43637 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-33228
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - flatted is a circular JSON parser. Prior to version 3.4.2, the parse function in flatted can use attacker-controlled string values from the parsed JSON as direc...
Acute Systems TransMac 缓冲区错误漏洞
Acute Systems TransMac is a tool software developed by Acute Systems that allows access and management of Mac disks and file systems on Windows systems. Version 12.3 of Acute Systems TransMac contains a buffer error vulnerability. This vulnerability stems from a buffer overflow in the volume name...
CVE-2026-27980 vulnerabilities
Vulnerabilities for packages: langfuse, jitsucom-jitsu...
CVE-2026-30836 vulnerabilities
Vulnerabilities for packages: caddy...
CVE-2026-33155 vulnerabilities
Vulnerabilities for packages: dbt-bigquery, dbt-snowflake, dbt-core, localstack...
CVE-2026-33154 vulnerabilities
Vulnerabilities for packages: awx...
EUVD-2026-13766
mcp-memory-service is an open-source memory backend for multi-agent systems. Prior to version 10.25.1, when the HTTP server is enabled MCPHTTPENABLED=true, the application configures FastAPI's CORSMiddleware with alloworigins='', allowcredentials=True, allowmethods="", and allowheaders="". The...
GHSA-PCGW-QCV5-H8CH vulnerabilities
Vulnerabilities for packages: neuvector, neuvector-fips, teleport, teleport-operator-fips...
BIT-CEPH-2022-0670
A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of...
GHSA-86JH-GRMM-2V3H vulnerabilities
Vulnerabilities for packages: python...
GHSA-86JH-GRMM-2V3H vulnerabilities
Vulnerabilities for packages: python...
Malicious code in @fr3newera/baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fba6d334ab723d77261982b048c8728dfdd60454bac47a0c23322ac7251e4c8 The package @fr3newera/baileys was found to contain malicious code. Source: ghsa-malware...
MAL-2026-1979 Malicious code in rollup-plugin-polyfill-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 985c6e7bc0975c513137b35a6dca07cf02aa2b87444716244933ca17d56c6bd2 The package rollup-plugin-polyfill-utils was found to contain malicious code. Source: ghsa-malware...
Malicious code in woltpickerapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6352ffe541b2fd35eb37ebb5dbdc78f1f57a51d31b36c6fcae39d21f97c594 The package woltpickerapp was found to contain malicious code. Source: ghsa-malware b0c8234f6a72b4da77be49eb19f15dc41dd1d94b6b8b9bc4bffd3ef9ddb4316b...
Malicious code in kyxhiagent123 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbb459239a25561ab1236b8a8a65a78c2a6e4a3d8a1d6108e765bb00f30bc3f The package kyxhiagent123 was found to contain malicious code. Source: ghsa-malware 49504d4323ce1499bf13802068f8105487c66e05b4f7a31f6a2209820ccf08ba...
MAL-2026-1957 Malicious code in mtpdb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89aa3ea4bbc8f5db5e0f67c215b7d778830cdc3c6182ba672690e1c56165165e The package mtpdb was found to contain malicious code. Source: ghsa-malware 0b9a3a3255445cdf958934371ac3763154e4ff6131d4798401fcb0e13823824a Any...
MAL-2026-1965 Malicious code in pretty-ts-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3252c2860c3dca66dbc03f90407ce4f37b310c8e4f6bfc6485625b1b7d926cd2 The package pretty-ts-logger was found to contain malicious code. Source: ghsa-malware 0c811c327f0147313f0f5362e62e94d0aadf15ac53937bb3e88b133748db9c...
MAL-2026-1966 Malicious code in restaking-apy-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa08edde60ee1a5b831af5088eaaf1b9b490ab5975541f8036f4efac42d6840 The package restaking-apy-module was found to contain malicious code. Source: ghsa-malware...
CVE-2026-32953
Tillitis TKey Client package is a Go package for a TKey client. Versions 1.2.0 and below contain a critical bug in the tkeyclient Go module which causes 1 out of every 256 User Supplied Secrets USS to be silently ignored, producing the same Compound Device Identifier CDI—and thus the same key...