683 matches found
TencentOS Server 4: skopeo (TSSA-2025:0725)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0725 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
TencentOS Server 4: buildah (TSSA-2025:0726)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0726 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
SUSE SLED15 / SLES15 Security Update : alloy (SUSE-SU-2025:4121-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4121-1 advisory. - update to 1.11.3: - CVE-2025-58058: Fixed memory leaks in xz. bsc1248960 - CVE-2025-11065: Fixed sensitive...
Security update for alloy
This update for alloy fixes the following issues: update to 1.11.3: CVE-2025-58058: Fixed memory leaks in xz. bsc1248960 CVE-2025-11065: Fixed sensitive Information leak in logs. bsc1250621 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
SUSE-SU-2025:4121-1 Security update for alloy
This update for alloy fixes the following issues: - update to 1.11.3: - CVE-2025-58058: Fixed memory leaks in xz. bsc1248960 - CVE-2025-11065: Fixed sensitive Information leak in logs. bsc1250621...
Siemens SIMATIC S7-1500 Premature Release of Resource During Expected Lifetime (CVE-2025-31115)
The threaded .xz decoder in liblzma has a vulnerability that can at least result in a crash denial of service. The effects include heap use after free and writing to an address based on the null pointer plus an offset. This plugin only works with Tenable.ot. Please visit...
EUVD-2021-0896
Malware in sbrugna...
EUVD-2015-2760
Malware in sbrugna...
RockyLinux 10 : xz (RLSA-2025:7524)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7524 advisory. xz: XZ has a heap-use-after-free bug in threaded .xz decoder CVE-2025-31115 Tenable has extracted the preceding description block directly from the RockyLinux...
EUVD-2022-1556
Malicious code in bioql PyPI...
EUVD-2025-26149
Malicious code in bioql PyPI...
EUVD-2022-49886
Malicious code in bioql PyPI...
EUVD-2025-14786
Malicious code in bioql PyPI...
EUVD-2022-49887
Malicious code in bioql PyPI...
xz security update
An update is available for xz. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list XZ Utils is an integrated collection of user-space file compression utilities bas...
RLSA-2025:7524 Important: xz security update
XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm LZMA, which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fixes: xz: XZ has a...
Binary Diff Summarization Using Large Language Models
Security of software supply chains is necessary to ensure that software updates do not contain maliciously injected code or introduce vulnerabilities that may compromise the integrity of critical infrastructure. Verifying the integrity of software updates involves binary differential analysis...
Allocation Of Resources Without Limits
github.com/ulikunitz/xz is vulnerable to Allocation Of Resources Without Limits. The vulnerability is due to denial of service due to improper header validation that allows arbitrary data to be prepended to an LZMA stream, causing the implementation to allocate a full decode buffer and consume...
