12946 matches found
Nozomi Networks Guardian/CMC SQL注入漏洞
Nozomi Networks Guardian/CMC is a centralized management console from Nozomi Networks, Inc. in the United States. Nozomi Networks Guardian/CMC suffers from a SQL injection vulnerability that stems from improper validation of input parameters, which could lead to a SQL injection attack...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414632)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414632 advisory. Rogue backends can cause DoS of guests via high frequency events This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilitie...
Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680626)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680626 advisory. Due to the formatting logic of the console.table function it was not safe to allow user controlled input to be passed to the properties parameter while simultaneousl...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414631)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414631 advisory. Rogue backends can cause DoS of guests via high frequency events This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilitie...
CVE-2025-54089
CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10. Attackers with administrative access to the console can interfere with another administrator’s access to the console. The attack complexity is low; there are no attack requirements. Privileges...
CVE-2025-54088
CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10. Attackers with access to the console can redirect victims to an arbitrary URL. The attack complexity is low, attack requirements are present, no privileges are required, and users must actively participate i...
Security Bulletin: Vulnerability in golang.org/x/crypto and idna affects IBM Db2 Data Management Console(CVE-2024-45337, CVE-2024-3651)
Summary golang.org/x/crypto and idna dependency packages is used by IBM Db2 Data Management Console . This bulletin describes the upgrades necessary to address the vulnerability. Vulnerability Details CVEID:CVE-2024-45337 DESCRIPTION: Applications and libraries which misuse...
CVE-2025-61680
Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft server management. Versions 0.1.0 through 2.0.6 stores passwords using VS Code's configuration API which writes to settings.json in plaintext. This issue is fixed in version 2.1.0...
CVE-2025-61680 Minecraft RCON Terminal: Plain Text Password Storage in Configuration
Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft server management. Versions 0.1.0 through 2.0.6 stores passwords using VS Code's configuration API which writes to settings.json in plaintext. This issue is fixed in version 2.1.0...
EUVD-2025-32428
Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft server management. Versions 0.1.0 through 2.0.6 stores passwords using VS Code's configuration API which writes to settings.json in plaintext. This issue is fixed in version 2.1.0...
CVE-2025-61680
CVE-2025-61680 concerns Minecraft RCON Terminal, a VS Code extension used for Minecraft server management. Versions 0.1.0–2.0.6 store passwords via VS Code's Configuration API, which writes to settings.json in plaintext. The underlying issue is plaintext password storage through the configuration...
EUVD-2025-17692
Malicious code in bioql PyPI...
EUVD-2023-40446
Malicious code in bioql PyPI...
EUVD-2022-3945
Malicious code in bioql PyPI...
EUVD-2023-31050
Malicious code in bioql PyPI...
EUVD-2021-29094
Malicious code in bioql PyPI...
EUVD-2025-1493
Malicious code in bioql PyPI...
EUVD-2023-46305
Malicious code in bioql PyPI...