MAL-2025-2783 Malicious code in riskchallengeserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da27f27f9efcf0b2d496e909e97771157cccea447420e5fb908ed4e912fcce6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-22870 affecting package vitess for versions less than 17.0.7-7

CVE-2025-22870 affecting package vitess for versions less than 17.0.7-7. A patched version of the package is available...

CVE-2025-27144 affecting package ig for versions less than 0.37.0-2

CVE-2025-27144 affecting package ig for versions less than 0.37.0-2. A patched version of the package is available...

Ubuntu: Security Advisory (USN-7373-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-8176 affecting package expat for versions less than 2.6.4-1

CVE-2024-8176 affecting package expat for versions less than 2.6.4-1. A patched version of the package is available...

MAL-2025-2706 Malicious code in sf-intl-sn-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb4cc33212e001bc0af0440f49eb0c52cdc0ad223eba555c5cb2afaa9931e5c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-VM77-MR48-27WJ nossrf Server-Side Request Forgery (SSRF)

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery SSRF, where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism...

Photon OS 5.0: Kubernetes PHSA-2025-5.0-0487

An update of the kubernetes package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0487. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Mageia: Security Advisory (MGASA-2025-0107)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-53257 affecting package vitess for versions less than 17.0.7-6

CVE-2024-53257 affecting package vitess for versions less than 17.0.7-6. A patched version of the package is available...

CVE-2024-25580 affecting package qt5-qtbase for versions less than 5.12.11-15

CVE-2024-25580 affecting package qt5-qtbase for versions less than 5.12.11-15. A patched version of the package is available...

CVE-2022-3162 affecting package kube-vip-cloud-provider for versions less than 0.0.2-21

CVE-2022-3162 affecting package kube-vip-cloud-provider for versions less than 0.0.2-21. A patched version of the package is available...

CVE-2023-29932 affecting package llvm for versions less than 12.0.1-8

CVE-2023-29932 affecting package llvm for versions less than 12.0.1-8. A patched version of the package is available...

CVE-2024-29195 affecting package azure-iot-sdk-c for versions less than 2022.01.21-4

CVE-2024-29195 affecting package azure-iot-sdk-c for versions less than 2022.01.21-4. A patched version of the package is available...

CVE-2024-56761 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-56761 affecting package kernel for versions less than 6.6.76.1-1. A patched version of the package is available...

CVE-2024-50304 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-50304 affecting package kernel for versions less than 6.6.76.1-1. A patched version of the package is available...

CVE-2024-43911 affecting package kernel for versions less than 6.6.64.2-9

CVE-2024-43911 affecting package kernel for versions less than 6.6.64.2-9. A patched version of the package is available...

CVE-2024-53142 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-53142 affecting package kernel for versions less than 5.15.176.3-1. A patched version of the package is available...

CVE-2024-46854 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-46854 affecting package kernel for versions less than 5.15.176.3-1. A patched version of the package is available...

CVE-2024-28607

The ip-utils package through 2.4.0 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via a falsy isPrivate return value...