org.apache.tomcat.embed:tomcat-embed-jasper (7.0.20), org.jboss.arquillian.container:arquillian-tomcat-embedded-7 (>=1.0.0.cr4, <=1.0.0.cr6) +2 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.20)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.20 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.34), org.crazyyak.dev:yak-dev-demo (>=1.4.0, <=1.4.1) +6 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.34)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.34 -...

net.myrrix:myrrix-web (0.9), net.myrrix:myrrix-web-common (0.9) +26 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (7.0.34)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - net.myrrix:myrrix-web 0.9 - net.myrrix:myrrix-web-common 0.9 -...

net.myrrix:myrrix-web (0.9), net.myrrix:myrrix-web-common (0.9) +26 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (7.0.34)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - net.myrrix:myrrix-web 0.9 - net.myrrix:myrrix-web-common 0.9 -...

com.cloudera.oryx:oryx-lambda-serving (2.3.0), com.github.waffle:waffle-tomcat85 (1.8.3) +32 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.5.11)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.cloudera.oryx:oryx-lambda-serving 2.3.0 - com.github.waffle:waffle-tomcat85 1.8.3 -...

com.github.psi-probe:psi-probe-tomcat85 (3.5.1), org.apache.tomcat:tomcat-catalina-ha (8.5.57) +28 more potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat-catalina (8.5.57)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.57 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.1 - org.apache.tomcat:tomcat-catalina-ha 8.5.57 ...

net.myrrix:myrrix-web (0.9), net.myrrix:myrrix-web-common (0.9) +26 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (7.0.34)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - net.myrrix:myrrix-web 0.9 - net.myrrix:myrrix-web-common 0.9 -...

net.myrrix:myrrix-web (0.7), org.apache.geode:geode-modules-tomcat7 (>=1.0.0-incubating.m2, <=1.0.0-incubating.m3) +30 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (7.0.30)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - net.myrrix:myrrix-web 0.7 - org.apache.geode:geode-modules-tomcat7 =1.0.0-incubating.m2,...

de.metalcon.utils:form-item-list (1.0.0), org.apache.marmotta:marmotta-splash (>=3.0.0-incubating, <=3.0.1) +27 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (7.0.37)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.37 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.metalcon.utils:form-item-list 1.0.0 - org.apache.marmotta:marmotta-splash...

EUVD-2026-29457

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through = 4.3.0...

CVE-2026-45215 WordPress WP EasyPay plugin <= 4.3.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through = 4.3.0...

CVE-2026-45215

CVE-2026-45215 affects the WordPress WP EasyPay plugin (wp-easy-pay)

CVE-2026-45215

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through = 4.3.0...

CVE-2026-45215: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through = 4.3.0...

TDXRay: Microarchitectural Side-Channel Analysis of Intel TDX for Real-World Workloads

Affected Products AMD EPYC™ Series Processors AMD EPYC™ 7003 Series Processors AMD EPYC™ 8004 Series Processors AMD EPYC™ 9004 Series Processors AMD EPYC™ 9005 Series Processors AMD EPYC™ Embedded Series Processors AMD EPYC™ Embedded 7003 AMD EPYC™ Embedded 8004 AMD EPYC™ Embedded 9004 AMD EPYC™...

AMD Athlon™, AMD Ryzen™, and AMD Ryzen™ Embedded Series Processor Vulnerabilities – May 2026

CVE Details Refer to Glossary for explanation of terms CVE ID| CVE Description| CVSS ---|---|--- CVE-2021-46747| Insufficient granularity of access control in AMD Secure Processor ASP may allow an attacker with an untrusted user space application to map sensitive System Management Network SMN...

PT-2026-40278

In PHP versions 8.4. before 8.4.21 and 8.5. before 8.5.6, when an encoding name containing an embedded NUL byte is passed to mb convert encoding or related mbstring functions, the code incorrectly assumes that when strncasecmp returns 0 it means the strings have the same length. This can lead to...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

Embedded Malicious Code

Overview guardrails-ai is an Adding guardrails to large language models. Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tamper...