Linux Distros Unpatched Vulnerability : CVE-2021-20307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values...

Linux Distros Unpatched Vulnerability : CVE-2022-34502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consumeencodednamenew at format/wasm/wasm.c. This vulnerability allows attacker...

Linux Distros Unpatched Vulnerability : CVE-2022-1664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal...

Linux Distros Unpatched Vulnerability : CVE-2020-36403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTSlib through 1.10.2 allows out-of-bounds write access in vcfparseformat called from vcfparse and vcfread. CVE-2020-36403 Note that Nessus relies on the presen...

Linux Distros Unpatched Vulnerability : CVE-2022-3819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper authorization issue in GitLab CE/EE affecting all versions from 15.0 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a...

CGA-V9J4-97RJ-3R4X

Bulletin has no description...

CVE-2025-14553

creationtimestamp| type| source ---|---|--- 2025-08-29 21:16:45+00:00| seen| https://gist.github.com/Darkcrai86/4927207aa0e4ad68563e7bbeed90ec22 2026-01-09 02:01:06+00:00| published-proof-of-concept| Telegram/9r3a4T582Uj-d8cAzOCMsayyXRdqw-Vs2IIS-Y7LNVntDY 2026-01-09 02:01:16+00:00| seen|...

CVE-2024-13984

creationtimestamp| type| source ---|---|--- 2025-08-29 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxf7jybe2p 2025-11-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-11-24 2026-06-23 14:03:57+00:00| exploited|...

DoS Vulnerability in ntpd-rs

Summary A denial of service vulnerability was discovered in ntpd-rs where an attacker can induce a message storm between two NTP servers running ntpd-rs. Details Since ntpd-rs version 1.2.0, when configured as a server, incorrectly responded to all NTP messages sent to the server's port with a ti...

CVE-2025-9670 mixmark-io turndown commonmark-rules.js redos

A security flaw has been discovered in mixmark-io turndown up to 7.2.1. This affects an unknown function of the file src/commonmark-rules.js. Performing manipulation results in inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has been released...

MAL-2025-41959 Malicious code in cookies-logger (npm)

The package cookies-logger was found to contain malicious code...

Security Bulletin: IBM Data Product Hub is affected by several vulnerabilities

Summary IBM Data Product Hub has dependencies on IBM Semeru, IBM WebSphere Application Server Liberty, Requests Python HTTP library, and Node.js Dompurify, Brace-expansion, Xmldom, Undici, and Form-data runtime modules, which are vulnerable. This bulletin contains information regarding the...

CVE-2025-44015

CVE-2025-44015 affects HybridDesk Station. The vulnerability is described as a command injection that can be exploited when an attacker has local network access to execute arbitrary commands. The available documents confirm the affected product and the underlying issue as command injection, with ...

CVE-2025-33033

CVE-2025-33033 affects QNAP Qsync Central. A path traversal vulnerability allows a remote attacker who has a user account to read unexpected files or system data. The issue is fixed in Qsync Central 4.5.0.7 and later (patch released around 2025-04-23). Affected versions prior to 4.5.0.7 should be...

CVE-2025-30273 QTS, QuTS hero

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following versions: QTS 5.2.5.314...

CVE-2025-30265

CVE-2025-30265 describes a buffer overflow in QNAP QTS and QuTS hero. The vulnerability arises from an application boundary error when handling untrusted input, permitting a remote attacker who has a user account to modify memory or crash processes. Affected products include QTS and QuTS hero; fi...

CGA-VR55-2G25-R3J2

Bulletin has no description...

CGA-286W-X6R9-WG7Q

Bulletin has no description...

GHSA-4X4M-3C2P-QPPC vulnerabilities

Vulnerabilities for packages: cephcsi-fips, kubernetes-csi-driver-nfs-fips, cluster-autoscaler, mesosphere-vsphere-csi, node-feature-discovery-fips, vcluster, kapp, yunikorn-k8shim, argocd-image-updater-fips, eks-distro-fips, aws-efs-csi-driver-fips, kubernetes, kubernetes-csi-driver-nfs,...

GHSA-JC7W-C686-C4V9 vulnerabilities

Vulnerabilities for packages: drone-fips, syft-fips, mattermost, steampipe, drone, envoy-gateway-fips, k9s-fips, rancher-fleet, undock, vcluster, cg, trivy-operator-fips, grafana-alloy, prometheus-podman-exporter, zot, cloudbeat-fips, podman, envoy-gateway, guac, trufflehog, tflint, gitness,...