25012 matches found
MINI-247G-V7G9-Q3HR
Bulletin has no description...
MINI-27F4-9MW7-8Q9W
Bulletin has no description...
MINI-265Q-VM8P-P232
Bulletin has no description...
CLEANSTART-2026-NA21773 GNU patch through 2
Multiple security vulnerabilities affect the patch package. GNU patch through 2. See references for individual vulnerability details...
K000160221: Linux kernel vulnerability CVE-2025-38550
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Delay put pmc-idev in mlddeldelrec pmc-idev is still used in ip6mcclearsrc, so as mldcleardelrec does, the reference should be put after ip6mcclearsrc return. CVE-2025-38550 Impact There...
Incorrect Authorization
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the WebSocket connect process. An attacker can inject unauthorized node.event messages by connecting with a shared gateway token and claiming role=node without...
CVE-2026-3076
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-2363. Reason: This candidate is a reservation duplicate of CVE-2026-2363. Notes: All CVE users should reference CVE-2026-2363 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Craft CMS has Permission Bypass and IDOR in Duplicate Entry Action
Description The "Duplicate" entry action does not properly verify if the user has permission to perform this action on the specific target elements. Even with only "View Entries" permission where the "Duplicate" action is restricted in the UI, a user can bypass this restriction by sending a direc...
Incomplete List of Disallowed Inputs
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via tools.exec.safeBins. An attacker can access sensitive files from the working directory by supplying a pattern input through the -e or --regexp fla...
CVE-2026-3455
creationtimestamp| type| source ---|---|--- 2026-03-03 08:16:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg5dckpsdm2u 2026-08-11 09:43:37+00:00| seen| https://gist.github.com/hayageek/05ef86a8272d03ab9e54ab5476cf7afe...
Malicious Package
Overview tailwindcss-forms-componentes is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview testing-package-xdsfdsfsc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
GHSA-6G25-PC82-VFWP
creationtimestamp| type| source ---|---|--- 2026-03-03 02:40:08+00:00| seen| https://gist.github.com/alon710/2a3c7e4817e660cec906b5ff0aca8450...
Regenerator 2000
Regenerator 2000 is an interactive disassembler for the CPU 6502, focused mostly on Commodore 8-bit computers. Features a TUI with modern features like x-ref, undo/redo, arrows, keyboard-driven, mcp server, VICE debugger and more! This is the coolest thing we have added to the archive today...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005463)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005463 advisory. In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in softwarenodegetreferenceargs softwarenodegetreferenceargs...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005747)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005747 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev/ep93xx-fb: Do not assign to struct fbinfo.dev Do not assing the Linux device to struct...
PT-2026-22809
Name of the Vulnerable Software and Affected Versions FreeScout versions 1.8.206 and earlier Description FreeScout is susceptible to remote code execution RCE vulnerabilities CVE-2026-27636 and CVE-2026-28289. CVE-2026-27636 allows authenticated users with file upload permissions to execute code ...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005466)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005466 advisory. In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in more places For fixing CVE-2023-6270, f98364e926...
SAMSUNG多款产品 安全漏洞
SAMSUNG Exynos 2400 and other chips are mobile processor components developed by Samsung Electronics of South Korea. Several Samsung products have security vulnerabilities; these vulnerabilities stem from a null pointer dereferencing in the setcpuaffinity function, npuprotodrv.ast.threadref, whic...