52312 matches found
@hulumi/platform-patterns (0.0.0-bootstrap.0) potentially affected by unknown CVE via @hulumi/baseline (1.3.1)
@hulumi/baseline NPM version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hulumi/baseline and may be impacted: - @hulumi/platform-patterns 0.0.0-bootstrap.0 Source cves: unknown CVE Source advisory: SNYK:JS-HULUMIBASELINE-17660557...
CVE-2026-23734
XWiki Platform is a generic wiki platform. Versions prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17 allow access to read configuration files by using URLs such as http://localhost:8080/bin/ssx/Main/WebHome?resource=/../../WEB-INF/xwiki.cfg=false, leading to Path Traversal. The vulnerability i...
GHSA-6FHV-H367-4JC4 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2026-48244
Open ISES Tickets before 3.44.2 contains a hardcoded Google Maps API key in settings.inc.php committed to public source. The API key can be extracted by anyone with read access and used to make Google Maps Platform requests, resulting in billed usage against the original owner’s Google Cloud proj...
MAL-2026-4421 Malicious code in @pulse-web-platform-core/scripts-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c69fc52eb76aa05711ea0c128624eb1fc8c70655a58f2f3e646da1dcd20f254 On npm install, the package's preinstall.js performs an HTTP GET to http://$pkg.$scope.oob.moika.tech/poc.js and passes the response body directly to...
MAL-2026-4703 Malicious code in veteran (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a20dd9f8d6a9df01d766c25693711d90e4303e3c68fa371f0b842f83c485b4 On npm install, the package's postinstall hook install.js, registered via package.json line 10 "postinstall": "node install.js" downloads a...
Malicious code in veteran (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a20dd9f8d6a9df01d766c25693711d90e4303e3c68fa371f0b842f83c485b4 On npm install, the package's postinstall hook install.js, registered via package.json line 10 "postinstall": "node install.js" downloads a...
Deleted Google API Keys Remain Active up to 23 Minutes, Study Finds
Deleted Google API Keys remain active for up to 23 minutes after deletion, exposing GCP, Gemini, BigQuery, and Maps data to attackers...
GHSA-5HRC-GVXJ-W55P vulnerabilities
Vulnerabilities for packages: py3-django...
SUSE CVE-2026-9112
Use after free in GPU in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2025-71217
An origin validation error vulnerability in the Trend Micro Apex One mac agent self-protection mechanism could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in ord...
Microsoft Warns of Two Actively Exploited Defender Vulnerabilities
Microsoft has disclosed that a privilege escalation and a denial-of-service flaw in Defender has come under active exploitation in the wild. The former, tracked as CVE-2026-41091 , is rated 7.8 on the CVSS scoring system. Successful exploitation of the flaw could allow an attacker to gain SYSTEM...
quagga: Fix of CVE-2018-5380
CVE-2018-5380: fix BGP NOTIFY debug-print msg array over-read...
CVE-2026-42001
Insufficient Validation of Autoprimary SOA Queries...
RHSA-2026:17595 Red Hat Security Advisory: OpenShift Container Platform 4.17.54 packages and security update
Bulletin has no description...
RHSA-2026:17446 Red Hat Security Advisory: OpenShift Container Platform 4.18.42 packages and security update
Bulletin has no description...
Upgrade Tomcat to fix CVE-2026-41284, CVE-2026-41293, CVE-2026-42498, CVE-2026-43512, CVE-2026-43513, CVE-2026-43514 and CVE-2026-43515
h3. Issue Summary Apache Tomcat should be upgraded to 9.0.118, 10.1.55 or a later version to fix https://nvd.nist.gov/vuln/detail/CVE-2026-41284 https://nvd.nist.gov/vuln/detail/CVE-2026-41293 https://nvd.nist.gov/vuln/detail/CVE-2026-42498 https://nvd.nist.gov/vuln/detail/CVE-2026-43512...
CVE-2026-42306 vulnerabilities
Vulnerabilities for packages: grafana, kots, undock, buildah, rancher, nerdctl, podman, k8sgpt, amazon-cloudwatch-agent-operator, skopeo, portieris, opentelemetry-operator, zot, cri-tools, spire-server, ko, trivy-operator, datadog-agent, nuclei, docker-credential-gcr, rancher-agent, envoy-gateway...
[SECURITY] Fedora 43 Update: opencryptoki-3.26.0-3.fc43
Opencryptoki implements the PKCS11 specification v3.0 and partially v3.1 for a set of cryptographic hardware, such as IBM 4767, 4768, 4769 and 4770 crypto cards, and the Trusted Platform Module TPM chip. Opencryptoki also brings a software token implementation that can be used without any cryptog...