39339 matches found
ca.uhn.hapi.fhir:hapi-fhir-cli-api (6.4.0), ca.uhn.hapi.fhir:hapi-fhir-cli-app (6.4.0) +25 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.881)
ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.881 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 6.4.0 - ca.uhn.hapi.fhir:hapi-fhir-cli-app 6.4.0 -...
ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.6.0, <=8.10.0), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.6.0, <=7.4.5) +155 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=6.0.0, <=6.9.4.1)
ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version =6.0.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =8.4.0, =6.8.0, =6.6.0, =8.10.0 and more Source cves: CVE-2026-49485 Source advisory: GHSA-7CMJ-V6X8-FRVV...
ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=5.7.7, <=5.7.9), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.7.0, <=5.7.9) +60 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (5.6.27)
ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version 5.6.27 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin =5.7.7, =5.7.0, =5.7.7, =5.7.0, =5.7.0...
ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.1.3), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.1.3) +61 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.r4b (5.6.36)
ca.uhn.hapi.fhir:org.hl7.fhir.r4b MAVEN version 5.6.36 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4b and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0,...
ca.uhn.hapi.fhir:hapi-fhir-cli-api (6.4.1), ca.uhn.hapi.fhir:hapi-fhir-cli-app (6.4.1) +28 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.r4b (5.6.97)
ca.uhn.hapi.fhir:org.hl7.fhir.r4b MAVEN version 5.6.97 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4b and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 6.4.1 - ca.uhn.hapi.fhir:hapi-fhir-cli-app 6.4.1 -...
ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.4.0, <=6.4.7), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.2, <=6.4.7) +66 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.r4b (5.6.971)
ca.uhn.hapi.fhir:org.hl7.fhir.r4b MAVEN version 5.6.971 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4b and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =3.4.0, =6.4.2, =6.4.2, =6.4.2, =6.4.2, =6.4.2, =6.4.2,...
ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (5.6.5), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.6.0, <=5.6.5) +53 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (5.5.7)
ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version 5.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin 5.6.5 -...
CVE-2017-2845
creationtimestamp| type| source ---|---|--- 2026-07-09 11:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq7k7ms5iz2n...
CVE-2026-2342
creationtimestamp| type| source ---|---|--- 2026-07-09 09:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq7dvjy7wm2w...
CVE-2026-15137
creationtimestamp| type| source ---|---|--- 2026-07-09 03:52:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6qa72g7o2k...
CVE-2026-15112
creationtimestamp| type| source ---|---|--- 2026-07-09 01:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116887429378642543 2026-07-09 01:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq6icwy3iv23 2026-07-09 04:45:15+00:00| seen|...
EUVD-2026-42486
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...
D-Link UPnP_AV_Server_Path_Del Path Traversal
The vulnerability of the UPnPAVServerPathDel function in the /cgi-bin/appmgr.cgi microprogramming system of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4,...
Malicious code in testis-pack (npm)
The npm package testis-pack presents itself as a small binary packing/checksum utility pack/unpack/checksum/inspect but embeds an obfuscated dropper. It declares a preinstall: node index.js hook. The strings for the C2 host, path and dropped-binary name are not present in plaintext — they are...
CVE-2026-13462: Undefined Security Weakness
PayRange Android app, version 7.0.7 and below, contains an SSL bypass vulnerability that allows invalid certificates to be accepted in application webviews. A remote and unauthenticated attacker can steal information that the user sends...
CVE-2026-59855: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, Asset.render in app/src/asset/index.ts interpolates the unsanitized this.path value into HTML assigned to innerHTML, allowing a crafted asset link containing a double quote to break out of the src attribute, inject an...
PT-2026-56834
PayRange Android app, version 7.0.7 and below, contains an SSL bypass vulnerability that allows invalid certificates to be accepted in application webviews. A remote and unauthenticated attacker can steal information that the user sends...
CVE-2026-15115
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-15115
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...