193428 matches found
Amazon Linux 2023 : nodejs22, nodejs22-devel, nodejs22-full-i18n (ALAS2023-2025-1347)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1347 advisory. Use after free due to connection being cleaned up after error CVE-2025-62408 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus h...
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2026-1015)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malicious Package
Overview rt-live-hero is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview rt-long-form-content is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2025-69263
pnpm is a package manager. Versions 10.26.2 and below store HTTP tarball dependencies and git-hosted tarballs in the lockfile without integrity hashes. This allows the remote server to serve different content on each install, even when a lockfile is committed. An attacker who publishes a package...
adopt-a-doodle (>=0.0.1, <=0.0.3), bark-simulator (>=0.0.1, <=0.1.0) +109 more potentially affected by CVE-2026-22188 via panda3d (>=1.10.7, <=1.10.16)
panda3d PYPI version =1.10.7, =0.0.1, =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.1.1, =0.0.3, =0.1.0, =1.0.0, =21.2.0, =22.4.0, =20.12.0, =1.0.0, =0.0.1, =0.0.5 and more Source cves: CVE-2026-22188 Source advisory: SNYK:PYTHON-PANDA3D-14931134...
CVE-2019-12875
Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key...
RLSA-2021:1968 Moderate: mingw packages security and bug fix update
MinGW is a free and open source software development environment to create Microsoft Windows applications. The following packages have been upgraded to a later upstream version: mingw-sqlite 3.26.0.0. BZ1845475 Security Fixes: sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c...
mingw packages security and bug fix update
An update is available for mingw-binutils, mingw-bzip2, mingw-sqlite. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MinGW is a free and open source software...
Malicious Package
Overview wifzap is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
CVE-2023-32192 vulnerabilities
Vulnerabilities for packages: rancher...
GHSA-X9HG-5Q6G-Q3JR vulnerabilities
Vulnerabilities for packages: ollama, k8sgpt, mods...
CVE-2025-25279 vulnerabilities
Vulnerabilities for packages: mattermost...
CVE-2024-55885 vulnerabilities
Vulnerabilities for packages: harbor...
GHSA-VP64-6MXR-66QC vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-2VQ7-8VVF-W66V vulnerabilities
Vulnerabilities for packages: exim...
GHSA-83Q8-2HC2-HGQR vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2025-48985 vulnerabilities
Vulnerabilities for packages: kibana...