2534 matches found
AlmaLinux 9.2 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1779465287)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779465287 advisory. - In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication...
SQL Injection
Overview apache-airflow-providers-teradata is a Provider package apache-airflow-providers-teradata for Apache Airflow Affected versions of this package are vulnerable to SQL Injection in the Teradata compute-cluster example DAG, where user-settable Params are not properly constrained, allowing an...
CVE-2026-86843
The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unconstrained free text and templated them straight into the compute-cluster operators, which interpolate those values into Teradata DDL. A user who is permitted to trigger that Dag - a...
example-pkg-naturalett (>=14.4.4, <=14.4.8) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (4.0.0)
apache-airflow-providers-google PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - example-pkg-naturalett =14.4.4, =14.4.8 Source cves: CVE-2026-81914 Source advisory:...
CVE-2026-86843
The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unconstrained free text and templated them straight into the compute-cluster operators, which interpolate those values into Teradata DDL. A user who is permitted to trigger that Dag - a...
CVE-2026-86843 Apache Airflow Teradata provider: SQL injection via unvalidated Dag Params in the compute-cluster example Dag
The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unconstrained free text and templated them straight into the compute-cluster operators, which interpolate those values into Teradata DDL. A user who is permitted to trigger that Dag - a...
EUVD-2026-88697
The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unconstrained free text and templated them straight into the compute-cluster operators, which interpolate those values into Teradata DDL. A user who is permitted to trigger that Dag - a...
CVE-2026-86843 Apache Airflow Teradata provider: SQL injection via unvalidated Dag Params in the compute-cluster example Dag
The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unconstrained free text and templated them straight into the compute-cluster operators, which interpolate those values into Teradata DDL. A user who is permitted to trigger that Dag - a...
CVE-2026-86843
The Apache Airflow Teradata provider is vulnerable to SQL injection because the compute-cluster example Dag allows unconstrained free-text Dag Params . These parameters are templated directly into operators that interpolate values into Teradata DDL . An attacker with permission to trigger the Dag...
CVE-2026-86843 Apache Airflow Teradata provider: SQL injection via unvalidated Dag Params in the compute-cluster example Dag
The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unconstrained free text and templated them straight into the compute-cluster operators, which interpolate those values into Teradata DDL. A user who is permitted to trigger that Dag - a...
CVE-2026-86843: Improper Neutralization of Special Elements used in an SQL Command
The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unconstrained free text and templated them straight into the compute-cluster operators, which interpolate those values into Teradata DDL. A user who is permitted to trigger that Dag - a...
PT-2026-102500
The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unconstrained free text and templated them straight into the compute-cluster operators, which interpolate those values into Teradata DDL. A user who is permitted to trigger that Dag - a...
Malicious Package
Overview azure-langchain-example is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
Uncontrolled Resource Consumption
Apache Tomcat is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to improper resource management in the WebSocket chat example application, which allows an attacker to consume excessive server resources and potentially cause a denial-of-service condition...
Malicious code in azure-langchain-example (PyPI)
Source: kam193 59c10650dde5db077b435212025a4cb48ab69daf76022cb932dfec98beea4479 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...
MAL-2026-17213 Malicious code in azure-langchain-example (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cffc3a51858b1b7a17ff0edfd2eeae6383e83b4eff5bc078f7b1d4f5ba36ad2 On import azurelangchainexample, the package's init.py starts a background daemon thread that issues a GET request to...
Malicious code in azure-langchain-example (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cffc3a51858b1b7a17ff0edfd2eeae6383e83b4eff5bc078f7b1d4f5ba36ad2 On import azurelangchainexample, the package's init.py starts a background daemon thread that issues a GET request to...
PT-2026-98338
Name of the Vulnerable Software and Affected Versions ningzichun student-management-system versions up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf Description A flaw exists in the example lite.sql file that allows a remote attacker to execute a manipulation leading to the use of default...
Linux Distros Unpatched Vulnerability : CVE-2026-88369
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump. CVE-2026-88369 Note that Nessus relies on the presence of the package as...