6167 matches found
HP Integrated Lights-Out Remote Code Execution (CVE-2013-2338)
Unspecified vulnerability on HP Integrated Lights-Out 3 aka iLO3 cards with firmware before 1.57 and 4 aka iLO4 cards with firmware before 1.22, when Single-Sign-On SSO is used, allows remote attackers to execute arbitrary code via unknown vectors. This plugin only works with Tenable.ot. Please...
EUVD-2025-120012
Malicious code in single-bronze-baboon npm...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990866)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990866 advisory. In the Linux kernel, the following vulnerability has been resolved: net: arc: fix the device for dmamapsingle/dmaunmapsingle The ndev-dev and pdev-dev aren't the sam...
EUVD-2025-95082
Malicious code in singleleechz3n npm...
MAL-2025-108706 Malicious code in single_bee_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9751d5fbfc10787a292285429f2b345cca0593595f62d38080ef695439335c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-84287
Malicious code in singletyrannosaurusz3n npm...
EUVD-2025-73687
Malicious code in singlenightingalez3n npm...
EUVD-2025-66747
Malicious code in singlesailfishz3n npm...
EUVD-2025-66748
Malicious code in singlebisonz3n npm...
Malicious code in single-jade-owl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaf7654bd14c8025c844b5926d80fb1f32428da53d6aa3fdc0858956ce92fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in single-peach-mole (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d104c60259de9fdb858f3f9e1fcf95afb0f78de21d356b9e36052fe5bb3524f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52009
Malicious code in single-olive-limpet npm...
EUVD-2025-52008
Malicious code in single-peach-mole npm...
EUVD-2025-52007
Malicious code in single-tomato-lizard npm...
EUVD-2025-52011
Malicious code in single-coffee-leopard npm...
EUVD-2025-52012
Malicious code in single-blue-pinniped npm...
MAL-2025-70639 Malicious code in single-jade-owl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaf7654bd14c8025c844b5926d80fb1f32428da53d6aa3fdc0858956ce92fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52010
Malicious code in single-jade-owl npm...
Incorrect OAuth Passthrough in Grafana Databricks Datasource
Grafana is an open-source platform for monitoring and observability. The Grafana-Databricks-Datasource is a plugin allowing Grafana to visualize data from Databricks Enterprise Versions between 1.6.0 and 1.12.0 are vulnerable to a bug when Oauth passthrough is enabled, and multiple users are usin...