Malicious code in subjective_harrier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9e83f6d207bb8036316b92c7e420c844502fdb5ed3ca40ff9151f2cac9f502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2015-6325

Malware in sbrugna...

EUVD-2000-0350

Malware in sbrugna...

EUVD-2023-24196

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-47528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: Fix a NULL pointer dereference in cdnspendpointinit In cdnspendpointinit,...

ALSA-2025:12752 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove CVE-2025-21928 kernel: memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove CVE-2025-22020 kernel: netsched:...

RHSA-2025:12293 Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update

Bulletin has no description...

CVE-2025-54388 vulnerabilities

Vulnerabilities for packages: apko, docker-cli-buildx, falcoctl, syft, buf, trufflehog, buildah, trivy, tw, kargo, goreleaser, cadvisor, buildkitd, wolfictl, docker-compose, melange, k9s, zot, opentelemetry-collector-contrib, aws-otel-collector, openfga, spire-server, osv-scanner,...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: apache-nifi, nrjmx, jenkins-plugin-manager, infinispan, confluent-kafka-jre-bcfips, py3-vllm-cuda-12.4, akhq, zaproxy, apache-activemq-artemis, celeborn, apache-tika, keycloak-config-cli, liquibase, elasticsearch, sonarqube, hadoop-client-modules, gradle,...

RHSA-2025:10295 Red Hat Security Advisory: OpenShift Container Platform 4.17.35 packages and security update

Bulletin has no description...

Fedora 42 : perl / perl-Devel-Cover / perl-PAR-Packer (2025-26c0346398)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-26c0346398 advisory. Fix CVE-2024-56406 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

RHSA-2025:9766 Red Hat Security Advisory: OpenShift Container Platform 4.16.43 packages and security update

Bulletin has no description...

GHSA-FV92-FJC5-JJ9H vulnerabilities

Vulnerabilities for packages: tekton-chains, hcloud, argo-workflows, podinfo, kyverno-policy-reporter, syft, witness, crossplane, k9s, envoy-gateway, opentelemetry-collector-contrib, tflint, cloud-sql-proxy, pgtimetable, spire-server, dataplaneapi, nerdctl, terraform-provider-acme, grype,...

RHSA-2025:9279 Red Hat Security Advisory: OpenShift Container Platform 4.19.1 packages and security update

Bulletin has no description...

CVE-2025-22874 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, gobuster, buf, multus-cni, go-licenses, slsa-verifier, op-geth, protoc-gen-go, kine, nfs-subdir-external-provisioner, helm, docker-machine-driver-harvester, cloud-sql-proxy, spire-controller-manager, nsc, vault-env, azure-service-operator,...

CVE-2025-4673 vulnerabilities

Vulnerabilities for packages: postgres-operator, osv-scanner, nvidia-nsight-compute-12.8, rancher-helm, fluent-bit-plugin-loki, kubernetes-csi-driver-nfs, elvish, velero-plugin-for-csi-fips, trillian, kuberay-operator, nri-prometheus, keda, elastic-agent, prometheus-statsd-exporter-fips,...

GHSA-6F52-WPX2-HVF2 vulnerabilities

Vulnerabilities for packages: postgres-operator, osv-scanner, nvidia-nsight-compute-12.8, rancher-helm, fluent-bit-plugin-loki, kubernetes-csi-driver-nfs, elvish, velero-plugin-for-csi-fips, trillian, kuberay-operator, nri-prometheus, keda, elastic-agent, prometheus-statsd-exporter-fips,...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins-plugin-manager, confluent-kafka-jre-bcfips, akhq, apache-activemq-artemis, celeborn, tez, sonarqube, hadoop-client-modules, cassandra-reaper, druid, neo4j, jenkins, solr-fips, camunda-zeebe, spdx-tools-java, ghidra, wildfly, hadoop-fips,...

CVE-2022-4894

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element...

Ubuntu: Security Advisory (USN-7516-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...