Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

11,999 record changes · 5,026 advisory changes · newest first · grouped by dayCSV JSON RSS

SinceKindVendorSort

Counted changes, newest first, one line per change to a CVE record or a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Record or advisory, Which record was edited: a CVE id where the change was to the CVE catalog or the CISA KEV list, a GHSA id where it was to a GitHub advisory. The two are different units and are never counted together.	Vendor or package, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Tue 4 Jul 2023· 1 advisory change
2023-07-04published 2018-08-08	Advisory severity changed	GHSA-pxqr-8v54-m2hjCVE-2016-10522	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
Mon 3 Jul 2023· 66 record changes · 3 advisory changes
2023-07-03	Product added	CVE-2023-25515	nvidia	not named as affected at publication, now names gpu display driver for windows and linux	Days to revision 10
2023-07-03	Product added	Show all 4 CVE records in this change: Product added: 16 products named as affected from nec corporationHide the 4 CVE records in this change: Product added: 16 products named as affected from nec corporation64 rows, one per record and product	nec corporation NEC	not named as affected at publication, now names aterm wf300hp and 15 more	Days to revision 5
2023-07-03	same kind of change as the line above	CVE-2023-3330	same vendor as the line above	not named as affected at publication, now names aterm wf300hp	Days to revision 5
2023-07-03	same kind of change as the line above	CVE-2023-3330	same vendor as the line above	not named as affected at publication, now names aterm wg1400hp	Days to revision 5
2023-07-03	same kind of change as the line above	CVE-2023-3330	same vendor as the line above	not named as affected at publication, now names aterm wg1800hp	Days to revision 5
2023-07-03	same kind of change as the line above	CVE-2023-3330	same vendor as the line above	not named as affected at publication, now names aterm wg1800hp2	Days to revision 5
2023-07-03	same kind of change as the line above	CVE-2023-3330	same vendor as the line above	not named as affected at publication, now names aterm wg2600hp	Days to revision 5
2023-07-03	same kind of change as the line above	CVE-2023-3330	same vendor as the line above	not named as affected at publication, now names aterm wg2600hp2	Days to revision 5
2023-07-03	same kind of change as the line above	CVE-2023-3330	same vendor as the line above	not named as affected at publication, now names aterm wg300hp	Days to revision 5
2023-07-03	same kind of change as the line above	CVE-2023-3330	same vendor as the line above	not named as affected at publication, now names aterm wg600hp	Days to revision 5
56 more rows in this change are not listed here. Open all 64 rows →
2023-07-03	CVSS base score changed	CVE-2023-25515	whole record nvidia	stated at publication 7.1, now states 7.8CVSS v3.1 · base scoreHighHigh	Days to revision 10
2023-07-03published 2022-02-15	Package added to advisory	GHSA-x5m6-jh4r-34mvCVE-2014-0177	rubygems moderate	not named as affected when the advisory was published, now names hub	not dated
2023-07-03published 2023-06-22	Advisory severity changed	GHSA-w65q-jcmv-28gjCVE-2023-32571	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Days to revision 11
2023-07-03published 2023-06-23	Advisory severity changed	GHSA-hhqm-f4m4-pq39CVE-2023-30260	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 10
Fri 30 Jun 2023· 10 record changes · 9 advisory changes
2023-06-302 commits	Product added	Show all 5 CVE records in this change: Product added: powershell 7.2 named as affected from microsoftHide the 5 CVE records in this change: Product added: powershell 7.2 named as affected from microsoft	microsoft	not named as affected at publication, now names powershell 7.2Branches and original-value intervals are stated on each row.	Days to revision 16 to 17
2023-06-30	same kind of change as the line above	CVE-2023-24895	same vendor as the line above	same change as the line above	Days to revision 16
2023-06-30	same kind of change as the line above	CVE-2023-24936	same vendor as the line above	same change as the line above	Days to revision 16
2023-06-30	same kind of change as the line above	CVE-2023-29331	same vendor as the line above	same change as the line above	Days to revision 16
2023-06-30	same kind of change as the line above	CVE-2023-33126	same vendor as the line above	same change as the line above	Days to revision 17
2023-06-30	same kind of change as the line above	CVE-2023-24897	same vendor as the line above	same change as the line above	Days to revision 16
2023-06-30	Product added	Show all 5 CVE records in this change: Product added: powershell 7.3 named as affected from microsoftHide the 5 CVE records in this change: Product added: powershell 7.3 named as affected from microsoft	microsoft	not named as affected at publication, now names powershell 7.3	Days to revision 16 to 17
2023-06-30	same kind of change as the line above	CVE-2023-24895	same vendor as the line above	same change as the line above	Days to revision 16
2023-06-30	same kind of change as the line above	CVE-2023-24936	same vendor as the line above	same change as the line above	Days to revision 16
2023-06-30	same kind of change as the line above	CVE-2023-29331	same vendor as the line above	same change as the line above	Days to revision 16
2023-06-30	same kind of change as the line above	CVE-2023-32032	same vendor as the line above	same change as the line above	Days to revision 17
2023-06-30	same kind of change as the line above	CVE-2023-33128	same vendor as the line above	same change as the line above	Days to revision 17
2023-06-30published 2023-06-16	Advisory severity changed	GHSA-xc8m-28vv-4pjcCVE-2023-2431	whole advisorymoderate	stated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 15
2023-06-30published 2021-11-23	Advisory severity changed	GHSA-g3p2-hfqr-9m25CVE-2021-22968	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
2023-06-30published 2021-05-11	Advisory severity changed	GHSA-23x4-m842-fmwfCVE-2021-21428	whole advisorycritical	stated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	not dated
2023-06-30published 2023-06-21 to 2023-06-22	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 8 to 9
2023-06-30published 2023-06-22	same kind of change as the line above	GHSA-xxp4-mf4h-6cwmCVE-2023-35133	same package and registry as the line abovehigh	same change as the line above	Days to revision 8
2023-06-30published 2023-06-21	same kind of change as the line above	GHSA-mppv-79ch-vw6qCVE-2023-34981	same package and registry as the line abovehigh	same change as the line above	Days to revision 9
2023-06-30published 2023-06-22	Advisory severity changed	GHSA-q2fp-jw87-86pxCVE-2023-29931	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Days to revision 8
2023-06-30published 2023-06-23	Advisory severity changed	GHSA-hm75-8w6h-4f8fCVE-2023-3302	whole advisoryhigh	stated at publication MODERATE, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 7
2023-06-30published 2022-03-12 to 2023-05-26	Advisory withdrawn	Show all 2 advisories in this change: Advisory withdrawn: withdrawn 2023-06-30Hide the 2 advisories in this change: Advisory withdrawn: withdrawn 2023-06-30	whole advisory2 bands	withdrawn 2023-06-30	Days to revision 35 to 476
2023-06-30published 2022-03-12	same kind of change as the line above	GHSA-65f3-3278-7m65	same package and registry as the line abovehigh	withdrawn 2023-06-30	Days to revision 476
2023-06-30published 2023-05-26	same kind of change as the line above	GHSA-c892-cwq6-qrqf	same package and registry as the line abovemoderate	withdrawn 2023-06-30	Days to revision 35
Thu 29 Jun 2023· 1 record change
2023-06-29	Record state changed	CVE-2023-35170	whole record GitHub_M	stated at publication PUBLISHED, now states REJECTED	Days to revision 3
Wed 28 Jun 2023· 1 record change · 6 advisory changes
2023-06-28	Fix version moved	CVE-2023-3389	linuxkernel Google	stated at publication 6.0, now states 6.4Release branch starts at 0.same day	Days to revision 0
2023-06-28published 2023-06-21	Advisory severity changed	GHSA-fqhp-rhm6-8rrjCVE-2023-33289	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 7
2023-06-28published 2023-06-21 to 2023-06-22	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → CRITICALHide the 2 advisories in this change: Advisory severity changed: MODERATE → CRITICAL	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Days to revision 6 to 7
2023-06-28published 2023-06-22	same kind of change as the line above	GHSA-5m3m-q8cq-77g4CVE-2023-36097	same package and registry as the line abovecritical	same change as the line above	Days to revision 6
2023-06-28published 2023-06-21	same kind of change as the line above	GHSA-hp5w-w29m-vg63CVE-2023-34340	same package and registry as the line abovecritical	same change as the line above	Days to revision 7
2023-06-28published 2023-06-20	Advisory severity changed	GHSA-h7cw-44vp-jq7hCVE-2023-35166	whole advisoryhigh	stated at publication CRITICAL, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 8
2023-06-28published 2023-06-23	Advisory severity changed	GHSA-vmxg-wx6c-4f3rCVE-2023-3303	whole advisorylow	stated at publication MODERATE, now states LOWCVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 5
2023-06-28published 2023-06-13	Advisory withdrawn	GHSA-3x74-v64j-qc3fCVE-2023-30179	whole advisoryhigh	withdrawn 2023-06-28	Days to revision 15
Tue 27 Jun 2023· 16 advisory changes
2023-06-27published 2023-06-19 to 2023-06-20	Advisory severity changed	Show all 4 advisories in this change: Advisory severity changed: MODERATE → CRITICALHide the 4 advisories in this change: Advisory severity changed: MODERATE → CRITICAL	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Days to revision 7 to 9
2023-06-27published 2023-06-20	same kind of change as the line above	GHSA-6643-h7h5-x9whCVE-2023-34541	same package and registry as the line abovecritical	same change as the line above	Days to revision 7
2023-06-27published 2023-06-20	same kind of change as the line above	GHSA-6vf2-mfmr-qqqwCVE-2020-21489	same package and registry as the line abovecritical	same change as the line above	Days to revision 7
2023-06-27published 2023-06-20	same kind of change as the line above	GHSA-q3q5-qvh5-cmw5CVE-2020-21174	same package and registry as the line abovecritical	same change as the line above	Days to revision 7
2023-06-27published 2023-06-19	same kind of change as the line above	GHSA-7q8c-49f4-4c8qCVE-2023-35839	same package and registry as the line abovecritical	same change as the line above	Days to revision 9
2023-06-27published 2023-06-20	Advisory severity changed	GHSA-4cw3-rhqx-vqwrCVE-2020-20726	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 7
2023-06-27published 2022-03-11	Advisory severity changed	GHSA-jr9c-h74f-2v28CVE-2022-0905	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
2023-06-27published 2023-06-14	Advisory severity changed	Show all 7 advisories in this change: Advisory severity changed: LOW → HIGHHide the 7 advisories in this change: Advisory severity changed: LOW → HIGH	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 13
2023-06-27published 2023-06-14	same kind of change as the line above	GHSA-p4c9-x742-qh8cCVE-2023-34616	same package and registry as the line abovehigh	same change as the line above	Days to revision 13
2023-06-27published 2023-06-14	same kind of change as the line above	GHSA-75r3-38rh-pmxvCVE-2023-34613	same package and registry as the line abovehigh	same change as the line above	Days to revision 13
2023-06-27published 2023-06-14	same kind of change as the line above	GHSA-5wfc-hjrc-gq87CVE-2023-34620	same package and registry as the line abovehigh	same change as the line above	Days to revision 13
2023-06-27published 2023-06-14	same kind of change as the line above	GHSA-66gv-5m8q-rrjcCVE-2023-34614	same package and registry as the line abovehigh	same change as the line above	Days to revision 13
2023-06-27published 2023-06-14	same kind of change as the line above	GHSA-75m3-f4hr-2vh9CVE-2023-35110	same package and registry as the line abovehigh	same change as the line above	Days to revision 13
2023-06-27published 2023-06-14	same kind of change as the line above	GHSA-779h-3r69-4f5pCVE-2023-34610	same package and registry as the line abovehigh	same change as the line above	Days to revision 13
2023-06-27published 2023-06-14	same kind of change as the line above	GHSA-mx27-gg24-h2jcCVE-2023-34612	same package and registry as the line abovehigh	same change as the line above	Days to revision 13
2023-06-27published 2020-07-07	Advisory severity changed	GHSA-vjv6-gq77-3mjwCVE-2020-15232	whole advisorycritical	stated at publication LOW, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	not dated
2023-06-27published 2023-06-16	Advisory severity changed	GHSA-934g-fvcc-4833CVE-2023-34659	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Days to revision 11
2023-06-27published 2021-05-06	Advisory withdrawn	GHSA-p7j5-4mwm-hv86	whole advisorymoderate	withdrawn 2023-06-27	Days to revision 782
Mon 26 Jun 2023· 3 advisory changes
2023-06-26published 2023-06-15	Advisory severity changed	GHSA-p2qf-9vp6-3jjqCVE-2023-3276	whole advisoryhigh	stated at publication MODERATE, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 11
2023-06-26published 2023-06-14	Advisory severity changed	GHSA-jv4x-j47q-6qvpCVE-2023-34624	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 12
2023-06-26published 2020-09-01	Advisory severity changed	GHSA-2pqj-h3vj-pqgwCVE-2012-6708	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	not dated
Fri 23 Jun 2023· 2 record changes · 2 advisory changes
2023-06-23	Affected range extended	CVE-2023-2986	tychesoftwaresabandoned cart lite for woocommerce Wordfence	stated at publication 5.14.2, now states 5.15.1Release branch starts at 0.	Days to revision 16
2023-06-23	CVSS base score changed	CVE-2023-28043	whole record dell	stated at publication 6.3, now states 6.5CVSS v3.1 · base scoreMediumMedium	Days to revision 22
2023-06-23published 2023-01-18 to 2023-06-14	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: LOW → HIGHHide the 2 advisories in this change: Advisory severity changed: LOW → HIGH	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 9 to 156
2023-06-23published 2023-06-14	same kind of change as the line above	GHSA-fj64-qprx-q7vqCVE-2023-34617	same package and registry as the line abovehigh	same change as the line above	Days to revision 9
2023-06-23published 2023-01-18	same kind of change as the line above	GHSA-65f5-mfpf-vfhjCVE-2022-44570	same package and registry as the line abovehigh	same change as the line above	Days to revision 156
Wed 21 Jun 2023· 55 record changes · 4 advisory changes
2023-06-21	Product added	CVE-2023-0457Show all 55 products in this change: Product added: 55 products named as affected in CVE-2023-0457Hide the 55 products in this change: Product added: 55 products named as affected in CVE-2023-0457	mitsubishi electric corporation Mitsubishi	not named as affected at publication, now names melsec iq-r series r00cpu and 54 more	Days to revision 110
2023-06-21	same kind of change as the line above	CVE-2023-0457	same vendor as the line above	not named as affected at publication, now names melsec iq-r series r00cpu	Days to revision 110
2023-06-21	same kind of change as the line above	CVE-2023-0457	same vendor as the line above	not named as affected at publication, now names melsec iq-r series r01cpu	Days to revision 110
2023-06-21	same kind of change as the line above	CVE-2023-0457	same vendor as the line above	not named as affected at publication, now names melsec iq-r series r02cpu	Days to revision 110
2023-06-21	same kind of change as the line above	CVE-2023-0457	same vendor as the line above	not named as affected at publication, now names melsec iq-r series r04cpu	Days to revision 110
2023-06-21	same kind of change as the line above	CVE-2023-0457	same vendor as the line above	not named as affected at publication, now names melsec iq-r series r04encpu	Days to revision 110
2023-06-21	same kind of change as the line above	CVE-2023-0457	same vendor as the line above	not named as affected at publication, now names melsec iq-r series r08cpu	Days to revision 110
2023-06-21	same kind of change as the line above	CVE-2023-0457	same vendor as the line above	not named as affected at publication, now names melsec iq-r series r08encpu	Days to revision 110
2023-06-21	same kind of change as the line above	CVE-2023-0457	same vendor as the line above	not named as affected at publication, now names melsec iq-r series r08pcpu	Days to revision 110
47 more rows in this change are not listed here. Open all 55 rows →
2023-06-21published 2023-06-14	Advisory severity changed	GHSA-4g42-gqrg-4633CVE-2023-34396	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 8
2023-06-21published 2023-06-13	Advisory severity changed	GHSA-7mcw-xmx3-7p8mCVE-2023-33695	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 8
2023-06-21published 2023-06-12	Advisory severity changed	GHSA-65wh-g8x8-gm2hCVE-2023-34212	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Days to revision 9
2023-06-21published 2017-12-28	Advisory withdrawn	GHSA-7fpw-cfc4-3p2c	whole advisoryhigh	withdrawn 2023-06-21	Days to revision 2,001
Tue 20 Jun 2023· 1 advisory change
2023-06-20published 2019-03-14	Advisory severity changed	GHSA-77rv-6vfw-x4gcCVE-2019-3778	whole advisorymoderate	stated at publication CRITICAL, now states MODERATENo CVSS vector was stated in the first observed version.	not dated
Mon 19 Jun 2023· 2 record changes · 4 advisory changes
2023-06-19	Product added	CVE-2023-3311	puneethreddyhc VulDB	not named as affected at publication, now names online-shopping-system-advanced	Days to revision 1
2023-06-19	Record state changed	CVE-2023-35825	whole record mitre	stated at publication PUBLISHED, now states REJECTED	not dated
2023-06-19published 2017-10-24	Package added to advisory	Show all 2 advisories in this change: Package added to advisory: 2 packages named as affected in rubygemsHide the 2 advisories in this change: Package added to advisory: 2 packages named as affected in rubygems4 rows, one per advisory and package	rubygems moderate	not named as affected when the advisory was published, now names actionpack and 1 more	not dated
2023-06-19published 2017-10-24	same kind of change as the line above	GHSA-v9v4-7jp6-8c73CVE-2011-2197	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names actionpack	not dated
2023-06-19published 2017-10-24	same kind of change as the line above	GHSA-v9v4-7jp6-8c73CVE-2011-2197	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names activesupport	not dated
2023-06-19published 2017-10-24	same kind of change as the line above	GHSA-8qrh-h9m2-5fvfCVE-2009-3009	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names actionpack	not dated
2023-06-19published 2017-10-24	same kind of change as the line above	GHSA-8qrh-h9m2-5fvfCVE-2009-3009	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names activesupport	not dated
Sat 17 Jun 2023· 5 record changes
2023-06-17	CVSS base score changed	CVE-2023-23416	whole record microsoft	stated at publication 8.4, now states 7.8CVSS v3.1 · base scoreHighHigh	Days to revision 94
2023-06-17	CVSS base score changed	CVE-2023-24856	whole record microsoft	stated at publication 6.5, now states 7.5CVSS v3.1 · base scoreMediumHigh	Days to revision 94
2023-06-17	CVSS base score changed	CVE-2023-24921	whole record microsoft	stated at publication 4.1, now states 5.4CVSS v3.1 · base scoreMediumMedium	Days to revision 94
2023-06-17	CVSS base score changed	CVE-2023-28288	whole record microsoft	stated at publication 6.5, now states 8.1CVSS v3.1 · base scoreMediumHigh	Days to revision 66
2023-06-17	CVSS base score changed	CVE-2023-28301	whole record microsoft	stated at publication 4.2, now states 3.7CVSS v3.1 · base scoreMediumLow	Days to revision 66
Fri 16 Jun 2023· 2 record changes · 7 advisory changes
2023-06-16	Product added	CVE-2023-2431	kubernetes	not named as affected at publication, now names kubernetes	Days to revision 0
2023-06-16	CVSS base score changed	CVE-2023-2431	whole record kubernetes	stated at publication 6.5, now states 3.4CVSS v3.1 · base scoreMediumLow	Days to revision 0
2023-06-16published 2023-06-12	Advisory severity changed	GHSA-3w3w-pxmm-2w2jCVE-2020-36732	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Days to revision 5
2023-06-16published 2023-06-07	Advisory severity changed	GHSA-v3v9-3jf4-5pxxCVE-2023-33510	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 9
2023-06-16published 2023-06-06	Advisory severity changed	GHSA-9m3v-v4r5-ppx7CVE-2023-33957	whole advisorymoderate	stated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 10
2023-06-16published 2023-06-10	Advisory severity changed	GHSA-p7xm-g427-jxfcCVE-2023-3190	whole advisorymoderate	stated at publication LOW, now states MODERATECVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 6
2023-06-16published 2023-06-10	Advisory severity changed	GHSA-qmw8-x364-xxxmCVE-2023-3191	whole advisorymoderate	stated at publication HIGH, now states MODERATECVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 6
2023-06-16published 2023-06-07	Advisory severity changed	GHSA-c29g-q3h3-mwcfCVE-2023-33496	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Days to revision 9
2023-06-16published 2023-03-14	Advisory severity changed	GHSA-hw7c-3rfg-p46jCVE-2023-24535	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 94
Wed 14 Jun 2023· 5 record changes · 2 advisory changes
2023-06-14	Product added	CVE-2023-1709	datalogics icscert	not named as affected at publication, now names library apdfl	Days to revision 7
2023-06-14	CVSS base score changed	CVE-2023-34251	whole record GitHub_M	stated at publication 9.1, now states 10.0CVSS v3.1 · base scoreCriticalCritical	Days to revision 0
2023-06-14	CVSS base score changed	CVE-2023-34252	whole record GitHub_M	stated at publication 7.2, now states 8.8CVSS v3.1 · base scoreHighHigh	Days to revision 0
2023-06-14	CVSS base score changed	CVE-2023-28069	whole record dell	stated at publication 7.1, now states 6.1CVSS v3.1 · base scoreHighMedium	Days to revision 70
2023-06-14	Record state changed	CVE-2023-34585	whole record mitre	stated at publication PUBLISHED, now states REJECTED	not dated
2023-06-14published 2023-06-09	Advisory severity changed	GHSA-ghqq-jfx7-f6m9CVE-2023-3172	whole advisoryhigh	stated at publication MODERATE, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 6
2023-06-14published 2023-06-07	Advisory severity changed	GHSA-fqcv-rfp6-wv92CVE-2023-3142	whole advisorymoderate	stated at publication LOW, now states MODERATECVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 7
Tue 13 Jun 2023· 1 record change · 3 advisory changes
2023-06-13	CVSS base score changed	CVE-2023-24880	whole record microsoft	stated at publication 5.4, now states 4.4CVSS v3.1 · base scoreMediumMedium	Days to revision 91
2023-06-13published 2023-06-07	Advisory severity changed	GHSA-hh54-53m7-7ffjCVE-2023-33498	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 6
2023-06-13published 2021-08-25	Advisory severity changed	GHSA-xwxc-j97j-84gf	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	not dated
2023-06-13published 2021-08-25	Advisory severity changed	GHSA-4x25-pvhw-5224CVE-2019-16143	whole advisorycritical	stated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	not dated
Mon 12 Jun 2023· 15 advisory changes
2023-06-12published 2022-05-17	Package added to advisory	GHSA-95xq-v4m2-fq3rCVE-2013-4489	rubygems moderate	not named as affected when the advisory was published, now names gitlab-grit	Days to revision 392
2023-06-12published 2022-10-13	Package added to advisory	GHSA-599f-7c49-w659CVE-2022-42889	maven critical	not named as affected when the advisory was published, now names com.guicedee.services:commons-text	not dated
2023-06-12published 2020-06-15	Package added to advisory	GHSA-6hgm-866r-3cjvShow all 3 packages in this change: Package added to advisory: 3 packages named as affected in GHSA-6hgm-866r-3cjvHide the 3 packages in this change: Package added to advisory: 3 packages named as affected in GHSA-6hgm-866r-3cjv	maven high	not named as affected when the advisory was published, now names net.sourceforge.collections:collections-generic and 2 more	not dated
2023-06-12published 2020-06-15	same kind of change as the line above	GHSA-6hgm-866r-3cjvCVE-2015-6420	same package registry as the line abovehigh	not named as affected when the advisory was published, now names net.sourceforge.collections:collections-generic	not dated
2023-06-12published 2020-06-15	same kind of change as the line above	GHSA-6hgm-866r-3cjvCVE-2015-6420	same package registry as the line abovehigh	not named as affected when the advisory was published, now names org.apache.servicemix.bundles:org.apache.servicemix.bundles.collections-generic	not dated
2023-06-12published 2020-06-15	same kind of change as the line above	GHSA-6hgm-866r-3cjvCVE-2015-6420	same package registry as the line abovehigh	not named as affected when the advisory was published, now names org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-collections	not dated
2023-06-12published 2022-09-06	Package added to advisory	GHSA-c4r9-r8fh-9vj2Show all 6 packages in this change: Package added to advisory: 6 packages named as affected in GHSA-c4r9-r8fh-9vj2Hide the 6 packages in this change: Package added to advisory: 6 packages named as affected in GHSA-c4r9-r8fh-9vj2	maven moderate	not named as affected when the advisory was published, now names be.cylab:snakeyaml and 5 more	not dated
2023-06-12published 2022-09-06	same kind of change as the line above	GHSA-c4r9-r8fh-9vj2CVE-2022-38749	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names be.cylab:snakeyaml	not dated
2023-06-12published 2022-09-06	same kind of change as the line above	GHSA-c4r9-r8fh-9vj2CVE-2022-38749	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names com.alipay.sofa.acts:acts-common-util	not dated
2023-06-12published 2022-09-06	same kind of change as the line above	GHSA-c4r9-r8fh-9vj2CVE-2022-38749	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names io.prometheus.jmx:jmx_prometheus_httpserver	not dated
2023-06-12published 2022-09-06	same kind of change as the line above	GHSA-c4r9-r8fh-9vj2CVE-2022-38749	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names io.prometheus.jmx:jmx_prometheus_httpserver_java6	not dated
2023-06-12published 2022-09-06	same kind of change as the line above	GHSA-c4r9-r8fh-9vj2CVE-2022-38749	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names org.testifyproject.external:external-snakeyaml	not dated
2023-06-12published 2022-09-06	same kind of change as the line above	GHSA-c4r9-r8fh-9vj2CVE-2022-38749	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names pl.droidsonroids.yaml:snakeyaml	not dated
2023-06-12published 2017-10-24	Package added to advisory	GHSA-75w6-p6mg-vh8jCVE-2011-0446	rubygems moderate	not named as affected when the advisory was published, now names actionview	not dated
2023-06-12published 2022-12-25	Advisory severity changed	GHSA-8gh8-hqwg-xf34CVE-2021-4279	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 169
2023-06-12published 2023-06-05 to 2023-06-06	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 6 to 8
2023-06-12published 2023-06-06	same kind of change as the line above	GHSA-qcm3-vfq5-wfr2CVE-2023-31606	same package and registry as the line abovehigh	same change as the line above	Days to revision 6
2023-06-12published 2023-06-05	same kind of change as the line above	GHSA-7gf7-jv65-wjmhCVE-2023-34411	same package and registry as the line abovehigh	same change as the line above	Days to revision 8
Fri 9 Jun 2023· 9 advisory changes
2023-06-09published 2018-03-21	Package added to advisory	GHSA-x7rv-cr6v-4vm4CVE-2018-8048	rubygems moderate	not named as affected when the advisory was published, now names nokogiri	not dated
2023-06-09published 2017-10-24	Package added to advisory	Show all 3 advisories in this change: Package added to advisory: actionpack named as affected in rubygemsHide the 3 advisories in this change: Package added to advisory: actionpack named as affected in rubygems	rubygems 2 bands	not named as affected when the advisory was published, now names actionpack	not dated
2023-06-09published 2017-10-24	same kind of change as the line above	GHSA-xrr4-p6fq-hjg7CVE-2016-0752	same package registry as the line abovehigh	same change as the line above	not dated
2023-06-09published 2017-10-24	same kind of change as the line above	GHSA-vx9j-46rh-fqr8CVE-2016-2097	same package registry as the line abovemoderate	same change as the line above	not dated
2023-06-09published 2017-10-24	same kind of change as the line above	GHSA-m46p-ggm5-5j83CVE-2014-0081	same package registry as the line abovemoderate	same change as the line above	not dated
2023-06-09published 2017-10-24	Advisory severity changed	GHSA-9hx9-w2j6-rw76CVE-2013-2105	whole advisorymoderate	stated at publication LOW, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	not dated
2023-06-09published 2019-03-13	Advisory severity changed	GHSA-m63j-wh5w-c252CVE-2019-5419	whole advisoryhigh	stated at publication CRITICAL, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	not dated
2023-06-09published 2023-06-03	Advisory severity changed	GHSA-c6fv-3jm9-6r8fCVE-2023-3083	whole advisoryhigh	stated at publication MODERATE, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 6
2023-06-09published 2023-06-01 to 2023-06-06	Advisory withdrawn	Show all 2 advisories in this change: Advisory withdrawn: withdrawn 2023-06-09Hide the 2 advisories in this change: Advisory withdrawn: withdrawn 2023-06-09	whole advisory2 bands	withdrawn 2023-06-09	Days to revision 3 to 9
2023-06-09published 2023-06-06	same kind of change as the line above	GHSA-wm7r-3qxj-5xgq	same package and registry as the line abovemoderate	withdrawn 2023-06-09	Days to revision 3
2023-06-09published 2023-06-01	same kind of change as the line above	GHSA-qj8w-rv5x-2v9h	same package and registry as the line abovehigh	withdrawn 2023-06-09	Days to revision 9
Thu 8 Jun 2023· 1 record change · 2 advisory changes
2023-06-08	Product added	CVE-2023-29403	go standard library Go	not named as affected at publication, now names runtime	Days to revision 0
2023-06-08published 2023-05-26	Advisory severity changed	GHSA-xf96-w227-r7c4CVE-2023-20883	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 13
2023-06-08published 2023-06-01	Advisory severity changed	GHSA-qj8w-rv5x-2v9h	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 7
Wed 7 Jun 2023· 1 record change · 3 advisory changes
2023-06-07	CVSS base score changed	CVE-2023-2909	whole record ASUSTOR1	stated at publication 6.0, now states 8.5CVSS v3.1 · base scoreMediumHigh	Days to revision 7
2023-06-07published 2023-05-30	Advisory severity changed	GHSA-jqvr-j2vg-gjrvCVE-2023-34205	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Days to revision 9
2023-06-07published 2023-05-31	Advisory severity changed	GHSA-h5g9-2p35-54c7CVE-2023-3009	whole advisorymoderate	stated at publication HIGH, now states MODERATECVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 7
2023-06-07published 2023-06-06	Advisory severity changed	GHSA-26c5-ppr8-f33pCVE-2023-32682	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Days to revision 1
Tue 6 Jun 2023· 2 record changes · 6 advisory changes
2023-06-06	Product added	CVE-2023-22833	palantir	not named as affected at publication, now names com.palantir.lime:lime2	Days to revision 0
2023-06-06	Record state changed	CVE-2023-31508	whole record mitre	stated at publication PUBLISHED, now states REJECTED	not dated
2023-06-06published 2023-05-26 to 2023-05-29	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 8 to 11
2023-06-06published 2023-05-29	same kind of change as the line above	GHSA-9wqr-5jp4-mjmhCVE-2023-30253	same package and registry as the line abovehigh	same change as the line above	Days to revision 8
2023-06-06published 2023-05-26	same kind of change as the line above	GHSA-9mmj-64jh-ph9cCVE-2023-33779	same package and registry as the line abovehigh	same change as the line above	Days to revision 11
2023-06-06published 2023-05-08	Advisory severity changed	GHSA-jchm-fm4q-c2fpCVE-2023-25754	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Days to revision 29
2023-06-06published 2023-05-26	Advisory severity changed	GHSA-c892-cwq6-qrqf	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Days to revision 11
2023-06-06published 2022-12-06 to 2023-05-12	Advisory withdrawn	Show all 2 advisories in this change: Advisory withdrawn: withdrawn 2023-06-06Hide the 2 advisories in this change: Advisory withdrawn: withdrawn 2023-06-06	whole advisory2 bands	withdrawn 2023-06-06	Days to revision 26 to 183
2023-06-06published 2023-05-12	same kind of change as the line above	GHSA-6mhc-hqr3-w466CVE-2023-31508	same package and registry as the line abovemoderate	withdrawn 2023-06-06	Days to revision 26
2023-06-06published 2022-12-06	same kind of change as the line above	GHSA-7vx2-5349-qj99CVE-2022-46464	same package and registry as the line abovehigh	withdrawn 2023-06-06	Days to revision 183
Mon 5 Jun 2023· 3 record changes
2023-06-05	Fix version moved	Show all 2 CVE records in this change: Fix version moved: 1.1.51091.0 → 1.1.60961.0 from microsoftHide the 2 CVE records in this change: Fix version moved: 1.1.51091.0 → 1.1.60961.0 from microsoft	microsoftav1 video extension	stated at publication 1.1.51091.0, now states 1.1.60961.0Release branch starts at 1.1.0.	Days to revision 27
2023-06-05	same kind of change as the line above	CVE-2023-29340	same vendor as the line above	same change as the line aboveRelease branch starts at 1.1.0.	Days to revision 27
2023-06-05	same kind of change as the line above	CVE-2023-29341	same vendor as the line above	same change as the line aboveRelease branch starts at 1.1.0.	Days to revision 27
2023-06-05	Record state changed	CVE-2023-34255	whole record mitre	stated at publication PUBLISHED, now states REJECTED	not dated
Sat 3 Jun 2023· 3 advisory changes
2023-06-03published 2023-05-24	Advisory severity changed	GHSA-w6f8-mxf5-4vf8CVE-2023-33948	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 9
2023-06-03published 2023-05-24	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: LOW → MODERATEHide the 2 advisories in this change: Advisory severity changed: LOW → MODERATE	whole advisorymoderate	stated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 9
2023-06-03published 2023-05-24	same kind of change as the line above	GHSA-769c-p92r-xgxjCVE-2023-33947	same package and registry as the line abovemoderate	same change as the line above	Days to revision 9
2023-06-03published 2023-05-24	same kind of change as the line above	GHSA-2868-ff44-43qvCVE-2023-33946	same package and registry as the line abovemoderate	same change as the line above	Days to revision 9

Two units, never added: changes to a CVE record or KEV entry, and changes to a GitHub advisory. Rows, not records: a moved fix version or an extended range counts once per record, product and release branch; an added product once per record and product; every other kind once per record or advisory. Days to revision is how long the value first stated stood: from the record's or advisory's publication, or from the day a KEV field value was first seen, to the first commit that replaced it. An addition to KEV has no earlier value and shows none. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

Data sources and quality

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Check my CVEs against these changes →