Amazon Linux 2 : nerdctl (ALAS-2025-2749)

The version of nerdctl installed on the remote host is prior to 2.0.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2749 advisory. Applications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization...

Amazon Linux 2 : python (ALAS-2025-2744)

The version of python installed on the remote host is prior to 2.7.18-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2744 advisory. CPython 3.9 and earlier doesn't disallow configuring an empty list for SSLContext.setnpnprotocols which is an invalid value for the...

Amazon WorkSpaces < 5.22.1 MITM

The version of Amazon WorkSpaces installed on the host is vulnerable to a man-in-the-middle vulnerability, allowing an attacker to access remote sessions. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Amazon Linux 2 : python3 (ALAS-2025-2743)

The version of python3 installed on the remote host is prior to 3.7.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2743 advisory. CPython 3.9 and earlier doesn't disallow configuring an empty list for SSLContext.setnpnprotocols which is an invalid value for th...

Amazon DCV Client Installed (Linux)

Binary data amazondcvclientlinuxinstalled.nbin...

Amazon DCV Client Installed (macOS)

Binary data amazondcvclientmacosinstalled.nbin...

Amazon Workspaces Client Installed (macOS)

Binary data amazonworkspacesclientmacosinstalled.nbin...

Amazon Workspaces Client Installed (Windows)

Binary data amazonworkspacesclientwininstalled.nbin...

openSUSE Security Advisory (SUSE-SU-2025:0277-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon DCV Client Installed (Windows)

Binary data amazondcvclientwininstalled.nbin...

SUSE SLES15 / openSUSE 15 Security Update : amazon-ssm-agent (SUSE-SU-2025:0277-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0277-1 advisory. Update to version 3.3.1611.0: - CVE-2025-21613: Fixed argument injection via the URL field in github.com/go-git/go-git/v5...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: Update to version 3.3.1611.0: CVE-2025-21613: Fixed argument injection via the URL field in github.com/go-git/go-git/v5 bsc1235575 Full changelog: https://github.com/aws/amazon-ssm-agent/compare/3.1.1260.0...3.3.1611.0 Patch Instruction...

SUSE-SU-2025:0277-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: Update to version 3.3.1611.0: - CVE-2025-21613: Fixed argument injection via the URL field in github.com/go-git/go-git/v5 bsc1235575 Full changelog: https://github.com/aws/amazon-ssm-agent/compare/3.1.1260.0...3.3.1611.0...

Malicious code in amazon-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6c3c7c427f25937801f54534b488f10721cf11e43e122f0f00a47350ba80c2c The OpenSSF Package Analysis project identified 'amazon-oauth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-384 Malicious code in amazon-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6c3c7c427f25937801f54534b488f10721cf11e43e122f0f00a47350ba80c2c The OpenSSF Package Analysis project identified 'amazon-oauth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-373 Malicious code in amazon-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4728fc0ef630dde9616340e6f9a3571e2bb5e75e034fac804e6ca9b0030a7846 The OpenSSF Package Analysis project identified 'amazon-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4728fc0ef630dde9616340e6f9a3571e2bb5e75e034fac804e6ca9b0030a7846 The OpenSSF Package Analysis project identified 'amazon-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-370 Malicious code in amazon-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6d636dd276d6d15fd9f9e581c52e6eeb5544ee37a69159d195dfd60454c8a42f The OpenSSF Package Analysis project identified 'amazon-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

Malicious code in amazon-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6d636dd276d6d15fd9f9e581c52e6eeb5544ee37a69159d195dfd60454c8a42f The OpenSSF Package Analysis project identified 'amazon-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-374 Malicious code in amazon-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4b71318a5323c17de18f5573bc2c87a70f80ec6de2577c55c243993d76da1f51 The OpenSSF Package Analysis project identified 'amazon-cloud' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...