319685 matches found
Trust Me, Import This: Dependency Steering Attacks Via Malicious Agent Skills
LLM-powered coding agents increasingly make software supply chain decisions. They generate imports, recommend packages, and write installation commands. Prior work showed that these systems can hallucinate non-existent package names, which attackers may register as malicious packages. In this...
PT-2026-39427
Name of the Vulnerable Software and Affected Versions Industrial Application Software IAS Canias ERP version 8.03 Description Improper authentication exists in the RMI Interface component. A remote attacker can manipulate the sessionId argument within the doAction function to bypass authenticatio...
DEBIAN-CVE-2026-8212
A flaw has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf-eos/SWapi.c. Executing a manipulation can lead to heap-based buffer overflow. The attack requires local access. The exploit has been published and may be...
CVE-2026-42571
Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is a a privilege escalation vulnerability affecting Pelican's Web User Interface WebUI. This attack allows any user...
OESA-2026-2261 hdf5 security update
HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...
BELL-CVE-2026-43282
Bulletin has no description...
BELL-CVE-2026-43237
Bulletin has no description...
BELL-CVE-2026-43254
Bulletin has no description...
BELL-CVE-2026-43247
Bulletin has no description...
BELL-CVE-2026-43235
Bulletin has no description...
BELL-CVE-2026-43181
Bulletin has no description...
BELL-CVE-2026-43174
Bulletin has no description...
BELL-CVE-2026-43179
Bulletin has no description...
BELL-CVE-2026-43166
Bulletin has no description...
BELL-CVE-2026-43195
Bulletin has no description...
BELL-CVE-2026-43155
Bulletin has no description...
BELL-CVE-2026-43122 CVE-2026-43122 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-43142
Bulletin has no description...