Siemens SIMATIC S7-1500 Incorrect Calculation of Buffer Size (CVE-2025-0395)

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size. This plugin only works with Tenable.ot...

Siemens SIMATIC S7-1500 Missing Encryption of Sensitive Data (CVE-2021-43396)

DISPUTED In iconvdata/iso-2022-jp-3.c in the GNU C Library aka glibc 2.34, remote attackers can force iconv to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv use cases. NOTE: the vendor...

Photon OS 5.0: Glibc PHSA-2025-5.0-0666

An update of the glibc package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0666. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Siemens SIMATIC S7-1500 Out-of-bounds Write (CVE-2024-2961)

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable. This plugin only works with...

Siemens SIMATIC S7-1500 Out-of-bounds Write (CVE-2021-32292)

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit. This plugin only works with Tenable.ot. Please visit...

Use-after-realloc vulnerablity in mruby 3.4.0

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sortcmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...

Siemens SIMATIC S7-1500 Missing Release of Memory after Effective Lifetime (CVE-2023-5156)

A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

EUVD-2025-137273

Malicious code in imodiov-komfi-c npm...

MAL-2025-182364 Malicious code in imodiov-komfi-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88c3632fcb9f0beb2c4589c9ce0ea54b31762013497afd843470ba3834b296dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137114

Malicious code in imodiov-kufni-c npm...

EUVD-2025-137358

Malicious code in imodiov-kofi-c npm...

MAL-2025-182317 Malicious code in imodiov-kofi-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8044e41ba0a1bd49c1a77c730b2f0daf8f6aa5d39bef3c92c9846eee8fc0dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nacho-bunian-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08deafd3bdbddbf5ce5f5cbc28be6529ef6252661c07dfa1c1742192a4272f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0879637fe180895f23e5318ad9a2fe5df23fb7eb3618efd65e9f71833580b945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147862

Malicious code in tehah-c-brew npm...

MAL-2025-161718 Malicious code in nacho-bunian-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08deafd3bdbddbf5ce5f5cbc28be6529ef6252661c07dfa1c1742192a4272f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in matane-c-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8bf6de177689550dfd963fcbb0baedc3dfab17caf0fc1314dac22913505f947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155470 Malicious code in guras-visa-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0879637fe180895f23e5318ad9a2fe5df23fb7eb3618efd65e9f71833580b945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EulerOS 2.0 SP10 : glibc (EulerOS-SA-2025-2384)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2025-2412)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...