23985 matches found
Malicious code in hardhat-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65f09d6bfd4d7c28183a13e64a9eb5e989fa7b24fbf92c049a044accefe4950 Package presents itself as a pino-compatible logger module.exports.pino = middleware; keywords fast/logger/stream/json but ships an RCE loader...
MAL-2026-16348 Malicious code in hardhat-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65f09d6bfd4d7c28183a13e64a9eb5e989fa7b24fbf92c049a044accefe4950 Package presents itself as a pino-compatible logger module.exports.pino = middleware; keywords fast/logger/stream/json but ships an RCE loader...
SUSE CVE-2026-76154
A stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer allows a user with the Editor role to execute arbitrary JavaScript in another user's session by hosting a malicious style configuration, enabling escalation to Org Admin...
Important: Red Hat Security Advisory: gstreamer1-plugins-base security update
An update for gstreamer1-plugins-base is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
gstreamer-plugins-base: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow
A flaw was found in GStreamer. This vulnerability, a stack-based buffer overflow, occurs during the parsing of OGG files due to improper validation of user-supplied data length. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file,...
PT-2026-96259
Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.2-lts Description Management chat-record routes authorize the path application id but load records using global chat id and chat record id values without verifying if the chat belongs to the authorized application...
gstreamer1-plugins-base security update
1.22.12-8.2 - Fix CVE-2026-18297: opusdec channel position bounds check Resolves: RHEL-246587 - Fix crash in RTSP auth credential parsing CVE-2026-85150 Resolves: RHEL-253753 1.22.12-8.1 - Sync with c9s release -5..-8: fix for CVE-2026-2921 in riff palette parsing Resolves: RHEL-156246...
ALSA-2026:69100 Important: gstreamer1-plugins-base security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow...
Important: gstreamer1-plugins-base security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow...
389-ds-base security update
1.3.11.1-5.0.13 - Security update for CVE-2026-11770 CVE-2026-11788 CVE-2026-15722 Orabug: 39892253 1.3.11.1-5.0.11 - Security update for CVE-2026-11610 CVE-2026-11774 Orabug: 39697075 1.3.11.1-5.0.9 - Security fix for CVE-2026-9064 Orabug: 39570202 1.3.11.1-5.0.7 - Security fix for CVE-2025-1490...
RHEL 9 : gstreamer1-plugins-base (RHSA-2026:69100)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69100 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages conta...
RHEL 8 : gstreamer1-plugins-base (RHSA-2026:69531)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69531 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a...
OESA-2026-3994 389-ds-base security update
389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fixes: A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an...
OESA-2026-3992 389-ds-base security update
389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fixes: A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an...
OESA-2026-3968 gstreamer1-plugins-base security update
GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...
OESA-2026-3967 gstreamer1-plugins-base security update
GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...
CVE-2026-86049 vulnerabilities
Vulnerabilities for packages: tensorflow-cpu-jupyter, jupyter-base-notebook...
GHSA-C3MW-737P-C7G2 vulnerabilities
Vulnerabilities for packages: tensorflow-cpu-jupyter, jupyter-base-notebook...
