USN-7879-4: Linux kernel vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Several security issues were discovered in the Linux kernel. An attacker could possibly use...

EUVD-2025-201109

MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. Prior to 2.9.8, there is a security issue exists in the execinpod tool of the mcp-server-kubernetes MCP Server. The tool accepts user-provided commands in both array and string formats. When a string...

CVE-2025-66404 mcp-server-kubernetes potential security issue in exec_in_pod tool

MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. Prior to 2.9.8, there is a security issue exists in the execinpod tool of the mcp-server-kubernetes MCP Server. The tool accepts user-provided commands in both array and string formats. When a string...

Malicious code in elf-stats-sleighing-nutcracker-806 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c4fc1a8ab935ffec5b221cc760b227c8ae7c20f5161b74edf402ccf168be9f The package elf-stats-sleighing-nutcracker-806 was found to contain malicious code...

BIT-ACTIVEMQ-2021-26117 ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind

The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error...

CVE-2024-36909

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

BIT-NGINX-GATEWAY-2021-23017

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...

Login Time Restriction - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2025-120

This module enables you to apply time-based login restrictions and display related warning or logout confirmation pages. The module doesn't sufficiently protect its confirmation routes from cross-site request forgery CSRF, allowing the logout confirmation route to be triggered without user...

CVE-2025-58482

creationtimestamp| type| source ---|---|--- 2025-12-02 02:34:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6xvsezlji2k 2025-12-02 10:02:58+00:00| seen| https://infosec.exchange/users/offseq/statuses/115649398506324144 2025-12-02 10:03:00+00:00| seen|...

EUVD-2025-200067

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

EUVD-2025-200066

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Malicious code in b3dtiles-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a50df9fdb7a7ea0dde9e5c57dda3432003506f075be4569fcd745f1e927ddfc The package b3dtiles-sample was found to contain malicious code...

Malicious code in dataset-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f4e8552a727b5aac457a7d16a99d4e0b3a99342044aee673aba036abbcd9e0 The package dataset-view was found to contain malicious code...

CVE-2025-66384

app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded file validity, related to tmpname...

Malicious code in ctf2libxmljs2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de69afa73f1f4886ac05efb1fce080314b4a0bc5f0a122bb50e7bd03f945db9b The package ctf2libxmljs2 was found to contain malicious code...

Malicious code in aps-simple-viewer-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a3d18d7c64f1636f4922e13d1cc9768c1516be07e755001ed729faff0a63c29 The package aps-simple-viewer-nodejs was found to contain malicious code...

Malicious code in @gr-exports/body (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ec75ab55ea86ba356e8f21309eb966c00366a526e9737edd15248594209f89 The package @gr-exports/body was found to contain malicious code...

Malicious code in imad213insta (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in coinbase.net.api (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Moderate: Red Hat Security Advisory: xorg-x11-server security update

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...