DEBIAN-CVE-2025-65110

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to versions 6.1.2 and 5.6.3, applications meeting two conditions are at risk of arbitrary JavaScript code execution, even if "safe mode" expressionInterpreter is used...

CVE-2025-63603

A command injection vulnerability exists in the MCP Data Science Server's reading-plus-ai/mcp-server-data-exploration 0.1.6 in the safeeval function src/mcpserverds/server.py:108. The function uses Python's exec to execute user-supplied scripts but fails to restrict the builtins dictionary in the...

CVE-2025-61907 Icinga 2 API users could access restricted values in filter expressions

Icinga 2 is an open source monitoring system. In Icinga 2 versions 2.4 through 2.15.0, filter expressions provided to the various /v1/objects endpoints could access variables or objects that would otherwise be inaccessible for the user. This allows authenticated API users to learn information tha...

EUVD-2021-20863

Malware in sbrugna...

EUVD-2020-20525

Malware in sbrugna...

EUVD-2021-15234

Malware in sbrugna...

EUVD-2007-1340

Malware in sbrugna...

EUVD-2007-0904

Malware in sbrugna...

EUVD-2005-3416

Malware in sbrugna...

EUVD-2021-26474

Malware in sbrugna...

EUVD-2005-0806

Malware in sbrugna...

EUVD-2008-5598

Malware in sbrugna...

EUVD-2005-4453

Malware in sbrugna...

EUVD-2022-34889

Malicious code in bioql PyPI...

EUVD-2023-30362

Malicious code in bioql PyPI...

EUVD-2021-29505

Malicious code in bioql PyPI...

EUVD-2024-22277

Malicious code in bioql PyPI...

CVE-2021-3124

Stored cross-site scripting XSS in form field in robust.systems product Custom Global Variables v 1.0.5 allows a remote attacker to inject arbitrary code via the vars0name field...

CVE-2021-34201

D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600DIR-2640. Local ordinary users can overwrite the global variables in the .bss section, causing the process crashes or changes...

CVE-2020-13909

The Ignition component before 2.0.5 for Laravel mishandles globals, get, post, cookie, and env. NOTE: in the 1.x series, versions 1.16.15 and later are unaffected as a consequence of the CVE-2021-43996 fix...