SUSE CVE-2026-56136

unknown...

Malicious code in streak-daycount (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5a02c91969e01fc57050b8fabfc6abe2e50b9455cdaa4357791d24546b5623a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-61285

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-61287

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-61010

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-45382

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, decodercontext::decodesliceunittiles libde265/decctx.cc:920 reads pps.CtbAddrRStoTSctbAddrRS at line 966 where ctbAddrRS = ctbY ctbsWidth + ctbX is computed from PPS-supplied colBd/rowBd arrays without...

GHSA-V422-HMWV-36X6 vulnerabilities

Vulnerabilities for packages: langfuse, kubeflow-centraldashboard, tileserver-gl, sqlpad, json-server, argo-workflows, kubeflow-pipelines...

CVE-2026-52870 vulnerabilities

Vulnerabilities for packages: litellm...

CVE-2026-59869 vulnerabilities

Vulnerabilities for packages: kibana, authentik-fips, prism, pulumi, code-server, authentik, wazuh-dashboard-fips, wazuh-dashboard, foxx-cli, mongod, lerna, kubeflow-centraldashboard, unleash-fips, awx, sqlpad, langfuse-fips, opensearch-dashboards, homepage...

CVE-2026-54490 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, arangodb...

CVE-2026-50271 vulnerabilities

Vulnerabilities for packages: datadog-agent, litellm, datadog-agent-fips...

GHSA-8X88-C5MF-7J5W vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, code-server, sqlpad, saf, prism, lerna, npm, pulumi...

GHSA-GVWX-54WH-QM9J vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, code-server, sqlpad, saf, prism, lerna, npm, pulumi...

GHSA-W8WR-V893-VJVP vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, code-server, sqlpad, saf, prism, lerna, npm, pulumi...

CVE-2026-59844

A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests...

EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2026-2776)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Input: alps - fix use-after-free bugs caused by dev3registerworkCVE-2025-68822 ext4: reject mount if bigalloc with sfirstdatablock ...

CVE-2026-33328

libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.18.0, the gifload operation could incorrectly determine dimensions leading to an integer overflow. This has been patched in version 8.18.1...

USN-8570-1 linux-gcp-6.17, linux-realtime-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Null block...

MAL-2026-10831 Malicious code in @gocortexio/npmgremlinbox-linux-man-pages-copyleft (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3be191a3f3fb6afbef71a5e68c523245d8b473f713b55c7648bcbc29651979d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10832 Malicious code in @gocortexio/npmgremlinbox-malware-c2-beacon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6da5e787cb37cd00670a6df8b8489fd71e5c54b8af2216948669be4a0480f428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...