EUVD-2025-20244

Malicious code in bioql PyPI...

EUVD-2025-13598

Malicious code in bioql PyPI...

EUVD-2022-37262

Malicious code in bioql PyPI...

EUVD-2022-37177

Malicious code in bioql PyPI...

EUVD-2025-20237

Malicious code in bioql PyPI...

EUVD-2025-20239

Malicious code in bioql PyPI...

EUVD-2023-2978

Malicious code in bioql PyPI...

EUVD-2022-46817

Malicious code in bioql PyPI...

EUVD-2021-8214

Malicious code in bioql PyPI...

EUVD-2024-2495

Malicious code in bioql PyPI...

EUVD-2023-54318

Malicious code in bioql PyPI...

EUVD-2025-20529

Malicious code in bioql PyPI...

EUVD-2025-8271

Malicious code in bioql PyPI...

EUVD-2022-27490

Malicious code in bioql PyPI...

java-21-openjdk security update

An update is available for java-21-openjdk. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime...

cups: Authentication Bypass in CUPS Authorization Handling

A flaw was found in CUPS, a widely used printing service on Linux and UNIX-like systems. The issue arises when authentication is configured to use a method other than Basic, but the attacker sends an HTTP request with a Basic authentication header. Due to improper validation in the cupsdAuthorize...

CVE-2025-59163

vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers when vet is used as an MCP server in SSE...

CLSA-2025-1758289909 Fix CVE(s): CVE-2025-1735, CVE-2025-1736

SECURITY UPDATE: Inadequate validation in pgsql and pdopgsql functions - debian/patches/CVE-2025-1735.patch: add error checks for escape function in pgsql and pdopgsql extensions to prevent potential security issues - CVE-2025-1735 SECURITY UPDATE: Insufficient HTTP header validation -...

CVE-2023-49564

The CBIS/NCS Manager API is vulnerable to an authentication bypass in Nokia CloudBand Infrastructure Software and Nokia Container Service . An unauthenticated user can gain unauthorized access to restricted or sensitive API functions by sending a specially crafted HTTP header . The root cause is ...

CVE-2023-49564: Authentication Bypass Using an Alternate Path or Channel

The CBIS/NCS Manager API is vulnerable to an authentication bypass. By sending a specially crafted HTTP header, an unauthenticated user can gain unauthorized access to API functions. This flaw allows attackers to reach restricted or sensitive endpoints of the HTTP API without providing any valid...