NVIDIA CUDA Toolkit OS Command Injection Vulnerability

The NVIDIA CUDA toolkit is a toolset developed by NVIDIA Corporation in the United States. It provides a development environment for creating high-performance GPU-accelerated applications. The CUDA toolkit contains a vulnerability related to operating system command injection. This vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2026-23950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path...

CVE-2025-56005

An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile parameter in the yacc function. This parameter accepts a .pkl file that is deserialized with pickle.load without validation. Because pickle allows execution of embedded...

MiracleLinux 8 : sysstat-11.7.3-9.el8 (AXSA:2023-5718:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-5718:02 advisory. sysstat: arithmetic overflow in allocatestructures on 32 bit systems CVE-2022-39377 Tenable has extracted the preceding description block directly from the...

CVE-2025-11043

creationtimestamp| type| source ---|---|--- 2026-01-19 19:26:52+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-abb-security-advisory-av26-039 2026-05-05 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-125-04...

CVE-2025-11044

creationtimestamp| type| source ---|---|--- 2026-01-19 19:26:52+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-abb-security-advisory-av26-039 2026-05-05 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-125-03...

CVE-2026-22797

An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before 10.12.1. The externaloauth2token middleware fails to sanitize incoming authentication headers before processing OAuth 2.0 tokens. By sending forged...

Malicious code in react-native-webview-forked (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48574c96ad66df5527d36dccb8f8c425b244bb90c2ac49491618968865ccd7da The package react-native-webview-forked was found to contain malicious code. Source: ghsa-malware...

Malicious code in ofjaaah-security-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bfbd5c89af01468786a4ff45da3126dbd49e28e4a250d0d124fc65b1f0c508 The package ofjaaah-security-lib was found to contain malicious code. Source: ghsa-malware...

MAL-2026-341 Malicious code in ofjaaah-auth-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 680db6543dbee7ec4f8cfe557fc5c76a13bb684b7faeec4e6e2582c0d89ecdf7 The package ofjaaah-auth-module was found to contain malicious code. Source: ghsa-malware...

Qnap QTS and QuTS hero Improper Limitation of a Pathname to a Restricted Directory (CVE-2023-51364)

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions:...

The vulnerability of the Windows Shell component in Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the Windows Shell component in Windows operating systems is related to incorrect path name restrictions. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

The vulnerability of Netgear Orbi Wi-Fi systems’ microprogramming software, related to insufficient validation of input data, allows attackers to execute arbitrary codes.

The vulnerability of Netgear Orbi Wi-Fi systems’ microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Qnap QTS and QuTS hero Authentication Bypass by Spoofing (CVE-2025-59385)

An authentication bypass by spoofing vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to access resources which are not otherwise accessible without proper authentication. We have already fixed the...

Linux Distros Unpatched Vulnerability : CVE-2026-23530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0,freerdpbitmapdecompressplanar does not validate nSrcWidth/nSrcHeight...

CVE-2025-68664 vulnerabilities

Vulnerabilities for packages: py3-langchain...

GHSA-XRWG-MQJ6-6M22 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, datadog-agent, tigera-operator...

SUSE CVE-2025-61726

The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containi...

SUSE CVE-2025-61728

archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive...

Hybrid IDS Using Signature-Based and Anomaly-Based Detection

Intrusion detection systems IDS are essential for protecting computer systems and networks against a wide range of cyber threats that continue to evolve over time. IDS are commonly categorized into two main types, each with its own strengths and limitations, such as difficulty in detecting...