21361 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-21334
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In containerd an industry-standard container runtime before versions 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation through...
Linux Distros Unpatched Vulnerability : CVE-2023-40590
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for the current working directory, and after...
Linux Distros Unpatched Vulnerability : CVE-2023-39950
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - efibootguard is a simple UEFI boot loader with support for safely switching between current and updated partition sets. Insufficient or missing validation and...
Linux Distros Unpatched Vulnerability : CVE-2018-19976
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In YARA 3.8.1, bytecode in a specially crafted compiled rule is exposed to information about its environment, in libyara/exec.c. This is a consequence of the...
Linux Distros Unpatched Vulnerability : CVE-2020-11998
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contai...
Linux Distros Unpatched Vulnerability : CVE-2024-10979
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables e.g. PAT...
AutoBnB-RAG: Enhancing Multi-Agent Incident Response with Retrieval-Augmented Generation
Incident response IR requires fast, coordinated, and well-informed decision-making to contain and mitigate cyber threats. While large language models LLMs have shown promise as autonomous agents in simulated IR settings, their reasoning is often limited by a lack of access to external knowledge. ...
MAL-2025-191732 Malicious code in flask-tdg-cyberx (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d5dae82b81352867ea79466352b02c279be8b7ca2f0415f0534058e20b943436 Package is prepared for exfiltration of detailed data about the running system. The exact behaviour depends on the version: some does nothing, some exfiltrate...
CVE-2025-7971
A security issues exists within Studio 5000 Logix Designer due to unsafe handling of environment variables. If the specified path lacks a valid file, Logix Designer crashes; However, it may be possible to execute malicious code without triggering a crash...
CVE-2025-54410 vulnerabilities
Vulnerabilities for packages: lazydocker, cluster-api-helm-controller, crossplane, newrelic-infrastructure-agent, k3d, docker-credential-gcr, portieris, k3s, xeol, kpt, undock, helm-set-status, helm-mapkubeapis, bom, aactl, falcoctl, rancher-agent, bento, amazon-cloudwatch-agent-operator,...
PT-2025-33521 · WordPress · Wpgym - Wordpress Gym Management System
Name of the Vulnerable Software and Affected Versions: WPGYM - Wordpress Gym Management System plugin versions prior to 67.7.1 Description: The WPGYM - Wordpress Gym Management System plugin for WordPress is susceptible to Local File Inclusion via the page parameter. This allows authenticated...
Linux Distros Unpatched Vulnerability : CVE-2022-21256
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.27 and prior...
MAL-2025-33426 Malicious code in slm-env-unity3dball-v0 (npm)
The package slm-env-unity3dball-v0 was found to contain malicious code...
MAL-2025-33726 Malicious code in spectron-webdriver-cross-env-galaxy-parallax (npm)
The package spectron-webdriver-cross-env-galaxy-parallax was found to contain malicious code...
MAL-2025-19686 Malicious code in environment-inc (npm)
The package environment-inc was found to contain malicious code...
Malicious code in yandex-environment (npm)
The package yandex-environment was found to contain malicious code...
MAL-2025-40214 Malicious code in yandex-environment (npm)
The package yandex-environment was found to contain malicious code...
MAL-2025-21045 Malicious code in funbox-frontend-env-angular (npm)
The package funbox-frontend-env-angular was found to contain malicious code...
Malicious code in environment-inc (npm)
The package environment-inc was found to contain malicious code...
CVE-2025-55192 HomeAssistant-Tapo-Control Code Injection Vulnerability in issues.yml Workflow
HomeAssistant-Tapo-Control offers Control for Tapo cameras as a Home Assistant component. Prior to commit 2a3b80f, there is a code injection vulnerability in the GitHub Actions workflow .github/workflows/issues.yml. It does not affect users of the Home Assistant integration itself — it only impac...