1711 matches found
amavis v2.15.0
Installation Use your system's amavis package if possible. Prerequisites Software dependencies are tracked via Dist::Zilla. Some of them involve non-perl development libraries and GCC as a build dependency if obtained from CPAN: libdb libidn2 libssl libzmq3 On Debian 13 for example, one can insta...
CVE-2026-82808: Use of Hard-coded Credentials
A vulnerability was identified in Inbox Foundry ActiveInbox Extension up to 7.10.24 on Chrome. Impacted is an unknown function of the file dist/service-worker.production-esm.js of the component Google OAuth Client Secret. Such manipulation leads to hard-coded credentials. The attack can be execut...
CVE-2026-78638
A flaw has been found in peerigon unzip-crx and unzip-crx-3 up to 0.2.0. This affects the function unzip of the file dist/index.js of the component Archive Extraction. Executing a manipulation of the argument destination can lead to path traversal. The attack can only be executed locally. The...
CVE-2026-78638: Improper Limitation of a Pathname to a Restricted Directory
A flaw has been found in peerigon unzip-crx and unzip-crx-3 up to 0.2.0. This affects the function unzip of the file dist/index.js of the component Archive Extraction. Executing a manipulation of the argument destination can lead to path traversal. The attack can only be executed locally. The...
com.espertech:esperio-amqp (>=4.6.0, <=7.1.0), io.brooklyn.example:brooklyn-example-global-web-fabric (0.4.0) +9 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (2.7.1)
com.rabbitmq:amqp-client MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.espertech:esperio-amqp =4.6.0, =7.1.0 - io.brooklyn.example:brooklyn-example-global-web-fabric 0.4.0 -...
com.espertech:esperio-amqp (>=4.6.0, <=7.1.0), io.brooklyn.example:brooklyn-example-global-web-fabric (0.4.0) +9 more potentially affected by CVE-2026-69220 via com.rabbitmq:amqp-client (2.7.1)
com.rabbitmq:amqp-client MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.espertech:esperio-amqp =4.6.0, =7.1.0 - io.brooklyn.example:brooklyn-example-global-web-fabric 0.4.0 -...
ROOT-APP-NPM-CVE-2026-16633 CVE-2026-16633 in pdfjs-dist - Patched by Root
Root has patched CVE-2026-16633 in the pdfjs-dist package for Root:npm. Multiple fixed versions available...
CLSA-2026-1786375655 TuxCare security update for swagger-ui-dist (2 CVEs)
TuxCare rebuilt swagger-ui-dist to address 2 CVEs. Fixed in 3.52.5-tuxcare.1...
distcc - Remote Command Execution Detection (CVE-2004-2687)
Detects CVE-2004-2687 by sending a crafted DIST protocol ARGV request that executes id via sh -c. !/usr/bin/env python3 -- coding: utf-8 -- """distcc remote command execution CVE-2004-2687.""" import re import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import...
PT-2026-80046
TuxCare rebuilt swagger-ui-dist to address 2 CVEs. Fixed in 3.52.5-tuxcare.1...
@0xwork/connect (0.1.8), @4onstudios/iris-agent (>=0.2.5, <=0.2.6) +1357 more potentially affected by CVE-2026-16633 via pdfjs-dist (>=5.6.205, <=6.1.200)
pdfjs-dist NPM version =5.6.205, =0.2.5, =1.0.0, =0.2.0, =0.0.0, =0.0.11-alpha-20260329202526-cfad3bcbd829b82471d2d4fed4e49b2ef849cafb, =4.11.1, =0.0.4, =0.0.0-beta-20260819155526, =0.0.0-beta-20260820202238, =0.0.0-beta-20260819155526, =0.1.0, =0.17.9, =0.5.12, =0.17.6 and more Source cves:...
NPM: PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF
NPM: PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF vulnerability discovered by ? in WordPress Npm pdfjs-dist versions = 5.6.83, 6.2.108...
@0xwork/connect (0.1.8), @4onstudios/iris-agent (>=0.2.5, <=0.2.6) +1357 more potentially affected by CVE-2026-16633 via pdfjs-dist (>=5.6.205, <=6.1.200)
pdfjs-dist NPM version =5.6.205, =0.2.5, =1.0.0, =0.2.0, =0.0.0, =0.0.11-alpha-20260329202526-cfad3bcbd829b82471d2d4fed4e49b2ef849cafb, =4.11.1, =0.0.4, =0.0.0-beta-20260819155526, =0.0.0-beta-20260820202238, =0.0.0-beta-20260819155526, =0.1.0, =0.17.9, =0.5.12, =0.17.6 and more Source cves:...
@0xwork/connect (0.1.8), @4onstudios/iris-agent (>=0.2.5, <=0.2.6) +1357 more potentially affected by CVE-2026-16633 via pdfjs-dist (>=5.6.205, <=6.1.200)
pdfjs-dist NPM version =5.6.205, =0.2.5, =1.0.0, =0.2.0, =0.0.0, =0.0.11-alpha-20260329202526-cfad3bcbd829b82471d2d4fed4e49b2ef849cafb, =4.11.1, =0.0.4, =0.0.0-beta-20260819155526, =0.0.0-beta-20260820202238, =0.0.0-beta-20260819155526, =0.1.0, =0.17.9, =0.5.12, =0.17.6 and more Source cves:...
@0xwork/connect (0.1.8), @4onstudios/iris-agent (>=0.2.5, <=0.2.6) +1357 more potentially affected by CVE-2026-16633 via pdfjs-dist (>=5.6.205, <=6.1.200)
pdfjs-dist NPM version =5.6.205, =0.2.5, =1.0.0, =0.2.0, =0.0.0, =0.0.11-alpha-20260329202526-cfad3bcbd829b82471d2d4fed4e49b2ef849cafb, =4.11.1, =0.0.4, =0.0.0-beta-20260819155526, =0.0.0-beta-20260820202238, =0.0.0-beta-20260819155526, =0.1.0, =0.17.9, =0.5.12, =0.17.6 and more Source cves:...
Cross-site Scripting (XSS)
Overview pdfjs-dist is a Portable Document Format PDF library that is built with HTML5. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the enableScripting configuration when loading a crafted PDF file. An attacker can execute arbitrary JavaScript code in the...
Cross-site Scripting (XSS)
Overview org.webjars.npm:pdfjs-dist is a Portable Document Format PDF library that is built with HTML5. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the enableScripting configuration when loading a crafted PDF file. An attacker can execute arbitrary JavaScript...
PT-2026-69021
Name of the Vulnerable Software and Affected Versions pdfjs-dist affected versions not specified Description When enableScripting is set to true and no Content Security Policy CSP is configured to disallow script-src, loading a malicious PDF can lead to the execution of unrestricted...
cloud.piranha.dist:piranha-dist-micro (>=24.11.0, <=25.6.0), cloud.piranha.extension:piranha-extension-micro (>=24.11.0, <=25.6.0) +68 more potentially affected by CVE-2026-46581 via org.glassfish:jakarta.faces (>=4.0.23, <=4.1.12)
org.glassfish:jakarta.faces MAVEN version =4.0.23, =24.11.0, =24.11.0, =24.11.0, =24.11.0, =25.1.0, =5.0.0, =5.0.0, =1.5.15, =1.5.15, =1.5.15, =11.0.0, =6.12.0, =6.12.2 - org.apache.tomee.bom:tomee-plume-api 11.0.0-m1 - org.apache.tomee:apache-tomee 11.0.0-m1 and more Source cves: CVE-2026-46581...