42474 matches found
GHSA-G69W-566R-7R56 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-GM5X-4M73-F248 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-16351 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-16354 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-16363 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-16350 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-16374 vulnerabilities
Vulnerabilities for packages: firefox...
Malicious code in asdsafsadad (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67f3884787706e55b04fcf9ab0749dd3f91bd1f8a9d06bd86180483dd9f581cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2026-66830
Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Johnson Controls FM Systems Employee allows Cross-Site Scripting XSS. This issue affects FM Systems Employee: before 2025.3.1...
PT-2026-66829
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Johnson Controls FM Systems Employee allows Stored XSS. This issue affects FM Systems Employee: before 2025.3.1...
Malicious code in spectral-corsair (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7c77441a8038182fe252b5782f82b900831bb6e4b598944ed0edfb4093e5fe1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11393 Malicious code in tailwindcssss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0da18df9b0c152f27cf8431c3ac342f3dd15d7a94ade13a40a7ee7dfcba1614d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-12562
CVE-2026-12562 affects Toptech Systems RCU II+ and Multiload II+ devices. A network-accessible port runs a Target Communications Framework (TCF) service that does not require authentication, exposing a debug interface that grants full root access to the embedded Linux environment. An unauthentica...
GHSA-7RQJ-J65F-68WH vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
Updated perl-DBI packages fix security vulnerabilities
The updated packages fix several security issues...
SUSE CVE-2026-47780
unknown...
SUSE CVE-2026-48050
Arc is an open, SQL-native time-series database for telemetry. Versions prior to 26.06.1 register Go's net/http/pprof handlers at /debug/pprof/ via app.Usepprof.New in internal/api/server.go, and /debug/pprof is added to PublicPrefixes in cmd/arc/main.go. The auth middleware short-circuits before...
SUSE CVE-2026-49244
SFTPGo is an open source, event-driven file transfer solution. From 2.2.0 until 2.7.3, the public web-client partial ZIP download endpoint for a browsable share validates client-supplied files entries with a raw byte-prefix comparison rather than a directory-boundary-aware check. An unauthenticat...
SUSE CVE-2026-49245
SFTPGo is an open source, event-driven file transfer solution. From 2.2.0 until 2.7.3, the inline query parameter on browsable-share file downloads and authenticated user-file downloads suppresses Content-Disposition: attachment, allowing an attacker-controlled HTML file stored in a share or home...