1533 matches found
CVE-2025-22866 vulnerabilities
Vulnerabilities for packages: kubernetes-dashboard-auth-fips, aws-flb-kinesis-fips, kube-state-metrics, nerdctl, nodetaint, crossplane-provider-azure-authorization, kubevela, trillian-fips, hugo-fips, newrelic-prometheus-configurator, git-sync-fips, sftpgo-plugin-auth, kaniko-fips,...
OPENSUSE-SU-2025:14741-1 ruby3.4-rubygem-http-cookie-1.0.8-1.1 on GA media
These are all security issues fixed in the ruby3.4-rubygem-http-cookie-1.0.8-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2020-5259
In affected versions of dojox NPM package, the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2025-1077)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2025:14727-1 firefox-esr-128.7.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.7.0-1.1 package on the GA media of openSUSE Tumbleweed...
MAL-2025-1224 Malicious code in moonpay-widget (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f54359edaa7e13a4f8202996b5622e409f348903724d1243f86b503193bb17c Any computer that has this package installed or running should be considered...
MAL-2025-1202 Malicious code in @devstack-angular/jdai (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac06a10b7b09cb556a876d7b76ede19361cf8c7fb2b92fe70daf3f55cc180dd2 Any computer that has this package installed or running should be considered...
Malicious code in baileys-dgxeon (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1095 Malicious code in cschokidar-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63b18ad7ad67180b5b30bfcc6fbd86867deceb52cc2496442410bbd40f278241 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Debian: Security Advisory (DLA-4032-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-56728 affecting package kernel for versions less than 6.6.64.2-1
CVE-2024-56728 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...
MAL-2025-283 Malicious code in calypso-eslint-overrides (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e56d5029c9f673038593248e7a19047892f45f4344d5a98af273acf9d2a358 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OPENSUSE-SU-2025:14670-1 ruby3.4-rubygem-actionmailer-8.0-8.0.1-1.1 on GA media
These are all security issues fixed in the ruby3.4-rubygem-actionmailer-8.0-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed...
MAL-2025-245 Malicious code in sparo-output-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 815ab9da2f5926d787c29ea7fe61f713ec6679c627ef6602931de859c7cc24ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in just-test-framework (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ab2d45d38003a542b3db3afaf891f8269c46e7ac1c342c06148f8859a03bc00e Importing the module exfiltrates basic information using DNS queries. There is no other purpose of the package. --- Category: PROBABLYPENTEST - Packages lookin...
Fedora: Security Advisory (FEDORA-2025-52ea512fe5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: Red Hat Security Advisory: dpdk security update
An update for dpdk is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
OPENSUSE-SU-2025:14617-1 rizin-0.7.4-1.1 on GA media
These are all security issues fixed in the rizin-0.7.4-1.1 package on the GA media of openSUSE Tumbleweed...
