Linux Distros Unpatched Vulnerability : CVE-2024-38540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnxtre: avoid shift undefined behavior in bnxtqpliballocinithwq Undefined behavior is triggered when bnxtqpliballocinithwq is called with hwqattr-auxdepth != 0...

Linux Distros Unpatched Vulnerability : CVE-2020-27765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavio...

Linux Distros Unpatched Vulnerability : CVE-2021-47497

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmem: Fix shift-out-of-bound UBSAN with byte size cells If a cell has 'nbits' equal to a multiple of BITSPERBYTE the logic p &= GENMASKcell-nbits%BITSPERBYTE ...

Linux Distros Unpatched Vulnerability : CVE-2022-48827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: Fix the behavior of READ near OFFSETMAX Dan Aloni reports: Due to commit 8cfb9015280d NFS: Always provide aligned buffers to the RPC read layers on the...

Linux Distros Unpatched Vulnerability : CVE-2024-26630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm: cachestat: fix folio read-after- free in cache walk In cachestat, we access the folio fr...

Linux Distros Unpatched Vulnerability : CVE-2023-29453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template...

PT-2025-9866 · Apache +1 · Apache Traffic Server +1

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 9.0.0 through 9.2.8 Apache Traffic Server versions 10.0.0 through 10.0.3 Description: The issue is an Expected Behavior Violation vulnerability in Apache Traffic Server. Users are advised to upgrade to resolve t...

Linux Distros Unpatched Vulnerability : CVE-2020-25676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In CatromWeights, MeshInterpolate, InterpolatePixelChannel, InterpolatePixelChannels, and InterpolatePixelInfo, which are all functions in /MagickCore/pixel.c,...

MAL-2025-2073 Malicious code in symphony-data-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c3c641dfba68a53ede962e733dcc7d2fb8171eec7c4b192417a0f50066eeca7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2025:20132-1 Security update for pam_u2f

This update for pamu2f fixes the following issues: - update to 1.3.2: Relax authfile permission check to a warning instead of an error to prevent a breaking change locking existing users out of their systems. - update to 1.3.1: CVE-2025-23013: Fixed problematic PAMIGNORE return values in...

Security update for pam_u2f

This update for pamu2f fixes the following issues: update to 1.3.2: Relax authfile permission check to a warning instead of an error to prevent a breaking change locking existing users out of their systems. update to 1.3.1: CVE-2025-23013: Fixed problematic PAMIGNORE return values in...

MAL-2025-2067 Malicious code in product-custom-grid-columns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 620dece457b625966cbf804fa1e8bcd8b54fb2b961020453940961af4569f10d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2065 Malicious code in qaboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ac2bfcab360f7de45c230b1af8580c51697bb734b65eb7d85386f00a2fe83ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2063 Malicious code in safe-client-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 257bc819b8f443ea195e14777e23a3e5142765db2b4301d397fd894217a6c2a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2060 Malicious code in subscriptionmgmtserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68c14d2b0dcadceb26623b66d1383bf38d46b5b9cccee3619f1cfe8cef942f4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2058 Malicious code in buttonfactoryserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 158238f70853c391431a3c0e3b53d79d44970a0d956562c88324b2c1da5e08e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2017-7596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibTIFF 4.0.7 has an outside the range of representable values of type float undefined behavior issue, which might allow remote attackers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2020-27767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavio...

Linux Distros Unpatched Vulnerability : CVE-2020-27751

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined...

Linux Distros Unpatched Vulnerability : CVE-2020-27750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by...