5419 matches found
EUVD-2022-46860
Malicious code in bioql PyPI...
EUVD-2021-7993
Malicious code in bioql PyPI...
EUVD-2021-7994
Malicious code in bioql PyPI...
EUVD-2021-7952
Malicious code in bioql PyPI...
EUVD-2025-24034
Malicious code in bioql PyPI...
EUVD-2022-27532
Malicious code in bioql PyPI...
EUVD-2024-33040
Malicious code in bioql PyPI...
EUVD-2024-19891
Malicious code in bioql PyPI...
EUVD-2022-35817
Malicious code in bioql PyPI...
CLSA-2025-1759154304 libwebp: Fix of 3 CVEs
CVE-2020-36329: fix use-after-free vulnerability by delaying thread termination - CVE-2020-36330: fix out-of-bounds read in ChunkVerifyAndAssign function - CVE-2020-36331: fix out-of-bounds read in ChunkAssignData function...
libwebp: Fix of 3 CVEs
CVE-2020-36329: fix use-after-free vulnerability by delaying thread termination - CVE-2020-36330: fix out-of-bounds read in ChunkVerifyAndAssign function - CVE-2020-36331: fix out-of-bounds read in ChunkAssignData function...
openssh security update
8.0p1-26.0.1 - Update upstream references Orabug: 36587718 8.0p1-26 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on CVE-2025-26465 Resolves: RHEL-109228...
Oracle Linux 8 : openssh (ELSA-2025-16823)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-16823 advisory. 8.0p1-26.0.1 - Update upstream references Orabug: 36587718 8.0p1-26 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when...
ALSA-2025:16823 Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled CVE-2025-26465 For more...
Information Queue Resource Exhaustion DoS
The vulnerability of the information and event exchange software between the components of the IBM Security Verify Information Queue authentication and authorization system is related to unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause...
IBM Security Verify Cryptographic Defect Unauthorized Access
The vulnerability of the information and event exchange software between the authentication and authorization components of IBM Security Verify Information Queue lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an attacker operati...
Timing Attack
Overview Affected versions of this package are vulnerable to Timing Attack via the verifyClientProof function which use Arrays.equals function. An attacker can infer sensitive authentication material by exploiting timing differences during the comparison of secret values. Remediation Upgrade...
CVE-2023-53332
In the Linux kernel, the following vulnerability has been resolved: genirq/ipi: Fix NULL pointer deref in irqdatagetaffinitymask If ipisendmask|single is called with an invalid interrupt number, all the local variables there will be NULL. ipisendverify which is invoked from these functions does...
AZL-71888 CVE-2023-53332 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: genirq/ipi: Fix NULL pointer deref in irqdatagetaffinitymask If ipisendmask|single is called with an invalid interrupt number, all the local variables there will be NULL. ipisendverify which is invoked from these functions does...
CVE-2023-53332 genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()
In the Linux kernel, the following vulnerability has been resolved: genirq/ipi: Fix NULL pointer deref in irqdatagetaffinitymask If ipisendmask|single is called with an invalid interrupt number, all the local variables there will be NULL. ipisendverify which is invoked from these functions does...