277229 matches found
Malicious code in electron-orbit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7faf51a6c9d6ed9fce8cf9de9ea8afee0e9c3dc1fb254e8cd0c3c2a8ca61323f On require'electron-orbit', the module unconditionally fires an auto-prefetch pipeline in Node contexts when no document is present that opens a raw...
UBUNTU-CVE-2026-55594
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided. This issue has been fixed in versions 6.9.13-51 and...
CVE-2026-55577 ImageMagick: Heap Buffer Overflow in ImageMagick MVG decoder
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in...
GHSA-8QXC-57HF-HC9J Open Babel has uninitialized pointer dereference in PQS pFormat
Summary A memory-safety vulnerability in Open Babel's PQS parser caused an uninitialized pointer dereference when reading a crafted input file. Details The flaw was in the pFormat handling of the PQS reader. A malformed input caused the parser to dereference a format pointer that had never been...
Security Bulletin: Vulnerabilities in Apache Tomcat Server library (CVE-2026-41293, CVE-2026-24880) affect Power HMC.
Summary The Apache Tomcat Server library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2026-41293 DESCRIPTION: Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1...
ClamAV Vulnerabilities Affecting Cisco Products: July 2026
Multiple vulnerabilities in ClamAV could allow a remote attacker to cause a denial of service DoS condition, interrupting scanning operations. For more information about these vulnerabilities, see the Details "details" section of this advisory. For additional information on these vulnerabilities ...
EUVD-2026-41010
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Stored XSS. This issue affects DivvyDrive: from v.4.8.2.23 before v.4.8.3.1...
CVE-2026-11274 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-10916 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2025-13102 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-PQVJ-7WMM-MJVV vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-VVXH-6R52-HJ35 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-7989 vulnerabilities
Vulnerabilities for packages: chromium...
RHSA-2026:33840 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
RHSA-2026:33552 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
BELL-CVE-2026-53319 CVE-2026-53319 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-53299 CVE-2026-53299 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-53316 CVE-2026-53316 does not affect BellSoft software
Bulletin has no description...