196241 matches found
Updated ceph packages fix security vulnerability
RGW DoS attack with empty HTTP header in S3 object copy. CVE-2024-47866...
27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials
Cybersecurity researchers have disclosed details of what has been described as a "sustained and targeted" spear-phishing campaign that has published over two dozen packages to the npm registry to facilitate credential theft. The activity, which involved uploading 27 npm packages from six differen...
Moderate Photon OS Security Update - PHSA-2025-4.0-0934
Updates of 'vim' packages of Photon OS have been released...
mariadb:10.3 security, bug fix, and enhancement update
An update is available for module.mariadb, galera, Judy, module.galera, mariadb, module.Judy. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MariaDB is a...
3loc (>=0.1.0, <=0.4.0), 3scale (>=0.2.0, <=0.6.2) +651 more potentially affected by CVE-2025-25341 via libxmljs (>=0.4.1, <=1.0.11)
libxmljs NPM version =0.4.1, =0.1.0, =0.2.0, =0.3.2, =0.0.1, =4.0.1, =1.10.4, =1.8.1, =1.5.8, =1.5.1, =1.8.3, =1.0.1, =1.0.0, =4.5.1 and more Source cves: CVE-2025-25341 Source advisory: SNYK:JS-LIBXMLJS-14723210...
Fedora: Security Advisory (FEDORA-2025-f7c75ffee2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux Distros Unpatched Vulnerability : CVE-2023-54021
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: set goal start correctly in ext4mbnormalizerequest We need to set acgex to notify the goal start used in ext4mbfindbygoal. Set acgex instead of acfex in...
Linux Distros Unpatched Vulnerability : CVE-2023-54119
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inotify: Avoid reporting event with invalid wd When inotifyfreeingmark races with inotifyhandleinodeevent it can happen that inotifyhandleinodeevent sees that...
Linux Distros Unpatched Vulnerability : CVE-2023-54100
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qedi: Fix use after free bug in qediremove In qediprobe we call qediprobe which initializes &qedi-recoverywork with qedirecoveryhandler and...
GHSA-M9GH-789G-Q5PV vulnerabilities
Vulnerabilities for packages: conductor-fips, camunda, conductor, commercial-elasticsearch, elasticsearch-fips, ranger, camunda-zeebe, sonarqube, ruby4.0-elasticsearch...
Important Photon OS Security Update - PHSA-2025-5.0-0720
Updates of 'linux' packages of Photon OS have been released...
Linux Distros Unpatched Vulnerability : CVE-2025-14422
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...
Linux Distros Unpatched Vulnerability : CVE-2023-54013
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - interconnect: Fix locking for runpm vs reclaim For cases where iccbwset can be called in callbaths that could deadlock against shrinker/reclaim, such as runpm...
Important Photon OS Security Update - PHSA-2025-5.0-91-0720
Updates of 'linux' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2025-5.0-91-0719
Updates of 'linux' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2025-5.0-0719
Updates of 'linux' packages of Photon OS have been released...
Linux Distros Unpatched Vulnerability : CVE-2025-68372
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nbd: defer config put in recvwork There is one uaf issue in recvwork when running NBDCLEARSOCK and NBDCMDRECONFIGURE: nbdgenlconnect // confref=2 connect and...
@aafe/ai-test (>=0.0.1, <=0.0.2), @acabai/android (>=1.0.0, <=2.0.6) +861 more potentially affected by CVE-2025-68665 via @langchain/core (>=0.0.0, <=0.3.79)
@langchain/core NPM version =0.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.5, =0.1.0, =0.1.2, =0.0.1, =1.2.27, =0.1.7, =3.0.0-beta.65.0, =8.0.0, =11.0.0 and more Source cves: CVE-2025-68665 Source advisory: OSV:GHSA-R399-636X-V7F6...
10minions-engine (>=0.0.1, <=0.0.4), @0xd541ecb3/byte-babe (>=1.0.0, <=1.2.1) +821 more potentially affected by CVE-2025-68665 via langchain (>=0.0.11, <=0.3.35)
langchain NPM version =0.0.11, =0.0.1, =1.0.0, =0.0.1, =0.1.4, =3.0.0-beta.65.0, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.5-alpha.2, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.6 and more Source cves: CVE-2025-68665 Source advisory:...