42118 matches found
CVE-2026-56820 vulnerabilities
Vulnerabilities for packages: cassandra, thingsboard, management-api-for-apache-cassandra-5.0, tez...
GHSA-272M-GCWP-MPWG vulnerabilities
Vulnerabilities for packages: cassandra, thingsboard, management-api-for-apache-cassandra-5.0, tez...
CVE-2026-56822 vulnerabilities
Vulnerabilities for packages: cassandra, thingsboard, management-api-for-apache-cassandra-5.0, tez...
CVE-2026-55833 vulnerabilities
Vulnerabilities for packages: druid, thingsboard, logstash, infinispan, strimzi-kafka-operator, apache-pulsar, cloudwatch-exporter, apicurio-registry, wavefront-proxy, zipkin, apache-nifi, flyway, apache-activemq-artemis, opensearch, neo4j, akhq, tez, kserve-modelmesh,...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
SUSE CVE-2026-10050
In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...
SUSE CVE-2026-52688
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
CVE-2026-53600 vulnerabilities
Vulnerabilities for packages: zed...
GHSA-89XV-2M56-2M9X vulnerabilities
Vulnerabilities for packages: langfuse, keep, keep-fips, jitsucom-jitsu, langfuse-fips, homepage, peerdb-ui...
PT-2026-64379
Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.11.1 Description A double-free issue exists in the sftp open function within src/sftp.c. This occurs when a malicious SSH server responds to SSH FXP OPEN with SSH FXP STATUS containing FX OK, causing the response da...
CVE-2026-38764
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...
GHSA-R7WM-3CXJ-WFF9 vulnerabilities
Vulnerabilities for packages: flyway, strimzi-kafka-operator, dependency-track, opensearch, cass-config-builder, keycloak-config-cli, gradle, apicurio-registry, akhq, infinispan, apache-nifi-registry, tez, wildfly, spdx-tools-java, logstash...
Malicious code in yuinpm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f439dbbb74a729ef5c43bdc62f612060dbc9e6a96b825c8305b88dd43b3172 Package [email protected] contains 3 files and produced no a static rule matches and no traced-code findings indicating exfiltration, install-time...
Malicious code in svelte-streak-metrics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45dbfe79dd6fb079811b798a734de0a661605d420454d97a0635dbdaec621efd The package contains no static or traced indicators of exfiltration, install-time remote code execution, silent-relay, credential distribution,...
GHSA-V56Q-MH7H-F735 vulnerabilities
Vulnerabilities for packages: rancher-api-ui, vitess, nextcloud-server...
GHSA-5QHF-9PHG-95M2 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, ruby4.0-rails...
CVE-2026-59880 vulnerabilities
Vulnerabilities for packages: keep, keep-fips, authentik-fips, vitess, rancher-api-ui, authentik, nextcloud-server...