175 matches found
CVE-2025-41064 Incorrect authentication in GTT´s group OpenSIAC
Incorrect authentication vulnerability in OpenSIAC, which could allow an attacker to impersonate a person using Cl@ve as an authentication method...
Fixing Restore Failures Due to QEMU Machine Version
Challenge When attempting to restore a VM with a QEMU version lower than 10 and disks in QCOW2 format to a Proxmox VE v9 node, the following error occurs: 16.09.2025 10:25:28 Error Linux-8.0 : Failed to reach the hypervisor. Error output: storage for 'local-LVM:vm-42-disk-1.qcow2' is configured...
Malicious code in ve-editor (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ec4086ebb27a8d951ab4938b0af8fc4229706d75429b6a199556436060ddf14 Any computer that has this package installed or running should be considered fully compromised. All...
MAL-2025-47359 Malicious code in ve-editor (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ec4086ebb27a8d951ab4938b0af8fc4229706d75429b6a199556436060ddf14 Any computer that has this package installed or running should be considered fully compromised. All...
Malicious code in ve-bamreader (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1092696d6fb702fca8cd621a57a61f40b61a7f5574a112b37c87c080ef7f876 Any computer that has this package installed or running should be considered fully compromised. All...
MAL-2025-47358 Malicious code in ve-bamreader (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1092696d6fb702fca8cd621a57a61f40b61a7f5574a112b37c87c080ef7f876 Any computer that has this package installed or running should be considered fully compromised. All...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
CVE-2025-57539
A stored cross-site scripting XSS vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment PVE 8.4 allows authenticated users to store malicious input. The payload is rendered unsafely in the Web UI and executed when viewed by other users, potentially...
CVE-2025-57540
A stored cross-site scripting XSS vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox Virtual Environment PVE 8.4. Authenticated users can inject JavaScript code that is later executed in the browsers of users who view the configuration page,...
CVE-2025-57539
A stored cross-site scripting XSS vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment PVE 8.4 allows authenticated users to store malicious input. The payload is rendered unsafely in the Web UI and executed when viewed by other users, potentially...
PT-2025-36794
Name of the Vulnerable Software and Affected Versions: Proxmox Virtual Environment version 8.4 Description: A stored cross-site scripting XSS issue exists in the WebAuthn Relying Party field within the Datacenter configuration. Authenticated users can inject JavaScript code that is later executed...
Malicious code in ve-vores (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcef286db1ecd73863ccb186a0860866493f59111555883f1eeea823933a163f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4903 Malicious code in ve-vores (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcef286db1ecd73863ccb186a0860866493f59111555883f1eeea823933a163f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ve-cores (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e2fbdb6cafd7eab8bb680d66240f47ddaa35deaf4c5b4263899fab736fd522 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4902 Malicious code in ve-cores (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e2fbdb6cafd7eab8bb680d66240f47ddaa35deaf4c5b4263899fab736fd522 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2014-4156
Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability...
CVE-2017-18678
An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.x software. An attacker can crash system processes via a Serializable object because of missing exception handling. The Samsung IDs are SVE-2017-8109, SVE-2017-8110, SVE-2017-8115, SVE-2017-8118, and SVE-2017-811...
PT-2025-18603 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the x86/tdx component. The issue occurs when the kernel accesses "private" memory, which includes all normal kernel...
Build Numbers and Versions of Veeam Plug-in for Proxmox VE
This KB article lists all versions of the Veeam Plug-in for Proxmox VE and their respective worker build numbers. Version | Plug-in Build | Worker Build | Release Date ---|---|---|--- Veeam Plug-in for Proxmox VE 3 Releases Veeam Plug-in for Proxmox VE 3.2 included with Veeam Backup & Replication...