EUVD-2022-38775

Malicious code in bioql PyPI...

EUVD-2025-24571

Malicious code in bioql PyPI...

EUVD-2022-45446

Malicious code in bioql PyPI...

EUVD-2025-28629

Malicious code in bioql PyPI...

EUVD-2024-41692

Malicious code in bioql PyPI...

EUVD-2022-0486

Malicious code in bioql PyPI...

EUVD-2025-25827

Malicious code in bioql PyPI...

EUVD-2023-46953

Malicious code in bioql PyPI...

EUVD-2022-45483

Malicious code in bioql PyPI...

EUVD-2025-24154

Malicious code in bioql PyPI...

EUVD-2023-34803

Malicious code in bioql PyPI...

EUVD-2023-46959

Malicious code in bioql PyPI...

CVE-2025-46205

A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service DoS by supplying a crafted PDF file. NOTE: this is disputed by the Supplier because there is no available file to reproduce the issue...

CVE-2025-10217

CVE-2025-10217 involves Hitachi Energy Asset Suite where an authenticated user can manipulate performance-related log data or inject crafted data into logfiles, potentially enabling further malicious activity. The vulnerability affects the Asset Suite’s logging/logfile handling and is described w...

CVE-2025-10950 geyang ml-logger Ping server.py log_handler deserialization

A vulnerability was determined in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected is the function loghandler of the file mllogger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack...

CVE-2025-60020

nncp before 8.12.0 allows path traversal for reading or writing during freqing and file saving via a crafted path in packet data...

CVE-2025-23354

NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensembleclassifer script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data...

CVE-2025-23354

NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensembleclassifer script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data...

PT-2025-39263

Name of the Vulnerable Software and Affected Versions NVIDIA Megatron-LM affected versions not specified Description The software contains a flaw in the ensemble classifer script that could allow an attacker to inject malicious data. Successful exploitation of this issue may result in code...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation due to a logic error in ippreadio which is called internally by cupsDoRequest, ippValidateAttributes has a null dereference. An attacker can cause the application to crash by sending specially crafted data over...