EUVD-2026-4194

Malicious code in @alluxio/common-ui npm...

MAL-2026-451 Malicious code in @alluxio/common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f082b7a72d74e881f10d6e0f01c1aef7a0a07b0f446d5a9d31a4763ffed2ed8 The package @alluxio/common-ui was found to contain malicious code. Source: ghsa-malware...

CVE-2026-24001

creationtimestamp| type| source ---|---|--- 2026-01-22 05:04:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcyfwkwe6i2n 2026-01-23 12:01:03+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3md3nonjr7e2h 2026-03-19 00:00:00+00:00| seen|...

PT-2026-4609

CVE-2023-32720 - Apache HTTP Server Remote Code Execution CVE ID : CVE-2023-32720 Published : Jan. 22, 2026, 10:16 a.m. | 50 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. Severity: 0.0 | NA Visit the link for more details, such as CVSS...

glib2 security update

2.56.4-168 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase...

Azure Linux 3.0 Security Update: libcontainers-common (CVE-2024-1753)

The version of libcontainers-common installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1753 advisory. - A flaw was found in Buildah and subsequently Podman Build which allows containers to mount...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49996)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49996 advisory. - In the Linux kernel, the following vulnerability has been resolved: cifs: Fix buffer overflow when parsing N...

CVE-2026-23990

The Flux Operator is a Kubernetes CRD controller that manages the lifecycle of CNCF Flux CD and the ControlPlane enterprise distribution. Starting in version 0.36.0 and prior to version 0.40.0, a privilege escalation vulnerability exists in the Flux Operator Web UI authentication code that allows...

@backstage/backend-app-api (>=0.0.0-nightly-20220908030128, <=1.4.0-next.1), @backstage/backend-common (>=0.0.0-nightly-202153022114, <=0.0.0-nightly-20240618021721) +155 more potentially affected by CVE-2026-24047 via @backstage/cli-common (>=0.0.0-nightly-2021612205, <=0.1.16-next.2)

@backstage/cli-common NPM version =0.0.0-nightly-2021612205, =0.0.0-nightly-20220908030128, =0.0.0-nightly-202153022114, =0.0.0-nightly-20220908030128, =0.0.0-nightly-20240116021644, =0.0.0-nightly-20240929023448, =0.0.0-nightly-20220908030128, =0.0.0-nightly-20220908030128,...

CVE-2025-9464

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. This vulnerability is triggered during fuzzing of multiple CIP classes, which causes the CIP port to become unresponsive...

CVE-2026-21957

...

CVE-2025-67530

creationtimestamp| type| source ---|---|--- 2026-01-20 20:18:59+00:00| seen| Telegram/SWtK29cm2UgpyN8y03yUQ9wCaVP-eBcjxccSsN45iOVRTiE...

CVE-2025-62938

creationtimestamp| type| source ---|---|--- 2026-01-20 20:08:48+00:00| seen| Telegram/QlDAn2pA1BENXKCnJ8Iv733TR-iXADN0l1JIy56oPxi1Y...

CVE-2025-53238

creationtimestamp| type| source ---|---|--- 2026-01-20 20:03:37+00:00| seen| Telegram/vDPjge6K1tF404WPf9Q1hmt1q7CFqM-WlHcCHFTuMGtlY9k 2026-01-20 20:03:42+00:00| seen| Telegram/iqXHuMDsRQAGn3zdqA8hR0jm1F7aKD9CXHXY4CRfZNP0Hs...

CVE-2026-1156

A vulnerability was determined in Totolink LR350 9.3.5u.6369B20220309. Affected by this issue is the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ssid causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-9466

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP and CIP grammar tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds...

CVE-2025-9466

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP and CIP grammar tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds...

CVE-2025-9464

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. This vulnerability is triggered during fuzzing of multiple CIP classes, which causes the CIP port to become unresponsive...

CVE-2025-11743 Rockwell Automation CompactLogix® 5370 Denial of Service Vulnerability

A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover...

CVE-2025-9464 Rockwell Automation ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. This vulnerability is triggered during fuzzing of multiple CIP classes, which causes the CIP port to become unresponsive...