Debian: Security Advisory (DSA-5892-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@ninetailed/experience.js-next-esr (>=7.18.8, <=7.18.12-alpha.3) potentially affected by CVE-2025-30218 via next (13.5.9)

next NPM version 13.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @ninetailed/experience.js-next-esr =7.18.8, =7.18.12-alpha.3 Source cves: CVE-2025-30218 Source advisory: OSV:GHSA-223J-4RM8-MRMF...

DEBIAN-CVE-2024-42325

Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc...

CVE-2024-51744 affecting package keda for versions less than 2.4.0-29

CVE-2024-51744 affecting package keda for versions less than 2.4.0-29. A patched version of the package is available...

CVE-2025-22870 affecting package keda for versions less than 2.4.0-29

CVE-2025-22870 affecting package keda for versions less than 2.4.0-29. A patched version of the package is available...

CVE-2025-1861 affecting package php for versions less than 8.1.32-1

CVE-2025-1861 affecting package php for versions less than 8.1.32-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-30204 affecting package keda for versions less than 2.14.1-5

CVE-2025-30204 affecting package keda for versions less than 2.14.1-5. A patched version of the package is available...

CVE-2025-30204 affecting package packer for versions less than 1.9.5-7

CVE-2025-30204 affecting package packer for versions less than 1.9.5-7. A patched version of the package is available...

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2025-1343)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7396-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-44337 affecting package cri-o for versions less than 1.22.3-11

CVE-2024-44337 affecting package cri-o for versions less than 1.22.3-11. A patched version of the package is available...

CVE-2025-29786 affecting package ig for versions less than 0.37.0-3

CVE-2025-29786 affecting package ig for versions less than 0.37.0-3. A patched version of the package is available...

MAL-2025-2783 Malicious code in riskchallengeserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da27f27f9efcf0b2d496e909e97771157cccea447420e5fb908ed4e912fcce6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-22870 affecting package vitess for versions less than 17.0.7-7

CVE-2025-22870 affecting package vitess for versions less than 17.0.7-7. A patched version of the package is available...

CVE-2025-27144 affecting package ig for versions less than 0.37.0-2

CVE-2025-27144 affecting package ig for versions less than 0.37.0-2. A patched version of the package is available...

Ubuntu: Security Advisory (USN-7373-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-8176 affecting package expat for versions less than 2.6.4-1

CVE-2024-8176 affecting package expat for versions less than 2.6.4-1. A patched version of the package is available...

MAL-2025-2706 Malicious code in sf-intl-sn-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb4cc33212e001bc0af0440f49eb0c52cdc0ad223eba555c5cb2afaa9931e5c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-VM77-MR48-27WJ nossrf Server-Side Request Forgery (SSRF)

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery SSRF, where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism...

Photon OS 5.0: Kubernetes PHSA-2025-5.0-0487

An update of the kubernetes package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0487. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...