openSUSE Security Advisory (SUSE-SU-2024:0063-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:2568-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (openSUSE-SU-2024:0226-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-29499 affecting package glib for versions less than 2.71.0-4

CVE-2023-29499 affecting package glib for versions less than 2.71.0-4. A patched version of the package is available...

Debian: Security Advisory (DSA-5869-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2025-1517 Malicious code in quickwit-ui (npm)

This package runs commands on import that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac59f539efc4d8596e823182d97cdc7a461e965894dec0aabb807585cd5c92ea Any computer that has this package installed or running...

CVE-2023-45288 affecting package flannel for versions less than 0.24.2-10

CVE-2023-45288 affecting package flannel for versions less than 0.24.2-10. A patched version of the package is available...

openSUSE Security Advisory (SUSE-SU-2025:0582-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7274-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-4057-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (openSUSE-SU-2025:0039-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-6476 affecting package cri-o for versions less than 1.22.3-10

CVE-2023-6476 affecting package cri-o for versions less than 1.22.3-10. A patched version of the package is available...

CVE-2023-39742 affecting package giflib for versions less than 5.2.1-8

CVE-2023-39742 affecting package giflib for versions less than 5.2.1-8. A patched version of the package is available...

CVE-2025-1182 affecting package binutils for versions less than 2.37-12

CVE-2025-1182 affecting package binutils for versions less than 2.37-12. A patched version of the package is available...

CVE-2024-11053 affecting package curl for versions less than 8.8.0-4

CVE-2024-11053 affecting package curl for versions less than 8.8.0-4. A patched version of the package is available...

CVE-2024-52616 affecting package avahi for versions less than 0.8-4

CVE-2024-52616 affecting package avahi for versions less than 0.8-4. A patched version of the package is available...

Fedora 40 : libheif (2025-666aaa6a0d)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-666aaa6a0d advisory. Latest upstream release. It adds support for tiles and fixes reading images generated by iOS 18+. See https://github.com/strukturag/libheif/releases for more...

CVE-2024-28180 affecting package keda for versions less than 2.4.0-26

CVE-2024-28180 affecting package keda for versions less than 2.4.0-26. A patched version of the package is available...

CVE-2024-45341 affecting package golang for versions less than 1.22.7-2

CVE-2024-45341 affecting package golang for versions less than 1.22.7-2. A patched version of the package is available...

CVE-2024-57177

A host header injection vulnerability exists in the NPM package of perfood/couch-auth = 0.21.2. By sending a specially crafted host header in the email change confirmation request, it is possible to trigger a SSTI which can be leveraged to run limited commands or leak server-side information...