Linux Distros Unpatched Vulnerability : CVE-2017-9196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a negative-size-param issue in the ReadImage function in input- tga.c:528:7. CVE-2017-9196 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2012-0037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redland Raptor aka libraptor before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows...

Linux Distros Unpatched Vulnerability : CVE-2019-14235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri...

Linux Distros Unpatched Vulnerability : CVE-2018-17082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a Transfer-Encoding:...

Linux Distros Unpatched Vulnerability : CVE-2016-10196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the evutilparsesockaddrport function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2013-1619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel attacks on a...

GHSA-769V-P64C-89PR PyTorch Model Files Can Bypass Pickle Scanners via Unexpected Pickle Extensions

CVE-2025-1889 Summary Picklescan fails to detect hidden pickle files embedded in PyTorch model archives due to its reliance on file extensions for detection. This allows an attacker to embed a secondary, malicious pickle file with a non-standard extension inside a model archive, which remains...

CVE-2025-25185

creationtimestamp| type| source ---|---|--- 2025-03-03 18:44:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7i2vin2a...

MAL-2025-2014 Malicious code in configs-web-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e2873a2ee1e0748ca75f7e661e6961df7a4522dae8e7e658c47cfbab20eff7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-21967

creationtimestamp| type| source ---|---|--- 2025-03-03 15:40:30+00:00| seen| https://gist.github.com/juank704/8c144f4ae0004f19892c23b19deca658...

CVE-2025-27270

Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Privilege Escalation.This issue affects Residential Address Detection: from n/a through = 2.5.4...

CVE-2025-27270

CVE-2025-27270 : Missing Authorization in the WordPress plugin “Residential Address Detection” allows unauthenticated arbitrary options updates, enabling privilege escalation. Affected: Residential Address Detection plugin for WordPress (versions

CVE-2025-27270 WordPress Residential Address Detection Plugin <= 2.5.4 - Arbitrary Option Update to Privilege Escalation vulnerability

Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Privilege Escalation.This issue affects Residential Address Detection: from n/a through = 2.5.4...

CVE-2025-27268 WordPress Small Package Quotes – Worldwide Express Edition Plugin <= 5.2.18 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows SQL Injection.This issue affects Small Package Quotes – Worldwide Express Edition: from n/...

MAL-2025-1862 Malicious code in instacart-service (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1759 Malicious code in cito_frontend (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1751 Malicious code in calypso-products (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1720 Malicious code in amazon-sync (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1674 Malicious code in grafana-metricsdrilldown-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76f0bf52430819b26f7b4042daedcdd27b0b6dcc7278385dac6989be16b987de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2028 Malicious code in @tim0310/fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 622f4e3ebf1f361078beffb0b92380f7658703123c9f9e0f86a053e8cf6c4dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...