Lucene search
+L

2104006 matches found

OSV
OSV
•added 2026/09/23 3:52 a.m.•3 views

MINI-8W2H-XHW2-V32C

Bulletin has no description...

6.3CVSS5.7AI score0.00546EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 3:52 a.m.•4 views

MINI-V8VM-55J5-H26W

Bulletin has no description...

8.7CVSS5.7AI score0.00715EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 3:52 a.m.•5 views

MINI-985Q-RJW3-3WPF

Bulletin has no description...

5.3CVSS5.7AI score0.00336EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 3:52 a.m.•4 views

MINI-QVCV-63MC-J59M

Bulletin has no description...

5.7AI score0.0063EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 3:52 a.m.•4 views

MINI-GCGJ-WFXV-X2J9

Bulletin has no description...

5.3CVSS5.7AI score0.00336EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 3:52 a.m.•3 views

MINI-M6F6-79W8-3CG8

Bulletin has no description...

8.7CVSS5.7AI score0.0073EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 3:52 a.m.•4 views

MINI-5FPQ-CCJ7-87WG

Bulletin has no description...

5.9CVSS5.7AI score0.00139EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 3:52 a.m.•3 views

MINI-C8GP-WQPX-JFG4

Bulletin has no description...

5.9CVSS5.7AI score0.00139EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 3:52 a.m.•5 views

MINI-C2Q3-R78H-V6J7

Bulletin has no description...

2CVSS5.7AI score0.00195EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 3:52 a.m.•3 views

MINI-7RW9-3Q68-7G9R

Bulletin has no description...

2CVSS5.7AI score0.00195EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 3:51 a.m.•5 views

MINI-6M8F-RCQP-V2P6

Bulletin has no description...

5.5CVSS5.7AI score0.00279EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 3:17 a.m.•6 views

DEBIAN-CVE-2026-91776

TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfouse = Id.NAME, defaultImpl = ..., every distinct unrecognized type ID...

7.5CVSS5.8AI score0.0045EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 3:17 a.m.•6 views

DEBIAN-CVE-2026-89425

UTF8DataInputJsonParser.reportInvalidToken in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a StringBuilder in a loop that has no upper bound. Unlike the three sibling parser implementations, including UTF8StreamJsonParser,...

7.5CVSS5.8AI score0.00492EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 3:17 a.m.•5 views

DEBIAN-CVE-2026-91777

Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference and the equivalent...

7.5CVSS5.8AI score0.0045EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 3:17 a.m.•1 views

UBUNTU-CVE-2026-91776

TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfouse = Id.NAME, defaultImpl = ..., every distinct unrecognized type ID...

7.5CVSS5.8AI score0.0045EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/23 3:17 a.m.•2 views

UBUNTU-CVE-2026-89425

UTF8DataInputJsonParser.reportInvalidToken in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a StringBuilder in a loop that has no upper bound. Unlike the three sibling parser implementations, including UTF8StreamJsonParser,...

7.5CVSS5.8AI score0.00492EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/23 3:17 a.m.•2 views

UBUNTU-CVE-2026-91777

Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference and the equivalent...

7.5CVSS5.8AI score0.0045EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/23 3:07 a.m.•7 views

MAL-2026-16446 Malicious code in better-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2f690a34e0e9b3a8df4caf676f30b542d8dc710033dc70ddf6e3c18ee3a1fa The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.7AI score
SaveExploits0References2
OSV
OSV
•added 2026/09/23 3:07 a.m.•4 views

MAL-2026-16455 Malicious code in some-tool-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e053568381d2b1cf3b7e62e3152651c843cfc3e32f056574d7a64dae4531b2e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.7AI score
SaveExploits0References2
OSV
OSV
•added 2026/09/23 2:55 a.m.•5 views

CLSA-2026-1790132153 TuxCare security update for com.google.guava (1 CVE)

TuxCare rebuilt 5 com.google.guava packages to address 1 CVE. Fixed in 19.0-rc3-tuxcare.1...

7.1CVSS6.3AI score0.00248EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 2:48 a.m.•4 views

MAL-2026-16448 Malicious code in debounce-throttle-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2799630960bce0578627557c1a8c41369d2a1556f9632d6491903f17f21d7a39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2026/09/23 2:48 a.m.•3 views

MAL-2026-16454 Malicious code in solo-async-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 419538617e0e07800ec7fb28e19be25e6b99687548af5ba4ae82ae486daca882 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2026/09/23 2:48 a.m.•4 views

MAL-2026-16459 Malicious code in webp-https-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 447aba02eddd7913b1520b8d21892e996cecbdf100ba2a772cbff3cb14fa74f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2026/09/23 2:48 a.m.•4 views

MAL-2026-16449 Malicious code in iso-datetime-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9db51cfb135f41debd79f82f4bd905994ecdb54d08811d3755ac66aed13cb05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2026/09/23 2:48 a.m.•4 views

MAL-2026-16453 Malicious code in semver-bump-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49c66af9c077b6704b080c07e6aeca29f2f569668ee0bed678a9d370cc886051 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2026/09/23 2:45 a.m.•3 views

CVE-2026-95958 JusticeRage Manalyze PE Parser pe.cpp _parse_relocations integer underflow

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::parserelocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch ...

4.8CVSS5.1AI score
SaveExploits0References8
OSV
OSV
•added 2026/09/23 2:44 a.m.•4 views

MAL-2026-16442 Malicious code in moudeva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec843001e36153e09f56c056031d90bf3bcf909a5fe0469f8b27cbed7361c3a The package's main.js references childprocess at multiple locations lines 19, 883, 961 alongside HTTP POST calls lines 365, 369 to a hardcoded endpoi...

5.9AI score
SaveExploits0References1
OSV
OSV
•added 2026/09/23 2:44 a.m.•5 views

MAL-2026-16441 Malicious code in moidevl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b05c7a5581562edc719cbaaf2f6b317d322a6a2ef96c9fc905b53394e42101 Despite a README describing a 'Windows diagnostic utility,' the package implements an anti-proctoring overlay for cheating on remote exams Safe Exam...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2026/09/23 2:44 a.m.•4 views

MAL-2026-16447 Malicious code in caphsmgiwy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be9097447a7359110650f7119fc6b9265bba96bea6a4814d5534e6cf4a4bd59 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.7AI score
SaveExploits0References3
OSV
OSV
•added 2026/09/23 2:44 a.m.•4 views

MAL-2026-16458 Malicious code in tuxcmdfhjkw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed907ab556a271a706db9227bfa0cd751f7a3dae9005bca41167ffdfc8be75b8 The package's only shipped file is an HTML page that mimics a Cloudflare 'Just a moment...' verification screen and embeds obfuscator.io-style...

5.8AI score
SaveExploits0References2
OSV
OSV
•added 2026/09/23 2:44 a.m.•4 views

MAL-2026-16460 Malicious code in xsjukcnv8low26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18a0eb3bfed72107b77ceb231f89637cb4efe0babbceae9e2bc84873fed6a3f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.7AI score
SaveExploits0References3
OSV
OSV
•added 2026/09/23 2:44 a.m.•7 views

MAL-2026-16452 Malicious code in mob4zchvuine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22c6a37f547c13e9444268b7cf9484c580ec5e15d5e6a1207bdcdfc7be2ff35 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.7AI score
SaveExploits0References2
OSV
OSV
•added 2026/09/23 2:44 a.m.•3 views

MAL-2026-16450 Malicious code in kamafhbnowct (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 646021a6b47fafd23415f7357b91660f4ce18545fa5f9b2ba370842c632fb92d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.7AI score
SaveExploits0References3
OSV
OSV
•added 2026/09/23 2:44 a.m.•5 views

MAL-2026-16451 Malicious code in luftzxyuiwgbgsp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fe33e3ef1fb00e811cf24d940bb469190f27f2759963838cedbdf4e5d4da09 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.7AI score
SaveExploits0References3
OSV
OSV
•added 2026/09/23 2:44 a.m.•5 views

MAL-2026-16456 Malicious code in tib2jcvowuyma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7dad69d2e0593c1c42f8b0e905a0b002d30bccf9ea14d59f2da6ac313c1a48 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.7AI score
SaveExploits0References2
OSV
OSV
•added 2026/09/23 2:44 a.m.•4 views

MAL-2026-16457 Malicious code in tibcwmpoeafh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8972beee1619a236a6811896c8f7c2bded94a428c0de8f6861e7ef956b63fb9a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.7AI score
SaveExploits0References2
OSV
OSV
•added 2026/09/23 2:44 a.m.•4 views

MAL-2026-16444 Malicious code in n8n-nodes-healthmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b6e9b877fe50a6a5cdf3cd0af73e755973a6eecb2940424618a5edfdc9443ed n8n-nodes-healthmon ships as a purported n8n health-monitoring node but its index.js binds an HTTP server on 0.0.0.0:41111 that reads a JSON body and...

6AI score
SaveExploits0References1
OSV
OSV
•added 2026/09/23 2:43 a.m.•5 views

MAL-2026-16445 Malicious code in n8n-nodes-metricsagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0f8f773e26111905993b9bded9babe49611349bbe3ea18d32da0c22692f65f The package declares a postinstall lifecycle script package.json scripts.postinstall = 'node postinstall.js || true' that requires./index.js and...

6AI score
SaveExploits0References1
OSV
OSV
•added 2026/09/23 2:43 a.m.•5 views

MAL-2026-16443 Malicious code in my-company-device (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd39b4115bf373ff8f8d036f1db1cdb58e1fb3712d3330eabad7dbc5796ac4f Running npx my-company-device appends a hardcoded ssh-ed25519 public key labelled sunyiting-macmini to the installer's /.ssh/authorizedkeys mode 0o60...

5.9AI score
SaveExploits0References2
OSV
OSV
•added 2026/09/23 2:21 a.m.•4 views

CVE-2026-91777 jackson-databind: quadratic forward-reference completion in Collection and Map deserializers

Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference and the equivalent...

7.5CVSS5.8AI score
SaveExploits0References6
OSV
OSV
•added 2026/09/23 2:17 a.m.•3 views

CVE-2026-91776 jackson-databind: unbounded growth of the type id cache in TypeDeserializerBase retains every unknown raw type ID

TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfouse = Id.NAME, defaultImpl = ..., every distinct unrecognized type ID...

7.5CVSS5.8AI score
SaveExploits0References6
OSV
OSV
•added 2026/09/23 2:15 a.m.•4 views

CVE-2026-95930 iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery

A security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vulnerability is the function UrlCheckTool.checkUrl of the component debugToolV2 API endpoint. The manipulation of the argument endPoint leads to server-side request forgery. The attack can be initiat...

5.3CVSS5.2AI score
SaveExploits0References11
OSV
OSV
•added 2026/09/23 2:06 a.m.•4 views

CVE-2026-89425 jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growth

UTF8DataInputJsonParser.reportInvalidToken in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a StringBuilder in a loop that has no upper bound. Unlike the three sibling parser implementations, including UTF8StreamJsonParser,...

7.5CVSS5.8AI score
SaveExploits0References6
OSV
OSV
•added 2026/09/23 2:03 a.m.•5 views

MAL-2026-16439 Malicious code in internallib_v550 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef32979e04c5e9caca40fb38a9c9ed2b9a75e015e47a580a538b95541012b648 Package internallibv550 is named to resemble an internal private library and is published to the public npm registry, matching the classic...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2026/09/23 2:00 a.m.•3 views

CVE-2026-95929 iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection

A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/backend/commons/src/main/resources/mapper/ChatBotMarketMapper.xml of the component getBotList API endpoint. Executing a manipulation of the argument sortDirection can lead to sq...

5.3CVSS5.3AI score
SaveExploits0References11
OSV
OSV
•added 2026/09/23 1:58 a.m.•4 views

MAL-2026-16440 Malicious code in turbo-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25d8c29cbfb317e1c88568514a999618bdeee25b2716b76e3db5062e9dd7a67 package.json at line 43 declares the sole dependency 'node-net-pool' as an HTTPS tarball of the 'main' branch of an unrelated GitHub account...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2026/09/23 1:45 a.m.•3 views

MGASA-2026-0435 Updated cpio packages fix security vulnerabilities

Path Traversal in GNU cpio. CVE-2026-66484 Uncontrolled Memory Allocation in GNU cpio. CVE-2026-66485 Improper Output Encoding in GNU cpio. CVE-2026-66486...

4.6CVSS5.8AI score0.00197EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/23 1:45 a.m.•4 views

MGASA-2026-0436 Updated rest packages fix a security vulnerability

Weak random number generation in pkce implementation. CVE-2026-16615...

6.8CVSS5.8AI score0.00254EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/23 1:45 a.m.•4 views

MGASA-2026-0434 Updated diffutils packages fix a security vulnerability

Heap-based Buffer Overflow in GNU diffutils. CVE-2026-53910...

2.1CVSS5.8AI score0.00332EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/23 1:45 a.m.•3 views

MGASA-2026-0437 Updated perl-Dancer2 packages fix a security vulnerability

Dancer2 versions through 2.1.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable. CVE-2026-13577...

5.7AI score0.0057EPSS
SaveExploits0References4
Total number of security vulnerabilities2104006