CVE-2026-74968

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:26+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74949

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:42+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 09:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtix3ozgqv22...

CVE-2026-74936

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:12+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 21:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtk5sspqbr25...

CVE-2026-70408

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:05+00:00| seen| https://jvn.jp/en/jp/JVN47716829 2026-08-19 05:53:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/drxjlkjzlugcu 2026-08-19 06:00:23+00:00| seen|...

EUVD-2026-62230

The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the AVCFAbilitiesMedia::register replace-media-file executecallback function in all versions ...

Malicious code in npm-wold (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731c22e563f2ea15800d87f345de9b8363c0c715e9f39606201d47a8fb422ab1 [email protected] declares a postinstall script node dist/config.js that, on npm install, issues an HTTPS GET to the hardcoded endpoint...

Malicious code in config-helper-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1033a9895c7d1a1b4d2c3f671caa239bd40f3985ab71d096fd25fbb7c977ef71 [email protected] exposes a default function getPlugin that issues an HTTPS request to a hardcoded bare-IP host...

Malicious code in animate-css-vite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d6c86a03c6106e799d0817676fcc92f022b64790aab209aa9fe663c085c4e6 plugin.js contains an RC4/base64 string-array obfuscated function invoked from the exported createPlugin factory. When a consumer's build instantiate...

Malicious code in ambera (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d24544221570c21c3b710d7c4d39ed76e7cc8b43a555bb7c8e6fefa78aa3f625 The package presents itself as a zero-dependency SVG helper, but its exported getPlugin function performs an HTTPS GET to the hardcoded host...

GHSA-2QJ4-MMR9-4V2F vulnerabilities

Vulnerabilities for packages: trino, management-api-for-apache-cassandra-5.0, tez, celeborn, thingsboard...

GHSA-PRG7-HCFM-MFCR vulnerabilities

Vulnerabilities for packages: mycli, mlflow, airflow...

PT-2026-78839

Name of the Vulnerable Software and Affected Versions chenhg5 cc-connect versions prior to 1.4.2 Description Remote code injection is possible through the manipulation of the exec argument within the Authenticate function located in the core/webhook.go file. Recommendations Update to a version...

PT-2026-78741

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description A user without admin or power roles can achieve Remote Code...

PT-2026-78429

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description The Network Installation Management NIM component contains a flaw where special elements used in OS commands are not properly neutralized. This allows a remote authenticated...

PT-2026-78406

Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.8.1 Description The Gremlin query engine contains a flaw where the ArcadeGremlin.executeStatement function silently reverts to an insecure Groovy engine if a request includes any query parameter and the query fail...

PT-2026-78669

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An integer overflow allows a remote attacker to execute arbitrary code. An integer overflow occurs when an arithmetic operation attempts to create a numeric value that is...

PT-2026-78400

Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.1.58 Description A remote code execution issue exists in the Repo.init function. The software forwards unsafe git options without proper validation, allowing an attacker to provide a template parameter that points...

CVE-2026-51366

Bottinelli Informatica Vedo Suite v.1.2.5 is affected by a SQL injection vulnerability in the api_vedo/chat endpoint via the utente_chat parameter. A remote, low-privilege attacker can exploit this to achieve arbitrary code execution , resulting in full compromise of confidentiality, integrity, a...

PT-2026-78267

The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the AVCF Abilities Media::register replace-media-file execute callback function in all versio...

PT-2026-78464

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Remote authenticated attackers can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the system fai...