606741 matches found
Malicious code in modern-localization (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be23667d11e7ef3357641973b9188175c2068bd2b580a5628773bcdf03533a5 On server-side require of modern-localization, the package's main entry runs a top-level async IIFE syncLanguageSystem that performs an HTTP GET...
Malicious code in @rbx-ts/services (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9476bbe7c2ce12348142e93deffe53c9d4d6dfef3400030af81cff902bac5935 This package impersonates the @rbxts/services Roblox typings library and re-exports its public API in index.js as cover. Its postinstall script...
Malicious code in map-streak-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80727943437a7e22116b369c010fc965c4854a0c58a053504c4bc55555e90dd4 On import, dist/index.mjs chmods 0755 and spawns the bundled Linux x8664 binary dist/internal/calc-math.dat as a detached background process. The...
Fedora 43 : erlang (2026-4220305a93)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4220305a93 advisory. CVE-2026-55953 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...
Fedora 44 : erlang (2026-7a3db128e8)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7a3db128e8 advisory. CVE-2026-55953 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...
Linux Distros Unpatched Vulnerability : CVE-2026-71870
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function...
Photon OS 5.0: Perl PHSA-2026-5.0-92-0946
An update of the perl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0946. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
GHSA-HQ66-CQWQ-W95J vulnerabilities
Vulnerabilities for packages: librechat...
CVE-2026-50159 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
GHSA-2V8P-3F2J-5MP7 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
GHSA-C4C3-PG64-4M4V vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
GHSA-RHH3-JPG6-66XH vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
GHSA-3RRR-JR9J-H3Q3 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
GHSA-6X64-9X62-F2GX vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
CVE-2026-71438 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
CVE-2026-71437 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
GHSA-W737-WX49-QJ23 vulnerabilities
Vulnerabilities for packages: dependency-track, infinispan, apicurio-registry, zipkin...
GHSA-G3PR-3P32-FP23 vulnerabilities
Vulnerabilities for packages: dependency-track, infinispan, apicurio-registry, zipkin...
EUVD-2025-27054
Frappe is a full-stack web application framework. Versions 14.96.9 and below, and 15.0.0 through 15.71.0 have an insecure endpoint parameter that is vulnerable to error-based SQL Injection through lack of validation. Sensitive information such as versioning can be retrieved. This issue is fixed i...