CVE-2026-38763

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the function sub13828...

SUSE CVE-2026-56136

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...

Malicious code in streak-daycount (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f787426dd4d04d5cd527bdb19d309c64de82e252af4af0714dc33b07a26b73b0 [email protected] ships an index.mjs whose top-level async IIFE runs on import. When the host is Linux and NODEENV is not 'production', the code...

CVE-2026-61285

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-61287

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-61010

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Integer Overflow

Overview org.webjars.npm:sharp is a High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images Affected versions of this package are vulnerable to Integer Overflow in the bundled libvips GIF loader VipsForeignLoadNsgif, which can miscompute...

CVE-2026-45382

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, decodercontext::decodesliceunittiles libde265/decctx.cc:920 reads pps.CtbAddrRStoTSctbAddrRS at line 966 where ctbAddrRS = ctbY ctbsWidth + ctbX is computed from PPS-supplied colBd/rowBd arrays without...

GHSA-V422-HMWV-36X6 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, langfuse, argo-workflows, code-server, kubeflow-pipelines, sqlpad, json-server, tileserver-gl...

CVE-2026-52870 vulnerabilities

Vulnerabilities for packages: semgrep, litellm...

CVE-2026-59869 vulnerabilities

Vulnerabilities for packages: ts-patch, redisinsight, lerna, homepage, langfuse-fips, authentik-fips, wazuh-dashboard-fips, wazuh-dashboard, gitlab-rails-ce-fips, opensearch-dashboards, sqlpad, arangodb, argo-workflows, prism, awx, unleash-fips, code-server, kubeflow-katib, percona-server-mongodb...

CVE-2026-54490 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, arangodb, argo-workflows...

CVE-2026-50271 vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips, litellm...

GHSA-8X88-C5MF-7J5W vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, lerna, prism, pulumi, npm, code-server, sqlpad, saf...

GHSA-GVWX-54WH-QM9J vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, lerna, prism, pulumi, npm, code-server, sqlpad, saf...

GHSA-W8WR-V893-VJVP vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, lerna, prism, pulumi, npm, code-server, sqlpad, saf...

CVE-2026-59844

A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests...

EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2026-2776)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Input: alps - fix use-after-free bugs caused by dev3registerworkCVE-2025-68822 ext4: reject mount if bigalloc with sfirstdatablock ...

CVE-2026-55645

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of Client Control PDUs. During the RDP connection sequence, the parser does not perform sufficient length validation before reading specific data fields from the network stream. A remote...

CVE-2026-33328

libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.18.0, the gifload operation could incorrectly determine dimensions leading to an integer overflow. This has been patched in version 8.18.1...