94 matches found
Oracle SOA Suite authorization issue vulnerabilities
The Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 contain vulnerabilities related to authorization. These vulnerabilities stem from issues with the Enterprise Scheduling System component. Unauthorized attackers may exploit these vulnerabilities to gain access through SOAP network...
CVE-2026-16754: Improper Certificate Validation
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications...
CVE-2026-16754
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications...
CVE-2026-16754
The Lenovo Smart Camera C33 , distributed exclusively in the Chinese market, is susceptible to an improper certificate validation vulnerability (CWE-295). This flaw could allow an adjacent user to intercept or manipulate network communications. No specific root cause components, exploit details, ...
Improper Removal of Sensitive Information Before Storage or Transfer
Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer due to improper removal of sensitive information before storage or transfer. An attacker can gain unauthorized access to confidential data by intercepting network...
MAL-2026-11430 Malicious code in list-issue-predecessor-dependencies-block (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd4d4e3aa51ec1a7ebc0a0d4f728698503432546f139f67998849f8fff9b614 npm package [email protected] auto-executes index.js from three lifecycle hooks preinstall, install, postinstall on np...
CVE-2026-15811
A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw encryption keys resident in memory after...
CVE-2026-15811
Kronosnet (version
CVE-2026-15811
A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw encryption keys resident in memory after...
axios: Axios: Prototype pollution allows information disclosure and request manipulation
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object...
CVE-2022-4992 Dräger Infinity M540 VG4.1.1 Spoofed Network Message Handling DoS/Tampering
Dräger Infinity Acute Care System and Standalone Infinity M540 patient monitors versions VG4.1.1, VG4.0.3, and lower with VG4.2 partially affected contain a network message handling vulnerability that allows remote attackers to inject spoofed or tampered data and cause denial-of-service condition...
CVE-2022-4992: Insufficient Verification of Data Authenticity
Dräger Infinity Acute Care System and Standalone Infinity M540 patient monitors versions VG4.1.1, VG4.0.3, and lower with VG4.2 partially affected contain a network message handling vulnerability that allows remote attackers to inject spoofed or tampered data and cause denial-of-service condition...
CVE-2026-34351 Windows TCP/IP Elevation of Privilege Vulnerability
...
Pack-A-Mal: A Malware Analysis Framework for Open-Source Packages
The increasingly sophisticated environment in which attackers operate makes software security an even greater challenge in open-source projects, where malicious packages are prevalent. Static analysis tools, such as Malcontent, are highly useful but are often incapable of dealing with obfuscated...
EUVD-2019-14683
Malware in sbrugna...
EUVD-2022-32378
Malicious code in bioql PyPI...
EUVD-2022-51006
Malicious code in bioql PyPI...
CVE-2019-5077
An exploitable denial-of-service vulnerability exists in the iocheckd service ‘’I/O-Chec’’ functionality of WAGO PFC 200 Firmware versions 03.01.0713 and 03.00.3912, and WAGO PFC 100 Firmware version 03.00.3912. A specially crafted set of packets can cause a denial of service, resulting in the...
USN-7330-2: Ansible regression
USN-7330-1 fixed vulnerabilities in Ansible. The update introduced a regression when attempting to install Ansible on Ubuntu 16.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Ansible did not properly verify certain fiel...
Ubuntu 16.04 LTS : PostgreSQL vulnerabilities (USN-7358-1)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7358-1 advisory. Wolfgang Walther discovered that PostgreSQL incorrectly tracked tables with row security. A remote attacker could possibly use this issue to perform...