Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2025-1077)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:14727-1 firefox-esr-128.7.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-1224 Malicious code in moonpay-widget (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f54359edaa7e13a4f8202996b5622e409f348903724d1243f86b503193bb17c Any computer that has this package installed or running should be considered...

MAL-2025-1202 Malicious code in @devstack-angular/jdai (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac06a10b7b09cb556a876d7b76ede19361cf8c7fb2b92fe70daf3f55cc180dd2 Any computer that has this package installed or running should be considered...

Malicious code in baileys-dgxeon (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1095 Malicious code in cschokidar-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63b18ad7ad67180b5b30bfcc6fbd86867deceb52cc2496442410bbd40f278241 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

acedeploy (>=2.4.15 <=2.4.115), arreyy (=0.0.1) +87 more potentially affected by CVE-2025-24794 via snowflake-connector-python (>=2.7.12 <=3.13.0)

snowflake-connector-python PYPI version =2.7.12, =2.4.15, =0.4.0, =0.1.3, =0.1.0, =1.13.21, =20230717.1.0, =0.4.0, =1.0.8, =1.0.5, =0.3.1, =1.1.4 - datacontract-cli =0.10.4 - dataligo =0.7.3 and more Source cves: CVE-2025-24794 Source advisory: OSV:PYSEC-2025-27...

Debian: Security Advisory (DLA-4032-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-56728 affecting package kernel for versions less than 6.6.64.2-1

CVE-2024-56728 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...

MAL-2025-283 Malicious code in calypso-eslint-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e56d5029c9f673038593248e7a19047892f45f4344d5a98af273acf9d2a358 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OPENSUSE-SU-2025:14670-1 ruby3.4-rubygem-actionmailer-8.0-8.0.1-1.1 on GA media

These are all security issues fixed in the ruby3.4-rubygem-actionmailer-8.0-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-245 Malicious code in sparo-output-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 815ab9da2f5926d787c29ea7fe61f713ec6679c627ef6602931de859c7cc24ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in just-test-framework (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ab2d45d38003a542b3db3afaf891f8269c46e7ac1c342c06148f8859a03bc00e Importing the module exfiltrates basic information using DNS queries. There is no other purpose of the package. --- Category: PROBABLYPENTEST - Packages lookin...

Fedora: Security Advisory (FEDORA-2025-52ea512fe5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: dpdk security update

An update for dpdk is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

OPENSUSE-SU-2025:14617-1 rizin-0.7.4-1.1 on GA media

These are all security issues fixed in the rizin-0.7.4-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2002-20002

The Net::EasyTCP package before 0.15 for Perl always uses Perl's builtin rand, which is not a strong random number generator, for cryptographic keys...

OPENSUSE-SU-2025:14612-1 sops-3.9.3-1.1 on GA media

These are all security issues fixed in the sops-3.9.3-1.1 package on the GA media of openSUSE Tumbleweed...

Mageia: Security Advisory (MGASA-2024-0397)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-12086 Malicious code in dynamodb-data-mapper-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93e1601651b9c7ac38203563ebdc9231ff5ac6298c9dee85fb2eeae24acdce30 The OpenSSF Package Analysis project identified 'dynamodb-data-mapper-js' @ 7.0.0 npm as malicious. It is considered malicious because: - The...