MAL-2025-5127 Malicious code in requestpackat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b70e437edd04a30f48e384a4a07cdb1790dcb5e6a66ba800dc1703bf845a6b36 Code download and runs an executable, which is widely recognized as malware. The system is also configured to run it on startup, and the file is saved in paths...

MGASA-2025-0155 Updated postgresql15 & postgresql13 packages fix security vulnerability

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation. CVE-2025-4207...

BELL-CVE-2025-30722

Bulletin has no description...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: spire-controller-manager-fips, flux-kustomize-controller-fips, fuse-overlayfs-snapshotter, kyverno-policy-reporter-fips, prometheus-node-exporter, trust-manager-fips, terraform-provider-acme-fips, neuvector-scanner-fips, yace, rancher-agent, nvidia-nsight-compute-13....

MGASA-2025-0111 Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.83 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links...

SUSE-SU-2025:0876-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20250313T170021 2025-03-13T17:00:21Z jscPED-11136 GO-2025-3427 GO-2025-3442 GO-2025-3443 GO-2025-3508 GO-2025-3509 GO-2025-3510 GO-2025-3511 GO-2025-3512 GO-2025-3514 GO-2025-3515 - Update to version...

CVE-2025-22870 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, grpc-health-probe, opentofu, policy-controller, kor, kubewatch, lazygit, sriov-network-device-plugin, ingress-nginx-controller, argo-workflows, crossplane-provider-azure-authorization, src-fingerprint, rook, step-ca,...

CVE-2025-27152 vulnerabilities

Vulnerabilities for packages: arangodb, prism, kubeflow-pipelines, tileserver-gl, gitlab-rails-ce-fips, gitlab-rails-ce, tileserver-gl-fips, opensearch-dashboards, opensearch-dashboards-fips, jitsucom-jitsu, lerna, kubeflow-centraldashboard, airflow...

GHSA-P3FP-8748-VQFQ vulnerabilities

Vulnerabilities for packages: awx...

CVE-2025-26699 vulnerabilities

Vulnerabilities for packages: awx...

Linux Distros Unpatched Vulnerability : CVE-2024-50169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: vsock: Update rxbytes on readskb Make sure virtiotransportincrxpkt and virtiotransportdecrxp...

Linux Distros Unpatched Vulnerability : CVE-2024-11111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gesture...

Linux Distros Unpatched Vulnerability : CVE-2022-49402

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ftrace: Clean up hash directfunctions on register failures We see the following GPF when...

Linux Distros Unpatched Vulnerability : CVE-2023-41164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via...

CVE-2025-27220 vulnerabilities

Vulnerabilities for packages: elasticsearch, ruby, logstash, jruby...

Linux Distros Unpatched Vulnerability : CVE-2013-1713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an...

Linux Distros Unpatched Vulnerability : CVE-2016-9189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the crafted image file approach, related to an Integer Overflow...

Linux Distros Unpatched Vulnerability : CVE-2017-5440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to object...

Linux Distros Unpatched Vulnerability : CVE-2017-5464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption...

Linux Distros Unpatched Vulnerability : CVE-2017-5446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read when an HTTP/2 connection to a servers sends DATA frames with incorrect data content. This leads to a potentially exploitable crash. This...