EUVD-2025-150394

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent...

Linux Distros Unpatched Vulnerability : CVE-2025-40192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Revert ipmi: fix msg stack when IPMI is disconnected This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause th...

Linux Distros Unpatched Vulnerability : CVE-2025-40180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Star...

Siemens SIMATIC S7-1500 Uncontrolled Resource Consumption (CVE-2021-3737)

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability...

Siemens SIMATIC S7-1500 Loop with Unreachable Exit Condition (CVE-2024-57884)

mm: vmscan: account for free pages to prevent infinite Loop in throttledirectreclaim The task sometimes continues looping in throttledirectreclaim because allowdirectreclaimpgdat keeps returning false. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-o...

Siemens SIMATIC S7-1500 Loop with Unreachable Exit Condition (CVE-2019-20907)

In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because procpax lacks header validation. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens RUGGEDCOM ROX, SIMATIC S7-1500 Uncontrolled Resource Consumption (CVE-2022-27781)

libcurl provides the CURLOPTCERTINFO option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation. Th...

Siemens SIMATIC S7-1500 Loop with Unreachable Exit Condition (CVE-2020-7595)

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

Siemens SIMATIC S7-1500 Loop with Unreachable Exit Condition (CVE-2021-33294)

In elfutils 0.183, an infinite loop was found in the function handlesymtab in readelf.c .Which allows attackers to cause a denial of service infinite loop via crafted file. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SIMATIC S7-1500 Loop with Unreachable Exit Condition (CVE-2020-36227)

A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancelextop Cancel operation, resulting in denial of service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

Malicious code in avarag-obis-balla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ca5e68d08e38f9c84f83a266c521da6dc29225653a963c19c8c1d60b111da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-ijimaumfagagf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f423f1b5629b24664a0613885155cf0711993fb294eb83a1f740ec6cbbeb34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojakiavugim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5234a4f70088802541d2712233078e3f8e610d790f1d4cad5ff036cead5e57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185025 Malicious code in sonic-kos-fgaigiafao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a43885dfcedeb12fa4a63d6dbc5d33cfd24731a5a56462570131a12cf2d0979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184706 Malicious code in oloc-uyg-ugoofifadihi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f2af55c20ab57f579fd7b6d86333d2c5fe4ebb21e8532703c752cadc6b8d65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184680 Malicious code in olobc-uyg-ugiafaidabiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a61d1808bad4fb04d61e9b70fedff6a0ad419a66c8cdfd994d31603d309a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e3d1e42a8eb4465ea10961d1ed932987bed81cebbc6e13a1d3d18fe3952651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-danoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fef1fd504755cc54dd947e0e692c717fcf43158cf3a9d18b2f34ea49d784c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baiucaufaifuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2d085b354a8666bdc1ec38049622e580c50a4eb73f1ddd4cd4191b83ddebc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagiufagugafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a537d26a3f1602b0d32cd0629586d1858929097fd1dd03ca591b48867e6125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...