Malicious code in tailwindcss-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c6b39e2bde3263d10e2f20e707d06b981e746fda83ef7772233db33ae7a4f2 Package name mimics the legitimate tailwindcss-forms plugin repo field points at tailwindlabs/tailwindcss-forms but the main entry src/index.js is an...

Amazon Linux 2 : unbound (ALAS-2026-3928)

The version of unbound installed on the remote host is prior to 1.7.3-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3928 advisory. In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service...

EulerOS Virtualization 2.11.1 : openssl (EulerOS-SA-2026-3448)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to...

ROS-20260918-73-0058

The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

EulerOS 2.0 SP10 : perl-IO-Compress (EulerOS-SA-2026-3712)

According to the versions of the perl-IO-Compress packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob...

Cisco Identity Services Engine (cisco-sa-ise-rce-se7bYU57)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must...

EulerOS Virtualization 2.12.0 : perl-IO-Compress (EulerOS-SA-2026-3661)

According to the versions of the perl-IO-Compress package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled outp...

IBM MQ 9.1 < 9.1.0.38 LTS / 9.2 < 9.2.0.44 LTS / 9.3 < 9.3.0.42 LTS / 9.4 < 9.4.0.26 LTS / 9.3 - 10.0.0.0 CD < 10.0.0.5 (7284908)

The version of IBM MQ Server running on the remote host is 9.1.0.0 prior to 9.1.0.38 LTS, or 9.2.0.0 prior to 9.2.0.44 LTS, or 9.3.0.0 prior to 9.3.0.42 LTS, or 9.4.0.0 prior to 9.4.0.26 LTS, or a 9.3.x / 9.4.x CD release, or 10.0.0.0. It is, therefore, affected by a vulnerability as referenced i...

PT-2026-95630

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description The Change Audit System CAS listener is subject to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch. A network attacker with access to TCP port...

PT-2026-95445

Name of the Vulnerable Software and Affected Versions IBM MQ affected versions not specified Description A buffer overflow occurs when processing malformed compressed data on channels configured with compression enabled. This flaw allows a remote attacker to cause a denial of service or execute...

PT-2026-95715

Name of the Vulnerable Software and Affected Versions Totolink A3002MU version Hh-B20211125.1046 Description A remote buffer overflow exists in the formWlAc function within the /boafrm/formWlAc file. This issue occurs when the submit-url argument is manipulated, potentially allowing an attacker t...

EulerOS Virtualization 2.11.0 : dnsmasq (EulerOS-SA-2026-3497)

According to the versions of the dnsmasq packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with R...

Cisco Identity Services Engine (cisco-sa-ise-rce-se7bYU57)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must...

EulerOS 2.0 SP10 : samba (EulerOS-SA-2026-3722)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the 'pri...

EulerOS 2.0 SP10 : perl-IO-Compress (EulerOS-SA-2026-3759)

According to the versions of the perl-IO-Compress packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob...

EulerOS Virtualization 2.11.0 : python-ply (EulerOS-SA-2026-3552)

According to the versions of the python-ply packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile...

EulerOS 2.0 SP10 : containerd (EulerOS-SA-2026-3733)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels...

EulerOS Virtualization 2.11.0 : polkit (EulerOS-SA-2026-3539)

According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be...

EulerOS Virtualization 2.12.0 : shim (EulerOS-SA-2026-3673)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature...

EulerOS Virtualization 2.11.0 : openssl (EulerOS-SA-2026-3535)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to...