Huawei EulerOS: Security Advisory for openjpeg2 (EulerOS-SA-2025-1302)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2025-2531 Malicious code in tasks_mangement (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5af70a269afd5435306a85b902070f929d511d8855e369cc7c930a9dc50be50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OPENSUSE-SU-2025:14898-1 nethack-3.4.3-6.1 on GA media

These are all security issues fixed in the nethack-3.4.3-6.1 package on the GA media of openSUSE Tumbleweed...

RHEL 8 : python-jinja2 (RHSA-2025:2612)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:2612 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

OPENSUSE-SU-2025:14897-1 tomcat10-10.1.35-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.35-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-57996 affecting package kernel for versions less than 6.6.78.1-3

CVE-2024-57996 affecting package kernel for versions less than 6.6.78.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2024-56651 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-56651 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-57916 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-57916 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

Fedora 40 : xorg-x11-server-Xwayland (2025-4a832bf2b1)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4a832bf2b1 advisory. xwayland 24.1.6 CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600,...

GHSA-G5QP-3JX2-P69R vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...

OPENSUSE-SU-2025:14867-1 amazon-ssm-agent-3.3.1957.0-2.1 on GA media

These are all security issues fixed in the amazon-ssm-agent-3.3.1957.0-2.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2024-56637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ipset: Hold module reference while requesting a module User space may unload ipset.ko while it is itself requesting a set type backend module, leadin...

Linux Distros Unpatched Vulnerability : CVE-2024-49870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cachefiles: fix dentry leak in cachefilesopenfile A dentry leak may be caused when a lookup cookie and a cull are concurrent: P1 | P2...

Linux Distros Unpatched Vulnerability : CVE-2024-53106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in imaeventdigestinitcommon Function imaeventdigestinit calls...

Linux Distros Unpatched Vulnerability : CVE-2025-0167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When asked to use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under...

Linux Distros Unpatched Vulnerability : CVE-2024-49967

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ext4: no need to continue when the number of entries is 1 CVE-2024-49967 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2024-6996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race in Frames in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing v...

Linux Distros Unpatched Vulnerability : CVE-2024-53198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen: Fix the issue of resource not being properly released in xenbusdevprobe This patch fixes an issue in the function xenbusdevprobe. In the xenbusdevprobe...

Linux Distros Unpatched Vulnerability : CVE-2024-50135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-pci: fix race condition between reset and nvmedevdisable nvmedevdisable modifies the dev-onlinequeues field, therefore nvmepciupdatenrqueues should avoid...

MAL-2025-2175 Malicious code in hookform-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c03aa7176706f7dee9f4c1c8f7c4d645d4345a2a47865b7924eea6e8b47a8101 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...