39475 matches found
CVE-2026-48096 vulnerabilities
Vulnerabilities for packages: grafana...
CVE-2026-11697 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-11638 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-48006 vulnerabilities
Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, tez, celeborn...
CVE-2026-53438 vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-RCVQ-M9J9-6F4G vulnerabilities
Vulnerabilities for packages: kibana...
GHSA-M6WV-WH8G-64XC vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-G28P-6MCC-V4RV vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-92M7-4FPW-2WXM vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-463R-5M89-4XFR vulnerabilities
Vulnerabilities for packages: jenkins...
CVE-2026-46557 vulnerabilities
Vulnerabilities for packages: imagemagick...
CVE-2026-48006 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, pinot-fips, celeborn, thingsboard, tez...
Linux Distros Unpatched Vulnerability : CVE-2026-54057
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.3, kitty's OSC 21 color-control query reply reflects attacker-controlled bytes, includin...
CVE-2026-48165
MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrepsstreceiveaddress or wsrepsstdonor global system...
MAL-2026-5700 Malicious code in transportator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f40d878023c5462d17916a03d22d7c2e9e1573ab590f50532aa2e620e7a5a13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-50560
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty HTTP/2 max header size handling produces an attack similar to HTTP/2 Rapid Reset. There is a setting in the http2 specification called...
CVE-2026-48059
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the HAProxy PROXY protocol v2 codec in netty leaks native or heap memory on every connection when a client sends a syntactically valid header containing nest...
CVE-2026-47691
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext insufficiently validates the bailiwick of NS records, enabling DNS Cache Poisoning. An attacker controlling an authoritative name...
MAL-2026-5688 Malicious code in ecto-nightly-spirit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dea0702101217f4a918a23191023bbd9e7d3b5478028bb0868341a574526e97 On npm install, postinstall.js executes unconditionally and performs three installer-harming actions. 1 It enumerates every key/value pair in...
MAL-2026-5689 Malicious code in ecto-rust-read-f3a9c1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73d10b993d9601d0dfe78d143a550ed008b8233beb8b88b7443208e4d0fa89d On install, postinstall.js evaluates a targeting heuristic isRealTarget that fires only when the build environment looks like a real corporate...