@appweaver/core (>=1.1.6, <=1.4.0), @cappa/cli (0.11.1) +15 more potentially affected by CVE-2026-18427 via @fastify/static (>=10.1.0, <=10.1.2)

@fastify/static NPM version =10.1.0, =1.1.6, =3.1.17, =0.4.0, =0.1.0-rc.2, =5.27.1-beta.7, =9.0.0-canary.19, =0.2.1, =0.3.5 - pi-workspace 0.6.2 and more Source cves: CVE-2026-18427 Source advisory: SNYK:JS-FASTIFYSTATIC-18592349...

CVE-2026-18427

creationtimestamp| type| source ---|---|--- 2026-08-06 14:59:17+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3msgckuh2w226 2026-08-06 20:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgtfyoa4h2n...

tigervnc security update

1.8.0-28.0.1 - Dropped xorg-CVE-2023-5367.patch, xorg-CVE-2023-6377.patch, and xorg-CVE-2023-6478.patch 1.8.0-28 - Updated fix for CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions Resolves: RHEL-18415 1.8.0-27 - Fix CVE-2023-6377 tigervnc:...

CVE-2017-18427

CVE-2017-18427 affects cPanel prior to 66.0.2, where weak log-file permissions can occur after account modification (SEC-289). The issue has been documented in Red Hat and NVD entries with a low severity (CVSS v3: 3.3; v2: 2.1) and a Partial confidentiality impact. Remediation is to apply the pat...

CVE-2018-18427

CVE-2018-18427 affects s-cms 3.0. The vulnerability is a SQL injection in the web app, exploitable via the parameter 0_id in member/post.php or via POST data to member/member_login.php. The issue is triggered by unsafely handled input, enabling an attacker to manipulate SQL queries. The CVE entry...

infor.com XSS vulnerability

Vulnerable URL: http://www.infor.com/InstantService/RightNow/ISemail.jsp?referer=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 18.07.2017 Latest check for patch:| 18.07.2017 21:25 GMT Vulnerability type:| XSS Vulnerability status:| Public...