CVE-2026-81779 WordPress Newspapers X theme 1.0.46-1.0.48 - Backdoor vulnerability

Improper Validation of Specified Quantity in Input vulnerability in Silk Themes Newspapers X allows Malicious Software Implanted. This issue affects Newspapers X: from 1.0.46 through 1.0.48...

CVE-2026-82818 dibo-software diboot Tenant Resource Assignment resource access control

A vulnerability was determined in dibo-software diboot 3.8.0. This affects an unknown part of the file /api/iam/tenant/resource of the component Tenant Resource Assignment Handler. Executing a manipulation of the argument tenantId can lead to improper access controls. The attack may be launched...

CVE-2026-82816

dibo-software diboot 3.8.0 contains an authorization bypass in the AI Session Endpoint (/api/ai-session/). The flaw allows a remote attacker with low privileges to bypass authorization with low complexity and no user interaction, impacting confidentiality, integrity, and availability at a low lev...

CVE-2026-82816 dibo-software diboot AI Session Endpoint ai-session authorization

A vulnerability has been found in dibo-software diboot 3.8.0. Affected by this vulnerability is an unknown functionality of the file /api/ai-session/ of the component AI Session Endpoint. Such manipulation leads to authorization bypass. The attack can be launched remotely. The exploit has been...

Updated jbig2dec packages fix security vulnerabilities

Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2error at /jbig2dec/jbig2.c. CVE-2023-46361 An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafted input. CVE-2026-3807...

MGASA-2026-0344 Updated jbig2dec packages fix security vulnerabilities

Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2error at /jbig2dec/jbig2.c. CVE-2023-46361 An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafted input. CVE-2026-3807...

PT-2026-84017

Name of the Vulnerable Software and Affected Versions Newspapers X versions 1.0.46 through 1.0.48 Description Improper validation of specified quantity in input allows for the implantation of malicious software. This issue was introduced via a supply chain attack, resulting in a backdoor within t...

CVE-2026-82816: Authorization Bypass Through User-Controlled Key

A vulnerability has been found in dibo-software diboot 3.8.0. Affected by this vulnerability is an unknown functionality of the file /api/ai-session/ of the component AI Session Endpoint. Such manipulation leads to authorization bypass. The attack can be launched remotely. The exploit has been...

PT-2026-83940

A vulnerability has been found in dibo-software diboot 3.8.0. Affected by this vulnerability is an unknown functionality of the file /api/ai-session/ of the component AI Session Endpoint. Such manipulation leads to authorization bypass. The attack can be launched remotely. The exploit has been...

CVE-2026-81779: Improper Validation of Specified Quantity in Input

Improper Validation of Specified Quantity in Input vulnerability in Silk Themes Newspapers X allows Malicious Software Implanted. This issue affects Newspapers X: from 1.0.46 through 1.0.48...

CVE-2026-82818: Improper Access Control

A vulnerability was determined in dibo-software diboot 3.8.0. This affects an unknown part of the file /api/iam/tenant/resource of the component Tenant Resource Assignment Handler. Executing a manipulation of the argument tenantId can lead to improper access controls. The attack may be launched...

Malicious code in cloufcrxz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb997ba2e8af58bd0d35d6e2cfb2264b4ae0132e071fc5b0e3e58f3326e37a9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-82480

A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFESBGetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfesbutil.c of the component cFE Software Bus. Performing a manipulation of the argument TotalMsgSize/HdrSize results in integer...

CVE-2026-82480

A remote integer underflow vulnerability exists in the cFE Software Bus component of NASA cFS (up to version 7.0.1), specifically in the function CFE_SB_GetUserDataLength within the file cfe_sb_util.c. Manipulating the TotalMsgSize/HdrSize argument triggers the underflow. The attack requires low ...

CVE-2026-82480 NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow

A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFESBGetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfesbutil.c of the component cFE Software Bus. Performing a manipulation of the argument TotalMsgSize/HdrSize results in integer...

EUVD-2026-68151

A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFESBGetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfesbutil.c of the component cFE Software Bus. Performing a manipulation of the argument TotalMsgSize/HdrSize results in integer...

CVE-2026-82480 NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow

A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFESBGetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfesbutil.c of the component cFE Software Bus. Performing a manipulation of the argument TotalMsgSize/HdrSize results in integer...

ROOT-OS-DEBIAN-13-CVE-2026-31403 CVE-2026-31403 in linux - Patched by Root

Root has patched CVE-2026-31403 in the linux package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-55857 vulnerabilities

Vulnerabilities for packages: flyway, debezium, keycloak, zipkin...

PT-2026-83522

Name of the Vulnerable Software and Affected Versions NASA cFS versions prior to 7.0.2 Description A security flaw exists in the cFE Software Bus component within the CFE SB GetUserDataLength function located in the src/cFS/cfe/modules/sb/fsw/src/cfe sb util.c file. A remote attacker can trigger ...