Lucene search
+L

53 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/11 8:11 p.m.7 views

Malicious code in wibowo-saguer77-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb011856af81d079928eb98f0f220ff817cbd0346bf2e2038df666c911c4b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
OSV
OSV
added 2025/11/11 2:29 a.m.5 views

MAL-2025-74177 Malicious code in lisa-kue38-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98f5b47e562064a3ddee9bd88b71a86c84af1dead750f203c0b8324f01e361e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
OSV
OSV
added 2025/11/11 12:17 a.m.7 views

MAL-2025-62542 Malicious code in dian-nasi56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c54a7164e488998a7bc70ccd0a6b219d1743c610659d20b84a5e733f69c474a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/10/25 12:00 a.m.4 views

Fedora 43 : cri-o1.31 (2025-20a9e0e990)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-20a9e0e990 advisory. - Update to release v1.31.13 - Resolves: rhbz2333357, rhbz2398406, rhbz2398661, rhbz2399063, rhbz2399337 - Upstream fix Tenable has extracted the...

6.5CVSS7.4AI score0.00524EPSS
SaveExploits1References3
OSV
OSV
added 2025/10/17 12:26 p.m.17 views

CLSA-2025-1760704001 Update of sudo

Bump version to 1.8.23-10.0.1.3...

5.8AI score
SaveExploits0References1
SUSE Linux
SUSE Linux
added 2025/09/16 5:04 p.m.5 views

Security update for expat

This update for expat fixes the following issues: expat was updated to version 2.7.1: Bug fixes: Restore event pointer behavior from Expat 2.6.4 that the fix to CVE-2024-8176 changed in 2.7.0; affected API functions are: - XMLGetCurrentByteCount - XMLGetCurrentByteIndex - XMLGetCurrentColumnNumbe...

8.7CVSS8.1AI score0.01304EPSS
SaveExploits0References6
OSV
OSV
added 2025/04/17 12:20 p.m.11 views

CLSA-2025-1744892440 Update of libsoup

Bump up version...

5.8AI score
SaveExploits0References1
OSV
OSV
added 2025/02/03 8:56 a.m.8 views

SUSE-SU-2025:20054-1 Security update for kubevirt

This update for kubevirt fixes the following issues: - Update to version 1.3.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.0 - Fix DV error report via VM printable status - Fix permission error in...

5.8AI score
SaveExploits0References4
Oracle linux
Oracle linux
added 2025/01/28 12:00 a.m.24 views

gimp:2.8 security update

gimp 2:2.28.22-26 - bump spec pygobject2 2.28.7-5 - bump spec to fix NVR pygtk2 2.24.0-25 - Fix shebang mangling for prefix=app 1907579 - disable numpy for flatpak 1907579 python2-pycairo 1.16.3-7 - bump spec for NVR fix...

7.8CVSS7.3AI score0.93639EPSS
SaveExploits0
OSV
OSV
added 2024/12/12 10:13 p.m.16 views

CLSA-2024-1734041590 Update of grub2

Update version and epoch...

5.8AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.19 views

openSUSE: Security Advisory for saphanabootstrap (SUSE-SU-2023:0009-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.00223EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.19 views

openSUSE: Security Advisory for virtualbox (openSUSE-SU-2023:0351-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS8AI score0.0055EPSS
SaveExploits1References2
Oracle linux
Oracle linux
added 2023/11/11 12:00 a.m.46 views

libqb security update

2.0.6-4 - bump rpm version for rhel-exception build Resolves: rhbz2230712 2.0.6-3 - blackbox: fix buffer overflow with long log lines Resolves: rhbz2236171 2.0.6-1 - ipc: Retry receiving credentials if the the message is short Resolves: rhbz2149647 2.0.6-1 - Rebase to 2.0.6 Resolves: rhbz2072903...

9.8CVSS7.4AI score0.01182EPSS
SaveExploits0
OSV
OSV
added 2023/11/04 8:59 a.m.10 views

OPENSUSE-SU-2023:0351-1 Security update for virtualbox

This update for virtualbox fixes the following issues: - Version bump to VirtualBox 7.0.12 released October 17 2023 by Oracle Fixes the following: - CVE-2023-22098 boo1216363 - CVE-2023-22099 boo1216364 - CVE-2023-22100 boo1216365 This is a maintenance release. The following items were fixed and/...

8.2CVSS7.5AI score0.0055EPSS
SaveExploits1References7
NVD
NVD
added 2023/07/26 8:15 a.m.40 views

CVE-2023-38647

An attacker can use SnakeYAML to deserialize java.net.URLClassLoader and make it load a JAR from a specified URL, and then deserialize javax.script.ScriptEngineManager to load code using that ClassLoader. This unbounded deserialization can likely lead to remote code execution. The code can be run...

9.8CVSS9.6AI score0.01953EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/02 10:42 a.m.6 views

SUSE-SU-2023:0011-1 Security update for saphanabootstrap-formula

This update for saphanabootstrap-formula fixes the following issues: - Version bump 0.13.1 revert changes to spec file to re-enable SLES RPM builds CVE-2022-45153: Fixed privilege escalation for arbitrary users in hana/hacluster.sls bsc1205990 - Version bump 0.13.0 pass sid to sudoers in a SLES12...

7.8CVSS8AI score0.00223EPSS
SaveExploits1References4
OSV
OSV
added 2023/01/02 10:42 a.m.17 views

SUSE-SU-2023:0010-1 Security update for saphanabootstrap-formula

This update for saphanabootstrap-formula fixes the following issues: - Version bump 0.13.1 revert changes to spec file to re-enable SLES RPM builds CVE-2022-45153: Fixed privilege escalation for arbitrary users in hana/hacluster.sls bsc1205990 - Version bump 0.13.0 pass sid to sudoers in a SLES12...

7.8CVSS8AI score0.00223EPSS
SaveExploits1References4
OSV
OSV
added 2023/01/02 10:42 a.m.6 views

SUSE-SU-2023:0009-1 Security update for saphanabootstrap-formula

This update for saphanabootstrap-formula fixes the following issues: - Version bump 0.13.1 revert changes to spec file to re-enable SLES RPM builds CVE-2022-45153: Fixed privilege escalation for arbitrary users in hana/hacluster.sls bsc1205990 - Version bump 0.13.0 pass sid to sudoers in a SLES12...

7.8CVSS8AI score0.00223EPSS
SaveExploits1References4
OSV
OSV
added 2022/06/20 11:44 a.m.13 views

SUSE-FU-2022:2135-1 Feature update for SUSE Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: - Make sure SaltCacheLoader use correct fileclient bsc1199149 - Fix the regression caused by the patch removing strict requirement for OpenSSL 1.1.1 leading to read/write issues with ssl module for SLE 15, SLE 12, CentOS 7, Debian 9...

8.8CVSS6.3AI score0.01624EPSS
SaveExploits0References13
OSV
OSV
added 2022/05/04 8:18 a.m.10 views

SUSE-SU-2022:1514-1 Security Beta update for SUSE Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: - Fix the regression caused by the patch removing strict requirement for OpenSSL 1.1.1 leading to read/write issues with ssl module for SLE 15, SLE 12, CentOS 7, Debian 9 bsc1198556 - Fixes for Python 3.10 - Fix salt-ssh opts poisoning...

8.8CVSS6.4AI score0.01624EPSS
SaveExploits0References8
Rows per page
Query Builder