15227 matches found
CGA-43W3-6JFH-F5H9
Bulletin has no description...
ROOT-APP-MAVEN-CVE-2024-22201 CVE-2024-22201 in org.eclipse.jetty.http2:jetty-http2-common - Patched by Root
Root has patched CVE-2024-22201 in the org.eclipse.jetty.http2:jetty-http2-common package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-5115 CVE-2025-5115 in org.eclipse.jetty.http2:jetty-http2-common - Patched by Root
Root has patched CVE-2025-5115 in the org.eclipse.jetty.http2:jetty-http2-common package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-1948 CVE-2025-1948 in org.eclipse.jetty.http2:jetty-http2-common - Patched by Root
Root has patched CVE-2025-1948 in the org.eclipse.jetty.http2:jetty-http2-common package for Root:Maven. Multiple fixed versions available...
CVE-2026-72832: Improper Neutralization of Input During Web Page Generation
Grav versions from 1.5.2 through 2.0.12 contain a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. The event-handler scan is anchored at ?, which cannot cross the first literal ; when a appears inside a quoted attribute value the...
MAL-2026-13973 Malicious code in @khaznatech/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ac302f60b532a4e864c576593db300a20abba96ae2a53ba5da0cc06d8dc911 The package's preinstall script install-report.js runs automatically on npm install and performs an HTTPS GET to a hardcoded webhook.site capture...
Malicious Package
Overview @khaznatech/common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
com.ongres.scram/scram-client: com.ongres.scram/scram-common: SCRAM Libraries: Authentication downgrade via TLS man-in-the-middle attack
A flaw was found in the SCRAM Salted Challenge Response Authentication Mechanism client and common libraries. An attacker performing a man-in-the-middle MITM attack on a Transport Layer Security TLS connection can silently downgrade the authentication process. This vulnerability allows the attack...
com.ongres.scram/scram-client: com.ongres.scram/scram-common: SCRAM Libraries: Authentication downgrade via TLS man-in-the-middle attack
A flaw was found in the SCRAM Salted Challenge Response Authentication Mechanism client and common libraries. An attacker performing a man-in-the-middle MITM attack on a Transport Layer Security TLS connection can silently downgrade the authentication process. This vulnerability allows the attack...
UBUNTU-CVE-2026-48702
Rekor is a software supply chain transparency log. Starting in version 0.3.0 and prior to version 1.5.2, the Package.Unmarshal function in pkg/types/alpine/apk.go decompresses the signature and control gzip members of an APK file into in-memory buffers without bounding the total decompressed size...
DEBIAN-CVE-2026-49478
Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity. Versions through 1.8.5 improperly follow cross-host redirects and attach Kubernetes ServiceAccount tokens during OIDC discovery, allowing a malicious or compromised issuer to perform blind...
CVE-2026-62728 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
ROOT-OS-ALPINE-323-CVE-2026-11564 CVE-2026-11564 in curl - Patched by Root
Root has patched CVE-2026-11564 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...
CVE-2026-62728: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-68206
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common validation path does not verify the active L0/L1 reference counts before driver-specific code...
kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
A flaw was found in the Linux kernel's CIFS Common Internet File System client. When the cifssanitizeprepath function processes specially crafted input, such as an empty string or a string containing only delimiters, it can attempt to read data beyond its allocated memory buffer. This out-of-boun...
CVE-2026-56793
creationtimestamp| type| source ---|---|--- 2026-08-09 15:04:41+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117066162544319010 2026-08-09 15:04:41+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msnubd3w252d...
CGA-3PVV-7XC4-F353
Bulletin has no description...
