MAL-2025-2542 Malicious code in tag-soup-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c6f3d943d58e767428be21a9044b8969fbf56027da115be523bd13e0af23d36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

stress-ng bug fix and enhancement update

An update is available for stress-ng. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9....

Huawei EulerOS: Security Advisory for iptraf-ng (EulerOS-SA-2025-1266)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for iptraf-ng (EulerOS-SA-2025-1237)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for iptraf-ng (EulerOS-SA-2025-1252)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for iptraf-ng (EulerOS-SA-2025-1265)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2024-52949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible ...

Linux Distros Unpatched Vulnerability : CVE-2023-49991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function CountVowelPosition at synthdata.c. CVE-2023-49991 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2023-49993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Espeak-ng 1.52-dev was discovered to contain a Buffer Overflow via the function ReadClause at readclause.c. CVE-2023-49993 Note that Nessus relies on the presen...

Linux Distros Unpatched Vulnerability : CVE-2020-36619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function addch of the file demodflex.c. The manipulation of the...

Linux Distros Unpatched Vulnerability : CVE-2023-49992

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Overflow via the function RemoveEnding at dictionary.c. CVE-2023-49992 Note that Nessus relies on th...

Linux Distros Unpatched Vulnerability : CVE-2023-49990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Espeak-ng 1.52-dev was discovered to contain a buffer-overflow via the function SetUpPhonemeTable at synthdata.c. CVE-2023-49990 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2018-1126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc. leading to truncation/integer overflow issues. This flaw is related to...

Linux Distros Unpatched Vulnerability : CVE-2018-1121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - procps-ng, procps is vulnerable to a process hiding through race condition. Since the kernel's procpidreaddir returns PID entries in ascending numeric order, a...

Linux Distros Unpatched Vulnerability : CVE-2018-1125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat to a...

Linux Distros Unpatched Vulnerability : CVE-2018-1123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of th...

Linux Distros Unpatched Vulnerability : CVE-2018-1122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, th...

Linux Distros Unpatched Vulnerability : CVE-2018-1124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege...

@mythpe/js-helpers (>=4.0.45, <=4.0.99), @ng-zi/extensions (>=18.0.20, <=18.0.24) +4 more potentially affected by CVE-2025-25299 via ckeditor5-premium-features (>=42.0.2, <=43.3.1)

ckeditor5-premium-features NPM version =42.0.2, =4.0.45, =18.0.20, =0.0.8, =1.0.8, =1.0.10 - htmljs-code 44.0.30 - markdownvue3demo 0.0.1 Source cves: CVE-2025-25299 Source advisory: OSV:GHSA-J3MM-WMFM-MWVH...

PT-2025-25816

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the handling of GPU clock frequency changes in the sunxi-ng h616 driver. The H616 manual does not support dynamic...