6680 matches found
EUVD-2025-14242
Malicious code in bioql PyPI...
EUVD-2024-49257
Malicious code in bioql PyPI...
EUVD-2021-28611
Malicious code in bioql PyPI...
EUVD-2024-0452
Malicious code in bioql PyPI...
EUVD-2023-39980
Malicious code in bioql PyPI...
EUVD-2022-35577
Malicious code in bioql PyPI...
EUVD-2022-46599
Malicious code in bioql PyPI...
EUVD-2023-30251
Malicious code in bioql PyPI...
EUVD-2024-29054
Malicious code in bioql PyPI...
EUVD-2024-52858
Malicious code in bioql PyPI...
EUVD-2024-23300
Malicious code in bioql PyPI...
EUVD-2022-35843
Malicious code in bioql PyPI...
EUVD-2022-26414
Malicious code in bioql PyPI...
UBUNTU-CVE-2025-39921
In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: stop checking viability of op-maxfreq in supportsop callback In commit 13529647743d9 "spi: microchip-core-qspi: Support per spi-mem operation frequency switches" the logic for checking the viability of...
Arbitrary Code Injection
Craft CMS is vulnerable to Arbitrary Code Injection. The vulnerability is due to inadequate protection of restore functionality because, with a compromised security key and the ability to place an arbitrary file in storage/backups, an attacker can craft a request to /updater/restore-db that...
CVE-2025-6724
In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command...
CVE-2025-6724
In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command...
CVE-2025-8868 Chef Automate compliance service SQL Injection Vulnerability
In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token...
CVE-2025-6724 Chef Automate SQL Injection Vulnerability
In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command...
PT-2025-39823
Name of the Vulnerable Software and Affected Versions Chef Automate versions prior to 4.13.295 Description Chef Automate versions earlier than 4.13.295 on Linux x86 are susceptible to a condition where an authenticated attacker can access restricted functionality. This is due to improperly...