CVE-2026-13996 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-2399

creationtimestamp| type| source ---|---|--- 2026-07-09 16:15:07+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-02...

CVE-2026-54800

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V26.20, SICORE Base system All versions V26.20.0. The affected application ships with a default configuration that disables all OPC UA security mechanisms. This could allow an attacker to gain unauthorized...

openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy

A flaw was found in OpenSSH, a widely used tool for secure remote access. When a user attempts to copy files between two different remote systems using the scp command, the file might be incorrectly placed in a directory above the intended destination. This unintended file placement could lead to...

MAL-2026-10021 Malicious code in txs-builder-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bb13d76ebc74c36f68dd219079500d0bdb60e4bc07f8089eefbcde91bbdeac The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-31589 vulnerabilities

Vulnerabilities for packages: linux-aws...

MAL-2026-10012 Malicious code in mchain-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5249b7e6ec4cba8f4a3b2d332ec69069c1ca39eabec04a1372500ea25952280 package.json declares a postinstall hook node./src/core/index.js. That module immediately runs a top-level async IIFE that base64-decodes a URL store...

MAL-2026-7031 Malicious code in clavuepro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a9e3cf794eb2bc8d9ebb4bab007a52bf9fc1ed9dbc3db19695542503ec253e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-53246 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...

CVE-2026-53138 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...

GHSA-JCG9-M46H-G922 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...

GHSA-6828-FJ37-MVWR vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...

GHSA-5RWX-CQG3-893X vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...

GHSA-79CF-XCQC-C78W vulnerabilities

Vulnerabilities for packages: argo-workflows, arangodb, gitlab-rails-ce-fips, gitlab-rails-ce, kubeflow-katib...

PT-2026-56807

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V26.20, SICORE Base system All versions V26.20.0. The affected application contains insufficient validation of authentication credentials when processing administrative account modifications through the we...

CVE-2026-45095

Unknown description...

Linux Distros Unpatched Vulnerability : CVE-2026-15169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service CVE-2026-15169 Note that Nessus relies on the presence...

CVE-2026-53590

Unknown description...

Linux Distros Unpatched Vulnerability : CVE-2026-59869

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js- yaml can spend quadratic CPU time parsing a document...

Linux Distros Unpatched Vulnerability : CVE-2026-59935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can craft a PDF with a page content stream containing a not terminated...