22657 matches found
SUSE SLED15: libxmlrpc++8 / libxmlrpc3 / libxmlrpc_abyss++8 / libxmlrpc_abyss3 / etc (SUSE-SU-2026:3572-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3572-1 advisory. This update for xmlrpc-c fixes the following issue: - CVE-2026-15928: reflected cross-site scripting XSS via HTML...
CVE-2026-73667: Improper Neutralization of Special Elements used in an OS Command
OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.0-rc.2, OpenChoreo Workflow Plane templates under samples/getting-started/workflow-templates/ interpolated developer-controlled workflow parameters into shell program text executed through sh -...
PT-2026-80517
libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend USE SSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell metacharacters such as...
CVE-2026-52072
mgtlsclientrecvhello sizet underflow in extlen bounds check / mgtlsclientrecvhello extlen fixed-offset OOB read...
Moderate: nghttp2 security update
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055 For more details about the security issues,...
CVE-2026-17574 affecting package hdf5 for versions less than 1.14.6-4
CVE-2026-17574 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...
CVE-2026-59845 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59850 vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-4H4R-Q9XG-GFMM vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59847 vulnerabilities
Vulnerabilities for packages: libssh...
JLSEC-2026-1266
A null pointer dereference issue was discovered in functions opgetdata and opopen1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or other unspecified impacts...
MAL-2026-13886 Malicious code in @years19/n8n-nodes-utils-helper-c (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8eda8f141799c4f6f587dbf9771f07e86f64abac9d161319e19b3f836a7fde The npm package's postinstall script callback.js resolves the user's Python site-packages directory and downloads a tarball from...
MAL-2026-13872 Malicious code in @years17/n8n-nodes-utils-helper-c (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983dd9c9e4907f30015aa86aceae1cc95f5511f3de89eadb7b8550a1485c7d24 The package registers a postinstall script also duplicated as the main entry that runs shell reconnaissance on the installer host — id, hostname,...
Malicious code in @years18/n8n-nodes-utils-helper-c (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55fa2e2abba500f0c2863993fb8d51c3363f22a3fa8917fdf73e4b2545b81ea6 On npm install, the declared postinstall script node callback.js performs two hostile actions against the installer. First, it downloads a tarball fr...
UBUNTU-CVE-2026-19588
Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers...
CVE-2026-19143 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-RHRM-PW3P-V8J2 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19148 vulnerabilities
Vulnerabilities for packages: chromium...
Linux Distros Unpatched Vulnerability : CVE-2026-71266
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tinyobjloader-c's tinyobjparseandindexmtlfile tinyobjloaderc.h reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpylinebuf, p,...
