41677 matches found
MAL-2026-6507 Malicious code in pump-stream-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b661475c354a21044517667315f026469d531e459803f8d4d9586e5cb67f74 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
GHSA-47QP-HQVX-6R3F vulnerabilities
Vulnerabilities for packages: tez, zookeeper, kafka, apache-pulsar, apache-nifi, confluent-kafka, druid...
SUSE CVE-2026-53217
In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: sync RX data at the hardware packet offset mvpp2 programs the RX queue packet offset, so hardware writes received data at dmaaddr + MVPP2SKBHEADROOM. The current CPU sync starts at dmaaddr and only covers rxbytes +...
SUSE SLES16: postgresql16 / postgresql16-contrib / postgresql16-devel / etc (SUSE-SU-2026:22184-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22184-1 advisory. This update for postgresql16 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on...
CVE-2026-54679
A flaw was found in jq, a command-line JSON processor. On 32-bit systems, a local attacker could exploit an integer overflow vulnerability in the jvpstringappend function. This could lead to a massive buffer overrun, resulting in a denial of service DoS condition. Mitigation Mitigation for this...
CVE-2026-40941
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which allows self-signed packages. This issue has been fixed in version 1.2.31...
CVE-2026-50176
The CVE-2026-50176 entry concerns the WebSocket API which lacks a limit on the number of authentication requests. This absence of rate limiting can enable denial-of-service or brute-force attempts to gain unauthorized access. The issue is rated HIGH severity (CVSS v3.1: 7.5; CVSS v4.0: 8.7) with ...
CVE-2026-44622 EVoke Systems EVoke CSMS Insufficiently Protected Credentials
Charging station authentication identifiers are publicly accessible via web-based mapping platforms...
CVE-2026-44622
CVE-2026-44622 affects EVoke Systems EVoke CSMS (charging stations). The vulnerability is described as insufficiently protected credentials, causing authentication identifiers to be publicly accessible via web-based mapping platforms. CVSS v3.1 base score 6.5 (MEDIUM) and CVSS v4.0 base score 6.9...
GHSA-MGF9-4VPG-HJ56 vulnerabilities
Vulnerabilities for packages: mitmproxy...
GHSA-M2MM-5W64-P8P7 vulnerabilities
Vulnerabilities for packages: expat...
CVE-2026-56409 vulnerabilities
Vulnerabilities for packages: expat...
CVE-2026-56406 vulnerabilities
Vulnerabilities for packages: expat...
CVE-2026-50219 vulnerabilities
Vulnerabilities for packages: expat...
GHSA-9JQ5-63HM-6Q5G vulnerabilities
Vulnerabilities for packages: expat...
GHSA-638V-9W3R-GH6Q vulnerabilities
Vulnerabilities for packages: expat...
GHSA-FCHF-WVCC-QF9G vulnerabilities
Vulnerabilities for packages: expat...
GHSA-68VW-XV3C-52VP vulnerabilities
Vulnerabilities for packages: expat...
