54123 matches found
MiracleLinux 7 : java-11-openjdk-11.0.19.0.7-1.el7 (AXSA:2023-5304:06)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5304:06 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK:...
PT-2026-3565
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive limited storm tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds...
PT-2026-3568
Name of the Vulnerable Software and Affected Versions ArmorStart® LT affected versions not specified Description A security issue can result in a denial-of-service condition. During execution of the Achilles Comprehensive grammar tests, the device reboots unexpectedly, causing the Link State...
GHSA-53WG-R69P-V3R7 GraphQL Modules has a Race Condition issue
Summary Originally reported as an issue 2613 but should be elevated to a security issue as the ExecutionContext is often used to pass authentication tokens from incoming requests to services loading data from backend APIs. Details When 2 or more parallel requests are made which trigger the same...
EUVD-2026-2929
Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an SEV-SNP guest...
GHSA-7C2F-R6GC-H92H Apache Airflow proxy credentials for various providers might leak in task logs
In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not treated as sensitive by default and therefore were not automatically masked in log output. As a result,...
CVE-2026-0975
creationtimestamp| type| source ---|---|--- 2026-01-16 07:35:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcjlkq5tq62x 2026-01-16 14:05:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mckbf7zq7o2b 2026-01-22 11:00:00+00:00| seen|...
MAL-2026-300 Malicious code in presentation-test-utilities (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b481e6b9e82f740ebadaad84b281196fae93b52b14c302f7763234319c732f3e The package presentation-test-utilities was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-3074
Malicious code in eniram-web-common-ui npm...
MAL-2026-303 Malicious code in sd-active-conversation-module-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278082132569830ff8cb8dd522f0e5284296ea09a1eebfbebffd95656cfe9c63 The package sd-active-conversation-module-client was found to contain malicious code. Source: ghsa-malware...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002392)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002392 advisory. The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended...
CVE-2015-8747
creationtimestamp| type| source ---|---|--- 2026-01-14 23:13:30+00:00| seen| https://gist.github.com/ilya-startcode/36aae702894882b7b005b436448a38a0...
EUVD-2026-2016
Outray openSource ngrok alternative. Prior to 0.1.5, this vulnerability allows a user i.e a free plan user to get more than the desired subdomains due to lack of db transaction lock mechanisms in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts. This vulnerability is fixed in 0.1.5...
CVE-2025-71139
creationtimestamp| type| source ---|---|--- 2026-01-14 16:02:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcfgywp34l2c 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260602...
CVE-2026-0739 WMF Mobile Redirector <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Parameters
The WMF Mobile Redirector plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level...
EUVD-2026-2534
The Flat Shipping Rate by City for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'cities' parameter in all versions up to, and including, 1.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...
CVE-2023-54335
creationtimestamp| type| source ---|---|--- 2026-01-14 01:44:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdx2eyxqs2c...
CVE-2022-50934
This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue...