12967 matches found
SUSE SLES11: kernel-default / kernel-default-base / kernel-default-devel / etc (SUSE-SU-2025:02844-1)
The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02844-1 advisory. The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...
Linux Distros Unpatched Vulnerability : CVE-2009-1553
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple cross-site scripting XSS vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inject arbitrary web...
SUSE-SU-2025:02849-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hcievent: Fix checking conn for leconncompleteevt bsc1238160. - CVE-2023-52923: netfilter: nftables: split async and sync catchall in two...
Linux Distros Unpatched Vulnerability : CVE-2020-1941
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue. CVE-2020-1941 Note that Nessus...
Trend Micro Apex One OS Command Injection Vulnerability
Trend Micro Apex One Management Console on-premise contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations...
Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware
The threat actor known as EncryptHub is continuing to exploit a now-patched security flaw impacting Microsoft Windows to deliver malicious payloads. Trustwave SpiderLabs said it recently observed an EncryptHub campaign that brings together social engineering and the exploitation of a vulnerabilit...
OSEC-2025-01 Albatross console out of memory
Background Albatross-console reads the console output from multiple unikernel tenders solo5-hvt. This console output can be retrieved using albatross-client. The console protocol is fairly simple: the unikernel invokes a PUTS hypercall, which sends arbitrary bytes of given length to the unikernel...
Linux Distros Unpatched Vulnerability : CVE-2019-19252
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vcswrite in drivers/tty/vt/vcscreen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a. CVE-2019-19252 Not...
Malicious code in cliques-console (npm)
The package cliques-console was found to contain malicious code...
MAL-2025-28332 Malicious code in opensearch-console-server (npm)
The package opensearch-console-server was found to contain malicious code...
MAL-2025-33143 Malicious code in shopify_api_console (npm)
The package shopifyapiconsole was found to contain malicious code...
MAL-2025-13964 Malicious code in ac-console (npm)
The package ac-console was found to contain malicious code...
MAL-2025-33836 Malicious code in sql-web-console (npm)
The package sql-web-console was found to contain malicious code...
MAL-2025-28317 Malicious code in openai-realtime-console-plugin (npm)
The package openai-realtime-console-plugin was found to contain malicious code...
Malicious code in sql-web-console (npm)
The package sql-web-console was found to contain malicious code...
Malicious code in style-console (npm)
The package style-console was found to contain malicious code...
Malicious code in shopify_api_console (npm)
The package shopifyapiconsole was found to contain malicious code...
Malicious code in ac-console (npm)
The package ac-console was found to contain malicious code...