Lucene search
+L

630164 matches found

Snyk
Snyk
•added 2026/09/16 9:31 p.m.•10 views

Malicious Package

Overview strapi-plugin-listcc-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/16 9:31 p.m.•10 views

Malicious Package

Overview kartyk-github-oidc-test-pkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/16 9:31 p.m.•9 views

Malicious Package

Overview strapi-plugin-cccon-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/16 9:31 p.m.•9 views

Malicious Package

Overview strapi-plugin-pysh-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/16 9:31 p.m.•10 views

Malicious Package

Overview kartyk-github-single-ver-pkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
OSV
OSV
•added 2026/09/16 5:36 p.m.•12 views

ROOT-APP-MAVEN-CVE-2026-41729 CVE-2026-41729 in org.springframework.data:spring-data-rest-core - Patched by Root

Root has patched CVE-2026-41729 in the org.springframework.data:spring-data-rest-core package for Root:Maven. Multiple fixed versions available...

8.1CVSS5.7AI score0.00401EPSS
SaveExploits0
NVD
NVD
•added 2026/09/16 5:18 p.m.•14 views

CVE-2026-86358

Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution...

8.8CVSS0.00406EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 5:18 p.m.•18 views

CVE-2026-71182

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

6CVSS0.00148EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 5:18 p.m.•17 views

CVE-2026-71181

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

6CVSS0.00148EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 5:18 p.m.•29 views

CVE-2026-71180

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.2CVSS0.0015EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 5:18 p.m.•18 views

CVE-2026-71179

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileg...

7.8CVSS0.0059EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/16 4:23 p.m.•18 views

EUVD-2026-80872

Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution...

6.5CVSS5.9AI score0.00406EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/16 4:23 p.m.•20 views

CVE-2026-86358

Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution...

6.5CVSS5.9AI score0.00406EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/16 4:23 p.m.•32 views

CVE-2026-86358

Dell Update Package Framework (DUP) versions prior to 26.07.03 contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access can exploit it to achieve remote code execution . NVD rates it CVSS 3.1 8.8 (HIGH) ; Dell's CNA assigns 6.5 (MEDIUM) , diffe...

8.8CVSS5.9AI score0.00406EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/09/16 4:23 p.m.•51 views

CVE-2026-86358

Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution...

6.5CVSS0.00406EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/16 4:21 p.m.•22 views

DRUPAL-CORE-2026-013

The Drupal project uses the CKEditor library for WYSIWYG editing. CKEditor has released a security update that impacts Drupal. Vulnerabilities are possible if Drupal is configured to use CKEditor for WYSIWYG editing. An attacker that can create or edit content even without access to CKEditor...

5.6AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/16 4:20 p.m.•45 views

CVE-2026-71182

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

3CVSS0.00148EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/16 4:20 p.m.•18 views

EUVD-2026-80870

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

3CVSS5.8AI score0.00148EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/16 4:20 p.m.•37 views

CVE-2026-71182

The Dell Update Package Framework in versions prior to 26.07.03 is vulnerable to an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with local access could exploit this flaw to gain unauthorized Filesystem access . No specific exploit detai...

6CVSS5.8AI score0.00148EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/16 4:20 p.m.•20 views

CVE-2026-71182

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

3CVSS5.8AI score0.00148EPSS
SaveExploits0References1
Rows per page
Query Builder