91349 matches found
CVE-2026-59296: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Using untrusted, non-normalized input as-is for metrics data such as metric names, tag keys, or tag values is a dangerous antipattern that general-purpose instrumentation should never perform. Micrometer 1.17.0 Micrometer 1.16.0 - 1.16.6 Micrometer 1.15.0 - 1.15.12 Micrometer 1.14.0 - 1.14.16...
DockSec v2026.8.19
!CREATEDhttps://img.shields.io/badge/created-feb,%202025-blue?style=for-the-b...
GHSA-72X6-4J93-7W86 vulnerabilities
Vulnerabilities for packages: skaffold, trivy, scorecard, conftest, kaniko, zot, podman, kubescape, guac...
py-web-vuln-scanner
No d...
SecureAI-Scan v0.10.0
SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...
vigolium v0.4.3
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...
codex-security npm-v0.1.15
Codex Security @openai/codex-security is a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. See theCodex Security documentation for more details. Some cybersecurity requests and protected findings require approval through Trusted Access for Cyber. ...
zaproxy w2026-08-19
The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...
nodejsscan v4.8
nodejsscan Static security code scanner SAST for Node.js applications powered by libsast and semgrep. Made with in India Support nodejsscan Donate via Paypal: Sponsor the Project: e-Learning Courses & Certifications OpSecX Node.js Security: Pentesting and Exploitation - NJS Run nodejsscan...
CVE-2026-73542
Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product. As for the details of the affected products and versions, refer to the vendor's information...
CVE-2026-73542
Multiple SEIKO EPSON printers and scanners ship with revoked root certificates, enabling a network man-in-the-middle attack to intercept transmitted communication data (CVSS 3.1: LOW, 3.7). JPCERT/CC and Epson are the sources; specific affected models/versions are not listed in the provided docum...
EUVD-2026-63198
Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product. As for the details of the affected products and versions, refer to the vendor's information...
EUVD-2026-62937
In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...
PT-2026-78886
Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product. As for the details of the affected products and versions, refer to the vendor's information...
CVE-2026-66593: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...
CVE-2025-15637: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Shuffle = 1.8 versions...
CVE-2026-68564: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in NotificationX Pro = 3.1.4 versions...
CVE-2026-66594: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in WordPress Persistent Login = 3.1.0 versions...
CVE-2026-17424: Improper Limitation of a Pathname to a Restricted Directory
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass security restrictions due to improper limitation of a pathname to a restricted directory...