16396 matches found
@oneuptime/cli (>=10.0.5, <=10.0.22) potentially affected by CVE-2026-32306 via @oneuptime/common (>=10.0.5, <=10.0.22)
@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.22 Source cves: CVE-2026-32306 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15669899...
CVE-2026-31885
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and stepindex values from input data. This vulnerability is fixed in 3.24.0...
Malicious code in fusion-internal-common-drzak (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a185377a78b169ac6bc30d82d4ba1031a1a2b7024e15a17ae5a2df8bc8fefc2 The package fusion-internal-common-drzak was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview fusion-internal-common-drzak is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
MAL-2026-1397 Malicious code in fusion-internal-common-drzak (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a185377a78b169ac6bc30d82d4ba1031a1a2b7024e15a17ae5a2df8bc8fefc2 The package fusion-internal-common-drzak was found to contain malicious code. Source: ghsa-malware...
CVE-2026-28793
creationtimestamp| type| source ---|---|--- 2026-03-12 17:32:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mguwm4hwro2n 2026-03-12 20:32:26+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2f24-mg4x-534q 2026-03-13 06:40:06+00:00| seen|...
Malicious code in b2b-common-cb-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0699be4242e2a015c76aad1b5ee1f2482f01a59017778511108ed33b8729a8e The package b2b-common-cb-lib was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview b2b-common-cb-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2026-27591
creationtimestamp| type| source ---|---|--- 2026-03-12 01:30:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116213614461031957 2026-03-12 12:48:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mgugq5rnq32h 2026-03-12 23:01:22+00:00| seen|...
ppg-common (>=1.2.0, <=1.67.0) potentially affected by CVE-2026-35536 via tornado (4.5.0)
tornado PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - ppg-common =1.2.0, =1.67.0 Source cves: CVE-2026-35536 Source advisory: OSV:GHSA-78CV-MQJ4-43F7...
CVE-2025-70024
An issue pertaining to CWE-89: Improper Neutralization of Special Elements used in an SQL Command was discovered in benkeen generatedata 4.0.14...
ppg-common (>=1.2.0, <=1.67.0) potentially affected by CVE-2026-31958 via tornado (4.5.0)
tornado PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - ppg-common =1.2.0, =1.67.0 Source cves: CVE-2026-31958 Source advisory: OSV:PYSEC-2026-140...
gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-31826 via pypdf (4.3.0)
pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-31826 Source advisory: OSV:GHSA-HQMH-PPP3-XVM7...
编号撤回
“ring”（Brian Smith）。“ring”。 “The R Foundation”“R”（The R Foundation）。“R”。“Supabase Auth”（Supabase）。“Auth”。CVE。...
EUVD-2026-10797
Cwe is not in rca categories in Microsoft Authenticator allows an unauthorized attacker to disclose information locally...
@oneuptime/cli (>=10.0.5, <=10.0.20), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-30959 via @oneuptime/common (>=7.0.141, <=10.0.20)
@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-30959 Source advisory: MEND:CVE-2026-30959...
@oneuptime/cli (>=10.0.5, <=10.0.20), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-30958 via @oneuptime/common (>=7.0.141, <=10.0.20)
@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-30958 Source advisory: MEND:CVE-2026-30958...
@oneuptime/cli (>=10.0.5, <=10.0.20), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-30957 via @oneuptime/common (>=7.0.141, <=10.0.20)
@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-30957 Source advisory: MEND:CVE-2026-30957...
@oneuptime/cli (>=10.0.5, <=10.0.20), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-30956 via @oneuptime/common (>=7.0.141, <=10.0.20)
@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-30956 Source advisory: MEND:CVE-2026-30956...
