14044 matches found
MAL-2026-14138 Malicious code in optimizely-starter-kit-for-fastly-compute (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b7bcd65cbf07a90130de5e4a29fb72bc99badb287a1e1dc7373c288a1ae0be package.json declares preinstall: node index.js, causing index.js to run automatically on npm install. The script collects host identifiers...
CVE-2026-73921
creationtimestamp| type| source ---|---|--- 2026-08-18 22:28:55+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfbby4xnp2c 2026-08-19 10:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgihppt7l2u 2026-08-19 11:01:13+00:00| seen|...
MINI-GQ4P-GJCW-42PF
Bulletin has no description...
CVE-2026-62544
creationtimestamp| type| source ---|---|--- 2026-08-18 22:15:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfakgn7oe2u 2026-08-19 03:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfs4h5k2r2t 2026-08-19 17:48:30+00:00| seen|...
CVE-2026-70796
...
CVE-2026-70735
...
CVE-2026-62500
The Common Events component of Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 is vulnerable to a network-accessible flaw exploitable by a low-privileged attacker via HTTP, enabling full system takeover with CVSS 3.1 score 8.8 (HIGH). Oracle's August 2026 CPU advisory addresses th...
CVE-2026-74979
creationtimestamp| type| source ---|---|--- 2026-08-18 20:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf37ecf7h2j 2026-08-19 04:46:51+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-21 15:07:06+00:00| see...
CVE-2026-74956
creationtimestamp| type| source ---|---|--- 2026-08-18 20:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf37cwmsx2j 2026-08-19 04:45:58+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 05:07:07+00:00| see...
kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...
CVE-2026-56684
creationtimestamp| type| source ---|---|--- 2026-08-18 14:52:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hymfdqmzkz53z...
CVE-2026-72156
A flaw was found in the Linux kernel's microchip-spi Field-Programmable Gate Array FPGA module. This vulnerability occurs in the mpfopsparseheader function when processing a bitstream. If a crafted bitstream sets the headersize to zero, the function attempts to read data from memory before the...
CVE-2026-75839
ArcadeDB versions ≤ 26.7.3 expose an IDOR in the Raft cluster-info endpoints (GetClusterHandler, PostBootstrapStateHandler): authenticated users lacking cross-database privileges can enumerate the server's full database registry and retrieve per-database metadata (names, transaction IDs, bootstra...
CVE-2026-75839
ArcadeDB com.arcadedb:arcadedb-server versions = 26.7.3 contain an insecure direct object reference IDOR vulnerability in the Raft cluster-info endpoints GetClusterHandler and PostBootstrapStateHandler, which authenticate but do not authorize access. On an ArcadeDB HA cluster only reachable when...
Heights Finance data breach: What customers need to know
Heights Finance Holdings' online data breach notification says an unauthorized party accessed a third-party cloud platform containing customer data, potentially exposing highly sensitive personal, banking, and identity information. Heights Finance is a consumer lender that offers personal...
389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...
BELL-CVE-2026-74382
Bulletin has no description...
EUVD-2026-60494
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to leak sensitive user information...
PT-2026-76939
ArcadeDB com.arcadedb:arcadedb-server versions = 26.7.3 contain an insecure direct object reference IDOR vulnerability in the Raft cluster-info endpoints GetClusterHandler and PostBootstrapStateHandler, which authenticate but do not authorize access. On an ArcadeDB HA cluster only reachable when...