CVE-2026-38763

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the function sub13828...

CVE-2026-38766

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the sub186f4 function...

SUSE CVE-2026-56136

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...

Malicious code in streak-daycount (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f787426dd4d04d5cd527bdb19d309c64de82e252af4af0714dc33b07a26b73b0 [email protected] ships an index.mjs whose top-level async IIFE runs on import. When the host is Linux and NODEENV is not 'production', the code...

CVE-2026-61285

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-61287

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-61010

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Integer Overflow

Overview org.webjars.npm:sharp is a High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images Affected versions of this package are vulnerable to Integer Overflow in the bundled libvips GIF loader VipsForeignLoadNsgif, which can miscompute...

CVE-2026-45382

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, decodercontext::decodesliceunittiles libde265/decctx.cc:920 reads pps.CtbAddrRStoTSctbAddrRS at line 966 where ctbAddrRS = ctbY ctbsWidth + ctbX is computed from PPS-supplied colBd/rowBd arrays without...

GHSA-V422-HMWV-36X6 vulnerabilities

Vulnerabilities for packages: json-server, code-server, tileserver-gl, langfuse, kubeflow-centraldashboard, jupyter-base-notebook, kubeflow-pipelines, sqlpad, argo-workflows...

winfsp v2.2B3

WinFsp · Windows File System Proxy WinFsp enables developers to write their own file systems i.e. "Windows drives" as user mode programs and without any knowledge of Windows kernel programming. It is similar to FUSE Filesystem in Userspace for Linux and other UNIX-like computers. winfsp.dev...

CVE-2026-52870 vulnerabilities

Vulnerabilities for packages: semgrep, litellm...

CVE-2026-59869 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, wazuh-dashboard-fips, prism, argo-workflows, unleash-proxy, gitlab-rails-ce-fips, kubeflow-centraldashboard, langfuse-fips, redisinsight, foxx-cli, authentik, opensearch-dashboards, wazuh-dashboard, mongod, opensearch-dashboards-fips, code-server,...

CVE-2026-54490 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, arangodb, argo-workflows, gitlab-rails-ce-fips...

CVE-2026-50271 vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips, litellm...

GHSA-GVWX-54WH-QM9J vulnerabilities

Vulnerabilities for packages: code-server, kubeflow-centraldashboard, pulumi, lerna, jupyter-base-notebook, prism, npm, sqlpad, saf...

GHSA-W8WR-V893-VJVP vulnerabilities

Vulnerabilities for packages: code-server, kubeflow-centraldashboard, pulumi, lerna, jupyter-base-notebook, prism, npm, sqlpad, saf...

GHSA-8X88-C5MF-7J5W vulnerabilities

Vulnerabilities for packages: code-server, kubeflow-centraldashboard, pulumi, lerna, jupyter-base-notebook, prism, npm, sqlpad, saf...

CVE-2026-59844

A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests...

AI nudify apps spark legal scrutiny of Apple and Google’s profits

You expect all kinds of apps on Apple's App Store and Google's Play Store, from weather monitors to home automation apps and games. What you might not expect are apps that can create non-consensual nude imagery from ordinary photos. But they exist, and the City of San Francisco has had enough. On...