVE-2017-16066	same package and registry as the line abovehigh	same change as the line above	not dated
4 more rows in this change are not listed here. Open all 12 rows →
2023-09-07published 2018-08-29	Advisory severity changed	GHSA-22gq-x6pg-752jCVE-2017-16065	whole advisoryhigh	stated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
2023-09-07published 2019-02-18	Advisory severity changed	GHSA-vfvf-mqq8-rwqcCVE-2016-10531	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	not dated
2023-09-07published 2020-09-01	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → CRITICALHide the 2 advisories in this change: Advisory severity changed: MODERATE → CRITICAL	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	not dated
2023-09-07published 2020-09-01	same kind of change as the line above	GHSA-cwcp-6c48-fm7mCVE-2017-16020	same package and registry as the line abovecritical	same change as the line above	not dated
2023-09-07published 2020-09-01	same kind of change as the line above	GHSA-428f-mh7w-6w2xCVE-2017-16127	same package and registry as the line abovecritical	same change as the line above	not dated
2023-09-07published 2023-08-31 to 2023-09-01	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 6 to 8
2023-09-07published 2023-09-01	same kind of change as the line above	GHSA-94w5-rf69-2h6cCVE-2023-39685	same package and registry as the line abovehigh	same change as the line above	Days to revision 6
2023-09-07published 2023-08-31	same kind of change as the line above	GHSA-9v85-q87q-g4vgCVE-2023-39139	same package and registry as the line abovehigh	same change as the line above	Days to revision 8
2023-09-07published 2018-07-26 to 2018-11-01	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: LOW → HIGHHide the 2 advisories in this change: Advisory severity changed: LOW → HIGH	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
2023-09-07published 2018-11-01	same kind of change as the line above	GHSA-f9cm-qmx5-m98hCVE-2018-16469	same package and registry as the line abovehigh	same change as the line above	not dated
2023-09-07published 2018-07-26	same kind of change as the line above	GHSA-9g9w-hmvj-5h57CVE-2018-3722	same package and registry as the line abovehigh	same change as the line above	not dated
2023-09-07published 2023-08-31	Advisory severity changed	GHSA-r285-q736-9v95CVE-2023-39137	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 8
2023-09-07published 2022-09-16	Advisory severity changed	GHSA-7f3x-2wcx-hww8CVE-2022-37260	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
2023-09-07published 2021-12-10	Advisory severity changed	GHSA-792j-9wj3-j634CVE-2021-44684	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	not dated
2023-09-07published 2019-02-07	Advisory severity changed	GHSA-675m-85rw-j3w4CVE-2018-16489	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	not dated
2023-09-07published 2019-02-07	Advisory severity changed	GHSA-h466-j336-74wxCVE-2018-16490	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
2023-09-07published 2021-02-10	Advisory severity changed	GHSA-7ggw-h8pp-r95rCVE-2021-3311	whole advisorycritical	stated at publication LOW, now states CRITICALNo CVSS vector was stated in the first observed version.	not dated
2023-09-07published 2022-12-13	Advisory severity changed	GHSA-3w37-5p3p-jv92CVE-2022-46363	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 268
2023-09-07published 2021-05-06	Advisory severity changed	GHSA-36fm-v9wv-56jfCVE-2020-10596	whole advisorymoderate	stated at publication LOW, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	not dated
Wed 6 Sep 2023· 1 record change · 5 advisory changes
2023-09-06	CVSS base score changed	CVE-2023-41040	whole record GitHub_M	stated at publication 5.3, now states 4.0CVSS v3.1 · base scoreMediumMedium	Days to revision 7
2023-09-06published 2018-07-20	Advisory severity changed	GHSA-rvj9-8cvx-3vq9CVE-2017-16007	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	not dated
2023-09-06published 2023-08-31	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 7
2023-09-06published 2023-08-31	same kind of change as the line above	GHSA-g454-wj9r-jpg4CVE-2023-39135	same package and registry as the line abovehigh	same change as the line above	Days to revision 7
2023-09-06published 2023-08-31	same kind of change as the line above	GHSA-c2cc-3569-6jh2CVE-2023-39138	same package and registry as the line abovehigh	same change as the line above	Days to revision 7
2023-09-06published 2023-09-01	Advisory severity changed	GHSA-f73w-4m7g-ch9xCVE-2023-39631	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Days to revision 5
2023-09-06published 2023-08-08	Advisory severity changed	GHSA-rg2c-cfxv-qp6fCVE-2023-3894	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 29
Tue 5 Sep 2023· 2 record changes · 13 advisory changes
2023-09-05	Product added	CVE-2023-4004	red hat	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 36
2023-09-05	Record state changed	CVE-2023-32086	whole record Pega	stated at publication PUBLISHED, now states REJECTED	Days to revision 0
2023-09-05published 2021-09-23	Package added to advisory	GHSA-3j6g-hxx5-3q26Show all 4 packages in this change: Package added to advisory: 4 packages named as affected in GHSA-3j6g-hxx5-3q26Hide the 4 packages in this change: Package added to advisory: 4 packages named as affected in GHSA-3j6g-hxx5-3q26	maven moderate	not named as affected when the advisory was published, now names org.apache.kafka:kafka-clients and 3 more	not dated
2023-09-05published 2021-09-23	same kind of change as the line above	GHSA-3j6g-hxx5-3q26CVE-2021-38153	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names org.apache.kafka:kafka-clients	not dated
2023-09-05published 2021-09-23	same kind of change as the line above	GHSA-3j6g-hxx5-3q26CVE-2021-38153	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names org.apache.kafka:kafka_2.11	not dated
2023-09-05published 2021-09-23	same kind of change as the line above	GHSA-3j6g-hxx5-3q26CVE-2021-38153	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names org.apache.kafka:kafka_2.12	not dated
2023-09-05published 2021-09-23	same kind of change as the line above	GHSA-3j6g-hxx5-3q26CVE-2021-38153	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names org.apache.kafka:kafka_2.13	not dated
2023-09-05published 2022-01-06	Package added to advisory	GHSA-2h63-qp69-fwvwCVE-2020-11987	maven high	not named as affected when the advisory was published, now names org.apache.xmlgraphics:batik-svgbrowser	not dated
2023-09-05published 2023-07-05	Package added to advisory	GHSA-hr8g-6v94-x4m9Show all 3 packages in this change: Package added to advisory: 3 packages named as affected in GHSA-hr8g-6v94-x4m9Hide the 3 packages in this change: Package added to advisory: 3 packages named as affected in GHSA-hr8g-6v94-x4m9	maven moderate	not named as affected when the advisory was published, now names org.bouncycastle:bcprov-debug-jdk15on and 2 more	Days to revision 63
2023-09-05published 2023-07-05	same kind of change as the line above	GHSA-hr8g-6v94-x4m9CVE-2023-33201	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names org.bouncycastle:bcprov-debug-jdk15on	Days to revision 63
2023-09-05published 2023-07-05	same kind of change as the line above	GHSA-hr8g-6v94-x4m9CVE-2023-33201	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names org.bouncycastle:bcprov-ext-jdk15on	Days to revision 63
2023-09-05published 2023-07-05	same kind of change as the line above	GHSA-hr8g-6v94-x4m9CVE-2023-33201	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names org.bouncycastle:bcprov-jdk15on	Days to revision 63
2023-09-05published 2019-04-10	Package added to advisory	GHSA-f6f2-pwrj-64h3CVE-2019-10868	pypi high	not named as affected when the advisory was published, now names trytond	not dated
2023-09-05published 2019-04-26	Package added to advisory	GHSA-6c3j-c64m-qhgqCVE-2019-11358	pypi moderate	not named as affected when the advisory was published, now names django	not dated
2023-09-05published 2021-09-01	Advisory severity changed	GHSA-h97f-5258-5593CVE-2021-38384	whole advisorycritical	stated at publication MODERATE, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	not dated
2023-09-05published 2022-02-09	Advisory severity changed	GHSA-mqgv-67vx-g4m5CVE-2020-28442	whole advisorycritical	stated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	not dated
2023-09-05published 2021-12-10	Advisory severity changed	GHSA-hg2p-2cvq-4ppvCVE-2020-7642	whole advisorymoderate	stated at publication LOW, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	not dated
Mon 4 Sep 2023· 2 advisory changes
2023-09-04published 2022-01-12	Advisory severity changed	GHSA-pw3c-h7wp-cvhxCVE-2022-22815	whole advisorymoderate	stated at publication CRITICAL, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	not dated
2023-09-04published 2021-03-18	Advisory severity changed	GHSA-hf64-x4gq-p99hCVE-2020-35655	whole advisorymoderate	stated at publication HIGH, now states MODERATEA CVSS version was added; the existing vectors stayed the same.	not dated
Fri 1 Sep 2023· 9 advisory changes
2023-09-01published 2019-01-04	Advisory severity changed	GHSA-38rv-5jqc-m2cvCVE-2017-0906	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	not dated
2023-09-01published 2023-08-21 to 2023-08-28	Advisory severity changed	Show all 4 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 4 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 4 to 11
2023-09-01published 2023-08-22	same kind of change as the line above	GHSA-j55r-787p-m549CVE-2023-40185	same package and registry as the line abovehigh	same change as the line above	Days to revision 10
2023-09-01published 2023-08-28	same kind of change as the line above	GHSA-8q28-pw9g-w82cCVE-2023-40195	same package and registry as the line abovehigh	same change as the line above	Days to revision 4
2023-09-01published 2023-08-28	same kind of change as the line above	GHSA-g3m9-pr5m-4cvpCVE-2023-27604	same package and registry as the line abovehigh	same change as the line above	Days to revision 4
2023-09-01published 2023-08-21	same kind of change as the line above	GHSA-v6c8-pwhq-288mCVE-2023-39106	same package and registry as the line abovehigh	same change as the line above	Days to revision 11
2023-09-01published 2023-08-23	Advisory severity changed	GHSA-4f8m-7h83-9f6mCVE-2023-40572	whole advisoryhigh	stated at publication CRITICAL, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 9
2023-09-01published 2023-08-23	Advisory severity changed	GHSA-v86x-5fm3-5p7jCVE-2023-40577	whole advisorymoderate	stated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 9
2023-09-01published 2023-04-25	Advisory severity changed	GHSA-xv83-x443-7rmwCVE-2023-30609	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 129
2023-09-01published 2023-08-29	Advisory severity changed	GHSA-mhp6-jvpx-2p4mCVE-2023-40889	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Days to revision 2
Thu 31 Aug 2023· 2 record changes · 9 advisory changes
2023-08-31	Fix version moved	CVE-2023-41743	acronisacronis cyber protect home office	stated at publication 40173, now states 40278Release branch starts at 0.same day	Days to revision 0
2023-08-31	Record state changed	CVE-2023-36119	whole record mitre	stated at publication PUBLISHED, now states REJECTED	not dated
2023-08-31published 2021-04-20	Advisory severity changed	GHSA-893h-35v4-mxqxCVE-2020-1737	whole advisoryhigh	stated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.	not dated
2023-08-31published 2023-08-22 to 2023-08-24	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: LOW → MODERATEHide the 2 advisories in this change: Advisory severity changed: LOW → MODERATE	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Days to revision 7 to 8
2023-08-31published 2023-08-24	same kind of change as the line above	GHSA-3x59-vrmc-5mx6CVE-2023-41167	same package and registry as the line abovemoderate	same change as the line above	Days to revision 7
2023-08-31published 2023-08-22	same kind of change as the line above	GHSA-5pv6-rprw-82wvCVE-2022-45582	same package and registry as the line abovemoderate	same change as the line above	Days to revision 8
2023-08-31published 2023-08-25	Advisory severity changed	GHSA-q3mw-pvr8-9ggcCVE-2023-41080	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Days to revision 6
2023-08-31published 2023-08-21 to 2023-08-22	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 9 to 10
2023-08-31published 2023-08-21	same kind of change as the line above	GHSA-2jc4-r94c-rp7hCVE-2022-46751	same package and registry as the line abovehigh	same change as the line above	Days to revision 10
2023-08-31published 2023-08-22	same kind of change as the line above	GHSA-65rp-cv85-263xCVE-2022-34038	same package and registry as the line abovehigh	same change as the line above	Days to revision 9
2023-08-31published 2023-07-06	Advisory severity changed	GHSA-g96c-x7rh-99r3CVE-2023-41045	whole advisorylow	stated at publication MODERATE, now states LOWNo CVSS vector was stated in the first observed version.	Days to revision 56
2023-08-31published 2021-01-13	Advisory severity changed	GHSA-jxwx-85vp-gvwmCVE-2021-21252	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
2023-08-31published 2023-08-23	Advisory severity changed	GHSA-c8xw-vjgf-94hrCVE-2023-40025	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 7
Wed 30 Aug 2023· 3 record changes · 8 advisory changes
2023-08-30	Product added	CVE-2023-32712	splunk	not named as affected at publication, now names universal forwarder	Days to revision 90
2023-08-30	Product added	CVE-2023-23355	qnap systems inc. qnap	not named as affected at publication, now names qutscloud	Days to revision 154
2023-08-30	Record state changed	CVE-2023-39552	whole record mitre	stated at publication PUBLISHED, now states REJECTED	Days to revision 26
2023-08-30published 2022-11-15	Package added to advisory	GHSA-prjq-f4q3-fvfrCVE-2020-7731	go high	not named as affected when the advisory was published, now names github.com/russellhaering/goxmldsig	not dated
2023-08-30published 2021-04-07	Advisory severity changed	GHSA-fjq3-5pxw-4wj4CVE-2020-7965	whole advisoryhigh	stated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.	not dated
2023-08-30published 2021-05-06	Advisory severity changed	GHSA-3vcg-8p79-jpcvCVE-2020-10799	whole advisorycritical	stated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.	not dated
2023-08-30published 2021-05-21	Advisory severity changed	GHSA-j756-f273-xhp4	whole advisoryhigh	stated at publication CRITICAL, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	not dated
2023-08-30published 2021-05-21	Advisory severity changed	GHSA-hmm9-r2m2-qg9w	whole advisoryhigh	stated at publication LOW, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	not dated
2023-08-30published 2022-02-11	Advisory severity changed	GHSA-h2x7-2ff6-v32pCVE-2022-2583	whole advisorylow	stated at publication HIGH, now states LOWNo CVSS vector was stated in the first observed version.	not dated
2023-08-30published 2022-04-08	Advisory severity changed	GHSA-g3vv-g2j5-45f2CVE-2022-2584	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
2023-08-30published 2023-08-22	Advisory severity changed	GHSA-gq5f-xv48-2365CVE-2022-44729	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 8
Tue 29 Aug 2023· 7 advisory changes
2023-08-29published 2023-08-21	Advisory severity changed	GHSA-h8cm-3v5f-rgp6CVE-2023-40176	whole advisorymoderate	stated at publication CRITICAL, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 8
2023-08-29published 2021-08-02	Advisory severity changed	GHSA-fp52-qw33-mfmwCVE-2020-16250	whole advisoryhigh	stated at publication CRITICAL, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	not dated
2023-08-29published 2023-08-23	Advisory severity changed	GHSA-5f35-pq34-c87qCVE-2023-39441	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Days to revision 6
2023-08-29published 2023-08-23	Advisory severity changed	GHSA-pm87-24wq-r8w9CVE-2023-40273	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 6
2023-08-29published 2023-08-23	Advisory severity changed	GHSA-x2mh-8fmc-rqghCVE-2023-37379	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 6
2023-08-29published 2023-08-24	Advisory severity changed	GHSA-crqf-q9fp-hwjwCVE-2023-34040	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 5
2023-08-29published 2022-05-17	Advisory severity changed	GHSA-hxvp-655x-xxqvCVE-2014-0135	whole advisorylow	stated at publication MODERATE, now states LOWThe severity label changed while the stated CVSS vectors stayed the same.	Days to revision 469
Mon 28 Aug 2023· 1 record change · 4 advisory changes
2023-08-28	Record state changed	CVE-2023-37151	whole record mitre	stated at publication PUBLISHED, now states REJECTED	not dated
2023-08-28published 2019-04-09	Package added to advisory	Show all 3 advisories in this change: Package added to advisory: @materializecss/materialize named as affected in npmHide the 3 advisories in this change: Package added to advisory: @materializecss/materialize named as affected in npm	npm moderate	not named as affected when the advisory was published, now names @materializecss/materialize	not dated
2023-08-28published 2019-04-09	same kind of change as the line above	GHSA-7752-f4gf-94gcCVE-2019-11003	same package registry as the line abovemoderate	same change as the line above	not dated
2023-08-28published 2019-04-09	same kind of change as the line above	GHSA-98f7-p5rc-jx67CVE-2019-11002	same package registry as the line abovemoderate	same change as the line above	not dated
2023-08-28published 2019-04-09	same kind of change as the line above	GHSA-rg3q-jxmp-pvjjCVE-2019-11004	same package registry as the line abovemoderate	same change as the line above	not dated
2023-08-28published 2018-11-15	Advisory severity changed	GHSA-hg78-4f6x-99wqCVE-2018-16470	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
Sun 27 Aug 2023· 1 record change
2023-08-27	Record state changed	CVE-2023-32001	whole record hackerone	stated at publication PUBLISHED, now states REJECTED	Days to revision 31
Fri 25 Aug 2023· 11 record changes
2023-08-25	Product added	CVE-2023-3264	dataprobe trellix	not named as affected at publication, now names iboot pdu	Days to revision 11
2023-08-25	CVSS base score changed	CVE-2023-40031	whole record GitHub_M	stated at publication 8.6, now states 7.8CVSS v3.1 · base scoreHighHigh	Days to revision 0
2023-08-25	CVSS base score changed	Show all 2 CVE records in this change: CVSS base score changed: 6.3 → 5.5Hide the 2 CVE records in this change: CVSS base score changed: 6.3 → 5.5	whole record GitHub_M	stated at publication 6.3, now states 5.5CVSS v3.1 · base scoreMediumMedium	Days to revision 0
2023-08-25	same kind of change as the line above	CVE-2023-40036	same vendor as the line above	same change as the line above	Days to revision 0
2023-08-25	same kind of change as the line above	CVE-2023-40164	same vendor as the line above	same change as the line above	Days to revision 0
2023-08-25	CVSS base score changed	CVE-2023-22815	whole record WDC PSIRT	stated at publication 6.0, now states 6.2CVSS v3.1 · base scoreMediumMedium	Days to revision 56
2023-08-25	CVSS base score changed	CVE-2023-37860	whole record CERTVDE	stated at publication 8.6, now states 7.5CVSS v3.1 · base scoreHighHigh	Days to revision 16
2023-08-25	CVSS base score changed	Show all 3 CVE records in this change: CVSS base score changed: 9.9 → 8.8Hide the 3 CVE records in this change: CVSS base score changed: 9.9 → 8.8	whole record CERTVDE	stated at publication 9.9, now states 8.8CVSS v3.1 · base scoreCriticalHigh	Days to revision 17
2023-08-25	same kind of change as the line above	CVE-2023-3570	same vendor as the line above	same change as the line above	Days to revision 17
2023-08-25	same kind of change as the line above	CVE-2023-3571	same vendor as the line above	same change as the line above	Days to revision 17
2023-08-25	same kind of change as the line above	CVE-2023-3573	same vendor as the line above	same change as the line above	Days to revision 17
2023-08-25	CVSS base score changed	CVE-2023-2673	whole record CERTVDE	stated at publication 5.8, now states 5.3CVSS v3.1 · base scoreMediumMedium	Days to revision 73
2023-08-25	CVSS base score changed	CVE-2023-3262	whole record trellix	stated at publication 6.2, now states 6.7CVSS v3.1 · base scoreMediumMedium	Days to revision 11

Two units, never added: changes to a CVE record or KEV entry, and changes to a GitHub advisory. Rows, not records: a moved fix version or an extended range counts once per record, product and release branch; an added product once per record and product; every other kind once per record or advisory. Days to revision is how long the value first stated stood: from the record's or advisory's publication, or from the day a KEV field value was first seen, to the first commit that replaced it. An addition to KEV has no earlier value and shows none. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

Data sources and quality

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Check my CVEs against these changes →