脆弱性一覧
CVE / GHSA / KEV / OSV を統合監視。タグ・カテゴリで絞り込み可能。
| ID | タイトル | |
|---|---|---|
| MAL-2026-7346 |
|
Malicious code in picnic-work-app-terms-of-use-fr (npm)
Malicious code in picnic-work-app-terms-of-use-fr (npm)
|
| MAL-2026-7345 |
|
Malicious code in picnic-work-app-terms-of-use-de (npm)
Malicious code in picnic-work-app-terms-of-use-de (npm)
|
| MAL-2026-7344 |
|
Malicious code in picnic-store-page-platform (npm)
Malicious code in picnic-store-page-platform (npm)
|
| MAL-2026-7343 |
|
Malicious code in picnic-store-design-system (npm)
Malicious code in picnic-store-design-system (npm)
|
| MAL-2026-7342 |
|
Malicious code in picnic-store-delivery-miniapp (npm)
Malicious code in picnic-store-delivery-miniapp (npm)
|
| MAL-2026-7341 |
|
Malicious code in picnic-store-basket-miniapp (npm)
Malicious code in picnic-store-basket-miniapp (npm)
|
| MAL-2026-7340 |
|
Malicious code in picnic-decoder-generator (npm)
Malicious code in picnic-decoder-generator (npm)
|
| MAL-2026-7339 |
|
Malicious code in penny-core (npm)
Malicious code in penny-core (npm)
|
| MAL-2026-7338 |
|
Malicious code in pe3-ihm-plateforme (npm)
Malicious code in pe3-ihm-plateforme (npm)
|
| MAL-2026-7337 |
|
Malicious code in paypal-legal-components (npm)
Malicious code in paypal-legal-components (npm)
|
| MAL-2026-7336 |
|
Malicious code in oztxrk-mfa (npm)
Malicious code in oztxrk-mfa (npm)
|
| MAL-2026-7334 |
|
Malicious code in outer-package (npm)
Malicious code in outer-package (npm)
|
| MAL-2026-7335 |
|
Malicious code in ovault-evm (npm)
Malicious code in ovault-evm (npm)
|
| MAL-2026-7333 |
|
Malicious code in oreactjs (npm)
Malicious code in oreactjs (npm)
|
| CVE-2026-45016 |
|
egroupware/egroupware の脆弱性 (CVE-2026-45016)
egroupware/egroupware に 脆弱性 (CVE-2026-45016) が存在。機密情報が外部に流出する可能性があります。対策: `23.1.20260601` 以上に更新。
|
| MAL-2026-7332 |
|
Malicious code in options-msg (npm)
Malicious code in options-msg (npm)
|
| CVE-2026-44512 |
|
onnx の脆弱性 (CVE-2026-44512)
onnx に 脆弱性 (CVE-2026-44512) が存在。不正な操作・情報露出のリスクがあります。``width_scale`` 経由で攻撃可能。対策: `1.22.0` 以上に更新。
|
| MAL-2026-7331 |
|
Malicious code in oidcsessioncheck-enduser (npm)
Malicious code in oidcsessioncheck-enduser (npm)
|
| CVE-2026-44342 |
|
github.com/QuantumNous/new-api に CSRF (CVE-2026-44342)
github.com/QuantumNous/new-api に 脆弱性 (CVE-2026-44342) が存在。データの不正な改ざんを許す可能性があります。`GET /api/oauth/email/bind` 経由で攻撃可能。対策: `0.12.0-alpha.1` 以上に更新。
|
| MAL-2026-7330 |
|
Malicious code in nreactjs (npm)
Malicious code in nreactjs (npm)
|
| CVE-2026-40187 |
|
egroupware/egroupware に OSコマンドインジェクション (CVE-2026-40187)
egroupware/egroupware に OSコマンドインジェクション (CVE-2026-40187) が存在。不正な操作・情報露出のリスクがあります。``chgrp`` 経由で攻撃可能。対策: `23.1.20260601` 以上に更新。
|
| MAL-2026-7329 |
|
Malicious code in notepad-monorepo (npm)
Malicious code in notepad-monorepo (npm)
|
| CVE-2026-34151 |
|
org.xwiki.platform:xwiki-platform-oldcore の脆弱性 (CVE-2026-34151)
org.xwiki.platform:xwiki-platform-oldcore に 脆弱性 (CVE-2026-34151) が存在。不正な操作・情報露出のリスクがあります。対策: `18.2.0` 以上に更新。
|
| MAL-2026-7328 |
|
Malicious code in notepad-frontend (npm)
Malicious code in notepad-frontend (npm)
|
| CVE-2026-33655 |
|
github.com/QuantumNous/new-api に SSRF (サーバー側リクエスト偽造) (CVE-2026-33655)
github.com/QuantumNous/new-api に SSRF (CVE-2026-33655) が存在。機密情報が外部に流出する可能性があります。``ApplyIPFilterForDomain`` 経由で攻撃可能。対策: `0.12.0-alpha.1` 以上に更新。
|
| CVE-2026-27823 |
|
egroupware/egroupware に パストラバーサル (CVE-2026-27823)
egroupware/egroupware に パストラバーサル (CVE-2026-27823) が存在。不正な操作・情報露出のリスクがあります。``participant_role`` 経由で攻撃可能。対策: `23.1.20260224` 以上に更新。
|
| MAL-2026-7327 |
|
Malicious code in next-runtimejs (npm)
Malicious code in next-runtimejs (npm)
|
| MAL-2026-7326 |
|
Malicious code in newsroom-2022 (npm)
Malicious code in newsroom-2022 (npm)
|
| MAL-2026-7325 |
|
Malicious code in mx-frontend (npm)
Malicious code in mx-frontend (npm)
|
| MAL-2026-7324 |
|
Malicious code in mwf-accounts-lib-native-call-language-preference (npm)
Malicious code in mwf-accounts-lib-native-call-language-preference (npm)
|
| MAL-2026-7323 |
|
Malicious code in mreactjs (npm)
Malicious code in mreactjs (npm)
|
| MAL-2026-7322 |
|
Malicious code in motion-ani (npm)
Malicious code in motion-ani (npm)
|
| MAL-2026-7321 |
|
Malicious code in modustack (npm)
Malicious code in modustack (npm)
|
| MAL-2026-7320 |
|
Malicious code in mngularjs (npm)
Malicious code in mngularjs (npm)
|
| MAL-2026-7319 |
|
Malicious code in meta-templates (npm)
Malicious code in meta-templates (npm)
|
| MAL-2026-7318 |
|
Malicious code in mcp-ci-runner-poc (npm)
Malicious code in mcp-ci-runner-poc (npm)
|
| MAL-2026-7317 |
|
Malicious code in manage-subscription-app (npm)
Malicious code in manage-subscription-app (npm)
|
| MAL-2026-7316 |
|
Malicious code in lunkr (npm)
Malicious code in lunkr (npm)
|
| MAL-2026-7315 |
|
Malicious code in lreactjs (npm)
Malicious code in lreactjs (npm)
|
| MAL-2026-7314 |
|
logfuse の脆弱性 (MAL-2026-7314)
logfuse に 脆弱性 (MAL-2026-7314) が存在。不正な操作・情報露出のリスクがあります。
|
| MAL-2026-7313 |
|
Malicious code in liportal-web-app (npm)
Malicious code in liportal-web-app (npm)
|
| MAL-2026-7312 |
|
Malicious code in lint-prettier (npm)
Malicious code in lint-prettier (npm)
|
| MAL-2026-7311 |
|
Malicious code in launchdarkly-ai-tooling (npm)
Malicious code in launchdarkly-ai-tooling (npm)
|
| MAL-2026-7309 |
|
Malicious code in latency-tracking (npm)
Malicious code in latency-tracking (npm)
|
| MAL-2026-7310 |
|
Malicious code in latency-tracking-internal (npm)
Malicious code in latency-tracking-internal (npm)
|
| MAL-2026-7308 |
|
Malicious code in lage-npm (npm)
Malicious code in lage-npm (npm)
|
| MAL-2026-7307 |
|
Malicious code in kreactjs (npm)
Malicious code in kreactjs (npm)
|
| MAL-2026-7306 |
|
Malicious code in jwt-path (npm)
Malicious code in jwt-path (npm)
|
| MAL-2026-7305 |
|
Malicious code in jreactjs (npm)
Malicious code in jreactjs (npm)
|
| MAL-2026-7304 |
|
Malicious code in ixpresso-core (npm)
Malicious code in ixpresso-core (npm)
|