319617 matches found
Wicked Problem, Parsimonious Solution: Securing Electric Vehicle Charging Station Software
Electric vehicle charging infrastructure presents a suite of novel cyber-physical threats. Among this infrastructure, charging stations are the most vulnerable elements. The software in the charging station supply equipment is particularly vulnerable. Currently, the software is an attack surface...
Security Advisory 0182
Security Advisory 0182 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-86109 CVSSv3.1 Base Score: 6.6...
CVE-2026-71374 Deserialization of Untrusted Data Vulnerability in Cosminexus Component Container
Deserialization of untrusted data vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before...
Measuring the Security of the Evolving Software Supply Chain: A Research Agenda
Software supply chain security has become increasingly critical due to the widespread reliance on third-party dependencies and the growing attack surface of modern software ecosystems. However, existing quantitative, measurement-based analysis and vulnerability management approaches remain largel...
CVE-2026-20293: Exposed Dangerous Method or Function
A vulnerability in the Unified Extensible Firmware Interface UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access t...
CVE-2026-86544
knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations. Attackers with read-restricted sessions can exploit code.replace to modify permission configurations and escalate privileges on subsequent...
Malicious code in scw-mobile (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f92fe2c0fe1acd783b5612c30ba1976c68c421b6451a68d150928e5166c362e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Palo Alto Networks GlobalProtect App Privilege Escalation
The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...
Do AI Coding Assistants Check Before They Install? A Pre-Registered Demand-Side Audit of Trust Signals in the Research Software Supply Chain
AI coding assistants now select, install, and configure software, and attackers have exploited that position through invented package names, compromised maintainer accounts, and manipulated repository text. In response, the supply-chain community publishes machine-checkable trust signals: softwar...
MOVEit Transfer - Remote Code Execution
In Progress MOVEit Transfer before 2021.0.6 13.0.6, 2021.1.4 13.1.4, 2022.0.4 14.0.4, 2022.1.5 14.1.5, and 2023.0.1 15.0.1, a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database...
Signal-iOS v8.27.0.1843
Signal iOS Signal is a free and open source messaging app for simple private communication with friends. Also available on Android and Desktop. Questions? For troubleshooting and questions, please visit our support center or unofficial community forum. Contributing Bug Reports The best way to...
Linux Distros Unpatched Vulnerability : CVE-2026-68547
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to an out-of-bounds read flaw in the RemoteIo::Impl::populateBlocks function. When the library handles remote network streaming...
UBUNTU-CVE-2026-85769
A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state for example during a virtual machine's power-on or state/migration restore, a malformed state blob can supply an oversized skip-block length that is not validated against the remaining si...
GCVE-1-2026-20023
creationtimestamp| type| source ---|---|--- 2026-09-04 15:04:25+00:00| seen| https://github.com/ChewKeanHo/software-actualizer/security/advisories/GHSA-3757-943v-g3c5...
CVE-2026-85649
creationtimestamp| type| source ---|---|--- 2026-09-04 13:42:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/36th6wpxsne7g 2026-09-04 15:04:12+00:00| seen| https://github.com/ChewKeanHo/software-actualizer/security/advisories/GHSA-3757-943v-g3c5 2026-09-05 13:00:04+00:00|...
CVE-2026-19080
Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menulux Portal: before 20260903211448...
EUVD-2026-71040
Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menulux Portal: before 20260903211448...
kin v0.6.4
A new foundation for code. Kin is a graph-native code repository for people and AI agents. It stores source, recorded code relationships, and versioned history as repository state. The graph is the repository model, not a search index maintained beside another repository. Functions, types, and th...
