Linux Distros Unpatched Vulnerability : CVE-2023-32728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote...

Linux Distros Unpatched Vulnerability : CVE-2013-2007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users t...

Linux Distros Unpatched Vulnerability : CVE-2018-12617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - qmpguestfileread in qga/commands-posix.c and qga/commands-win32.c in qemu-ga aka QEMU Guest Agent in QEMU 2.12.50 has an integer overflow causing a gmalloc0 cal...

Linux Distros Unpatched Vulnerability : CVE-2021-27023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is...

Linux Distros Unpatched Vulnerability : CVE-2018-14470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babelprintv2. CVE-2018-14470 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2019-15219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the...

Malicious code in usvr-agent (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7a3eac081596280531048d1ddd913b8c2f71c1ba50ab26ee062caa484ae0f4fe Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-2008 Malicious code in usvr-agent (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7a3eac081596280531048d1ddd913b8c2f71c1ba50ab26ee062caa484ae0f4fe Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in usar-agent (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2006 Malicious code in usar-agent (PyPI)

--- -= Per source details. Do not edit below this line.=-...

The vulnerability of the Tray Monitor Service in backup and data recovery software on computers and servers running Acronis Agent and Acronis CyberProtect 16 allows attackers to enhance their privileges.

The vulnerability of the Tray Monitor Service in backup and data recovery software on Acronis Agent and Acronis CyberProtect 16 software for data protection involves deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Space Pirates Targets Russian IT Firms With New LuckyStrike Agent Malware

The threat actor known as Space Pirates has been linked to a malicious campaign targeting Russian information technology IT organizations with a previously undocumented malware called LuckyStrike Agent. The activity was detected in November 2024 by Solar, the cybersecurity arm of Russian...

CVE-2025-22869 vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, terraform-provider-sendgrid-fips, helm-docs, prometheus-alertmanager-fips, agentbeat-fips, nats-top, argo-rollouts, crossplane-provider-azure-authorization, cloudflared, kubescape, seaweedfs, opentelemetry-operator,...

CVE-2025-22868

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

Amazon Linux 2 : ecs-service-connect-agent (ALASECS-2025-047)

The version of ecs-service-connect-agent installed on the remote host is prior to v1.29.12.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2025-047 advisory. Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions sendOverloadError...

CVAD: How to install Citrix Profile Management WMI Plug-in on the VDA

This article lists the steps to install the Citrix Profile Management WMI Plug-in on the VDA...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: nats-server, nats, aws-efs-csi-driver, k8sgpt, src, oras, kubernetes-csi-livenessprobe, supercronic, gcsfuse, kubebuilder, chartmuseum, go-bindata, wazero, dgraph, sonobuoy, kubernetes-event-exporter, doppler-kubernetes-operator, kube-logging-operator,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: nats-server, nats, aws-efs-csi-driver, k8sgpt, src, oras, kubernetes-csi-livenessprobe, supercronic, gcsfuse, kubebuilder, chartmuseum, go-bindata, wazero, dgraph, sonobuoy, kubernetes-event-exporter, doppler-kubernetes-operator, kube-logging-operator,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nats-server, nats, aws-efs-csi-driver, k8sgpt, src, oras, kubernetes-csi-livenessprobe, supercronic, gcsfuse, kubebuilder, chartmuseum, go-bindata, wazero, dgraph, sonobuoy, kubernetes-event-exporter, doppler-kubernetes-operator, kube-logging-operator,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nats-server, nats, aws-efs-csi-driver, k8sgpt, src, oras, kubernetes-csi-livenessprobe, supercronic, gcsfuse, kubebuilder, chartmuseum, go-bindata, wazero, dgraph, sonobuoy, kubernetes-event-exporter, doppler-kubernetes-operator, kube-logging-operator,...