EUVD-2015-0796

Malware in sbrugna...

EUVD-2023-0609

Malicious code in bioql PyPI...

EUVD-2025-0137

Malicious code in bioql PyPI...

EUVD-2025-7895

Malicious code in bioql PyPI...

EUVD-2022-29322

Malicious code in bioql PyPI...

EUVD-2023-0700

Malicious code in bioql PyPI...

EUVD-2022-39899

Malicious code in bioql PyPI...

EUVD-2025-19812

Malicious code in bioql PyPI...

EUVD-2024-40453

Malicious code in bioql PyPI...

EUVD-2024-26227

Malicious code in bioql PyPI...

EUVD-2024-39185

Malicious code in bioql PyPI...

The vulnerability of the VirtKey function in the configuration management system and the remote execution of Salt operations allows a perpetrator to circumvent established security restrictions.

The vulnerability of the VirtKey function in the configuration management system and the ability to perform remote Salt operations are related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to circumvent established security restrictions...

The vulnerability of the configuration management system and the remote execution of operations, related to improper authorization, allows a perpetrator to gain unauthorized access to the system under the identity of any user.

The vulnerability of configuration management systems and remote execution of operations related to Salt is related to improper authorization. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the system under the identity of any user...

The vulnerability of the pub_ret method in the configuration management system and the remote execution of Salt operations allows a perpetrator to cause service failures.

The vulnerability of the pubret method in the configuration management system and the remote execution of Salt operations is related to insufficient validation of input data when processing the jid parameter. Exploiting this vulnerability can allow attackers to circumvent established security...

The vulnerability of configuration management systems and remote execution of operations, related to insufficient verification of data authenticity, allows attackers to carry out replication attacks.

The vulnerability of configuration management systems and remote execution of operations related to Salt is related to the lack of authentication checks when using transports that are not encrypted according to the TLS protocol. Exploiting this vulnerability allows a malicious actor to perform...

The vulnerability of the _minionevent method in the configuration management system and remote Salt execution allows a attacker to execute arbitrary commands.

The vulnerability of the minionevent method in the configuration management system and for remote execution of Salt commands is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

The vulnerability of the salt.auth.pki component of the configuration management system and remote Salt execution process allows a perpetrator to bypass the authentication process.

The vulnerability of the salt.auth.pki component of the configuration management system and remote Salt execution processes is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process...

The vulnerability of the recv_file method in the configuration management system and remote execution of Salt operations allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the recvfile method in the configuration management system and remote execution of Salt operations is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized acces...

Security Bulletin: The IBM® Engineering Lifecycle Management products using WebSphere Application Server Liberty is affected by a security bypass in JMS messaging (CVE-2025-36124)

Summary IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability in JMS messaging with the wasJmsServer-1.0, wasJmsSecurity-1.0, wasJmsClient-2.0, messagingServer-3.0, messagingSecurity-3.0, or messagingClient-3.0 feature enabled. Following IBM® Engineering Lifecycl...

Security Bulletin: The IBM® Engineering Lifecycle Management products using WebSphere Application Server Liberty is affected by a denial of service due to Apache Commons FileUpload (CVE-2025-48976)

Summary There is a vulnerability in Apache Commons FileUpload which affects IBM WebSphere Application Server traditional and affects IBM WebSphere Application Server Liberty with the servlet-3.0, servlet-3.1, servlet-4.0, servlet-5.0 or servlet-6.0 feature enabled. Following IBM® Engineering...