44371 matches found
Malicious code in numdifftools (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6d98d619244a4f34ba9c2ed85023e35f4064b0a45871edac806d1e8cdeff11 The npm package numdifftools is an empty shell zero-byte index.js that exists solely to fire a preinstall lifecycle hook. The hook runs node -e to...
GHSA-RRMF-RVHW-RF47 vulnerabilities
Vulnerabilities for packages: lmcache-cuda-13.0, tritonserver-backend-vllm-cuda-13.0, py3-torch-cuda-12.9, vllm-cuda-13.2, py3-torch-cuda-13.0, vllm-openai-cuda-12.9, vllm-openai-cuda-13.0, open-webui, py3-torch-cuda-12.6, py3-torch-cuda-13.3, py3-torch-cuda-13.1, nemo, py3-torch-cuda-13.2,...
Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by CVE-2026-1605
Summary Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by CVE-2026-1605, CVE-2026-1605 is a high-severity vulnerability in the Eclipse Jetty web server caused by improper resource management in the GzipHandler component. IBM Engineering Systems Design Rhapsody has resolve...
Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by CVE-2026-21945, CVE-2026-21932, CVE-2026-21933, CVE-2026-21925
Summary Security Bulletin: IBM Engineering Systems Design Rhapsody was using Older version of Java which as per Oracle's January 2026 Critical Patch Update, all affecting Oracle Java SE and related GraalVM runtimes. Collectively, they highlight weaknesses in how Java handles untrusted code,...
MIPSBLEED: Uncovering Microarchitectural Timing Leaks in Pervasive Embedded Processors
Despite their age, MIPS processors remain deeply embedded in routers, industrial controllers, and IoT systems, yet their security against modern side-channel attacks has received little attention. This paper exposes how Simultaneous Multithreading SMT, a feature increasingly used to boost...
Linux Distros Unpatched Vulnerability : CVE-2026-8357
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening...
Linux Distros Unpatched Vulnerability : CVE-2026-10143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker ...
Graph Neural Networks at War: Integrating Cybersecurity and Drone Intelligence in the Israeli-Iranian Conflict
Physical cyber systems have brought about new threats and challenges in detection and immediate response. This study examines how Graph Neural Networks GNNs can be used to aid cybersecurity and drone management in a physical cyber system comprising of cyber intrusions and unmanned aerial vehicles...
CVE-2025-55649
Removed by vendor...
CVE-2025-55643
Removed by vendor...
CVE-2025-55650
Removed by vendor...
CVE-2026-11526
GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open of filename arguments in makefilehandle. GD::Image::makefilehandle opens a filename argument with Perl's 2-arg open, so a filename that begins or ends with a pipe "| cmd", "cmd |" or begins with a...
GHSA-248M-82V9-Q6G6 vulnerabilities
Vulnerabilities for packages: open-webui, litellm...
CVE-2026-48156 vulnerabilities
Vulnerabilities for packages: open-webui, litellm...
CVE-2026-48059 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, neo4j, apache-pulsar, thingsboard, apicurio-registry, apache-activemq-artemis, zipkin, tez, celeborn...
GHSA-H2QV-FJ59-J46J vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, neo4j, apache-pulsar, thingsboard, apicurio-registry, apache-activemq-artemis, zipkin, tez, celeborn...
CVE-2026-48096 vulnerabilities
Vulnerabilities for packages: grafana...
CVE-2026-11697 vulnerabilities
Vulnerabilities for packages: chromium...