example-pkg-naturalett (>=14.4.0, <=14.4.6) potentially affected by CVE-2026-75158 via apache-airflow (2.1.0)

apache-airflow PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - example-pkg-naturalett =14.4.0, =14.4.6 Source cves: CVE-2026-75158 Source advisory: OSV:PYSEC-2026-3988...

com.logicartisan.intrepid:intrepid-driver-mina (2.0.0), org.apache.mina:mina-example (>=2.2.0, <=2.2.7) potentially affected by CVE-2026-47321 via org.apache.mina:mina-filter-compression (>=2.2.0, <=2.2.7)

org.apache.mina:mina-filter-compression MAVEN version =2.2.0, =2.2.0, =2.2.7 Source cves: CVE-2026-47321 Source advisory: MEND:CVE-2026-47321...

org.apache.mina:mina-example (>=2.1.1, <=2.1.12) potentially affected by CVE-2026-47321 via org.apache.mina:mina-filter-compression (>=2.1.1, <=2.1.12)

org.apache.mina:mina-filter-compression MAVEN version =2.1.1, =2.1.1, =2.1.12 Source cves: CVE-2026-47321 Source advisory: MEND:CVE-2026-47321...

tomcat: Apache Tomcat: Cross-Site Scripting vulnerability in number guess example

A flaw was found in Apache Tomcat. This vulnerability, known as Cross-Site Scripting XSS, allows a remote attacker to inject malicious scripts into the 'number guess example' web page. When other users view the compromised page, these scripts can execute in their web browsers. This could lead to...

tomcat: Apache Tomcat: Cross-Site Scripting vulnerability in number guess example

A flaw was found in Apache Tomcat. This vulnerability, known as Cross-Site Scripting XSS, allows a remote attacker to inject malicious scripts into the 'number guess example' web page. When other users view the compromised page, these scripts can execute in their web browsers. This could lead to...

tomcat: Apache Tomcat: Cross-Site Scripting vulnerability in number guess example

A flaw was found in Apache Tomcat. This vulnerability, known as Cross-Site Scripting XSS, allows a remote attacker to inject malicious scripts into the 'number guess example' web page. When other users view the compromised page, these scripts can execute in their web browsers. This could lead to...

tomcat: Apache Tomcat: Cross-Site Scripting vulnerability in number guess example

A flaw was found in Apache Tomcat. This vulnerability, known as Cross-Site Scripting XSS, allows a remote attacker to inject malicious scripts into the 'number guess example' web page. When other users view the compromised page, these scripts can execute in their web browsers. This could lead to...

tomcat: Apache Tomcat: Cross-Site Scripting vulnerability in number guess example

A flaw was found in Apache Tomcat. This vulnerability, known as Cross-Site Scripting XSS, allows a remote attacker to inject malicious scripts into the 'number guess example' web page. When other users view the compromised page, these scripts can execute in their web browsers. This could lead to...

tomcat: Apache Tomcat: Cross-Site Scripting vulnerability in number guess example

A flaw was found in Apache Tomcat. This vulnerability, known as Cross-Site Scripting XSS, allows a remote attacker to inject malicious scripts into the 'number guess example' web page. When other users view the compromised page, these scripts can execute in their web browsers. This could lead to...

tomcat: Apache Tomcat: Cross-Site Scripting vulnerability in number guess example

A flaw was found in Apache Tomcat. This vulnerability, known as Cross-Site Scripting XSS, allows a remote attacker to inject malicious scripts into the 'number guess example' web page. When other users view the compromised page, these scripts can execute in their web browsers. This could lead to...

Astra Linux – Vulnerability in pyyaml

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and loadall functions due to a class deserialization issue. For example, Popen is a class in the subprocess module. NOTE: This issue exists because of an incomplete fix for CVE-2017-18342...

Astra Linux – Vulnerability in Tomcat9

Uncontrolled resource consumption vulnerability in Apache Tomcat’s WebSocket chat example. This issue affects Apache Tomcat versions: 11.0.0-M20 through 11.0.24, 10.1.24 through 10.1.57, and 9.0.89 through 9.0.120. Users who have followed security guidelines to remove example web applications are...

tomcat: Apache Tomcat: Cross-Site Scripting vulnerability in number guess example

A flaw was found in Apache Tomcat. This vulnerability, known as Cross-Site Scripting XSS, allows a remote attacker to inject malicious scripts into the 'number guess example' web page. When other users view the compromised page, these scripts can execute in their web browsers. This could lead to...

CVE-2026-90456 Use of default credentials in Malcolm

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies this example file into active configuration without running the setup routine that regenerates credentials will expose that...

CVE-2026-90456

CVE-2026-90456 affects a bundled inventory-management component whose example environment-configuration file ships with a fixed, publicly-known administrative password . If a deployment copies this example file into active configuration without running the setup routine that regenerates credentia...

CVE-2026-90456 Use of default credentials in Malcolm

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies this example file into active configuration without running the setup routine that regenerates credentials will expose that...

CVE-2026-90456 Use of default credentials in Malcolm

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies this example file into active configuration without running the setup routine that regenerates credentials will expose that...

CVE-2026-90451 Use of Default Credentials in Malcolm

An example environment-configuration file ships with a fixed, publicly-known secret value used to sign authentication cookies for a bundled packet-analysis component. A deployment that copies this example file into active configuration without running the setup routine that regenerates the value...

airflow-clickhouse-plugin (0.6.0), dataverk-airflow (>=0.3.18, <=0.3.23) +1 more potentially affected by CVE-2026-48828 via apache-airflow (2.0.2)

apache-airflow PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin 0.6.0 - dataverk-airflow =0.3.18, =11.8.0, =13.7.0 Source cves: CVE-2026-48828 Source advisory:...

example-pkg-naturalett (>=14.4.0, <=14.4.6) potentially affected by CVE-2026-48828 via apache-airflow (2.1.0)

apache-airflow PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - example-pkg-naturalett =14.4.0, =14.4.6 Source cves: CVE-2026-48828 Source advisory: OSV:PYSEC-2026-3806...