15227 matches found
ROOT-OS-DEBIAN-13-CVE-2026-23251 CVE-2026-23251 in linux - Patched by Root
Root has patched CVE-2026-23251 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-23374 CVE-2026-23374 in linux - Patched by Root
Root has patched CVE-2026-23374 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-68287 CVE-2025-68287 in linux - Patched by Root
Root has patched CVE-2025-68287 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-53167 CVE-2026-53167 in linux - Patched by Root
Root has patched CVE-2026-53167 in the linux package for Root:Debian:13. Multiple fixed versions available...
Malicious Package
Overview common-array-token is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in common-array-token (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8dc846e743e9517d8444feb25299ce05d9c6e060a050fdaa1b3b44a8cb5cbd package.json declares scripts.postinstall = 'node index.js'. On npm install, index.js reconstructs a URL from a String.fromCharCode numeric array...
MAL-2026-15550 Malicious code in common-array-token (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8dc846e743e9517d8444feb25299ce05d9c6e060a050fdaa1b3b44a8cb5cbd package.json declares scripts.postinstall = 'node index.js'. On npm install, index.js reconstructs a URL from a String.fromCharCode numeric array...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wildfly-common (UTSA-2026-093013)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093013 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wildfly-common (UTSA-2026-093018)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093018 advisory. Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...
CVE-2026-81093
The get-html-skeleton tool fetched a URL the caller supplied after checking only its syntax. The handler in src/tools/common/gethtmlskeleton.ts validated the url argument with isValidHttpUrl from src/utils/generic.ts, which confirmed the string began with an http or https scheme and parsed as a U...
CVE-2026-81093: Server-Side Request Forgery (SSRF)
The get-html-skeleton tool fetched a URL the caller supplied after checking only its syntax. The handler in src/tools/common/gethtmlskeleton.ts validated the url argument with isValidHttpUrl from src/utils/generic.ts, which confirmed the string began with an http or https scheme and parsed as a U...
CVE-2026-80350
OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhook delivery path calls SSRFProtection.validateWebhookTargetIsSafe, and the host-literal screening inside...
CVE-2026-75896: Use of Hard-coded Credentials
Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5...
CVE-2026-80350: Server-Side Request Forgery (SSRF)
OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhook delivery path calls SSRFProtection.validateWebhookTargetIsSafe, and the host-literal screening inside...
ROOT-OS-DEBIAN-12-CVE-2023-29934 CVE-2023-29934 in llvm-toolchain-14 - Patched by Root
Root has patched CVE-2023-29934 in the llvm-toolchain-14 package for Root:Debian:12. Multiple fixed versions available...
Server-side Request Forgery (SSRF)
Overview org.apache.hive:hive-common is a reading, writing, and managing large datasets residing in distributed storage using SQL. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via Avro SerDe schema resolution in AvroSerdeUtils.determineSchemaOrThrowExceptio...
CGA-22QX-6R4X-M9R3
Bulletin has no description...
Malicious code in @pimy-b2cweb/common (npm)
--- -= Per source details. Do not edit below this line.=-...