ch.sbb.releasetrain:jsfbootadapter (0.0.25), ch.sbb.releasetrain:webui (0.0.25) +343 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (4.2.7.release)

org.springframework:spring-webmvc MAVEN version 4.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.sbb.releasetrain:jsfbootadapter 0.0.25 - ch.sbb.releasetrain:webui 0.0.25 -...

org.webjars.npm:github-com-daichirata-vue-sanitize (0.2.2), org.webjars.npm:github-com-daichirata-vue-sanitize- (0.2.2) potentially affected by CVE-2026-63670 via org.webjars.npm:sanitize-html (2.7.0)

org.webjars.npm:sanitize-html MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:sanitize-html and may be impacted: - org.webjars.npm:github-com-daichirata-vue-sanitize 0.2.2 -...

CVE-2026-48554

CVE-2026-48554 affects Nagios Core (before 4.5.14) and Nagios XI (before 2026R1.7). An authenticated remote code execution flaw exists via unfiltered NOTIFICATION-family macro substitution in the com_data parameter. If a notification command uses $NOTIFICATIONCOMMENT$ or $NOTIFICATIONAUTHOR$ in a...

CVE-2026-57105

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:11+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:07+00:00| seen|...

CVE-2026-59136

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

CVE-2026-59136

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

CVE-2026-59136

CVE-2026-59136 affects Microsoft COM for Windows due to use of an uninitialized resource, enabling a locally authorized attacker to disclose information. The vulnerability impact is information disclosure with a CVSS v3.1 base score of 5.5 (Medium); attack requires local access, low privileges, a...

CVE-2026-59136 Microsoft COM for Windows Information Disclosure Vulnerability

...

EUVD-2026-56315

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

CVE-2026-59136 Microsoft COM for Windows Information Disclosure Vulnerability

...

Microsoft COM for Windows Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

CVE-2026-59136: Use of Uninitialized Resource

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

PT-2026-70415

Name of the Vulnerable Software and Affected Versions Microsoft COM for Windows affected versions not specified Description An authorized attacker can locally disclose sensitive information due to the use of an uninitialized resource in Microsoft COM Component Object Model, a platform for softwar...

Malicious code in merchantweb-lang-cookie-reset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff16333aa7ffc7fc2c7decc1458c23b7d89f8caacb5c6129ba76168d08ec4be package.json declares the sole dependency packet-table-thread-stream as a direct tarball URL to a non-npm host...

MAL-2026-13210 Malicious code in @ohos-ports/codex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516484e6fdd2f0f358d0973e15a4443ab6555c9eca3770e51a13ee3f5196b266 The package's package.json declares its dependency "@openai/codex" as a direct tarball URL:...

Malicious code in streak-daykit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7d8d4f5dc118e83eddeb156c2687b1ef439348e3006579eae48f219488cc6b On import of the package's main entry, a top-level bootstrap IIFE in index.mjs runs a Linux-gated routine that detects a WSL environment by probing...

CVE-2026-18907

The TECNO Hi Browser (com.talpa.hibrowser) version 2.23.1.1 on Android is vulnerable to a Path Traversal vulnerability (CWE-23) in its download file feature . The root cause is that the browser trusts an attacker-controlled Content-Disposition filename and fails to sanitize path separators or per...

CLSA-2025-1763597218 TuxCare security update for com.h2database (4 CVEs)

TuxCare rebuilt 2 com.h2database packages to address 4 CVEs. Fixed in 1.4.200-tuxcare.1...

CLSA-2025-1752019363 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 5 com.google.guava packages to address 2 CVEs. Fixed in 31.1-jre.tuxcare.1...

CVE-2026-18610 NewType WebEIP EIP_Com_FileList.aspx improper authentication

A vulnerability was detected in NewType WebEIP up to 3.0. This affects an unknown part of the file /EIPComFileList.aspx. The manipulation results in improper authentication. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early abo...