624 matches found
CVE-2026-21006
Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents...
CVE-2026-21006
Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents...
CVE-2026-21006
Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents...
CVE-2026-21006
CVE-2026-21006 describes an improper access control in Samsung DeX (before SMR Apr-2026 Release 1) that lets a physical attacker access hidden notification contents. The entry specifies affected platform as Samsung DeX, with a minimal base impact on confidentiality (VULNERABLE: LOW; SUBSEQUENT: H...
PT-2026-32264
Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents...
Embedded Malicious Code
Overview @velora-dex/sdk is a SDK for the Velora API Affected versions of this package are vulnerable to Embedded Malicious Code that delivers a malicious payload through dist/index.js. An attacker uploaded a compromised version of the package directly to the npm registry. The payload runs a...
Malicious code in @velora-dex/sdk (npm)
Malicious npm package executing base64-decoded shell command to download and run stage-2 payload from C2 server 89.36.224.5 targeting macOS --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a732dd2745098176d2c19fe3edb359db6f6690b5d14b8d49e8a00b61325311 The packa...
MAL-2026-2510 Malicious code in @velora-dex/sdk (npm)
Malicious npm package executing base64-decoded shell command to download and run stage-2 payload from C2 server 89.36.224.5 targeting macOS --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a732dd2745098176d2c19fe3edb359db6f6690b5d14b8d49e8a00b61325311 The packa...
CVE-2026-33487 vulnerabilities
Vulnerabilities for packages: mattermost, gotrue-fips, dex-fips, mattermost-fips, neuvector, rancher, commercial-grafana, rancher-agent, teleport-operator-fips, neuvector-fips, zitadel, dex, omni, omni-fips, gotrue, teleport...
CVE-2026-33487 vulnerabilities
Vulnerabilities for packages: rancher, rancher-agent, teleport, dex, mattermost...
GHSA-479M-364C-43VC vulnerabilities
Vulnerabilities for packages: rancher, rancher-agent, teleport, dex, mattermost...
GHSA-479M-364C-43VC vulnerabilities
Vulnerabilities for packages: mattermost, gotrue-fips, dex-fips, mattermost-fips, neuvector, rancher, commercial-grafana, rancher-agent, teleport-operator-fips, neuvector-fips, zitadel, dex, omni, omni-fips, gotrue, teleport...
CVE-2026-27142 vulnerabilities
Vulnerabilities for packages: falcoctl, opentelemetry-collector-contrib, knative-eventing, smarter-device-manager, mc, minio, cluster-autoscaler, pulumi-language-dotnet, buildah, kube-metrics-adapter, metrics-server, fuse-overlayfs-snapshotter, external-dns, cluster-api-provider-vsphere, cortex,...
GHSA-RV83-G57W-FR8J vulnerabilities
Vulnerabilities for packages: aws-sigv4-proxy, nri-redis, kube-metrics-adapter, metacontroller, kserve-modelmesh-serving, cluster-api-provider-vsphere, crossplane-provider-aws-kms, langfuse, secrets-store-csi-driver-provider-azure, kubernetes-dashboard-web, runc, helm, kratos, gitlab-pages,...
GHSA-J3GX-2473-5FP8 vulnerabilities
Vulnerabilities for packages: aws-sigv4-proxy, nri-redis, kube-metrics-adapter, metacontroller, kserve-modelmesh-serving, cluster-api-provider-vsphere, crossplane-provider-aws-kms, langfuse, secrets-store-csi-driver-provider-azure, kubernetes-dashboard-web, runc, helm, gitlab-pages, nri-jmx,...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: falcoctl, opentelemetry-collector-contrib, knative-eventing, smarter-device-manager, mc, minio, cluster-autoscaler, pulumi-language-dotnet, buildah, kube-metrics-adapter, metrics-server, fuse-overlayfs-snapshotter, external-dns, cluster-api-provider-vsphere, cortex,...
CVE-2026-27139 vulnerabilities
Vulnerabilities for packages: aws-sigv4-proxy, nri-redis, kube-metrics-adapter, metacontroller, kserve-modelmesh-serving, cluster-api-provider-vsphere, crossplane-provider-aws-kms, langfuse, secrets-store-csi-driver-provider-azure, kubernetes-dashboard-web, runc, helm, kratos, gitlab-pages,...
CVE-2026-25679 vulnerabilities
Vulnerabilities for packages: aws-sigv4-proxy, nri-redis, kube-metrics-adapter, metacontroller, kserve-modelmesh-serving, cluster-api-provider-vsphere, crossplane-provider-aws-kms, langfuse, secrets-store-csi-driver-provider-azure, kubernetes-dashboard-web, runc, helm, gitlab-pages, nri-jmx,...
