move-vulnerability-database

Move脆弱性データベース（MVD）v3.0へようこそ！ Moveエコシステムにおける脆弱性パターンを包括的にまとめたコレクションです。 収録内容 脆弱性パターン - カテゴリ別のセキュリティ問題を例と深刻度評価付きで掲載 付録 - 監査レポートおよびプロトコルリファレンス 学習リソース - Moveセキュリティ学習用の厳選資料...

CVE-2026-58093

creationtimestamp| type| source ---|---|--- 2026-08-26 06:37:56+00:00| seen| https://mastodon.bsd.cafe/users/grahamperrin/statuses/117160429146127325...

CVE-2026-61336

...

CVE-2026-61250

...

CVE-2026-61196

...

CVE-2026-61098

...

CVE-2026-60852

...

CVE-2026-60717

The CVE-2026-60717 entry concerns Oracle E-Business Suite, specifically the Common Utilities component of Oracle Complex Maintenance, Repair and Overhaul. Affected versions are 12.2.3–12.2.15. The issue allows a low-privileged, network-accessible attacker via HTTP to modify and read data (unautho...

CVE-2026-60689

Summary : CVE-2026-60689 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) in versions 22.3–26.5. It allows an unauthenticated, network-accessible attacker (via HTTP) to compromise the system, potentially enabling unauthorized access to critical data or complete access to all Si...

CVE-2026-60465

...

CVE-2026-60327

...

CVE-2026-60230

...

CVE-2026-47040

...

CVE-2026-46803

Technical details about CVE-2026-46803 are not provided in the supplied documents. No affected products, root cause, or remediation are disclosed. Monitor for updates in the CVE record and connected feeds.

Malicious Package

Overview @t-in-one/addapplicationservicetoken is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...

CVE-2026-35277

CVE-2026-35277 affects Oracle REST Data Services (Core). Affected versions: 24.2.0–26.1.0. The vulnerability is exploitable by a low-privileged attacker with network access via HTTPS, potentially leading to unauthorized creation, deletion or modification of data, or unauthorized access to Oracle ...

Malicious Package

Overview @google-pay-trust/init-google-pay is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview changelog-cli-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-34305

...

Malicious Package

Overview @tushar-br/file11 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...