MAL-2025-2294 Malicious code in across-package-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1b173a9f2149fd9a8a3d5fe44391e97a0137f5ec27ae493dcfd7df173665c0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

2025-03 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5053606)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

CVE-2025-25008 Windows Server Elevation of Privilege Vulnerability

...

CVE-2025-24986 Azure Promptflow Remote Code Execution Vulnerability

...

CVE-2025-24043 WinDbg Remote Code Execution Vulnerability

...

Siemens Tecnomatix Plant Simulation

SUMMARY Siemens Tecnomatix Plant Simulation do not properly limit the access of the simulation model to the filesystem. This could allow an unauthorized attacker to read or delete arbitrary files or the entire filesystem of the device. Siemens has released new versions for the affected products...

CVE-2024-50394

CVE-2024-50394 affects Helpdesk where an improper certificate validation vulnerability exists in versions prior to 3.3.3. The issue could allow remote attackers to compromise system security via network access, with low attack complexity and user interaction required. The provided documents indic...

CVE-2024-13086 QTS, QuTS hero

An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QTS 5.2.0.2851 build 20240808 and later...

CVE-2024-13086

CVE-2024-13086 affects QNAP QTS and QuTS hero (pre-5.2.0.2851 build 20240808 and earlier). It is described as an exposure of sensitive information that could let remote attackers compromise system security. The vulnerability has been fixed in QTS 5.2.0.2851 build 20240808 and later, and QuTS hero...

Linux Distros Unpatched Vulnerability : CVE-2024-57976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: do proper folio cleanup when cowfilerange failed BUG When testing with COW fixup marked as BUGON this is involved with the new pinuserpages change, which...

Linux Distros Unpatched Vulnerability : CVE-2024-6992

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - chromium - None CVE-2024-6992 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, In...

MAL-2025-2172 Malicious code in fdc3-web-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ea3a43ef3e6b3ef461c23614ec97c2fdcb96b58abeac841b4ea929bbab9d2d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-27657

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Code Execution V-2023-008...

The vulnerabilities of Intel System Resources Defense and Intel System Security Report, microprogramming software for Intel processors, allow attackers to enhance their privileges.

The vulnerability of Intel System Resources Defense and Intel System Security software related to Intel microprocessors involves executing operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

Linux Distros Unpatched Vulnerability : CVE-2021-47264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Fix Null-point-dereference in fmtsinglename Check the return value of devmkstrdu...

Linux Distros Unpatched Vulnerability : CVE-2023-1855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free flaw was found in xgenehwmonremove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver xgene-hwmon. This flaw could...

Linux Distros Unpatched Vulnerability : CVE-2022-48631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix bug in extents parsing when ehentries == 0 and ehdepth 0 When walking through an inode extents, the ext4extbinsearchidx function assumes that the exte...

Linux Distros Unpatched Vulnerability : CVE-2023-35074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing...

The vulnerabilities of Intel System Resources Defense and Intel System Security Report, microprogramming software for Intel processors, allow attackers to enhance their privileges.

The vulnerabilities of Intel System Resources Defense and Intel System Security software related to Intel processor microsoftware are associated with synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to gain increased privileges...

The vulnerabilities of Intel System Resources Defense and Intel System Security Report, microprogramming software for Intel processors, allow attackers to enhance their privileges.

The vulnerabilities of Intel System Resources Defense and Intel System Security software related to Intel processor microsoftware are associated with insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to enhance their privileges...