Malicious code in player-common-controls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aef58425992286c8ee1bba6bb26ba161a52a852bb7ed8a6087e737b91d02e8b The package player-common-controls was found to contain malicious code...

MAL-2026-1820 Malicious code in player-common-controls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aef58425992286c8ee1bba6bb26ba161a52a852bb7ed8a6087e737b91d02e8b The package player-common-controls was found to contain malicious code...

Malicious code in player-common-composites (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4455f92c445aa0e00604813f2b53943a2ce8b7866175fcb84ab7bcd867f65f70 The package player-common-composites was found to contain malicious code...

MAL-2026-1819 Malicious code in player-common-composites (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4455f92c445aa0e00604813f2b53943a2ce8b7866175fcb84ab7bcd867f65f70 The package player-common-composites was found to contain malicious code...

Malicious code in ph-common (npm)

ph-common is a dependency-confusion package: it is described as a "Compatibility shim", uses version numbers up to 99.0.1, and its README calls it an "authorized dependency-confusion test". Each listed version has a postinstall script that runs node beacon.cjs on npm install, and index.js calls t...

MAL-2026-1809 Malicious code in ph-common (npm)

ph-common is a dependency-confusion package: it is described as a "Compatibility shim", uses version numbers up to 99.0.1, and its README calls it an "authorized dependency-confusion test". Each listed version has a postinstall script that runs node beacon.cjs on npm install, and index.js calls t...

io.github.johnjcool:keycloak-cas-services (4.5.0.final), org.keycloak:keycloak-authz-policy-common (4.5.0.final) +10 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (4.5.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.5.0.final -...

org.fintrace:keycloak-event-receiver-common (0.0.1), org.fintrace:keycloak-event-receiver-http (0.0.1) +11 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (4.0.0.beta1)

org.keycloak:keycloak-server-spi-private MAVEN version 4.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.fintrace:keycloak-event-receiver-common 0.0.1 -...

org.keycloak:keycloak-authz-policy-common (4.0.0.beta3), org.keycloak:keycloak-dependencies-server-min (4.0.0.beta3) +9 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (4.0.0.beta3)

org.keycloak:keycloak-server-spi-private MAVEN version 4.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.0.0.beta3 -...

io.github.johnjcool:keycloak-cas-services (4.4.0.final), org.keycloak:keycloak-authz-policy-common (4.4.0.final) +10 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (4.4.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.4.0.final -...

fr.cnieg.keycloak:attribute-login-provider (>=1.3.9, <=1.3.10), io.phasetwo.keycloak:keycloak-events (>=0.21, <=0.22) +41 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (22.0.5)

org.keycloak:keycloak-server-spi-private MAVEN version 22.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - fr.cnieg.keycloak:attribute-login-provider =1.3.9, =0.21, =0.44, =3.2.8.final,...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (2.0.0), fr.cnieg.keycloak:attribute-login-provider (1.3.5) +59 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (21.1.2)

org.keycloak:keycloak-server-spi-private MAVEN version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 2.0.0 -...

CVE-2018-20025

creationtimestamp| type| source ---|---|--- 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...

CVE-2010-5250

creationtimestamp| type| source ---|---|--- 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...

EulerOS 2.0 SP11 : cups (EulerOS-SA-2026-1573)

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects ...

Terrapack Arbitrary File Upload

Terrapack software suffers from an arbitrary file upload vulnerability that may allow attackers to execute arbitrary code. Affected software includes Terrapack TkWebCoreNG version 1.0.20200914, TKServerCGI version 2.5.4.150, and TpkWebGIS - Client version 1.0.0...

PT-2026-25914

Name of the Vulnerable Software and Affected Versions GL-iNet Comet GL-RM1 versions affected versions not specified Description The web interface for the KVM feature in GL-iNet Comet GL-RM1 does not restrict the number of login attempts. This allows attackers to perform brute-force attacks to...

Ubuntu: Security Advisory (USN-8094-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2026-26130

unknown...

EUVD-2026-12275

A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Impacted is the function...