com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68078 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68078 Source advisory: MEND:CVE-2026-68078...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68077 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68077 Source advisory: MEND:CVE-2026-68077...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68075 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68075 Source advisory: MEND:CVE-2026-68075...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68073 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68073 Source advisory: MEND:CVE-2026-68073...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68060 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68060 Source advisory: MEND:CVE-2026-68060...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68074 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68074 Source advisory: MEND:CVE-2026-68074...

Malicious code in ckcc-protocol (npm)

Source: ossf-package-analysis 61a440517bf97875e91920faabc309da8fa1bfe264e510fa54e5ffa210bd1d15 The OpenSSF Package Analysis project identified 'ckcc-protocol' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

slater v0.24.4

Slater Current version:v0.25.2 — all releases. In one line: Slater serves graphs that don't fit in memory — hundreds of millions of nodes and billions of edges in low hundreds of MB of RAM — over standard Bolt , so any neo4j driver just works, with disk-native vector search sitting next to the...

Access of Resource Using Incompatible Type ('Type Confusion')

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' in ProtocolMappersClientRegistrationPolicy via th...

Malicious code in ckcc-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebcdc07616ec6ab418a9005e1486d05f3753dc4d37f6ce61c5daed495d31e25 The npm package [email protected] typosquats the legitimate Coldcard ckcc-protocol tool and ships no functionality index.js exports . Its...

MAL-2026-12064 Malicious code in ckcc-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebcdc07616ec6ab418a9005e1486d05f3753dc4d37f6ce61c5daed495d31e25 The npm package [email protected] typosquats the legitimate Coldcard ckcc-protocol tool and ships no functionality index.js exports . Its...

Vulnerability in Cosminexus HTTP Server

Overview VulnerabilityCVE-2026-48913 has been found in Cosminexus HTTP Server. This vulnerability does not apply if HTTP/2 protocol is disabled. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the...

SUSE CVE-2026-67299

FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOWICONORDER when AsyncUpdate is enabled e.g. xfreerdp /async-update. In updatemessageWindowIcon a shallow CopyMemory overwrites a freshly allocated lParam-iconInfo with the parser-owned...

SUSE CVE-2026-67300

FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOWSTATEORDER and NOTIFYICONSTATEORDER when AsyncUpdate is enabled. When a malicious or compromised RDP server sends crafted update orders, the message proxy shallow-copies...

SUSE CVE-2026-67302

FreeRDP before 3.29.0 affected versions = 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecamdevprocessstartstreamsrequest parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not...

CVE-2026-46334

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the SDP bandwidth-line parsing logic. A SIP request with Content-Type: application/sdp and a malformed session-level SDP bandwidth line missing t...

CVE-2026-45705

OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the findlinedelimiter function in the multipart body parser performs an out-of-bounds read via strncmp when searching for MIME boundary delimiters. After finding a -- pattern near the en...

CVE-2026-45705

OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the findlinedelimiter function in the multipart body parser performs an out-of-bounds read via strncmp when searching for MIME boundary delimiters. After finding a -- pattern near the en...

OpenSSL Security Advisory 20260805

OpenSSL Security Advisory 20260805 - A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries...

CVE-2025-70962

Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized...