58202 matches found
GHSA-H9QX-V5XP-PH8P EGroupware has a Remote Code Execution Vulnerability
Summary A critical vulnerability has been identified in EGroupware that may lead to Remote Code Execution RCE. The issue allows an authenticated attacker to execute arbitrary commands on the server. If user self-registration is enabled, the vulnerability may be exploitable without prior...
MAL-2026-9954 Malicious code in zzjinavcssvn (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9547 Malicious code in xwandservmtg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9103 Malicious code in vand3flmy1778552525 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9091 Malicious code in v4zzgbqvirfx (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8938 Malicious code in swkefepbkjgqj (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8213 Malicious code in oaigx7857181 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7956 Malicious code in lbrssypnbowmaf (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7455 Malicious code in myproject234 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
CVE-2026-48891
creationtimestamp| type| source ---|---|--- 2026-07-07 11:48:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2jwvygdg2y 2026-07-07 12:11:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2l747p7b2y...
PYSEC-2026-1875 rockhopper Buffer Overflow vulnerability
A vulnerability, which was classified as critical, has been found in bwoodsend rockhopper up to 0.1.2. Affected by this issue is the function countrows of the file rockhopper/src/raggedarray.c of the component Binary Parser. The manipulation of the argument raw leads to buffer overflow. Local...
PYSEC-2026-2006 Defining resource name as integer may give unintended access in vantage6
Impact Malicious users may try to get access to resources they are not allowed to see, by creating resources with integers as names. One example where this is a risk, is when users define which users are allowed to run algorithms on their node. This may be defined by username or user id. Now, for...
PYSEC-2026-1425 gRPC Reachable Assertion issue
There exists an vulnerability causing an abort to be called in gRPC. The following headers cause gRPC's C++ implementation to abort when called via http2: te: x x != trailers :scheme: x x != http, https grpclbclientstats: x x == anything On top of sending one of those headers, a later header must...
PYSEC-2026-819 Graphite Web Cross-site Scripting vulnerability
A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute Time Range Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...
PYSEC-2026-910 pyRdfa3 Cross-site Scripting vulnerability
A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function getoption of the file pyRdfa/init.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e...
PYSEC-2026-805 Terms and Conditions Module vulnerable to Open Redirect
A vulnerability has been found in cyface Terms and Conditions Module up to 2.0.10 and classified as problematic. Affected by this vulnerability is the function returnTo of the file termsandconditions/views.py. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading...
PYSEC-2026-1005 TensorFlow vulnerable to `CHECK` failures in `UnbatchGradOp`
Impact The UnbatchGradOp function takes an argument id that is assumed to be a scalar. A nonscalar id can trigger a CHECK failure and crash the program. python import numpy as np import tensorflow as tf id is not scalar tf.rawops.UnbatchGradoriginalinput= tf.constant1,batchindex=tf.constant0,0,0 ...
PYSEC-2026-2087
The Config API in Apache Airflow surfaced per-key secrets-backend overrides environment variables like AIRFLOWSECRETSBACKENDKWARGSECRETID and AIRFLOWWORKERSSECRETSBACKENDKWARGSECRETID as synthetic config options whose option names were not in sensitiveconfigvalues, so the masker did not redact...
SUSE CVE-2026-14065
Insufficient validation of untrusted input in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...