3233 matches found
EUVD-2023-52868
Malicious code in bioql PyPI...
EUVD-2024-25271
Malicious code in bioql PyPI...
EUVD-2025-6847
Malicious code in bioql PyPI...
EUVD-2023-58989
Malicious code in bioql PyPI...
EUVD-2023-44412
Malicious code in bioql PyPI...
EUVD-2021-8647
Malicious code in bioql PyPI...
EUVD-2024-38573
Malicious code in bioql PyPI...
EUVD-2022-29612
Malicious code in bioql PyPI...
EUVD-2021-30442
Malicious code in bioql PyPI...
EUVD-2021-9295
Malicious code in bioql PyPI...
EUVD-2023-2626
Malicious code in bioql PyPI...
EUVD-2022-52242
Malicious code in bioql PyPI...
EUVD-2025-7048
Malicious code in bioql PyPI...
EUVD-2025-23164
Malicious code in bioql PyPI...
PT-2025-40610
Name of the Vulnerable Software and Affected Versions LiteLLM affected versions not specified Description A flaw exists in LiteLLM that allows remote attackers to disclose sensitive information. Authentication is required for exploitation. The issue stems from the handling of the API KEY paramete...
CVE-2025-59405
The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices contains a cleartext DataDog API key within in its codebase. Because application binaries can be trivially decompil...
CVE-2025-59405: Exposure of Sensitive Information to an Unauthorized Actor
The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices contains a cleartext DataDog API key within in its codebase. Because application binaries can be trivially decompil...
CVE-2025-59405
The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices contains a cleartext DataDog API key within in its codebase. Because application binaries can be trivially decompil...
CVE-2025-10360
CVE-2025-10360 affects Puppet Enterprise 2025.4.0 and 2025.5, where the encryption key for the Infra Assistant database was not excluded from files collected by Puppet backup. The key is present only for users with an Infra Assistant license and feature enabled, and it protects the API key for th...
CVE-2025-10360 Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5
In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by Puppet backup. The key is only present on the system if the user has a Puppet Enterprise Advanced license and has enabled t...