io.quarkus:quarkus-hibernate-reactive (>=2.5.0.cr1, <=2.6.2.final), io.quarkus:quarkus-hibernate-reactive-deployment (>=2.5.0.cr1, <=2.6.2.final) +4 more potentially affected by CVE-2025-14969 via org.hibernate.reactive:hibernate-reactive-core (1.1.0.final)

org.hibernate.reactive:hibernate-reactive-core MAVEN version 1.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate.reactive:hibernate-reactive-core and may be impacted: - io.quarkus:quarkus-hibernate-reactive =2.5.0.cr1, =2.5.0.cr1,...

io.quarkus:quarkus-hibernate-reactive (>=2.2.0.cr1, <=2.4.0.cr1), io.quarkus:quarkus-hibernate-reactive-deployment (>=2.2.0.cr1, <=2.4.0.cr1) +4 more potentially affected by CVE-2025-14969 via org.hibernate.reactive:hibernate-reactive-core (1.0.0.cr9)

org.hibernate.reactive:hibernate-reactive-core MAVEN version 1.0.0.cr9 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate.reactive:hibernate-reactive-core and may be impacted: - io.quarkus:quarkus-hibernate-reactive =2.2.0.cr1, =2.2.0.cr1,...

CVE-2025-59095

The program libraries DLL and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is the function "EncryptAndDecrypt" in the library Kaba.EXOS.common.dll. This algorithm uses a simple XOR encryption technique combined with a cryptographic key cryptoKey to transform...

EUVD-2025-206357

The program libraries DLL and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is the function "EncryptAndDecrypt" in the library Kaba.EXOS.common.dll. This algorithm uses a simple XOR encryption technique combined with a cryptographic key cryptoKey to transform...

RHEL 8 : poppler (RHSA-2026:1091)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1091 advisory. Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Security Fixes: poppler: Out-of-Bounds Read in...

openSUSE Security Advisory (SUSE-SU-2026:0231-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-13920

creationtimestamp| type| source ---|---|--- 2026-01-24 15:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md6lhavi642c 2026-03-17 02:22:55+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-13920.yaml 2026-03-17...

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2026-0528 vulnerabilities

Vulnerabilities for packages: apm-server-fips, beats, cloudbeat, apm-server, cloudbeat-fips...

CVE-2026-23831 vulnerabilities

Vulnerabilities for packages: goreleaser, flux-source-controller, flux-source-controller-fips, skaffold, tflint-fips, zot, trivy-operator-fips, chainctl, policy-controller, kubescape, cloudbeat, cloudbeat-fips, kyverno-policy-reporter-plugins-kyverno-fips, trivy-fips, falcoctl-fips, tkn-fips,...

comet-common (>=1.0.5, <=2.0.1), iconrpcserver (>=1.0.3, <=1.1.2.1) +2 more potentially affected by CVE-2026-0994 via protobuf (3.5.1)

protobuf PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - comet-common =1.0.5, =1.0.3, =1.1.2.1 - melon-music-player 3.0.0a0 - noquant-futu 5.10.2208 Source cves: CVE-2026-0994 Source advisory:...

CVE-2025-13917

creationtimestamp| type| source ---|---|--- 2026-01-23 13:00:22+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3md3qyq7v5r2q...

CVE-2026-0927

creationtimestamp| type| source ---|---|--- 2026-01-23 07:23:16+00:00| seen| https://gist.github.com/Darkcrai86/30221df75e8d29c4c44a72efd5f3ce5b 2026-01-23 07:44:49+00:00| seen| https://gist.github.com/Darkcrai86/f6ceca6b6f5861138955c1b1e47ded28 2026-01-23 07:59:20+00:00| seen|...

CVE-2026-24388

creationtimestamp| type| source ---|---|--- 2026-01-22 17:30:15+00:00| seen| https://gist.github.com/Darkcrai86/a5cf9a93fd0e74ef40fc1c5974331a2e 2026-01-22 19:16:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mczvkklgul2j...

Security update for exiv2-0_26

This update for exiv2-026 fixes the following issues: Add reference for previously fixed issue: CVE-2025-55304: Fixed quadratic performance algorithm in the ICC profile parsing code of JpegBase::readMetadata bsc1248963. Patch Instructions: To install this SUSE update use the SUSE recommended...

Malicious Package

Overview @alluxio/common-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2026-4194

Malicious code in @alluxio/common-ui npm...

MAL-2026-451 Malicious code in @alluxio/common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f082b7a72d74e881f10d6e0f01c1aef7a0a07b0f446d5a9d31a4763ffed2ed8 The package @alluxio/common-ui was found to contain malicious code. Source: ghsa-malware...

Malicious code in @alluxio/common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f082b7a72d74e881f10d6e0f01c1aef7a0a07b0f446d5a9d31a4763ffed2ed8 The package @alluxio/common-ui was found to contain malicious code. Source: ghsa-malware...

CVE-2026-24001

creationtimestamp| type| source ---|---|--- 2026-01-22 05:04:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcyfwkwe6i2n 2026-01-23 12:01:03+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3md3nonjr7e2h 2026-03-19 00:00:00+00:00| seen|...