433bf (=0.0.1), @aaqilniz/cli (=4.1.4) +554 more potentially affected by CVE-2026-42089 via yeoman-environment (>=2.9.5 <=6.0.0)

yeoman-environment NPM version =2.9.5, =4.2.0, =14.0.0, =1.0.0, =0.0.1, =1.0.0-beta.1, =1.0.0-beta.1, =0.0.5, =8.0.0, =8.3.0-pre.2022-06-22.sha-42703caf, =8.0.2, =1.0.0, =1.2.1-pre.2024-01-09.d13174d0, =2.1.0 and more Source cves: CVE-2026-42089 Source advisory: OSV:GHSA-VV9J-GJW2-J8WP...

aiagents4pharma (>=1.45.0 <=1.48.1), aiagents4pharma-ansh (=0.0.0) +20 more potentially affected by CVE-2026-41312 via pypdf (>=6.0.0 <=6.10.1)

pypdf PYPI version =6.0.0, =1.45.0, =1759155233.0.0, =0.3.0, =4.7.6, =1.0.0, =0.6.27, =0.0.24, =0.0.25 and more Source cves: CVE-2026-41312 Source advisory: SNYK:PYTHON-PYPDF-16097901...

GHSA-GJRP-XGMH-X9QQ Ghost has SQL Injection in Members Activity Feed

Impact A vulnerability in Ghost's /ghost/api/admin/members/events endpoint allows users with authentication credentials for the Admin API to execute arbitrary SQL. Vulnerable versions This vulnerability is present in Ghost v5.90.0 to v5.130.5 to and Ghost v6.0.0 to v6.10.3. Patches v5.130.6 and...

com.powsybl:powsybl-distribution-core (>=6.0.0 <=6.7.1) potentially affected by CVE-2025-48058 via com.powsybl:powsybl-iidm-tck (>=6.0.0-RC1 <=6.7.1)

com.powsybl:powsybl-iidm-tck MAVEN version =6.0.0-RC1, =6.0.0, =6.7.1 Source cves: CVE-2025-48058 Source advisory: SNYK:JAVA-COMPOWSYBL-10442147...

be.yildiz-games:module-messaging-activemq (=2.0.0), com.codbex.atlas:codbex-atlas-application (>=1.1.0 <=2.110.0) +103 more potentially affected by CVE-2025-27533 via org.apache.activemq:activemq-client (>=6.0.0 <=6.1.5)

org.apache.activemq:activemq-client MAVEN version =6.0.0, =1.1.0, =2.55.0, =1.0.5, =1.1.0, =1.1.0, =1.1.0, =0.2.0, =1.1.0, =7.0.0, =7.0.0, =7.0.0, =7.0.1 and more Source cves: CVE-2025-27533 Source advisory: OSV:GHSA-WHXR-3P84-RF3C...

PT-2021-6464 · Suricata +1 · Suricata +1

Name of the Vulnerable Software and Affected Versions: Suricata versions 5.0.0 through 5.0.6 Suricata versions 6.0.0 through 6.0.2 Description: The issue is related to insufficient access control in the Suricata intrusion detection and prevention system. It allows a remote attacker to cause a...

Emlog 代码问题漏洞

emlog is a powerful blog and CMS builder based on PHP and MySQL. A remote code execution vulnerability exists in emlog versions 5.3.1, 6.0.0. The vulnerability stems from uploading a database backup file in admin/data.php. An attacker can exploit this vulnerability to achieve remote code executio...

Couchbase Server Authorization Issues Vulnerability (CNVD-2019-34123)

Couchbase Server is a distributed open source NoSQL non-relational database from the U.S. company Couchbase , which mainly supports data query , full-text search and active global replication and other functions . An authorization issue vulnerability exists in Couchbase Server versions 6.0.0 and...