10088 matches found
Synology DiskStation Manager Out-of-bounds Write (CVE-2024-45539)
Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager DSM before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller DSMUC before 3.1.4-23079 allows remote attackers to conduct denial-of-service attacks via unspecified vectors. This plugin only works with...
January 17, 2026âKB5077744 (OS Builds 26200.7627 and 26100.7627) Out-of-band
None None...
Malicious Package
Overview assurance-common-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview lusha-ui-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in lusha-ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c1c6b65695a715c9538b69f7230b4c9f89fef68de10ad9b6e2b625f2b22f62 The package lusha-ui-components was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-3087
Malicious code in assurance-common-components npm...
MAL-2026-268 Malicious code in assurance-common-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8abc4852c66bf4b76ca608a34a2c7ec7a32f25ade245d11fd2eb4429d2ad48 The package assurance-common-components was found to contain malicious code. Source: ghsa-malware...
Malicious code in assurance-common-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8abc4852c66bf4b76ca608a34a2c7ec7a32f25ade245d11fd2eb4429d2ad48 The package assurance-common-components was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-3065
Malicious code in lusha-ui-components npm...
MAL-2026-294 Malicious code in lusha-ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c1c6b65695a715c9538b69f7230b4c9f89fef68de10ad9b6e2b625f2b22f62 The package lusha-ui-components was found to contain malicious code. Source: ghsa-malware...
Freeter security vulnerabilities
Freeter is an open-source work assistant software developed by Freeter. Version 1.2.1 of Freeter contains a security vulnerability. This vulnerability stems from custom component titles and files that contain stored cross-site scripting, which may lead to remote code execution...
@darka-software/text-design-qwik (>=0.0.137, <=0.0.139), positron-components (>=1.12.2, <=1.12.3) potentially affected by CVE-2026-22803 via @sveltejs/kit (>=2.49.0, <=2.49.3)
@sveltejs/kit NPM version =2.49.0, =0.0.137, =1.12.2, =1.12.3 Source cves: CVE-2026-22803 Source advisory: OSV:GHSA-J2F3-WQ62-6Q46...
@darka-software/text-design-qwik (>=0.0.137, <=0.0.139), positron-components (>=1.12.2, <=1.12.3) potentially affected by CVE-2026-22803 via @sveltejs/kit (>=2.49.0, <=2.49.3)
@sveltejs/kit NPM version =2.49.0, =0.0.137, =1.12.2, =1.12.3 Source cves: CVE-2026-22803 Source advisory: SNYK:JS-SVELTEJSKIT-14996726...
CVE-2026-22645
The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components...
CVE-2026-22645
The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components...
CVE-2026-22645
The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components...
CVE-2026-22645
The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components...
CVE-2026-22645
The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components...
The vulnerability of Inbox COM objects in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of Inbox COM objects in Windows operating systems relates to the use of memory after deallocation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...
MiracleLinux 3 : xen-3.0.3-120.2.0.1.AXS3 (AXSA:2011-180:02)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-180:02 advisory. This package contains the Xen tools and management daemons needed to run virtual machines on x86, x8664, and ia64 systems. Information on how to use Xen can b...