26666 matches found
EUVD-2026-42933
Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket...
Malicious code in @ghost_debugger/nanocache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c027fa29f4577bd052bfda553a617994365ea5855216b877e900610542f4bcce On require/import, the package spawns a bundled 1.1 MB Windows executable at vendor/nanocache.exe as a detached background process with stdio ignored...
MAL-2026-14046 Malicious code in @ghost_debugger/nanocache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c027fa29f4577bd052bfda553a617994365ea5855216b877e900610542f4bcce On require/import, the package spawns a bundled 1.1 MB Windows executable at vendor/nanocache.exe as a detached background process with stdio ignored...
CVE-2026-73678
MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...
CVE-2026-73678 MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()
MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...
EUVD-2026-58787
MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...
CVE-2026-73678 MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()
MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...
CVE-2026-73678
MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...
CVE-2026-73678
CVE-2026-73678 enables unauthenticated remote code execution in MindsDB Minds Platform
SUSE CVE-2026-73281
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension...
GO-2026-4964 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2025-3522 vulnerabilities
Vulnerabilities for packages: rancher-agent, rancher-webhook-fips...
GO-2024-3281 vulnerabilities
Vulnerabilities for packages: rancher-agent...
GO-2025-3648 vulnerabilities
Vulnerabilities for packages: harvester-fips, rancher-agent, rancher, harvester...
GO-2026-5024 vulnerabilities
Vulnerabilities for packages: etcd-fips, gitlab-rails-ce, kyverno, etcd, helm, net-kourier-fips, k3s, trino, containerd, gitlab-workhorse-ce, gitlab-rails-ce-fips, knative-operator-fips, upwind-agent, commercial-kyverno, kubeflow-katib, kube-conformance...
GO-2026-5932 vulnerabilities
Vulnerabilities for packages: elastic-agent, elastic-agent-fips, terrafmt, peerdb-flow-fips, peerdb-flow, terrafmt-fips, vitess...
GO-2026-5343 vulnerabilities
Vulnerabilities for packages: elastic-agent, elastic-agent-fips...
GO-2026-5544 vulnerabilities
Vulnerabilities for packages: elastic-agent, elastic-agent-fips...