com.ajaxjs:aj-common-parent (>=1.4, <=1.5), com.ajaxjs:ajaxjs-framework (>=1.0.8, <=1.1.5) +7 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.5.84)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.84 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.ajaxjs:aj-common-parent =1.4, =1.0.8, =1.1.5 -...

com.ajaxjs:aj-common-parent (>=1.4, <=1.5), com.ajaxjs:ajaxjs-framework (>=1.0.8, <=1.1.5) +7 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.5.84)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.84 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.ajaxjs:aj-common-parent =1.4, =1.0.8, =1.1.5 -...

com.googlecode.t7mp:maven-t7-common (0.9.10.m1), com.googlecode.t7mp:maven-t7-plugin (>=0.9.1, <=0.9.10.m1) +12 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (7.0.0)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.googlecode.t7mp:maven-t7-common 0.9.10.m1 - com.googlecode.t7mp:maven-t7-plugin =0.9.1,...

net.myrrix:myrrix-web (0.9), net.myrrix:myrrix-web-common (0.9) +26 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (7.0.34)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - net.myrrix:myrrix-web 0.9 - net.myrrix:myrrix-web-common 0.9 -...

de.javakaffee.msm:memcached-session-manager (>=1.8.0, <=1.8.1), de.javakaffee.msm:memcached-session-manager-tc7 (>=1.7.0, <=1.8.1) +8 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (7.0.40)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.40 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.javakaffee.msm:memcached-session-manager =1.8.0, =1.7.0, =2.4, =2.5.3 Source cves:...

com.cloudbees:cloudbees-web-container-extras (>=1.0.0, <=1.0.6), net.myrrix:myrrix-web (1.0.0) +6 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (7.0.41)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.41 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.cloudbees:cloudbees-web-container-extras =1.0.0, =1.0.6 - net.myrrix:myrrix-web 1.0.0 -...

com.googlecode.t7mp:maven-t7-common (>=0.9.10.m5, <=0.9.10.m6), com.googlecode.t7mp:maven-tomee-plugin (0.9.10.m3) +8 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (7.0.25)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.googlecode.t7mp:maven-t7-common =0.9.10.m5, =0.9.10.m6 -...

CVE-2026-40397

CVE-2026-40397 describes an integer underflow (wrap/wraparound) in the Windows Common Log File System Driver that enables a locally authenticated attacker to elevate privileges. The description indicates a local, privileges-required (low), no user interaction vulnerability with high impact to con...

CVE-2026-40407 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2026-35433 .NET Elevation of Privilege Vulnerability

...

CVE-2026-34331

creationtimestamp| type| source ---|---|--- 2026-05-12 15:52:42+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0141 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, and kpatch-patch-5_14_0-284_158_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Malicious code in @uipath/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2536864ad343e81f1c46a2583836c5083e9b2cc7d39c1ea39028314ef7588a61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-3540 Malicious code in @uipath/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2536864ad343e81f1c46a2583836c5083e9b2cc7d39c1ea39028314ef7588a61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-40397: Integer Underflow (Wrap or Wraparound)

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

PT-2026-40212

Integer underflow wrap or wraparound in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-40407: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

DEBIAN-CVE-2026-44777

jq is a command-line JSON processor. In 1.8.2rc1 and earlier, the ordinary module loader recurses without cycle detection when two otherwise valid modules include each other...

CVE-2026-5266

CVE-2026-5266 affects Wikimedia Foundation Echo, specifically the includes/Api/ApiEchoNotifications.Php component. The vulnerability allows exposure of sensitive information to an unauthorized actor and affects Echo versions before 1.43.7, 1.44.4, and 1.45.2. The Debian advisory notes the issue c...