2200 matches found
CVE-2025-38566 affecting package kernel for versions less than 6.6.104.2-1
CVE-2025-38566 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-11149
This affects all versions of the package node-static; all versions of the package @nubosoftware/node-static. The package fails to catch an exception when user input includes null bytes. This allows attackers to access http://host/%00 and crash the server...
USN-7768-1: dpkg vulnerability
It was discovered that dpkg incorrectly handled removing certain temporary directories. An attacker could possibly use this issue to consume disk space, leading to a denial of service...
CVE-2025-59475 vulnerabilities
Vulnerabilities for packages: jenkins...
Incorrect Permission Assignment for Critical Resource
Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to using os.MkdirAll function which does not perform any permission checks when a given directory path already exists. An attacker can gain unauthorized access or modify files by...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Fedora 41 : maturin (2025-d0fde656f0)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d0fde656f0 advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security...
Linux Distros Unpatched Vulnerability : CVE-2020-7739
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SS...
CVE-2025-59046 interactive-git-checkout has Command Injection vulnerability
The npm package interactive-git-checkout is an interactive command-line tool that allows users to checkout a git branch while it prompts for the branch name on the command-line. It is available as an npm package and can be installed via npm install -g interactive-git-checkout. Versions up to and...
Malicious code in @zalastax/nolb-_hv (npm)
The package @zalastax/nolb-hv was found to contain malicious code...
Malicious code in qimen-dunjia-yindunpian (npm)
The package qimen-dunjia-yindunpian was found to contain malicious code...
MAL-2025-43636 Malicious code in blossom_svvqv_st5gi_fireworks (npm)
The package blossomsvvqvst5gifireworks was found to contain malicious code...
MAL-2025-45943 Malicious code in sagitta-gemini-nashira-thuban (npm)
The package sagitta-gemini-nashira-thuban was found to contain malicious code...
MAL-2025-42753 Malicious code in @teamteanpm2024/debitis-molestias-accusantium (npm)
The package @teamteanpm2024/debitis-molestias-accusantium was found to contain malicious code...
Malicious code in cli-public-proxima-oberon (npm)
The package cli-public-proxima-oberon was found to contain malicious code...
MAL-2025-42573 Malicious code in @hishpr/voluptatem-et-vitae (npm)
The package @hishpr/voluptatem-et-vitae was found to contain malicious code...
