BIT-NGINX-GATEWAY-2021-23017

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...

Login Time Restriction - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2025-120

This module enables you to apply time-based login restrictions and display related warning or logout confirmation pages. The module doesn't sufficiently protect its confirmation routes from cross-site request forgery CSRF, allowing the logout confirmation route to be triggered without user...

CVE-2025-58482

creationtimestamp| type| source ---|---|--- 2025-12-02 02:34:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6xvsezlji2k 2025-12-02 10:02:58+00:00| seen| https://infosec.exchange/users/offseq/statuses/115649398506324144 2025-12-02 10:03:00+00:00| seen|...

EUVD-2025-200067

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

EUVD-2025-200066

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Malicious code in b3dtiles-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a50df9fdb7a7ea0dde9e5c57dda3432003506f075be4569fcd745f1e927ddfc The package b3dtiles-sample was found to contain malicious code...

Malicious code in dataset-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f4e8552a727b5aac457a7d16a99d4e0b3a99342044aee673aba036abbcd9e0 The package dataset-view was found to contain malicious code...

CVE-2025-66384

app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded file validity, related to tmpname...

Malicious code in ctf2libxmljs2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de69afa73f1f4886ac05efb1fce080314b4a0bc5f0a122bb50e7bd03f945db9b The package ctf2libxmljs2 was found to contain malicious code...

Malicious code in aps-simple-viewer-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a3d18d7c64f1636f4922e13d1cc9768c1516be07e755001ed729faff0a63c29 The package aps-simple-viewer-nodejs was found to contain malicious code...

Malicious code in @gr-exports/body (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ec75ab55ea86ba356e8f21309eb966c00366a526e9737edd15248594209f89 The package @gr-exports/body was found to contain malicious code...

Malicious code in imad213insta (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in coinbase.net.api (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Moderate: Red Hat Security Advisory: xorg-x11-server security update

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

PT-2025-48644

CVE-2025-65793 - Apache Non-Vulnerability CVE ID : CVE-2025-65793 Published : Dec. 1, 2025, 5:15 p.m. | 17 minutes ago Description : Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security...

PT-2025-48645

CVE-2025-65794 - Apache None CVE ID : CVE-2025-65794 Published : Dec. 1, 2025, 5:15 p.m. | 17 minutes ago Description : Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes...

CVE-2025-64311

Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

RLSA-2023:6938 Moderate: container-tools:4.0 security and bug fix update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents CVE-2022-3064 golang: html/template: improper handling of JavaScri...

Fedora: Security Advisory (FEDORA-2025-1b1bb708af)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-30806907c2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...