Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2025-2449)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GO-2025-4118 File Browser has risk of HTTP Request/Response smuggling through vulnerable dependency in github.com/filebrowser/filebrowser

File Browser has risk of HTTP Request/Response smuggling through vulnerable dependency in github.com/filebrowser/filebrowser...

a2 (>=0.3.6, <=0.5.0-alpha.1), abd-clam (>=0.22.6, <=0.30.0) +5684 more potentially affected by unknown CVE via rand_os (>=0.1.3, <=0.2.2)

randos CARGO version =0.1.3, =0.3.6, =0.22.6, =0.1.0, =0.4.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.0.3, =0.0.1, =0.0.7-alpha.3, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0124...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala33 (1.0.0)

nokire-nakala33 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala33 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162986...

Huawei EulerOS: Security Advisory for libxslt (EulerOS-SA-2025-2334)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

nftnl (>=0.1.0, <=0.8.0) potentially affected by unknown CVE via mnl (>=0.1.0, <=0.2.3)

mnl CARGO version =0.1.0, =0.1.0, =0.8.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0142...

actix-plus-auth (0.0.1), actix-plus-utils (0.1.0) +321 more potentially affected by unknown CVE via unic-char-property (>=0.6.0, <=0.9.0)

unic-char-property CARGO version =0.6.0, =0.1.2, =0.1.0, =0.3.0, =0.1.0, =0.5.0, =0.5.0, =0.1.0-alpha.4, =0.3.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0081...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +18 more potentially affected by unknown CVE via unic-ucd-name_aliases (0.9.0)

unic-ucd-namealiases CARGO version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on unic-ucd-namealiases and may be impacted: - alemat =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.0.0, =0.1.0, =1.1.1, =2.0.0 - unic 0.9.0 a...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @a11ywatch/pagemind (>=0.9.31, <=0.9.34) +519 more potentially affected by CVE-2025-59288 via playwright (>=1.0.2, <=1.55.0-beta-1758616447000)

playwright NPM version =1.0.2, =0.0.1, =0.9.31, =0.1.8, =0.0.18-patch.0, =0.0.33, =0.0.1, =0.1.1, =0.1.1, =0.0.10-a, =0.0.1, =0.1.466, =0.32.2, =2.15.0, =0.3.0, =0.7.3 and more Source cves: CVE-2025-59288 Source advisory: OSV:GHSA-7MVR-C777-76HP...

HCL MyXalytics 安全漏洞

HCL MyXalytics is an analytics software product from HCL India. It is used to perform data analysis and other related tasks. A security vulnerability exists in HCL MyXalytics version 6.6 that stems from the use of a vulnerable or outdated version...

@revisium/admin (>=1.4.0, <=2.0.0) potentially affected by CVE-2025-59845 via @apollo/sandbox (2.7.1)

@apollo/sandbox NPM version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on @apollo/sandbox and may be impacted: - @revisium/admin =1.4.0, =2.0.0 Source cves: CVE-2025-59845 Source advisory: OSV:GHSA-W87V-7W53-WWXV...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in jackson-core-2.10.3.jar

Summary IBM Watson Discovery Cartridge contains a vulnerable version of jackson-core-2.10.3.jar Vulnerability Details CVEID:CVE-2025-52999 DESCRIPTION: jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. In versions prior ...

a2 (>=0.5.0-alpha.1, <=0.5.0), a_chat (0.1.0) +2617 more potentially affected by unknown CVE via async-std (>=0.99.4, <=1.13.2)

async-std CARGO version =0.99.4, =0.5.0-alpha.1, =0.1.0, =0.3.1, =0.1.0, =0.1.0, =0.7.0, =0.3.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0052...

2d-json-schema-editor-visual (>=1.0.2, <=1.0.7), 37sy-build (>=1.0.0, <=1.3.3) +4368 more potentially affected by CVE-2025-9288 via sha.js (>=2.1.1, <=2.4.11)

sha.js NPM version =2.1.1, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =0.1.6, =1.0.0, =0.0.4, =0.1.0, =7.13.4, =18.0.0, =18.1.2 - @ajhyndman/relay 1.6.0-1 - @aldendaniels/react-scripts 0.8.3 and more Source cves: CVE-2025-9288 Source advisory: SNYK:JS-SHAJS-12089400...

@6missedcalls-ai/zora-mcp-server (>=0.1.2, <=0.1.3), @aurracloud/agentkit (>=0.9.0, <=0.10.0) +38 more potentially affected by unknown CVE via x402 (>=0.1.2, <=0.4.3)

x402 NPM version =0.1.2, =0.1.2, =0.9.0, =0.1.0-alpha.1, =0.0.1, =0.0.1, =0.0.1, =0.0.0-nightly-20250711210411, =0.3.0, =0.0.3, =0.1.2, =0.1.3 - @openflow-sh/sdk 1.0.0 - @thorium-dev-group/x402-mcp-extension 0.1.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-X402-12239904...

form-lab (0.1.3), nmt_databox (>=1.0.5, <=1.0.7) potentially affected by unknown CVE via instal (0.0.1-security)

instal NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on instal and may be impacted: - form-lab 0.1.3 - nmtdatabox =1.0.5, =1.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23246...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.h2o:h2o-app (>=0.1.22, <=0.1.25) +1041 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-jdk15 (>=1.38, <=1.46)

org.bouncycastle:bcprov-jdk15 MAVEN version =1.38, =1.3, =0.1.22, =0.1.22, =1.0.0, =2.1.0, =1.0.1, =4.2.0, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.0.3, =1.3.3 and more Source cves: CVE-2025-8916 Source advisory:...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +30572 more potentially affected by CVE-2025-8885 via org.bouncycastle:bcprov-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2025-8885 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11777856...

remenu (>=0.0.3, <=0.0.5) potentially affected by unknown CVE via xcb (1.2.2)

xcb CARGO version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on xcb and may be impacted: - remenu =0.0.3, =0.0.5 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0051...

PT-2025-31646 · Modelscope · Ms-Swift

Name of the Vulnerable Software and Affected Versions: modelscope/ms-swift versions through 2.6.1 Description: The modelscope/ms-swift library is susceptible to arbitrary code execution through the deserialization of untrusted data. This occurs within the load model meta function of the...