CVE-2025-1774

Incorrect string encoding vulnerability in NASK - PIB BotSense allows injection of an additional field separator character or value in the content of some fields of the generated event. A field with additional field separator characters or values can be included in the "extraData" field.This issu...

EUVD-2025-204361

A CRLF injection vulnerability in Kentico Xperience allows attackers to manipulate URL query string redirects via improper encoding in the routing engine. This could enable header injection and potentially facilitate further web application attacks...

EUVD-2001-1298

Malware in sbrugna...

EUVD-2021-1600

Malware in sbrugna...

EUVD-2003-0919

Malware in sbrugna...

EUVD-2019-1017

Malware in sbrugna...

EUVD-2012-1882

Malware in sbrugna...

EUVD-2021-23287

Malware in sbrugna...

EUVD-2024-42707

Malicious code in bioql PyPI...

EUVD-2025-6568

Malicious code in bioql PyPI...

EUVD-2024-43127

Malicious code in bioql PyPI...

EUVD-2024-53074

Malicious code in bioql PyPI...

EUVD-2023-35485

Malicious code in bioql PyPI...

EUVD-2025-28693

Malicious code in bioql PyPI...

EUVD-2024-2221

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-8906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the...

CVE-2025-27055 Buffer Over-read in Camera

Memory corruption during the image encoding process...

SUSE SLES12 Security Update : postgresql17 (SUSE-SU-2025:01765-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:01765-1 advisory. Upgrade to 17.5: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation...

CVE-2025-47952

Traefik (HTTP reverse proxy/load balancer) had a path-matching bypass vulnerability prior to 2.11.25 and 3.4.1 when a URL with an encoded path string could bypass the middleware chain and target a backend exposed via another router. Affected versions: <2.11.25 and

CVE-2024-31868

Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin. The attackers can modify helium.json and exposure XSS attacks to normal users. This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1. Users are recommended to upgrade to version 0.11.1, which fixes the issue...