40922 matches found
EUVD-2026-55804
npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary terminal control characters in a dependency's package.json homepage or repository URL fields. When a developer runs ncu with the --form...
MGASA-2026-0330 Updated php8.5 packages fix security vulnerabilities
Updated php 8.5 packages fix some security vulnerabilities. For details see the references...
Updated php8.5 packages fix security vulnerabilities
Updated php 8.5 packages fix some security vulnerabilities. For details see the references...
CVE-2026-68386 bpf, sockmap: Reject unhashed UDP sockets on sockmap update
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject unhashed UDP sockets on sockmap update UDP sockets get SOCKRCUFREE set when auto-bound. This means skisrefcountedunbound = true, while skisrefcountedbound = false. Because sockmap accepts unbound UDP sockets,...
CVE-2026-68386
The CVE concerns the Linux kernel’s BPF sockmap path. It describes a vulnerability where unhashed UDP sockets accepted by sockmap can have their refcount incremented via a BPF lookup, and if the socket becomes bound, the subsequent bpf_sk_release() may skip decreasing the refcount, leading to a m...
Exploit for Expression Language Injection in N8N
CVE-2026-65591 Name of the Vulnerable Software and Affected Ve...
Photon OS 5.0: Binutils PHSA-2025-5.0-91-0488
An update of the binutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0488. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
PT-2026-69948
Name of the Vulnerable Software and Affected Versions npm-check-updates versions prior to 23.0.3 Description An issue exists where an attacker can embed arbitrary terminal control characters within the homepage or repository URL fields of a dependency's package.json file. When a developer execute...
Photon OS 5.0: Apache PHSA-2023-5.0-91-0093
An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0093. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-73035: Improper Neutralization of Escape, Meta, or Control Sequences
npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary terminal control characters in a dependency's package.json homepage or repository URL fields. When a developer runs ncu with the --form...
Photon OS 5.0: Expat PHSA-2026-5.0-91-0756
An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0756. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Gstreamer PHSA-2025-5.0-91-0461
An update of the gstreamer package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0461. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Calico PHSA-2023-5.0-91-0049
An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0049. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Perl PHSA-2026-5.0-92-0946
An update of the perl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0946. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
EUVD-2026-54649
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/search/batch FHIR surface allows an authenticated caller with only coarse operation authorities to act on...
CVE-2026-15970 L7 intention authorization bypass via custom public listener
Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypass when a service proxy is configured with a custom public listener. An authenticated mesh workload may reach HTTP paths that are blocked by a path-based deny intention. This...
ClamAV Vulnerabilities Affecting Cisco Products: August 2026
Multiple vulnerabilities in ClamAV could allow a remote attacker to cause a denial of service DoS condition, interrupting scanning operations. For more information about these vulnerabilities, see the Details "details" section of this advisory. For additional information on these vulnerabilities ...
CVE-2026-7405
creationtimestamp| type| source ---|---|--- 2026-08-07 12:45:12+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-autodesk-11...