EUVD-2021-7677

Malicious code in bioql PyPI...

EUVD-2021-29530

Malicious code in bioql PyPI...

EUVD-2024-38272

Malicious code in bioql PyPI...

EUVD-2022-24945

Malicious code in bioql PyPI...

EUVD-2022-3630

Malicious code in bioql PyPI...

EUVD-2021-6931

Malicious code in bioql PyPI...

EUVD-2024-25264

Malicious code in bioql PyPI...

EUVD-2023-48560

Malicious code in bioql PyPI...

EUVD-2024-54675

Malicious code in bioql PyPI...

EUVD-2023-32317

Malicious code in bioql PyPI...

EUVD-2025-13908

Malicious code in bioql PyPI...

EUVD-2022-2449

Malicious code in bioql PyPI...

EUVD-2023-46426

Malicious code in bioql PyPI...

Improper Acess Control

mautic/core is vulnerable to improper access control. The vulnerability is due to insufficient restriction on configuration access, which allows an administrator to extract sensitive information such as database credentials...

DEBIAN-CVE-2025-54288

Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonate other containers and obtain their metadata, configuration, and device information via spoofed process names in the...

UBUNTU-CVE-2025-54288

Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonate other containers and obtain their metadata, configuration, and device information via spoofed process names in the...

CVE-2025-54288

Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonate other containers and obtain their metadata, configuration, and device information via spoofed process names in the...

PT-2025-40331

Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.0 and above Description An information spoofing issue exists in the devLXD server component of Canonical LXD. Attackers with root privileges within a container can impersonate other containers and access their metadata...

CVE-2025-55747

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. This is fixed in version 16.10.7...

CVE-2025-55748

Affected product : XWiki Platform. Vulnerability : path traversal through the jsx and sx endpoints that allows remote attackers to read configuration files. Root cause : improper access control enabling traversal to read files like WEB-INF/xwiki.cfg. Versions affected : 4.2-milestone-2 through 16...