GHSA-5RFX-CP42-P624 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

CVE-2025-68675 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-3QMM-R55X-HPXX vulnerabilities

Vulnerabilities for packages: airflow...

Malicious code in ntwsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837a3de93825b2ebfadd814823c3dde7c072beb4afe605d220256e406efed240 The package ntwsx was found to contain malicious code. Source: ghsa-malware 9ab6bd61fcb4255b371cf5dcfee1103ef2d0574569eb5804ceb1aa9a3dae8bfe Any...

CVE-2025-3839

A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this...

CVE-2025-3839

A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this...

SUSE CVE-2026-21947

unknown...

The vulnerability of the hfsplus package for working with the HFS+ file system in Linux kernels allows a attacker to cause a service failure or disclose sensitive information.

The vulnerability of the hfsplus package for working with the HFS+ file system in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures or expose sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2026-0775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected...

CVE-2026-24001 vulnerabilities

Vulnerabilities for packages: thingsboard, kubeflow-katib, tileserver-gl, sqlpad, vitess, langfuse, saf, prism, ts-patch, renovate, npm...

CVE-2026-21933 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-JHG6-G5FP-536P vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-QC7Q-3C5C-F8MV vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-21945 vulnerabilities

Vulnerabilities for packages: liberica, openjdk-26-openj9, adoptium-openjdk, zulu-psu, zulu-cpu, openjdk-21-openj9, openjdk-11-openj9, openjdk, openjdk-crac, openjdk-17-openj9, cof-corretto, corretto, openjdk-8-openj9, openjdk-25-openj9...

Johnson Controls Inc. iSTAR Configuration Utility (ICU) tool

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a failure within the operating system of the machine hosting the ICU tool. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

EVMAPA

RISK EVALUATION Successful exploitation of these vulnerabilities could lead to degraded service, a denial-of-service, or unauthorized remote command execution, which could lead to spoofing or a manipulation of charging station statuses. 2. RECOMMENDED PRACTICES CISA recommends users take...

Weintek cMT X Series HMI EasyWeb Service

RISK EVALUATION Successful exploitation of these vulnerabilities could allow a low-level user to alter privileges and gain full control to the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:...

Rockwell Automation CompactLogix 5370

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for...

Hubitat Elevation Hubs

RISK EVALUATION Successful exploitation of this vulnerability could allow an authenticated attacker to escalate their privileges and control devices outside of their authorized scope. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22080)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22080 advisory. - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Prevent integer overflow in...