6108 matches found
EUVD-2026-52017
A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function ReportingRCBWriteAccessHandler of the file src/iec61850/server/mmsmapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not ...
MAL-2026-11484 Malicious code in simple-date-formatter-util-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f633eec2e322fce0493ff996493eebe8036c628be4ab0caf4844928d6ccdf10f Package advertises itself as a date formatting utility but ships an active install-time exfiltration payload. package.json declares a postinstall hoo...
EUVD-2026-52008
The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parserpcmsg subsys/net/lib/ocpp/ocppj.c using a hand-rolled helper, extractstringfield, that copied the message's uid and action fields with strncpyoutbuf, token + 1, outlen - 1 and then scanned the result with...
CVE-2026-52856
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0...
CVE-2026-18437
The MailerPress – Newsletter, email marketing & AI automation plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the mailerpress/v1/contact endpoint in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to...
PT-2026-66864
Name of the Vulnerable Software and Affected Versions libiec61850 version 1.6 Description An issue exists in the parseGoosePayload function located in /goose/goose receiver.c that allows attackers to bypass authentication by using a captured GOOSE frame. GOOSE Generic Object Oriented Substation...
EUVD-2026-51306
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...
CLEANSTART-2026-CB45837 Security fixes in certificate-transparency-trillian-ctserver 1.3.2-r1
Package certificate-transparency-trillian-ctserver version 1.3.2-r1 fixes 9 vulnerabilities: CVE-2026-25679, CVE-2025-68121, ghsa-p77j-4mvh-x3m3, CVE-2026-27142, CVE-2025-61732...
CLEANSTART-2026-YN68631 Security fixes in percona-xtradb-cluster-operator 1.19.1-r0
Package percona-xtradb-cluster-operator version 1.19.1-r0 fixes 2 vulnerabilities: ghsa-pc3f-x583-g7j2, CVE-2026-35469...
CLEANSTART-2026-CL42205 Security fixes in kyverno-fips 1.13.6-r9
Package kyverno-fips version 1.13.6-r9 fixes 22 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2026-25679, CVE-2025-61730...
CLEANSTART-2026-TH50881 Security fixes in aws-network-policy-agent-fips 1.3.2-r0
Package aws-network-policy-agent-fips version 1.3.2-r0 fixes 21 vulnerabilities: ghsa-xmrv-pmrh-hhx2, CVE-2026-25681, CVE-2026-42502, CVE-2026-42504, CVE-2026-42505...
CLEANSTART-2026-LM86108 Security fixes in percona-xtradb-cluster-operator-fips 1.16.1-r0
Package percona-xtradb-cluster-operator-fips version 1.16.1-r0 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...
CLEANSTART-2026-PX32512 Security fixes in tekton-pipelines 1.9.2-r0
Package tekton-pipelines version 1.9.2-r0 fixes 10 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186, ghsa-mh2q-q3fh-2475, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx...
CLEANSTART-2026-II62284 Security fixes in k8ssandra-operator-fips 1.29.0-r1
Package k8ssandra-operator-fips version 1.29.0-r1 fixes 34 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186, CVE-2026-25679, CVE-2026-39820, CVE-2025-61726...
CLEANSTART-2026-FP92201 Security fixes in secrets-store-csi-driver-provider-gcp 1.15.0-r1
Package secrets-store-csi-driver-provider-gcp version 1.15.0-r1 fixes 21 vulnerabilities: CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830...
CLEANSTART-2026-RZ67002 Security fixes in opentofu-fips 1.10.9-r2
Package opentofu-fips version 1.10.9-r2 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...
CLEANSTART-2026-ZQ33437 Security fixes in stakater-reloader 1.4.13-r0
Package stakater-reloader version 1.4.13-r0 fixes 2 vulnerabilities: CVE-2025-47911, CVE-2025-58190...
CLEANSTART-2026-RO94854 Security fixes in cert-manager-fips 1.18.3-r0
Package cert-manager-fips version 1.18.3-r0 fixes 3 vulnerabilities: CVE-2025-47913, CVE-2025-58181, CVE-2025-47914...
CVE-2026-17821
Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: Medium...