EUVD-2023-38106

Malicious code in bioql PyPI...

EUVD-2025-24640

Malicious code in bioql PyPI...

EUVD-2024-31971

Malicious code in bioql PyPI...

EUVD-2023-35308

Malicious code in bioql PyPI...

EUVD-2025-25134

Malicious code in bioql PyPI...

EUVD-2025-27254

Malicious code in bioql PyPI...

EUVD-2025-29050

Malicious code in bioql PyPI...

EUVD-2025-25724

Malicious code in bioql PyPI...

EUVD-2024-51936

Malicious code in bioql PyPI...

EUVD-2025-0098

Malicious code in bioql PyPI...

EUVD-2024-30440

Malicious code in bioql PyPI...

EUVD-2022-48103

Malicious code in bioql PyPI...

EUVD-2021-31073

Malicious code in bioql PyPI...

The vulnerability of the dns_forward_rule_store() function in the Tenda G3 wireless access point’s microprogramming software allows a hacker to cause a service failure.

The vulnerability of the dnsforwardrulestore function in the Tenda G3 wireless access point’s microprogramming software is related to buffer overflows due to stack-based processing of the rules parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions by sendin...

SUSE CVE-2023-53462

In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in fillframeinfo Syzbot reports the following uninit-value access problem. ===================================================== BUG: KMSAN: uninit-value in fillframeinfo net/hsr/hsrforward.c:601 inli...

CVE-2022-50459 scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: iscsitcp: Fix null-ptr-deref while calling getpeername Fix a NULL pointer crash that occurs when we are freeing the socket at the same time we access it via sysfs. The problem is that: 1. iscsiswtcpconngetparam and...

CVE-2023-53462

Summary: The CVE concerns the Linux kernel HID/HSR driver (net/hsr/hsr_forward.c). A KMSAN-uninitialized-value access is reported in fill_frame_info() when VLAN (ETH_P_8021Q) is encountered, due to VLAN not being supported in the hsr driver. The issue is resolved by returning an error from fill_f...

CVE-2025-34207

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786 VA and SaaS deployments configure the SSH client within Docker instances with the following options: UserKnownHostsFile=/dev/null, StrictHostKeyChecking=no, and ForwardAgent yes. These...

CLSA-2025-1759222758 ruby: Fix of 4 CVEs

CVE-2016-2337: Fix type confusion in canceleval Ruby's TclTkIp class method to prevent arbitrary code execution - CVE-2017-9224: Fix stack out-of-bounds read in matchat during regular expression searching - CVE-2017-9227: Fix stack out-of-bounds read in mbcenclen and invalid pointer dereference...

CVE-2025-34207 Vasion Print (formerly PrinterLogic) Insecure SSH Client Configuration

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786 VA and SaaS deployments configure the SSH client within Docker instances with the following options: UserKnownHostsFile=/dev/null, StrictHostKeyChecking=no, and ForwardAgent yes. These...