43618 matches found
CVE-2026-17887 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17993 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17886 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17912 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17997 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17675 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17656 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-58061 vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
CVE-2026-13506 vulnerabilities
Vulnerabilities for packages: jenkins, kayenta, ghidra, ranger, apache-nifi-registry, logstash, druid, wazuh-indexer, keycloak-fips, camunda-zeebe, nuxeo, request-9047-keycloak-fips, elasticsearch, airbyte-platform, hadoop-fips, guacamole-client, ruby3.3-bouncy-castle-java, zipkin,...
GHSA-PXW2-F34F-XJVR vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
CVE-2026-58060 vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
MAL-2026-12669 Malicious code in dbk-ui-forms (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c6972ca0999559f2a4548843790c8000451acb4869da3c83d0357a655586ba On npm install, the package's preinstall hook runs index.js which collects host identity hostname, username, homedir, network interfaces, uid, output...
MAL-2026-12512 Malicious code in appsignal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff26e8c679b4035612af78043157ee418aac37aab4eebc5ba54a6e60f204e95c Package name appsignal shadows the legitimate @appsignal/ scope and is published at version 9999.0.0, a version-number pattern used to outrank...
Malicious code in dolyame-boxy-independent-bnpl-open-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b38c4f57c90f57ca8c3a54ebf790e726dcbba0be7a662f3ae2aa706c5521d5b On require of the package, index.js loads helpers.js which immediately invokes start. start selects a Windows, Linux, or macOS payload path, download...
Multiple vulnerabilities in NetKids iMark
Overview NetKids iMark provided by Integrated Systems Technologies, Inc. contains multiple vulnerabilities listed below: Uncontrolled search path element CWE-427 - CVE-2026-66344 Unquoted search path or element CWE-428 - CVE-2026-66839 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported...
CVE-2026-67590
Removed by vendor...
CVE-2026-66839
NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability CWE-428. An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges...
EUVD-2026-53044
NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability CWE-428. An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges...
CVE-2026-66344
NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element vulnerability CWE-427. An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges...
