41 matches found
Malicious code in elf-stats-cheery-chimney-392 (npm)
Source: amazon-inspector 29de96c126bbcd60fca9d21e841b70b86313faf1c9921770856b9c932f17a11c The package elf-stats-cheery-chimney-392 was found to contain malicious code. --- Credit: OpenSSF source...
Weaponizing the Commons: A Taxonomy and Detection Framework of Abuse on GitHub
GitHub plays a critical role in modern software supply chains, making its security an important research concern. Existing studies have primarily focused on CI/CD automation, collaboration patterns, and community management, while abuse behaviors on GitHub have received little systematic...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003978)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003978 advisory. Guests can trigger deadlock in Linux netback driver This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond ...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001728)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001728 advisory. Guests can trigger deadlock in Linux netback driver This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond ...
MAL-2025-192004 Malicious code in elf-stats-cheery-chimney-392 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29de96c126bbcd60fca9d21e841b70b86313faf1c9921770856b9c932f17a11c The package elf-stats-cheery-chimney-392 was found to contain malicious code...
EUVD-2025-200947
Malicious code in elf-stats-cheery-chimney-392 npm...
Malicious code in elf-stats-cheery-chimney-392 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29de96c126bbcd60fca9d21e841b70b86313faf1c9921770856b9c932f17a11c The package elf-stats-cheery-chimney-392 was found to contain malicious code...
EUVD-2022-45404
Malicious code in bioql PyPI...
CVE-2018-20929
cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint SEC-392...
CVE-2021-47581
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2021-47581
This CVE-2021-47581 entry is rejected/not used and does not represent an active vulnerability entry.
Amazon Linux 2023 : libnghttp2, libnghttp2-devel, nghttp2 (ALAS2023-2023-392)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-392 advisory. The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
CBL Mariner 2.0 Security Update: kernel (CVE-2022-42329)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-42329 advisory. - Guests can trigger deadlock in Linux netback driver This CNA information record relates to multiple CVEs; th...
CBL Mariner 2.0 Security Update: kernel (CVE-2022-42328)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-42328 advisory. - Guests can trigger deadlock in Linux netback driver This CNA information record relates to multiple CVEs; th...
Denial Of Service (DoS)
linux is vulnerable to Denial Of Service DoS attacks. When trying to free the SKB of a packet dropped due to the XSA-392 handling, a deadlock occurs, resulting in an application crash...
Denial Of Service (DoS)
linux is vulnerable to Denial Of Service DoS attacks. When trying to free the SKB of a packet dropped due to the XSA-392 handling, a deadlock occurs, resulting in an application crash...
CVE-2022-42328
Guests can trigger deadlock in Linux netback driver This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packe...
Design/Logic Flaw
Guests can trigger deadlock in Linux netback driver This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packe...
Design/Logic Flaw
Guests can trigger deadlock in Linux netback driver This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packe...