9502 matches found
io.jenkins.plugins:design-library (434.v01b_a_5a_27a_53c), org.jenkins-ci.main:jenkins-war (>=2.556, <=2.567) +3 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (>=2.556, <=2.567)
org.jenkins-ci.main:jenkins-core MAVEN version =2.556, =2.556, =1573.v1465f6f78810, =878.v6f1d3b3a0769, =898.vc050ed2424ca - org.jvnet.hudson.plugins:favorite 2.267.vb90d08408081 Source cves: CVE-2026-53442 Source advisory: GHSA-M6WV-WH8G-64XC...
CVE-2026-2638
A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink manipulation to achieve privileged file corruption...
io.jenkins.plugins:design-library (434.v01b_a_5a_27a_53c), org.jenkins-ci.main:jenkins-war (>=2.556, <=2.567) +3 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (>=2.556, <=2.567)
org.jenkins-ci.main:jenkins-core MAVEN version =2.556, =2.556, =1573.v1465f6f78810, =878.v6f1d3b3a0769, =898.vc050ed2424ca - org.jvnet.hudson.plugins:favorite 2.267.vb90d08408081 Source cves: CVE-2026-53442 Source advisory: MEND:CVE-2026-53442...
io.jenkins.plugins:design-library (434.v01b_a_5a_27a_53c), org.jenkins-ci.main:jenkins-war (>=2.556, <=2.567) +3 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (>=2.556, <=2.567)
org.jenkins-ci.main:jenkins-core MAVEN version =2.556, =2.556, =1573.v1465f6f78810, =878.v6f1d3b3a0769, =898.vc050ed2424ca - org.jvnet.hudson.plugins:favorite 2.267.vb90d08408081 Source cves: CVE-2026-53440 Source advisory: MEND:CVE-2026-53440...
io.jenkins.plugins:design-library (434.v01b_a_5a_27a_53c), org.jenkins-ci.main:jenkins-war (>=2.556, <=2.567) +3 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (>=2.556, <=2.567)
org.jenkins-ci.main:jenkins-core MAVEN version =2.556, =2.556, =1573.v1465f6f78810, =878.v6f1d3b3a0769, =898.vc050ed2424ca - org.jvnet.hudson.plugins:favorite 2.267.vb90d08408081 Source cves: CVE-2026-53439 Source advisory: MEND:CVE-2026-53439...
io.jenkins.plugins:design-library (434.v01b_a_5a_27a_53c), org.jenkins-ci.main:jenkins-war (>=2.556, <=2.567) +3 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (>=2.556, <=2.567)
org.jenkins-ci.main:jenkins-core MAVEN version =2.556, =2.556, =1573.v1465f6f78810, =878.v6f1d3b3a0769, =898.vc050ed2424ca - org.jvnet.hudson.plugins:favorite 2.267.vb90d08408081 Source cves: CVE-2026-53437 Source advisory: MEND:CVE-2026-53437...
io.jenkins.plugins:design-library (434.v01b_a_5a_27a_53c), org.jenkins-ci.main:jenkins-war (>=2.556, <=2.567) +3 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (>=2.556, <=2.567)
org.jenkins-ci.main:jenkins-core MAVEN version =2.556, =2.556, =1573.v1465f6f78810, =878.v6f1d3b3a0769, =898.vc050ed2424ca - org.jvnet.hudson.plugins:favorite 2.267.vb90d08408081 Source cves: CVE-2026-53435 Source advisory: MEND:CVE-2026-53435...
io.jenkins.plugins:design-library (434.v01b_a_5a_27a_53c), org.jenkins-ci.main:jenkins-war (>=2.556, <=2.567) +3 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (>=2.556, <=2.567)
org.jenkins-ci.main:jenkins-core MAVEN version =2.556, =2.556, =1573.v1465f6f78810, =878.v6f1d3b3a0769, =898.vc050ed2424ca - org.jvnet.hudson.plugins:favorite 2.267.vb90d08408081 Source cves: CVE-2026-53436 Source advisory: MEND:CVE-2026-53436...
com.centurylink.mdw:mdw (>=6.0.05, <=6.1.06), com.centurylink.mdw:mdw-common (>=6.0.03, <=6.1.06) +3 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.4.4.release)
org.springframework.amqp:spring-amqp MAVEN version 1.4.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.centurylink.mdw:mdw =6.0.05, =6.0.03, =6.0.05, =6.0.05, =6.1.06 -...
com.centurylink.mdw:mdw (>=6.0.05, <=6.1.06), com.centurylink.mdw:mdw-common (>=6.0.03, <=6.1.06) +3 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.4.4.release)
org.springframework.amqp:spring-amqp MAVEN version 1.4.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.centurylink.mdw:mdw =6.0.05, =6.0.03, =6.0.05, =6.0.05, =6.1.06 -...
PT-2026-48540
Name of the Vulnerable Software and Affected Versions Claude Code Action versions prior to 1.0.74 Description An issue exists where the action checks out attacker-controlled pull request head branches and reads the .mcp.json file from the working directory. Because all project MCP Model Context...
EUVD-2026-35869
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.1, a stored cross-site scripting vulnerability in the prescription CSS/HTML multi-print feature allows a patient portal user to execute arbitrary JavaScript in a...
create-gorsee (>=0.1.0, <=1.0.0), gorsee (>=0.2.5, <=1.0.0) potentially affected by CVE-2026-42570 via devalue (5.6.3)
devalue NPM version 5.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on devalue and may be impacted: - create-gorsee =0.1.0, =0.2.5, =1.0.0 Source cves: CVE-2026-42570 Source advisory: MEND:CVE-2026-42570...
Malicious code in create-docs-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4381fd77419441a2eefe6b22adef6c9f5adfe1b92be5d071abd5908fdf8647 Package is published at version 9999.99.99 — the canonical high-version override used in dependency-confusion attacks against private/internal packag...
MAL-2026-5403 Malicious code in t-invest-mcp-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46c186ac158f68845fc995a94d15d44c2b65a521d2619d2850232e58f4a61419 Package is a dependency-confusion squat: package.json sets version 9999.99.99 the canonical max-version trick used to win resolution against any...
CVE-2026-2638
A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink manipulation to achieve privileged file corruption...
CVE-2026-2638 X-VPN macOS website versions - Local Privilege Escalation
A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink manipulation to achieve privileged file corruption...
EUVD-2026-35404
A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink manipulation to achieve privileged file corruption...
CVE-2026-2638 X-VPN macOS website versions - Local Privilege Escalation
A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink manipulation to achieve privileged file corruption...
