629298 matches found
PT-2026-89709
These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-3.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-57825
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...
PT-2026-88950
SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in Bazaar package cards where the iconURL metadata is inserted directly into HTML img src attributes without escaping. Attackers can inject malicious URLs with event handlers that execute JavaScript in the authenticated...
PT-2026-89715
These are all security issues fixed in the sshamble-0.3.12-1.1 package on the GA media of openSUSE Tumbleweed...
Linux Distros Unpatched Vulnerability : CVE-2026-87735
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or...
Oracle Linux 9 : ELSA-2026-65120-0: / redis:7 (ELSA-2026-651200)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-651200 advisory. 7.2.16-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.16-1 - rebase to 7.2.16 for CVE-2026-66373 and backport CVE-2026-72568...
PT-2026-89714
These are all security issues fixed in the python313-modelscope-1.40.0-1.1 package on the GA media of openSUSE Tumbleweed...
Oracle Linux 9 : ELSA-2026-64774-0: / python3.14-cryptography (ELSA-2026-647740)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-647740 advisory. 45.0.4-6 - Fix gating plan 45.0.4-5 - Security fixes for CVE-2026-69248 and CVE-2026-69249 Tenable has extracted the preceding description block...
Fedora 44 : complyctl (2026-f33ade2ba6)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f33ade2ba6 advisory. This update aligns the package to the latest Upstream release, which is also the first stable version of complyctl. It introduced the core redesign...
MAL-2026-16058 Malicious code in vinzz-wcli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dec0212466f7170f1e00ecbfe3f846cbf5d211917c3831a6ee162ca6d44ec10 vinzz-wcli is a WhatsApp CLI whose main entry index.js sets global.ownerr = "[email protected]" and treats any incoming WhatsApp message...
MAL-2026-16057 Malicious code in toru-ultimate (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ef8cb6f3ca866b67fa91f2e770c674ddb7d6b110fd671ba98669dc1220510f The package's loginViaAPI function POSTs caller-supplied Facebook email, password, and 2FA Base32 secret to...
Malicious code in toru-ultimate (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ef8cb6f3ca866b67fa91f2e770c674ddb7d6b110fd671ba98669dc1220510f The package's loginViaAPI function POSTs caller-supplied Facebook email, password, and 2FA Base32 secret to...
MAL-2026-16056 Malicious code in tailwind-aspect-styles (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d63fe1e50dc7d704732a5e92e95f320fcc3fac45c5a0a223ed278f316c2bb14 The package's main module src/index.js performs an https.get to http://23.27.245.100/index.js over plain HTTP, writes the response to./inout.js in th...
CVE-2026-85508 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85508 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-66835 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-66835 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-73812 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-73812 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-85504 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85504 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-74994 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-74994 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...