41517 matches found
CVE-2026-2399
creationtimestamp| type| source ---|---|--- 2026-07-09 16:15:07+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-02...
CVE-2026-54800
A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V26.20, SICORE Base system All versions V26.20.0. The affected application ships with a default configuration that disables all OPC UA security mechanisms. This could allow an attacker to gain unauthorized...
openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy
A flaw was found in OpenSSH, a widely used tool for secure remote access. When a user attempts to copy files between two different remote systems using the scp command, the file might be incorrectly placed in a directory above the intended destination. This unintended file placement could lead to...
MAL-2026-10021 Malicious code in txs-builder-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bb13d76ebc74c36f68dd219079500d0bdb60e4bc07f8089eefbcde91bbdeac The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
CVE-2026-31589 vulnerabilities
Vulnerabilities for packages: linux-aws...
MAL-2026-10012 Malicious code in mchain-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5249b7e6ec4cba8f4a3b2d332ec69069c1ca39eabec04a1372500ea25952280 package.json declares a postinstall hook node./src/core/index.js. That module immediately runs a top-level async IIFE that base64-decodes a URL store...
MAL-2026-7031 Malicious code in clavuepro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a9e3cf794eb2bc8d9ebb4bab007a52bf9fc1ed9dbc3db19695542503ec253e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
CVE-2026-53246 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-azure, linux-qemu, linux-gcp...
GHSA-JCG9-M46H-G922 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-azure, linux-qemu, linux-gcp...
GHSA-6828-FJ37-MVWR vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-azure, linux-qemu, linux-gcp...
GHSA-5RWX-CQG3-893X vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-azure, linux-qemu, linux-gcp...
CVE-2026-53138 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-azure, linux-qemu, linux-gcp...
GHSA-79CF-XCQC-C78W vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib...
Linux Distros Unpatched Vulnerability : CVE-2026-59935
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can craft a PDF with a page content stream containing a not terminated...
CVE-2026-55645
Unknown description...
CVE-2026-53590
Unknown description...
Linux Distros Unpatched Vulnerability : CVE-2026-59869
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js- yaml can spend quadratic CPU time parsing a document...
Linux Distros Unpatched Vulnerability : CVE-2026-15169
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service CVE-2026-15169 Note that Nessus relies on the presence...
Linux Distros Unpatched Vulnerability : CVE-2011-10043
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with :: could be passed to the load...
