42399 matches found
CVE-2025-64506
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngwriteimage8bit function when processing 8-bit images through t...
Malicious code in @browserbasehq/bb9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1cd2b73fffb169a779067cb1753b525b3f8112141a253d64a4fb91cb0d4742 The package @browserbasehq/bb9 was found to contain malicious code. Source: ghsa-malware...
SUSE SLED15: libipa_hbac-devel / libipa_hbac0 / libsss_certmap-devel / etc (SUSE-SU-2025:4183-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4183-1 advisory. - CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling...
PT-2025-48052
NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid memory read. A successful exploit of this vulnerability might lead to denial of service...
SUSE SLES15: libipa_hbac-devel / libipa_hbac0 / libsss_certmap-devel / etc (SUSE-SU-2025:4181-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4181-1 advisory. - CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plug...
gimp security update
2:3.0.4-1.1 - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934...
sssd security update
2.9.7-4.0.1.1 - Restore default debug level for ssscache Orabug: 32810448 Fri Oct 17 2025 Tomas Halman - Resolves: RHEL-120298 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems...
Linux Distros Unpatched Vulnerability : CVE-2022-50564
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/netiucv: Fix return type of netiucvtx With clang's kernel control flow integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the...
Malicious code in @lui-ui/lui-vue (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b88c15ab970fa80e2c420db246728871b310f27e35371206322bf8cea6abb1 The package @lui-ui/lui-vue was found to contain malicious code. Source: ghsa-malware 339d88eca55085f7dbfd769a5800adf59a499c0e6e14500a6f456cf17ec249f...
Malicious code in quickswap-token-lists (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0934c2b16a82e9886cc6939348bffcb3b75d536fceac933cf1f38bbf9ffdbd05 The package quickswap-token-lists was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191244 Malicious code in @lui-ui/lui-tailwindcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8515f668c012cc4072d376364ab0ed194d6040b86dbc19737c43a7ab00acd2d4 The package @lui-ui/lui-tailwindcss was found to contain malicious code. Source: ghsa-malware...
Malicious code in vue-browserupdate-nuxt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b54bd42aca6d571419286ebc95bb3a97c702b62db009f3310494e1d4c8ce081 The package vue-browserupdate-nuxt was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191223 Malicious code in @fishingbooker/react-raty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a32900cd2e5c9e243d0183183c4b1e1fcb3b9e834f1bbc4ed5dd92087d73e1 The package @fishingbooker/react-raty was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191222 Malicious code in @fishingbooker/react-pagination (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1150699fbdbd82b14aab4463da75ae2d2bb7b4a64d01d48f98bef2f8243715 The package @fishingbooker/react-pagination was found to contain malicious code. Source: ghsa-malware...
Malicious code in @everreal/validate-esmoduleinterop-imports (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab8b8345156c4c77c99622cb83f321f5904503094e6d54a19585d087a7849a6 The package @everreal/validate-esmoduleinterop-imports was found to contain malicious code. Source: ghsa-malware...
Malicious code in @oku-ui/slot (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00107e442d452bcb43403d89ade38e4fb111f1d1624b2dc4d2498df1f9a6ca2 The package @oku-ui/slot was found to contain malicious code. Source: ghsa-malware 2a90589b3706323fe3b284df0f3935425b573427c0e51600a8c59a2fc69a670d A...
Malicious code in @oku-ui/primitives (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48684386017546a6d1cc3afd6317d995fe7edc730db2789b79af9135d8f88191 The package @oku-ui/primitives was found to contain malicious code. Source: ghsa-malware...
Malicious code in kinetix-default-token-list (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834c5a1d0acc5be073a1939708bfdfdb3d38a411407c9ac4e2abebdfd44ee059 The package kinetix-default-token-list was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191112 Malicious code in jaetut-varit-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85e1a4defa66ffea068e9c6df340133d21686f29ad138d73976ff88d60ef368 The package jaetut-varit-test was found to contain malicious code. Source: ghsa-malware...
Malicious code in @tiaanduplessis/json (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934994d3e44c6f137b7d0404fd662535084e2d850c94c0e0b421330d773e560a The package @tiaanduplessis/json was found to contain malicious code. Source: ghsa-malware...