1239 matches found
CVE-2026-7484
External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVESİS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects AVESİS: before 202606251646...
CVE-2026-7484
CVE-2026-7484 affects AVESİS (ABIS Technology Ltd. Co.). Description: External control of an Assumed-Immutable web parameter vulnerability allowing access to functionality not properly constrained by ACLs. Affected versions: before 202606251646. Impact per provided metrics: CVSS 3.1 base score 5....
CVE-2026-7484
External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVESİS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects AVESİS: before 202606251646...
CVE-2026-7484 Improper Access Control in Abis Technology's AVESİS
External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVESİS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects AVESİS: before 202606251646...
CVE-2026-7484 Improper Access Control in Abis Technology's AVESİS
External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVESİS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects AVESİS: before 202606251646...
EUVD-2026-48569
External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVESİS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects AVESİS: before 202606251646...
MAL-2026-11039 Malicious code in yuinpm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d036e3cc02bd090bae9ff004d7559fd524b963bb47fee0a0a6cd6baf1395c2be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11016 Malicious code in vantora (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 530a2162909707ce34212e910d9a625ad0a4a6a746a7a48f5e3f3523b3b3df23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ROS-20260722-73-0030
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to external control over a web parameter that is assumed to be immutable. Exploiting this vulnerability could allow an attacker to cause service interruptions...
MAL-2026-10814 Malicious code in @gocortexio/npmgremlinbox-copyleft-next-0-3-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f08552c1e41d92205380508c0ea3e1b7085f6eba9ed9cadf3ed1610b0957412b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10816 Malicious code in @gocortexio/npmgremlinbox-cpol-1-02 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2184d51efaa813eba204f724caf876441f354323d358251674a60def88a83e9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10798 Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-nd-3-0-igo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fab67244a2c791ff06e830004b8fccdbc75449d2c0b85b15b9fa2e2fa995f676 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10785 Malicious code in @gocortexio/npmgremlinbox-agpl-1-0-or-later (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86ff4411fa5d383a7dd11ee82fdbdb5922650df43726a7e92bbd583cc15b692f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @sauruslord/libsignal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c2cf2672d98396a7b66cb732741d269732f5faae72293ea46e06b879e7a45b Package name impersonates Open Whisper Systems' libsignal-node but ships unrelated code. On require of index.js, after a 1-second delay, install.js...
MAL-2026-10653 Malicious code in webpack-session-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0007695a788bff7d6d0a87ee48de6771c12a1e21241bd3fc0bc7b5509608533e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-10646 Malicious code in @bcs-mi-ui/message-block (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58c86304011c297c4b10092f83a6dc1763b8174e91fd9e81f8487b959ecea539 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-50462
External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-54108
External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-54108
CVE-2026-54108 affects Microsoft SharePoint Server. An authorized attacker can influence a file name or path in SharePoint, enabling network-based spoofing. CVSS v3.1: 6.5 (MEDIUM), AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. Root cause details are not provided in the supplied documents; no exploitation...