SUSE SLED15 / SLES15 Security Update : busybox, busybox-links (SUSE-SU-2025:03271-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03271-1 advisory. Updated to version 1.37.0 jscPED-13039: - CVE-2023-42363: Fixed use-after-free vulnerability in xasprintf...

Security update for busybox, busybox-links

This update for busybox, busybox-links fixes the following issues: Updated to version 1.37.0 jscPED-13039: CVE-2023-42363: Fixed use-after-free vulnerability in xasprintf function in xfuncsprintf.c bsc1217580 CVE-2023-42364: Fixed use-after-free in the awk.c evaluate function bsc1217584...

SUSE SLED15 / SLES15 Security Update : busybox, busybox-links (SUSE-SU-2025:03205-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03205-1 advisory. Updated to version 1.37.0 jscPED-13039: - CVE-2023-42363: Fixed use-after-free vulnerability in xasprintf...

Security update for busybox, busybox-links

This update for busybox, busybox-links fixes the following issues: Updated to version 1.37.0 jscPED-13039: - CVE-2023-42363: Fixed use-after-free vulnerability in xasprintf function in xfuncsprintf.c bsc1217580 - CVE-2023-42364: Fixed use-after-free in the awk.c evaluate function bsc1217584 -...

Remote Code Execution Vulnerability in MotionEye Frontend (CVE-2025-60787)

This module exploits a template injection vulnerability in the MotionEye Frontend. MotionEye Frontend versions 0.43.1b4 and prior are vulnerable to OS Command Injection in configuration parameters such as imagefilename. Unsanitized user input is written to MotionEye Frontend configuration files,...

SUSE SLES15: firebird / firebird-doc / firebird-examples / firebird-server / etc (SUSE-SU-2025:03095-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03095-1 advisory. - CVE-2017-11509: authenticated remote code execution via the definition external functions that don't match the original definition of t...

virt:rhel and virt-devel:rhel security update

An update is available for module.libguestfs-winsupport, libvirt, module.supermin, netcf, perl-Sys-Virt, libguestfs-winsupport, module.perl-Sys-Virt, module.libtpms, qemu-kvm, module.nbdkit, seabios, libvirt-python, nbdkit, module.netcf, libnbd, libguestfs, module.libvirt-python, supermin,...

Unbreakable Enterprise kernel security update

5.15.0-312.187.5 - Revert 'mm: hugetlb: independent PMD page table shared count' Harshit Mogalapalli Orabug: 38327655 5.15.0-312.187.4 - rds: Fix NULL ptr deref in xasstart Hakon Bugge Orabug: 38166374 - KVM: x86: use arrayindexnospec with indices that come from guest Thijs Raymakers Orabug:...

RockyLinux 8 : virt:rhel and virt-devel:rhel (RLSA-2025:12527)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:12527 advisory. libtpms: Libtpms Out-of-Bounds Read Vulnerability CVE-2025-49133 Tenable has extracted the preceding description block directly from the RockyLinux security...

Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities

Summary Open source software is used by Astronomer with IBM as part of overall processing functionality. Vulnerability Details CVEID:CVE-2005-2541 DESCRIPTION: Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gai...

jeecg-source

Jeecg Exploit Scanner Jeecg Boot security vulnerability scann...

SUSE SLES15: firebird / firebird-doc / firebird-examples / firebird-server / etc (SUSE-SU-2025:02991-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02991-1 advisory. - CVE-2025-54989: Fixed NULL pointer dereference in XDR message parsing leading to denial-of-service ZDI- CAN-26486, bsc1248143 Tenable h...

Linux Distros Unpatched Vulnerability : CVE-2024-11586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected. CVE-2024-11586 Note that Nessus relies on the...

SUSE SLED15: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2025:02964-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02964-1 advisory. - CVE-2025-8058: Fixed double-free after allocation failure in regcomp. bsc1246965 Tenable has extracted...

Linux Distros Unpatched Vulnerability : CVE-2017-17740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was...

Linux Distros Unpatched Vulnerability : CVE-2008-0456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CRLF injection vulnerability in the modnegotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x serie...

Linux Distros Unpatched Vulnerability : CVE-2007-3303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial of service via certain code sequences executed in a worker...

Linux Distros Unpatched Vulnerability : CVE-2013-2024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OS command injection vulnerability in the qs procedure from the utils module in Chicken before 4.9.0. CVE-2013-2024 Note that Nessus relies on the presence of t...

Linux Distros Unpatched Vulnerability : CVE-2003-1307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The modphp module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the...

Malicious code in py-sys-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0f9d0b03bfee3afe8585a595eb40b5bb3d9d59db389bc864641b19aadd6bb764 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...