14996 matches found
cvelistV5 cve_2026-08-07_1100Z
Note 2026-2-17 Adding Additional day of processing for date normalization to addreess potential inconsistencies New Date Normalization schedule: 2/16/26 - 2/28/26 Note 2026-2-10 Record Date NormalizationdeltaLog.json file change The deltaLog.json file normally retains a rolling 30 days worth of C...
cvelistV5 cve_2026-08-06_1000Z
Note 2026-2-17 Adding Additional day of processing for date normalization to addreess potential inconsistencies New Date Normalization schedule: 2/16/26 - 2/28/26 Note 2026-2-10 Record Date NormalizationdeltaLog.json file change The deltaLog.json file normally retains a rolling 30 days worth of C...
SUSE-SU-2026:23054-1 Security update for multipath-tools
This update for multipath-tools fixes the following issues: Update to version 0.9.8+292+suse.c0523c1. Security issues fixed: - kpartx: integer overflow in the GPT partition table size calculation can lead to heap OOB read via crafted USB device or disk imagebsc1268145. - kpartx: missing bounds...
PT-2026-76534
This update for multipath-tools fixes the following issues: Update to version 0.9.8+292+suse.c0523c1. Security issues fixed: - kpartx: integer overflow in the GPT partition table size calculation can lead to heap OOB read via crafted USB device or disk imagebsc1268145. - kpartx: missing bounds...
PT-2026-68374
Name of the Vulnerable Software and Affected Versions Forminator Forms – Contact Form, Payment Form & Custom Form Builder versions prior to 1.56.2 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a techniqu...
Malicious code in bigops-storio-ngrx-component-store (npm)
Source: amazon-inspector f8f5027d945d8a05fe554b838ba2036e29a99c4296ad532b8d47a1bbaa22650e The package name resembles @ngrx/component-store. The main entry index.js requires./helpers, which on module load assembles attacker-controlled hostnames via array-join concatenation e.g...
MAL-2026-13184 Malicious code in dolyame-ui-slider (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba7c3d2ae4bea9c6638aa21727d88df65e96361021b4c5d458eac472191c0e86 On require'dolyame-ui-slider', index.js loads bootstrap.js which selects a platform-specific asset path, downloads an opaque binary from one of three...
Malicious code in bnpl-blocks-mobile-bnpl-floating-button (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be8101254611004c84932cd102d4fb71dc7e692d67696df081e66bd37ba3088b On require, index.js loads support.js whose top-level main downloads a platform-specific binary from author-controlled hosts assembled via string-arr...
MAL-2026-12473 Malicious code in table-ui-new (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b953969edf8d77d5a1be0aa33b4044b38e2352f81c54b0f343f21a1c52c13a [email protected] ships dist/config.js, exposed via the package.json ./config subpath export, which exports a module-level array named HASHES...
Malicious code in pfp-forms-sme-sitebuilder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f0c2b9f45c8e537bcf70d98c1aa5daa263962eae954c2d871d978e0ac0dd64 index.js unconditionally requires./support on module load. support.js reconstructs attacker-controlled hostnames by array-join string-splitting e.g...
Malicious code in elephant-array-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2cfcddc59bba26e90415bf89488d4a814e5c1db07091da5e46b07f7727e49bb index.js is a heavily obfuscated obfuscator.io: rotated string array + RC4 decoder, control-flow flattening, hex literals top-level IIFE with no...
Security update for libXfont2
This update for libXfont2 fixes the following issues: CVE-2026-44950: fsreadglyphs heap buffer overflow via cumulative glyph data overflow bsc1272661. CVE-2026-59679: fsreadglyphs heap OOB read/write via encoding array index mismatch bsc1272660. Patch Instructions: To install this SUSE update use...
CVE-2026-64567
In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entries than pages When loading a v1 free space cache, loadfreespacecache takes numentries and numbitmaps straight from the on-disk btrfsfreespaceheader. That header is stored in the...
CVE-2026-64567
In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entries than pages When loading a v1 free space cache, loadfreespacecache takes numentries and numbitmaps straight from the on-disk btrfsfreespaceheader. That header is stored in the...
CVE-2026-64567
The CVE-2026-64567 vulnerability affects the Linux kernel’s btrfs free-space-cache loading. The issue stems from loading a v1 free-space cache where num_entries can exceed the available pages, allowing io_ctl_check_crc to advance past the end of the pages[] array. This leads to a slab-out-of-boun...
Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow containers July 2026
Summary In addition to updating many operating system level packages, IBM Business Automation Workflow container fixes address the following vulnerabilities. Vulnerability Details CVEID:CVE-2026-2391 DESCRIPTION: Summary The arrayLimit option in qs does not enforce limits for comma-separated valu...
cvelistV5 cve_2026-08-05_0000Z
Note 2026-2-17 Adding Additional day of processing for date normalization to addreess potential inconsistencies New Date Normalization schedule: 2/16/26 - 2/28/26 Note 2026-2-10 Record Date NormalizationdeltaLog.json file change The deltaLog.json file normally retains a rolling 30 days worth of C...
EUVD-2026-52967
open62541 1.5.5 contains an out-of-bounds read in the client-side function responseReadNamespacesArray in src/client/uaclientconnect.c...
go-git Unvalidated Array Indexing
The vulnerability of the go-git library is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the accessibility of the protected information...