12287 matches found
Malicious code in data-value (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1f0fee2d6635331e603f520ba2954b11ac9e85bbd5b66f27c18be5940c3041 package.json declares the package's own name 'data-value' as a dependency whose source is an arbitrary HTTPS URL...
MAL-2026-15533 Malicious code in data-value (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1f0fee2d6635331e603f520ba2954b11ac9e85bbd5b66f27c18be5940c3041 package.json declares the package's own name 'data-value' as a dependency whose source is an arbitrary HTTPS URL...
Fortigate syslog message parser can be exploited to modify or delete fields from the original message
Impact A security issue has been identified in Graylog affecting the parsing of syslog messages that use a key-value format, such as those generated by Fortigate devices. The vulnerability allows attackers to overwrite individual message fields, or to produce invalid messages which Graylog will...
CVE-2026-55841 Graylog: Fortigate syslog message parser can be exploited to modify or delete fields from the original message
Graylog is a free and open log management platform. Prior to Graylog Server versions 6.3.12, 7.0.7, and 7.1.2 and Graylog Forwarder version 7.3, the FortiGate key-value syslog parser in graylog2-server/src/main/java/org/graylog2/inputs/codecs/GLFortiGateSyslogEvent.java and...
CVE-2026-55841
Graylog (a free and open log management platform) is affected by a parsing flaw in its FortiGate key-value syslog parser (GLFortiGateSyslogEvent.java and SyslogCodec.java). The root cause is that KV_PATTERN and QUOTED_KV_PATTERN mishandle field-like text inside quoted values: crafted values conta...
SUSE CVE-2026-80709
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs There is a wrong upper limit check for the domain value when an EP11 CPRB is processed for sending to a crypto card. This check is only active on custom device node...
WordPress Library Management System plugin < 3.6.7 - Subscriber+ SQL Injection via Filter Value vulnerability
Subscriber+ SQL Injection via Filter Value vulnerability discovered by João Ramos Maciel in WordPress Plugin Library Management System versions 3.6.7...
CVE-2026-80709
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs There is a wrong upper limit check for the domain value when an EP11 CPRB is processed for sending to a crypto card. This check is only active on custom device node...
CVE-2026-80711
In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...
CVE-2026-80656
In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for btree node size Syzbot reported an uninit-value bug in 1 with a corrupted HFS+ image, during the file system mounting process, specifically while loading the catalog, a corrupted nodesize value of ...
CVE-2026-80656
In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for btree node size Syzbot reported an uninit-value bug in 1 with a corrupted HFS+ image, during the file system mounting process, specifically while loading the catalog, a corrupted nodesize value of ...
CVE-2026-80711
In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...
UBUNTU-CVE-2026-80656
In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for btree node size Syzbot reported an uninit-value bug in 1 with a corrupted HFS+ image, during the file system mounting process, specifically while loading the catalog, a corrupted nodesize value of ...
UBUNTU-CVE-2026-80711
In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...
CVE-2026-80712
This vulnerability affects the Linux kernel's spi-qpic-snand driver (Qualcomm QPIC SPI-NAND controller). The root cause is an off-by-one in SET_FEATURE command handling : qcom_spi_send_cmdaddr() submits and executes the command immediately, but the feature value is only written to NAND_FLASH_FEAT...
CVE-2026-80712
In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...
CVE-2026-80711
CVE-2026-80711 affects the Linux kernel power: supply: max17040 driver. The MAX17040 fuel gauge does not report charger state itself, so the driver forwards POWER_SUPPLY_PROP_STATUS to a supplier power supply. When no supplier is registered, power_supply_get_property_from_supplier() returns -ENOD...
CVE-2026-80711 power: supply: max17040: handle missing status supplier
In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...
EUVD-2026-67446
In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...
CVE-2026-80709
CVE-2026-80709 is a flaw in the Linux kernel s390/zcrypt subsystem. When an EP11 CPRB is processed for sending to a crypto card, an incorrect upper-limit check on the domain value is applied. This check is only active on custom device nodes but may lead to heap memory access behind perms->adm ...