MINI-6746-XPPH-6QMG

Bulletin has no description...

MINI-4G84-57GF-J43V

Bulletin has no description...

EUVD-2026-9239

In hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Malicious Package

Overview jest-param-validator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

BELL-CVE-2026-23158

Bulletin has no description...

ROS-20260216-73-0001

A vulnerability in the hasmetacommands function of the pgAdmin 4 database management tool is related to incorrect code generation control. Exploitation of the vulnerability could allow a remote attacker to bypass existing security mechanisms by injecting a specially generated SQL file...

MINI-W3PG-MPCV-54VG

Bulletin has no description...

BELL-CVE-2026-23046

Bulletin has no description...

CVE-2026-25587 SandboxJS has a Sandbox Escape

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, as Map is in SAFEPROTOYPES, it's prototype can be obtained via Map.prototype. By overwriting Map.prototype.has the sandbox can be escaped. This vulnerability is fixed in 0.8.29...

SandboxJS 安全漏洞

SandboxJS is a security assessment tool developed by nyariv. Versions of SandboxJS prior to 0.8.29 contained a security vulnerability that could lead to sandbox escape by overriding Map.prototype.has...

CVE-2026-23069 vsock/virtio: fix potential underflow in virtio_transport_get_credit()

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential underflow in virtiotransportgetcredit The credit calculation in virtiotransportgetcredit uses unsigned arithmetic: ret = vvs-peerbufalloc - vvs-txcnt - vvs-peerfwdcnt; If the peer shrinks its advertise...

EUVD-2026-5475

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential underflow in virtiotransportgetcredit The credit calculation in virtiotransportgetcredit uses unsigned arithmetic: ret = vvs-peerbufalloc - vvs-txcnt - vvs-peerfwdcnt; If the peer shrinks its advertise...

EUVD-2026-4851

Maker.js has Unsafe Property Copying in makerjs.extendObject...

CGA-PC28-MQR3-R6Q8

Bulletin has no description...

CGA-865G-VJ9J-8VHC

Bulletin has no description...

CGA-7FCP-FHXP-PVRF

Bulletin has no description...

CGA-C95G-6HRC-XXRQ

Bulletin has no description...

Horilla cross-site scripting vulnerability

Horilla is a free open-source human resources software developed by Horilla Company. Version 1.4.0 of Horilla contains a cross-site scripting vulnerability. This vulnerability stems from an incomplete regular expression used in the hasxss function, which is independent of context, potentially...

RHSA-2026:0483 Red Hat Security Advisory: wireshark security update

Bulletin has no description...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: A race condition in the call to haslockedchildren was fixed. maydecodefh calls haslockedchildren while holding no locks. This is an oopsable race condition… The other callers are safe, as they hold namespacesem, and...