16411 matches found
MAL-2026-61 Malicious code in oj-sp-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4192506d43fafb67a79ea826406a174aa2d05bfc74c3df203366e1ec7cdce0af The package oj-sp-common was found to contain malicious code. Source: ghsa-malware 0321cb6ed931a42d70b5f2e4cf235b07bd7ce205d6781729c28cfe5475a1ad9b A...
Malicious code in oj-sp-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4192506d43fafb67a79ea826406a174aa2d05bfc74c3df203366e1ec7cdce0af The package oj-sp-common was found to contain malicious code. Source: ghsa-malware 0321cb6ed931a42d70b5f2e4cf235b07bd7ce205d6781729c28cfe5475a1ad9b A...
EUVD-2026-1139
Malicious code in oj-sp-common-strings npm...
SUSE CVE-2025-12559
Mattermost versions 11.0.x = 11.0.2, 10.12.x = 10.12.1, 10.11.x = 10.11.4, 10.5.x = 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/channelid/commonteams endpoint...
python3.12 security update
3.12.12-1 - Update to 3.12.12 - Security fix for CVE-2025-8291 and CVE-2025-12084 Resolves: RHEL-128364, RHEL-135391...
SUSE SLES15: apache2 / apache2-devel / apache2-event / apache2-manual / etc (SUSE-SU-2026:0020-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0020-1 advisory. - CVE-2025-55753: Fixed modmd ACME unintended retry intervals bsc1254511 - CVE-2025-65082: Fixed CGI environment...
CVE-2025-15198
creationtimestamp| type| source ---|---|--- 2026-01-05 22:07:24+00:00| seen| Telegram/Ue9D88akPtcSqJqcQnzdsM4jMnd7f4RtTY-JP7TQys-dy8...
Security Bulletin: IBM® IBM Common Licensing using WebSphere Application Server and WebSphere Application Server Liberty are affected by SMTP injection due to Jakarta Mail (CVE-2025-7962)
Summary Vulnerability in javaMail-1.5, javaMail-1.6, mail-2.0, or mail-2.1 features affects IBM WebSphere Application Server Liberty 17.0.0.3 - 25.0.0.11 with specific features enabled. Following IBM® Engineering Lifecycle Management product is vulnerable to this attack, and addressed in this...
CVE-2025-15452
creationtimestamp| type| source ---|---|--- 2026-01-05 04:45:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbnmxn2vsp2y...
EUVD-2026-0943
Malicious code in spire.officejs-common npm...
MAL-2026-39 Malicious code in spire.officejs-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5bc6046960bccab3120bb794cc2c868fa2bb41e0d35028f39e2e9ca9033a80 The package spire.officejs-common was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in spire.officejs-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5bc6046960bccab3120bb794cc2c868fa2bb41e0d35028f39e2e9ca9033a80 The package spire.officejs-common was found to contain malicious code. Source: ossf-package-analysis...
CVE-2025-64121
Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Authentication Bypass.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...
EUVD-2026-0733
Malicious code in orchestration-node-common-errors npm...
MAL-2026-21 Malicious code in orchestration-node-common-errors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35f5a5c8b3e75118553234caeef3ebb1eb546d8a678904707d18ef47a16ab9b The package orchestration-node-common-errors was found to contain malicious code. Source: ghsa-malware...
Malicious code in orchestration-node-common-errors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35f5a5c8b3e75118553234caeef3ebb1eb546d8a678904707d18ef47a16ab9b The package orchestration-node-common-errors was found to contain malicious code. Source: ghsa-malware...
CVE-2025-55065
CWE-89 Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...
CVE-2025-67158
An authentication bypass in the /cgi-bin/jvsweb.cgi endpoint of Revotech I6032W-FHW v1.0.0014 - 20210517 allows attackers to access sensitive information and escalate privileges via a crafted HTTP request...
CVE-2025-15407
creationtimestamp| type| source ---|---|--- 2026-01-01 18:28:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbez2vrux42y 2026-01-02 18:52:25+00:00| published-proof-of-concept| Telegram/frMBNFr4dxsb7OolQ--BQHkgd4kUrm0gGJMdqCQX5AgtUdY 2026-01-02 21:54:16+00:00|...