Linux Distros Unpatched Vulnerability : CVE-2024-39479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/i915/hwmon: Get rid of devm When both hwmon and hwmon drvdata on which hwmon depends are...

Linux Distros Unpatched Vulnerability : CVE-2023-40030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cargo downloads a Rust project's dependencies and compiles the project. Starting in Rust 1.60.0 and prior to 1.72, Cargo did not escape Cargo feature names when...

SUSE-SU-2025:0775-1 Security update for podman

This update for podman fixes the following issues: - CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE bsc1237641 - CVE-2024-9676: github.com/containers/storage: Fixed symlink traversal vulnerability in the containers/storage library can cause Denial of Servi...

Malicious code in dependencies-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c3ca96aa79b3d1be281fd751a05f4550a914026dcfd52672223bb466cf6e3d6 The OpenSSF Package Analysis project identified 'dependencies-poc' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-1673 Malicious code in dependencies-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c3ca96aa79b3d1be281fd751a05f4550a914026dcfd52672223bb466cf6e3d6 The OpenSSF Package Analysis project identified 'dependencies-poc' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

openSUSE Security Advisory (SUSE-SU-2025:0741-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919---Exploit-Script Deskripsi CVE-2024-24919 adal...

Security Bulletin: IBM Asset Data Dictionary uses multiple third party dependencies which is vulnerable to CVEs.

Summary IBM Asset Data Dictionary uses...

CVE-2021-39158

NVCaffe's python required dependencies list used to contain gfortranversion prior to 0.17.4, entry which does not exist in the repository pypi.org. An attacker could potentially have posted malicious files to pypi.org causing a user to install it within NVCaffe...

NetMod VPN 安全漏洞

NetMod VPN is a powerful and free VPN client from NetMod. A security vulnerability exists in NetMod VPN version 5.3.1, which stems from the inclusion of a DLL injection vulnerability that allows an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application...

CVE-2019-11405

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies...

CVE-2024-47527

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting XSS vulnerability in the "Device Dependencies" feature allows authenticated users to inject arbitrary JavaScript through the device name "hostname" parameter. This vulnerability can lead to t...

SUSE-SU-2025:20071-1 Security update for sevctl

This update for sevctl fixes the following issues: Security issue fixed: - CVE-2023-50711: Fixed out of bounds memory accesses in a vendored dependency bsc1218502 Non-security issue fixed: - Update vendored dependencies and re-enable cargo update obs service bsc1229953...

Security update for sevctl

This update for sevctl fixes the following issues: Security issue fixed: CVE-2023-50711: Fixed out of bounds memory accesses in a vendored dependency bsc1218502 Non-security issue fixed: Update vendored dependencies and re-enable cargo update obs service bsc1229953 Patch Instructions: To install...

Malicious code in check-release-dependencies (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9bdeafded5c255c77e197893504e55d7f76cbc76632b83f3b04925c6c6aa970 Any computer that has this package installed or running should be considered...

SUSE SLES15 Security Update : podman (SUSE-SU-2025:0267-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0267-1 advisory. - CVE-2024-9676: github.com/containers/storage: Fixed symlink traversal vulnerability in the containers/storage library can cause...

CVE-2025-23089

Rejected reason: This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment for vulnerabilities...

Exploit for Code Injection in Geosolutionsgroup Jai-Ext

Uso del script CVE-2022-24816 Requisitos previos 1. Clo...

Exploit for CVE-2024-40094

CVE-2024-40094 ENF ExecutableNormalizedFields Denial of Serv...

Malicious code in semantic-release-dependencies (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 020b67d41edb23a8a7196b14ec40945dec7f238d55b82c0d7d1643568086e220 Any computer that has this package install...