54177 matches found
Fedora: Security Advisory (FEDORA-2025-30806907c2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: Red Hat Security Advisory: tigervnc security update
An update for tigervnc is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
Moderate: Red Hat Security Advisory: libxml2 security update
An update for libxml2 is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
EUVD-2025-199466
Malicious code in @oku-ui/separator npm...
EUVD-2025-199517
Malicious code in @actbase/native npm...
EUVD-2025-199221
Malicious code in firestore-search-engine npm...
EUVD-2025-198973
Malicious code in @ensdomains/ensjs npm...
EUVD-2025-198978
Malicious code in @ensdomains/durin npm...
Malicious code in @zapier/ai-actions-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0711da4a6c6d0dbc599d757b367430a63ae51f6f4fb48b6758fb21ba718b0778 The package @zapier/ai-actions-react was found to contain malicious code. Source: google-open-source-security...
CVE-2025-65106 vulnerabilities
Vulnerabilities for packages: open-webui...
ROS-20251124-10
The Kea open source DHCP server vulnerability is related to the use of a pointer offset outside the range. Exploitation of the vulnerability could allow an attacker to escalate privileges on the system...
PT-2025-47846
Name of the Vulnerable Software and Affected Versions Campcodes Supplier Management System version 1.0 Description A security issue exists in Campcodes Supplier Management System 1.0. The vulnerability involves the Login component and specifically affects the /index.php file. Manipulation of the...
EUVD-2025-198553
Malicious code in snapchat-ui npm...
EUVD-2025-198556
Malicious code in hilton-ui npm...
RLSA-2025:21142 Important: python-kdcproxy security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
SUSE-SU-2025:21062-1 Security update for grub2
This update for grub2 fixes the following issues: - CVE-2025-54770: Missing unregister call for netsetvlan command may lead to use-after-free bsc1252930 - CVE-2025-54771: grubfileclose does not properly controls the fs refcount bsc1252931 - CVE-2025-61661: Out-of-bounds write in grubusbgetstring...
CVE-2025-40210
In the Linux kernel, the following vulnerability has been resolved: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" I've found that pynfs COMP6 now leaves the connection or lease in a strange state, which causes CLOSE9 to hang indefinitely. I've dug into it a little, but ...
EUVD-2025-198289
Malicious code in @kiwiiw/ez-lib npm...
EUVD-2025-198094
The Itel DAB MUX IDMUX build c041640a is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the...