Malicious code in hushed_smelt_red-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afccc17c74ce3b8dd886b3d9c21d1c8fec8176f82d892cef241229bfd7d80644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74347

Malicious code in principalthrushsapphire-2 npm...

EUVD-2025-74301

Malicious code in reliableapeemerald-2 npm...

EUVD-2025-77582

Malicious code in lengthykangarooblush-2 npm...

CVE-2025-11986 Crypto Tool <= 2.22 - Unauthenticated Information Exposure via Global Authentication State

The Crypto plugin for WordPress is vulnerable to Information exposure in all versions up to, and including, 2.22. This is due to the plugin registering an unauthenticated AJAX action wpajaxnoprivcryptoconnectajaxprocess that allows calling the register and savenft methods with only a...

Intel PROSet/Wireless WiFi Software 缓冲区错误漏洞

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel Corporation USA. A buffer error vulnerability exists in Intel PROSet/Wireless WiFi Software versions prior to 23.160, which stems from an out-of-bounds write in the Ring 2 device driver that could lead to a denial of...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2DOCKER-2025-079 (ALASDOCKER-2025-079)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.1-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2025-079 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted value...

Intel PROSet/Wireless WiFi 缓冲区错误漏洞

Intel PROSet/Wireless WiFi is a wireless network card driver from Intel Corporation USA. A buffer error vulnerability exists in Intel PROSet/Wireless WiFi Software for Windows prior to version 23.160, which stems from an out-of-bounds write in the Ring 2 device driver that could lead to a denial ...

Intel PROSet/Wireless WiFi 缓冲区错误漏洞

Intel PROSet/Wireless WiFi is a wireless network card driver from Intel Corporation USA. A buffer error vulnerability exists in Intel PROSet/Wireless WiFi Software for Windows prior to version 23.160, which stems from an out-of-bounds write in the Ring 2 device driver that could lead to a denial ...

Amazon Linux 2 : fontforge, --advisory ALAS2-2025-3063 (ALAS-2025-3063)

The version of fontforge installed on the remote host is prior to 20120731b-13. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3063 advisory. FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8. CVE-2025-50949 Tenable has extract...

Intel PROSet/Wireless WiFi 缓冲区错误漏洞

Intel PROSet/Wireless WiFi is a wireless network card driver from Intel Corporation USA. A buffer error vulnerability exists in Intel PROSet/Wireless WiFi Software for Windows prior to version 23.160, which stems from an out-of-bounds read in the Ring 2 device driver that could lead to a denial o...

Amazon Linux 2 : qt5-qt3d, --advisory ALAS2-2025-3074 (ALAS-2025-3074)

The version of qt5-qt3d installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3074 advisory. A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile o...

Amazon Linux 2 : tomcat, --advisory ALAS2-2025-3067 (ALAS-2025-3067)

The version of tomcat installed on the remote host is prior to 7.0.76-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3067 advisory. Improper Resource Shutdown or Release vulnerability in Apache Tomcat. If an error occurred including exceeding limits during the...

Debian dla-4368 : libarchive-dev - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4368 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4368-1 [email protected]...

CVE-2025-62813 affecting package lz4 for versions less than 1.9.4-2

CVE-2025-62813 affecting package lz4 for versions less than 1.9.4-2. A patched version of the package is available...

CVE-2025-53040 affecting package mysql for versions less than 8.0.44-2

CVE-2025-53040 affecting package mysql for versions less than 8.0.44-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-53044 affecting package mysql for versions less than 8.0.44-2

CVE-2025-53044 affecting package mysql for versions less than 8.0.44-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-62813 affecting package mysql for versions less than 8.0.44-2

CVE-2025-62813 affecting package mysql for versions less than 8.0.44-2. A patched version of the package is available...

Low: firefox

Issue Overview: No CVE associated with this advisory Affected Packages: firefox Note: This advisory is applicable to Amazon Linux 2 - Firefox Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix invalid derefence of sblvbptr CVE-2022-50516 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 - Kernel-5.10 Extra. Visit this page to learn more about Amazon Linux 2 AL2...