EUVD-2023-54428

Malicious code in bioql PyPI...

EUVD-2021-30002

Malicious code in bioql PyPI...

EUVD-2022-41071

Malicious code in bioql PyPI...

EUVD-2023-31870

Malicious code in bioql PyPI...

EUVD-2022-3149

Malicious code in bioql PyPI...

EUVD-2023-57506

Malicious code in bioql PyPI...

EUVD-2022-30940

Malicious code in bioql PyPI...

EUVD-2025-6930

Malicious code in bioql PyPI...

EUVD-2022-49662

Malicious code in bioql PyPI...

EUVD-2024-28146

Malicious code in bioql PyPI...

EUVD-2023-30041

Malicious code in bioql PyPI...

CVE-2025-52658

HCL MyXalytics is affected by the use of vulnerable/outdated versions which can expose the application to known security risks that could be exploited...

The vulnerability of the cairodebugresetstatic_data() function in the Poppler PDF rendering library allows a hacker to gain unauthorized access to protected information.

The vulnerability of the cairodebugresetstaticdata function in the Poppler PDF rendering library is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2025-10707 JeecgBoot sendMsg improper authorization

A weakness has been identified in JeecgBoot up to 3.8.2. Affected is an unknown function of the file /message/sysMessageTemplate/sendMsg. Executing manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be...

CVE-2025-8557

An internal product security audit of Lenovo XClarity Orchestrator LXCO discovered the below vulnerability: An attacker with access to a device on the local Lenovo XClarity Orchestrator LXCO network segment may be able to manipulate the local device to create an alternate communication channel...

CVE-2025-8557

An internal product security audit of Lenovo XClarity Orchestrator LXCO discovered the below vulnerability: An attacker with access to a device on the local Lenovo XClarity Orchestrator LXCO network segment may be able to manipulate the local device to create an alternate communication channel...

CVE-2025-5005

A vulnerability was detected in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4. This affects an unknown function of the file crm/WeiXinApp/dingtalk/indexevent.php. The manipulation of the argument corpurl results in server-side request forgery. The attack can be launched...

CVE-2025-26449

In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

...

During the worker lifecycle, a use-after-free condition could have occured, which could have led to a potentially exploitable crash. This vulnerability affects Firefox < 115.0.2, Firefox ESR < 115.0.2, and Thunderbird < 115.0.1.

...