232 matches found
move-vulnerability-database
Welcome to the Move Vulnerability Database MVD v3.0! A comprehensive collection of vulnerability patterns in the Move ecosystem. What's Inside Vulnerability Patterns - Categorized security issues with examples and severity ratings Appendix - Audit reports and protocol references Learning...
CVE-2026-58093
creationtimestamp| type| source ---|---|--- 2026-08-26 06:37:56+00:00| seen| https://mastodon.bsd.cafe/users/grahamperrin/statuses/117160429146127325...
Malicious Package
Overview personal-custom-button is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
Malicious Package
Overview 0xmisoke is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
CVE-2026-61336
...
CVE-2026-61250
...
CVE-2026-61196
...
CVE-2026-61098
...
CVE-2026-60852
...
CVE-2026-60717
The CVE-2026-60717 entry concerns Oracle E-Business Suite, specifically the Common Utilities component of Oracle Complex Maintenance, Repair and Overhaul. Affected versions are 12.2.3–12.2.15. The issue allows a low-privileged, network-accessible attacker via HTTP to modify and read data (unautho...
CVE-2026-60689
Summary : CVE-2026-60689 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) in versions 22.3–26.5. It allows an unauthenticated, network-accessible attacker (via HTTP) to compromise the system, potentially enabling unauthorized access to critical data or complete access to all Si...
CVE-2026-60465
...
CVE-2026-60327
...
CVE-2026-60230
...
CVE-2026-47040
...
Malicious Package
Overview @gocortexio/npmgremlinbox-cc-by-sa-3-0-at is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Malicious Package
Overview field-plus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
CVE-2026-46803
Technical details about CVE-2026-46803 are not provided in the supplied documents. No affected products, root cause, or remediation are disclosed. Monitor for updates in the CVE record and connected feeds.
Malicious Package
Overview @t-in-one/addapplicationservicetoken is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...
CVE-2026-35277
CVE-2026-35277 affects Oracle REST Data Services (Core). Affected versions: 24.2.0–26.1.0. The vulnerability is exploitable by a low-privileged attacker with network access via HTTPS, potentially leading to unauthorized creation, deletion or modification of data, or unauthorized access to Oracle ...