2523 matches found
MAL-2026-2733 Malicious code in buildkite-test-collector-jest-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fa2618170566c342534726ad9c855cf62ad98ee9b6e815e5324c5bc4779da2 The package buildkite-test-collector-jest-example was found to contain malicious code...
MAL-2026-2732 Malicious code in buildkite-test-collector-jasmine-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e8247a020880206aa9a5d4eb40d4b1f61cf39245356fd6e91db063d0c14b79 The package buildkite-test-collector-jasmine-example was found to contain malicious code...
Malicious code in buildkite-test-collector-cypress-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c10094969be88bd9f1aa924abf89c5dc58dd70e107adf3c95a3f58c0ba86518 The package buildkite-test-collector-cypress-example was found to contain malicious code...
MAL-2026-2731 Malicious code in buildkite-test-collector-cypress-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c10094969be88bd9f1aa924abf89c5dc58dd70e107adf3c95a3f58c0ba86518 The package buildkite-test-collector-cypress-example was found to contain malicious code...
Security Bulletin: IBM Edge Data Collector uses cryptography-44.0.1-cp39-abi3-manylinux_2_34_x86_64.whl which is vulnerable to CVE-2026-26007.
Summary IBM Edge Data Collector uses cryptography-44.0.1-cp39-abi3-manylinux234x8664.whl which is vulnerable to CVE-2026-26007. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-26007 DESCRIPTION: cryptography is a package designed to expose...
Security Bulletin: IBM Edge Data Collector uses pillow-10.3.0-cp39-cp39-manylinux_2_28_x86_64.whl which is vulnerable to CVE-2026-25990.
Summary IBM Edge Data Collector uses pillow-10.3.0-cp39-cp39-manylinux228x8664.whl which is vulnerable to CVE-2026-25990. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-25990 DESCRIPTION: Pillow is a Python imaging library. From 10.3.0 to...
CVE-2026-33784
A Use of Default Password vulnerability in the Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows an unauthenticated, network-based attacker to take full control of the device. vLWC software images ship with an initial password for a high privileged account. A change ...
CVE-2026-21915
A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows a local, high privileged attacker to escalate their privileges to root. The CLI menu accepts input without carefully validating it, which allows for shell...
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: eksctl, scorecard, crossplane, external-secrets-operator, witness, policy-controller, knative-operator, pulumi, rabbitmq-messaging-topology-operator, tofu-controller, weaviate, k8ssandra-client, falco-no-driver, coredns, paranoia, kyverno, fscrypt, libnvidia-containe...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: cert-manager, prometheus-operator, runc, kube-fluentd-operator, kubernetes-dashboard, gatekeeper, spire-server, external-secrets-operator, knative-operator, aws-flb-kinesis, telegraf, fuse-overlayfs-snapshotter, net-kourier, go, zot, aactl, gitlab-kas, falco-no-drive...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: eksctl, cert-manager-csi-driver, delve, sftpgo-plugin-pubsub, cis-operator, flux-image-reflector-controller, scorecard, crossplane, external-secrets-operator, witness, policy-controller, knative-operator, crossplane-provider-azure-storage, grafana-pyroscope,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: teleport-operator-fips, postgres-operator, influx, rabbitmq-messaging-topology-operator-fips, rqlite-fips, descheduler, flux-helm-controller, prometheus-operator, amazon-cloudwatch-agent-fips, terraform-provider-time, xeol, spegel, cephcsi, nri-cassandra, dask-gatewa...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: aws-s3-controller, seaweedfs, teleport-operator-fips, k8ssandra-client, secrets-store-csi-driver-provider-azure-fips, grafana-agent-operator, postgres-operator, influx, cloud-provider-aws, rabbitmq-messaging-topology-operator-fips,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: aws-s3-controller, seaweedfs, teleport-operator-fips, k8ssandra-client, secrets-store-csi-driver-provider-azure-fips, grafana-agent-operator, postgres-operator, influx, cloud-provider-aws, rabbitmq-messaging-topology-operator-fips,...
EUVD-2026-21078
A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows a local, high privileged attacker to escalate their privileges to root. The CLI menu accepts input without carefully validating it, which allows for shell...
EUVD-2026-21203
A Use of Default Password vulnerability in the Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows an unauthenticated, network-based attacker to take full control of the device. vLWC software images ship with an initial password for a high privileged account. A change ...
CVE-2026-33784
A Use of Default Password vulnerability in the Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows an unauthenticated, network-based attacker to take full control of the device. vLWC software images ship with an initial password for a high privileged account. A change ...
CVE-2026-21915
A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows a local, high privileged attacker to escalate their privileges to root. The CLI menu accepts input without carefully validating it, which allows for shell...
CVE-2026-33784 JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged access
A Use of Default Password vulnerability in the Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows an unauthenticated, network-based attacker to take full control of the device. vLWC software images ship with an initial password for a high privileged account. A change ...
CVE-2026-33784 JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged access
A Use of Default Password vulnerability in the Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows an unauthenticated, network-based attacker to take full control of the device. vLWC software images ship with an initial password for a high privileged account. A change ...