EUVD-2014-6717

Malware in sbrugna...

EUVD-2024-16915

Malicious code in bioql PyPI...

EUVD-2023-55170

Malicious code in bioql PyPI...

EUVD-2024-16913

Malicious code in bioql PyPI...

EUVD-2024-16914

Malicious code in bioql PyPI...

AlmaLinux 9 : kernel (ALSA-2025:16398)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:16398 advisory. kernel: net: usb: smsc75xx: Limit packet length to skb-len CVE-2023-53125 kernel: usb: dwc3: gadget: check that event count does not exceed event buffer...

AlmaLinux 9 : mysql:8.4 (ALSA-2025:16046)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:16046 advisory. openssl: Timing side-channel in ECDSA signature computation CVE-2024-13176 mysql: mysqldump unspecified vulnerability CPU Apr 2025 CVE-2025-30722 mysql:...

Moderate: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: net/http: Sensitive headers not cleared on cross-origin redirect in net/http CVE-2025-4673 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

AlmaLinux 8 : kernel-rt (ALSA-2025:15786)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:15786 advisory. kernel: net/sched: Always pass notifications when child class becomes empty CVE-2025-38350 kernel: idpf: convert control queue mutex to a spinlock...

AlmaLinux 8 : cups (ALSA-2025:15702)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:15702 advisory. cups: Authentication Bypass in CUPS Authorization Handling CVE-2025-58060 Tenable has extracted the preceding description block directly from the AlmaLinux securi...

AlmaLinux 9 : python3.12-cryptography (ALSA-2025:15608)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:15608 advisory. python-cryptography: NULL pointer dereference with pkcs12.serializekeyandcertificates when called with a non-matching certificate and private key and an hmachash...

AlmaLinux 8 : kernel (ALSA-2025:15471)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:15471 advisory. kernel: bpf: Don't use tnumrange on array range checking for poke descriptors CVE-2022-49985 kernel: posix-cpu-timers: fix race between...

AlmaLinux 8 : postgresql:16 (ALSA-2025:14899)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:14899 advisory. postgresql: PostgreSQL executes arbitrary code in restore operation CVE-2025-8715 postgresql: PostgreSQL code execution in restore operation CVE-2025-871...

ALSA-2025:14126 Important: pki-deps:10.6 security update

The Public Key Infrastructure PKI Core contains fundamental packages required by AlmaLinux Certificate System. Security Fixes: com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError CVE-2025-52999 For more details about the security issues, including the impact, a CVSS...

AlmaLinux 8 : go-toolset:rhel8 (ALSA-2025:13940)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:13940 advisory. cmd/go: Go VCS Command Execution Vulnerability CVE-2025-4674 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory...

MAL-2025-27126 Malicious code in nb-lib-alma (npm)

The package nb-lib-alma was found to contain malicious code...

Malicious code in nb-lib-alma (npm)

The package nb-lib-alma was found to contain malicious code...

AlmaLinux 9 : webkit2gtk3 (ALSA-2025:13782)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:13782 advisory. angle: insufficient input validation can cause undefined behavior CVE-2025-6558 webkitgtk: A download?s origin may be incorrectly associated CVE-2025-432...

AlmaLinux 8 : gdk-pixbuf2 (ALSA-2025:13315)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:13315 advisory. gdk?pixbuf: Heap?buffer?overflow in gdk?pixbuf CVE-2025-7345 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory...

AlmaLinux 9 : kernel (ALSA-2025:12746)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:12746 advisory. kernel: padata: fix UAF in padatareorder CVE-2025-21727 kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove CVE-2025-21928 kernel: HID...