MAL-2026-309 Malicious code in sd-pdc-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed2d91fb4db4325ed4d7b78f02cb681cc3ce2a9b5de740755a4fb868780d75f The package sd-pdc-module-client was found to contain malicious code. Source: ghsa-malware...

MAL-2026-306 Malicious code in sd-cip-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffd6baead2182a6d4f7487b352b9ccf3119af1299a5aaa68edbbc8a59d3de11 The package sd-cip-module-client was found to contain malicious code. Source: ghsa-malware...

MAL-2026-303 Malicious code in sd-active-conversation-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278082132569830ff8cb8dd522f0e5284296ea09a1eebfbebffd95656cfe9c63 The package sd-active-conversation-module-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in sd-conversation-history-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c335176b96214a0cf97acfa97156cd4216c1aa6e764167f49cef0eaa89cc72 The package sd-conversation-history-module-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in sd-active-conversation-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278082132569830ff8cb8dd522f0e5284296ea09a1eebfbebffd95656cfe9c63 The package sd-active-conversation-module-client was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-3055

Malicious code in sd-conversation-history-module-client npm...

Malicious code in sd-ccp-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 767cf50a9b0a16fd39e9fbbf533657ccbafe4120cb01d2c6da4c9fedc2cb342e The package sd-ccp-module-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in sd-navbar-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5eb5c5baa5e482655961b2dd4ced29ff771428c5870106e0a30cc916913908 The package sd-navbar-module-client was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-3058

Malicious code in sd-agent-toolbar-module-client npm...

EUVD-2026-3059

Malicious code in sd-active-conversation-module-client npm...

MAL-2026-308 Malicious code in sd-navbar-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5eb5c5baa5e482655961b2dd4ced29ff771428c5870106e0a30cc916913908 The package sd-navbar-module-client was found to contain malicious code. Source: ghsa-malware...

CVE-2025-62291

CVE-2025-62291 affects the eap-mschapv2 plugin in strongSwan (client-side). Vulnerable when using strongSwan before 6.0.3; a crafted EAP-MSCHAPv2 Failure message can trigger an integer underflow, potentially causing a heap-based buffer overflow. Connected advisories note patched packages: strongS...

CVE-2025-62291

In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...

WordPress plugin “Membership Plugin” – Security vulnerability regarding content restriction

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

PT-2026-3252

Name of the Vulnerable Software and Affected Versions ConnectWise PSA versions prior to 2026.1 Description Certain session cookies were not configured with the HttpOnly attribute in affected versions. This could potentially allow client-side scripts to access session cookie values. Recommendation...

MiracleLinux 4 : libvirt-0.10.2-18.5.0.1.AXS4 (AXSA:2013-450:06)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-450:06 advisory. Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd...

MiracleLinux 4 : postgresql-8.4.20-1.AXS4 (AXSA:2014-004:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-004:01 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions, subselect...

CVE-2025-62291

In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...

MiracleLinux 7 : kde-settings-19-23.9.el7, kde-workspace-4.11.19-13.el7, kdelibs-4.14.8-10.el7, kmag-4.10.5-4.el7, virtuoso-opensource-6.1.6-7.el7 (AXSA:2019-4210:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4210:01 advisory. kde-workspace: Missing sanitization of notifications allows to leak client IP address via IMG element CVE-2018-6790 Tenable has extracted the preceding...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001611)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001611 advisory. A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index aft...