51774 matches found
Malicious Package
Overview @cloudplatform-single-spa/event-bus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...
Malicious Package
Overview @cloudplatform-single-spa/agreements is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...
CVE-2026-10189
creationtimestamp| type| source ---|---|--- 2026-05-31 17:54:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn654uzzeu27 2026-05-31 19:06:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mn6b52zenf2j 2026-06-01 07:30:27+00:00| seen|...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744 — MCPJam Inspector Unauthenticated RCE !Pytho...
CVE-2026-10194
A weakness has been identified in OFFIS DCMTK 3.7.0. This affects the function DcmQueryRetrieveIndexDatabaseHandle::deleteOldestImages of the file dcmqrdb/libsrc/dcmqrdbi.cc of the component dcmqrscp. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched...
CVE-2026-10194
A weakness has been identified in OFFIS DCMTK 3.7.0. This affects the function DcmQueryRetrieveIndexDatabaseHandle::deleteOldestImages of the file dcmqrdb/libsrc/dcmqrdbi.cc of the component dcmqrscp. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched...
CVE-2026-10193
CVE-2026-10193 affects OFCMS up to version 1.1.3. The vulnerable element is the Query function in file at com/ofsoft/cms/admin/controller/ComnController.java (ComnController). An attacker can manipulate the argument system.user.query to trigger SQL injection. The exploit is capable of remote init...
Missing Authentication
org.xwiki.platform, xwiki-platform-rest-server is vulnerable to Missing Authentication. The vulnerability is due to the POST /wikis/wikiName API executing a XAR import without performing authentication or authorization checks, which allows an unauthenticated attacker to create or update documents...
CVE-2026-39828 affecting package cert-manager for versions less than 1.12.15-8
CVE-2026-39828 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...
CVE-2026-39832 affecting package packer for versions less than 1.9.5-14
CVE-2026-39832 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...
CVE-2026-39827 affecting package kubevirt for versions less than 1.7.1-5
CVE-2026-39827 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...
CVE-2026-27136 affecting package kubevirt for versions less than 1.7.1-5
CVE-2026-27136 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...
CVE-2026-39821 affecting package packer for versions less than 1.9.5-14
CVE-2026-39821 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...
CVE-2026-39834 affecting package cert-manager for versions less than 1.12.15-8
CVE-2026-39834 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...
CVE-2026-39829 affecting package cert-manager for versions less than 1.12.15-8
CVE-2026-39829 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...
CVE-2026-46597 affecting package packer for versions less than 1.9.5-14
CVE-2026-46597 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...
CVE-2026-25681 affecting package packer for versions less than 1.9.5-14
CVE-2026-25681 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...
CVE-2026-27136 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6
CVE-2026-27136 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6. A patched version of the package is available...