12498 matches found
Medium: openssh
Issue Overview: A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying...
Medium: openssh
Issue Overview: A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying...
Linux Distros Unpatched Vulnerability : CVE-2024-53222
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: zram: fix NULL pointer in compalgorithmshow LTP reported a NULL pointer dereference as...
Linux Distros Unpatched Vulnerability : CVE-2025-26465
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine...
Linux Distros Unpatched Vulnerability : CVE-2024-53195
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Get rid of userspaceirqchipinuse Improper use of userspaceirqchipinuse led to syzbot hitting the following WARNON in kvmtimerupdateirq: WARNING: CP...
CVE-2024-43056
Transient DOS during hypervisor virtual I/O operation in a virtual machine...
CVE-2024-53029
Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine...
CVE-2024-53022
Memory corruption may occur during communication between primary and guest VM...
CVE-2024-53031
Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine...
Malicious code in nmp-frontend-libraries (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9320142027c800d4b8427512d6c6c219bc910b204b892be28af3a3849302e649 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Linux Distros Unpatched Vulnerability : CVE-2021-47429
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix unrecoverable MCE calling async handler from NMI The machine check handler...
Linux Distros Unpatched Vulnerability : CVE-2023-31485
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-the-middle attacks. CVE-2023-31485 Note th...
Linux Distros Unpatched Vulnerability : CVE-2023-41051
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In a typical Virtual Machine Monitor VMM there are several components, such as boot loader, virtual device drivers, virtio backend drivers and vhost drivers, th...
Linux Distros Unpatched Vulnerability : CVE-2023-22497
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It...
Linux Distros Unpatched Vulnerability : CVE-2022-48890
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM storvscqueuecommand maps th...
CVE-2025-22226
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process...
Malicious code in latoken-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63cdcfe3b15d2c174d58b54998cf056643085f18de21eda41bd23e4cc3bed7a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in safe-backend-integration (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07c4d0b3565522f959a93610e46a8e5765c7405621afd4e3ef3856dc77cf4cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
VulnCheck KEV: CVE-2025-22226
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful exploitation allows an attacker with administrative privileges to a virtual machine to leak memory from the vmx process...
