319619 matches found
CVE-2026-2347
Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows Session Hijacking. This issue affects E-Commerce Website: before 4.5.001...
WS-2019-0466
All versions of this package contains malware. The package was designed to find and exfiltrate cryptocurrency wallets...
WS-2019-0446
malicious-do-not-install v1.0.0 contain malicious code. The package copies the contents of /etc/passwd and /etc/shadow to files in the local /tmp/ folder...
MSC-2026-5528
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Suspect publisher – this publisher has a histor...
WPS Office improper access restriction to its named pipe
Overview WPS Office provided by WPS SOFTWARE PTE. LTD. contains a service program running background and providing certain functionalities to the other programs. This service program uses a named pipe to communicate with the other programs. The named pipe above is not properly protected and any...
WS-2019-0238
serve versions before 10.1.2 are vulnerable to Path Traversal when Explicitly ignored folders can be accessed through relative paths,...
WS-2019-0220
zero versions before 1.0.6 are vulnerable to path traversal because of insufficient input sanitization in URLs, attackers can access server files by using relative paths when fetching files...
BELL-CVE-2026-43477
Bulletin has no description...
BELL-CVE-2026-43479
Bulletin has no description...
BELL-CVE-2026-43481
Bulletin has no description...
BELL-CVE-2026-43478 CVE-2026-43478 does not affect BellSoft software
Bulletin has no description...
WS-2018-0233
Versions 0.1.1 or 0.1.2 of ipns are vulnerable to improper key validation...
[SECURITY] Fedora 42 Update: python-django5-5.2.14-1.fc42
Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...
CVE-2026-46445
SOGo before 5.12.7, when PostgreSQL is used, allows SQL injection...
WS-2017-0241
Affected versions of the package are vulnerable to Arbitrary Code Injection due to unsafe use of the eval function...
WS-2017-0242
Affected versions of the package are vulnerable to Arbitrary Code Injection due to unsafe use of the eval function...
WS-2017-0243
Affected versions of the package are vulnerable to Arbitrary Code Injection due to unsafe use of the eval function...
WS-2017-0245
Affected versions of the package are vulnerable to Arbitrary Code Injection due to unsafe use of the eval function...