71112 matches found
CVE-2026-0696
In ConnectWise PSA versions older than 2026.1, certain session cookies were not set with the HttpOnly attribute. In some scenarios, this could allow client-side scripts access to session cookie values...
SUSE CVE-2025-71113
In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - zero initialize memory allocated via sockkmalloc Several crypto user API contexts and requests allocated with sockkmalloc were left uninitialized, relying on callers to set fields explicitly. This resulted in the...
SUSE CVE-2025-71141
In the Linux kernel, the following vulnerability has been resolved: drm/tilcdc: Fix removal actions in case of failed probe The drmkmshelperpollfini and drmatomichelpershutdown helpers should only be called when the device has been successfully registered. Currently, these functions are called...
Malicious code in flag-v21 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861f8969022fe9225cbe8c49c702b9604d3d204909179189ab09fa288c2c8b68 The package flag-v21 was found to contain malicious code...
EUVD-2026-3102
Malicious code in flag-v21 npm...
EUVD-2026-3101
Malicious code in flag-v211 npm...
MAL-2026-284 Malicious code in flag-v211 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f225748a91e64bc77a6b8344c2eefb007f216b3c596ce5b19e92e4dfbd1f4ff The package flag-v211 was found to contain malicious code...
Malicious code in flag-v211 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f225748a91e64bc77a6b8344c2eefb007f216b3c596ce5b19e92e4dfbd1f4ff The package flag-v211 was found to contain malicious code...
MAL-2026-283 Malicious code in flag-v21 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861f8969022fe9225cbe8c49c702b9604d3d204909179189ab09fa288c2c8b68 The package flag-v21 was found to contain malicious code...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001591)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001591 advisory. A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flagTF bit in EFLAGS during emulation of the syscall instructio...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000668)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000668 advisory. Race condition in the ext4filewriteiter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service file unavailabili...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004313)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004313 advisory. A NULL pointer dereference vulnerability was found in netlinkdump. This issue can occur when the Netlink socket receives the messagesendmsg for the XFRMMSGGETSA,...
MiracleLinux 4 : kernel-2.6.32-696.3.1.el6 (AXSA:2017-1700:04)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-1700:04 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system:...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001368)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001368 advisory. An issue was discovered in fs/f2fs/inode.c in the Linux kernel through 4.17.3. A denial of service slab out-of-bounds read and BUG can occur for a modified f2fs...
MiracleLinux 4 : samba4-4.2.10-7.AXS4 (AXSA:2016-577:04)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-577:04 advisory. Samba is the standard Windows interoperability suite of programs for Linux and Unix. Security issues fixed with this release: CVE-2016-2119...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000653)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000653 advisory. udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during...
GHSA-6738-R8G5-QWP3 svelte vulnerable to Cross-site Scripting
Summary An XSS vulnerability exists in Svelte 5.46.0-2 resulting from improper escaping of hydratable keys. If these keys incorporate untrusted user input, arbitrary JavaScript can be injected into server-rendered HTML. Details When using the hydratable function, the first argument is used as a k...
Cross-site Scripting (XSS)
Overview org.webjars.npm:svelte is a package for building web applications. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to the improper sanitazation of user input in hydratableblock function hydratable process. An attacker can execute arbitrary JavaScript in t...
CVE-2025-14556
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Flag allows Cross-Site Scripting XSS.This issue affects Flag: from 7.X-3.0 through 7.X-3.9...
