14044 matches found
MAL-2026-14138 Malicious code in optimizely-starter-kit-for-fastly-compute (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b7bcd65cbf07a90130de5e4a29fb72bc99badb287a1e1dc7373c288a1ae0be package.json declares preinstall: node index.js, causing index.js to run automatically on npm install. The script collects host identifiers...
CVE-2026-73921
creationtimestamp| type| source ---|---|--- 2026-08-18 22:28:55+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfbby4xnp2c 2026-08-19 10:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgihppt7l2u 2026-08-19 11:01:13+00:00| seen|...
MINI-GQ4P-GJCW-42PF
Bulletin has no description...
CVE-2026-62544
creationtimestamp| type| source ---|---|--- 2026-08-18 22:15:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfakgn7oe2u 2026-08-19 03:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfs4h5k2r2t 2026-08-19 17:48:30+00:00| seen|...
CVE-2026-70796
...
CVE-2026-70735
...
CVE-2026-62500
The Common Events component of Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 is vulnerable to a network-accessible flaw exploitable by a low-privileged attacker via HTTP, enabling full system takeover with CVSS 3.1 score 8.8 (HIGH). Oracle's August 2026 CPU advisory addresses th...
CVE-2026-74979
creationtimestamp| type| source ---|---|--- 2026-08-18 20:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf37ecf7h2j 2026-08-19 04:46:51+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-21 15:07:06+00:00| see...
CVE-2026-74956
creationtimestamp| type| source ---|---|--- 2026-08-18 20:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf37cwmsx2j 2026-08-19 04:45:58+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 05:07:07+00:00| see...
kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...
CVE-2026-56684
creationtimestamp| type| source ---|---|--- 2026-08-18 14:52:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hymfdqmzkz53z...
CVE-2026-72156
A flaw was found in the Linux kernel's microchip-spi Field-Programmable Gate Array FPGA module. This vulnerability occurs in the mpfopsparseheader function when processing a bitstream. If a crafted bitstream sets the headersize to zero, the function attempts to read data from memory before the...
CVE-2026-75839
ArcadeDB versions ≤ 26.7.3 expose an IDOR in the Raft cluster-info endpoints (GetClusterHandler, PostBootstrapStateHandler): authenticated users lacking cross-database privileges can enumerate the server's full database registry and retrieve per-database metadata (names, transaction IDs, bootstra...
CVE-2026-75839
ArcadeDB com.arcadedb:arcadedb-server versions = 26.7.3 contain an insecure direct object reference IDOR vulnerability in the Raft cluster-info endpoints GetClusterHandler and PostBootstrapStateHandler, which authenticate but do not authorize access. On an ArcadeDB HA cluster only reachable when...
Heights Finance data breach: What customers need to know
Heights Finance Holdings' online data breach notification says an unauthorized party accessed a third-party cloud platform containing customer data, potentially exposing highly sensitive personal, banking, and identity information. Heights Finance is a consumer lender that offers personal...
389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...
BELL-CVE-2026-74382
Bulletin has no description...
EUVD-2026-60494
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to leak sensitive user information...
