2196 matches found
MAL-2025-2706 Malicious code in sf-intl-sn-prod (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb4cc33212e001bc0af0440f49eb0c52cdc0ad223eba555c5cb2afaa9931e5c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-VM77-MR48-27WJ nossrf Server-Side Request Forgery (SSRF)
Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery SSRF, where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism...
Photon OS 5.0: Kubernetes PHSA-2025-5.0-0487
An update of the kubernetes package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0487. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Mageia: Security Advisory (MGASA-2025-0107)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-3162 affecting package kube-vip-cloud-provider for versions less than 0.0.2-21
CVE-2022-3162 affecting package kube-vip-cloud-provider for versions less than 0.0.2-21. A patched version of the package is available...
CVE-2024-25580 affecting package qt5-qtbase for versions less than 5.12.11-15
CVE-2024-25580 affecting package qt5-qtbase for versions less than 5.12.11-15. A patched version of the package is available...
CVE-2024-29195 affecting package azure-iot-sdk-c for versions less than 2022.01.21-4
CVE-2024-29195 affecting package azure-iot-sdk-c for versions less than 2022.01.21-4. A patched version of the package is available...
CVE-2024-53257 affecting package vitess for versions less than 17.0.7-6
CVE-2024-53257 affecting package vitess for versions less than 17.0.7-6. A patched version of the package is available...
CVE-2023-29932 affecting package llvm for versions less than 12.0.1-8
CVE-2023-29932 affecting package llvm for versions less than 12.0.1-8. A patched version of the package is available...
CVE-2024-43911 affecting package kernel for versions less than 6.6.64.2-9
CVE-2024-43911 affecting package kernel for versions less than 6.6.64.2-9. A patched version of the package is available...
CVE-2024-56761 affecting package kernel for versions less than 6.6.76.1-1
CVE-2024-56761 affecting package kernel for versions less than 6.6.76.1-1. A patched version of the package is available...
CVE-2024-50304 affecting package kernel for versions less than 6.6.76.1-1
CVE-2024-50304 affecting package kernel for versions less than 6.6.76.1-1. A patched version of the package is available...
CVE-2024-53142 affecting package kernel for versions less than 5.15.176.3-1
CVE-2024-53142 affecting package kernel for versions less than 5.15.176.3-1. A patched version of the package is available...
CVE-2024-46854 affecting package kernel for versions less than 5.15.176.3-1
CVE-2024-46854 affecting package kernel for versions less than 5.15.176.3-1. A patched version of the package is available...
CVE-2024-28607
The ip-utils package through 2.4.0 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via a falsy isPrivate return value...
MAL-2025-2410 Malicious code in request-draft-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e20e7c9b27e44bc6a2f406fc1638d5949e6a8ff79801714031432723b004872d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Fedora 40 : iniparser (2025-257f422587)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-257f422587 advisory. Patched libiniparser to fix CVE-2025-0633 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...
CVE-2024-56614 affecting package kernel for versions less than 6.6.76.1-1
CVE-2024-56614 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...