EUVD-2022-41388

Malicious code in bioql PyPI...

EUVD-2024-16332

Malicious code in bioql PyPI...

EUVD-2022-43391

Malicious code in bioql PyPI...

EUVD-2025-21454

Malicious code in bioql PyPI...

EUVD-2022-31556

Malicious code in bioql PyPI...

EUVD-2022-32143

Malicious code in bioql PyPI...

EUVD-2022-15744

Malicious code in bioql PyPI...

EUVD-2022-43397

Malicious code in bioql PyPI...

EUVD-2025-22705

Malicious code in bioql PyPI...

EUVD-2024-16059

Malicious code in bioql PyPI...

EUVD-2022-33003

Malicious code in bioql PyPI...

EUVD-2022-39291

Malicious code in bioql PyPI...

EUVD-2023-29714

Malicious code in bioql PyPI...

EUVD-2022-38951

Malicious code in bioql PyPI...

EUVD-2023-38439

Malicious code in bioql PyPI...

httpd security update

An update is available for httpd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...

The vulnerability of the Service Discovery Management Pack (SDMP) function in the monitoring tool for VMware Aria Operations and the VMware Tools suite allows a perpetrator to elevate their privileges to the root level.

The vulnerability of the Service Discovery Management Pack SDMP function in the VMware Aria Operations virtual infrastructure monitoring tool and the VMware Tools utility set is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to elevate their...

AlmaLinux 9 : httpd (ALSA-2025:15023)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:15023 advisory. httpd: insufficient escaping of user-supplied data in modssl CVE-2024-47252 httpd: modssl: access control bypass by trusted clients is possible using TLS...

httpd: CONTINUATION frames DoS

A vulnerability was found in how Apache httpd implements the HTTP/2 protocol. There are insufficient limitations placed on the amount of CONTINUATION frames that can be sent within a single stream. This issue could allow an unauthenticated remote attacker to send packets to vulnerable servers,...

VulnCheck KEV: CVE-2025-7414

A vulnerability classified as critical was found in Tenda O3V2 1.0.0.123880. This vulnerability affects the function fromNetToolGet of the file /goform/setPingInfo of the component httpd. The manipulation of the argument domain leads to os command injection. The attack can be initiated remotely...