CVE-2026-22002

...

CVE-2026-21998

...

CVE-2026-34980 affecting package cups for versions less than 2.4.17-1

CVE-2026-34980 affecting package cups for versions less than 2.4.17-1. An upgraded version of the package is available that resolves this issue...

Oracle VM VirtualBox 安全漏洞

Oracle VM VirtualBox is a virtual machine management software developed by Oracle Corporation. Version 7.2.6 of Oracle VM VirtualBox contains a security vulnerability. This vulnerability stems from issues with the Core component, which may allow attackers with high privileges to log in and execut...

GHSA-RP42-5VXX-QPWR vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards, kibana, code-server, opensearch-dashboards-fips...

DeepCool DeepCreative 安全漏洞

DeepCool DeepCreative is a creative design and control software platform for the hardware ecosystem developed by DeepCool Corporation in China. Versions of DeepCool DeepCreative prior to 1.2.7 contained security vulnerabilities. These vulnerabilities were caused by improper permission settings,...

PT-2026-33541

Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can escalate their own account to administrator by sending isAdmin=true to PUT /settings/users/userId for their own user ID. The endpoint is intended to let a user ed...

CVE-2026-6300 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-6301 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-40319 Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check

Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the RegexMatching check passes a user-supplied regular expression pattern directly to Python's re.search without any timeout or complexity guard. A crafted regex pattern can trigger catastrophic backtracking,...

GHSA-5GRW-5P3C-HG2G vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-6303 vulnerabilities

Vulnerabilities for packages: chromium...

Exploit for CVE-2026-5059

No d...

Malicious code in relion-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650bf9452e7eaed5b89edb5f2af6208d4491aa079a90805fd6360b32ee6ff6d8 The package relion-chain was found to contain malicious code...

MAL-2026-2788 Malicious code in otomi-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9238b0645d7de5b5df1ba2ccc3d6a6d2d476b29cfd3a7eaa583ec4c32c7839 The package otomi-console was found to contain malicious code...

MAL-2026-2785 Malicious code in nemo-jaws (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b0aca2f522f9d9ab39b1b2ddf4f16b0e2d5c40b796392848c3a3ac77e73fa On npm install, the package's preinstall hook executes index.js, which collects host identifiers os.hostname, os.platform, os.arch, os.homedir, and...

Malicious code in farikku-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74e79e5f35cd4e3f49a89dc7e0c244bdd40466a158c84cf45b61bb23553bd27 The package farikku-util was found to contain malicious code...

Malicious code in @3stripes/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca39203b484afe25fca27596d3c3c81a0a6765ad88d3b129871375127bdb5ea The package @3stripes/shared was found to contain malicious code...

Fedora: Security Advisory (FEDORA-2026-3aebe19127)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-6318

Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...