Linux Distros Unpatched Vulnerability : CVE-2021-3656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided...

Linux Distros Unpatched Vulnerability : CVE-2025-37946

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix duplicate pcidevput in disableslot when PF has child VFs With commit...

Linux Distros Unpatched Vulnerability : CVE-2023-46838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of ze...

Linux Distros Unpatched Vulnerability : CVE-2018-1000026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that...

Oracle Linux 10 : kernel (ELSA-2025-13598)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-13598 advisory. - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds - CVE-2025-38159 - Revert 'smb: client: fix TCP timers deadlock after rmmod'...

Malicious code in bootstrap-areology-virtualreality-postcss (npm)

The package bootstrap-areology-virtualreality-postcss was found to contain malicious code...

Malicious code in virtual-glue (npm)

The package virtual-glue was found to contain malicious code...

Malicious code in dysonswarm-virtualreality-cypress-phoebe (npm)

The package dysonswarm-virtualreality-cypress-phoebe was found to contain malicious code...

MAL-2025-29173 Malicious code in photon-virtualreality-celeste-taphonomy (npm)

The package photon-virtualreality-celeste-taphonomy was found to contain malicious code...

Malicious code in 16bit-js-vm-model (npm)

The package 16bit-js-vm-model was found to contain malicious code...

MAL-2025-24320 Malicious code in karma-gatsby-virtualreality-concurrently (npm)

The package karma-gatsby-virtualreality-concurrently was found to contain malicious code...

platzi-virtual-machine (1.0.0) potentially affected by unknown CVE via pvm (0.0.1-security)

pvm NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on pvm and may be impacted: - platzi-virtual-machine 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30899...

MAL-2025-6984 Malicious code in 16bit-js-vm-model (npm)

The package 16bit-js-vm-model was found to contain malicious code...

Malicious code in reveal-md-virtualreality-nodejs-equinox (npm)

The package reveal-md-virtualreality-nodejs-equinox was found to contain malicious code...

MAL-2025-38453 Malicious code in virtual-glue (npm)

The package virtual-glue was found to contain malicious code...

CVE-2025-49707

Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally...

CVE-2025-53781

Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network...

CVE-2025-20243

A vulnerability in the management and VPN web servers of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability is due to improper validation of...

CVE-2025-20239

A vulnerability in the Internet Key Exchange Version 2 IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance ASA Software, and Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a memory leak, resultin...

CVE-2025-20222

A vulnerability in the RADIUS proxy feature for the IPsec VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This...