EUVD-2018-12048

Malware in sbrugna...

EUVD-2020-25584

Malware in sbrugna...

EUVD-2020-26074

Malware in sbrugna...

EUVD-2018-12125

Malware in sbrugna...

EUVD-2018-12111

Malware in sbrugna...

EUVD-2019-13810

Malware in sbrugna...

EUVD-2020-26150

Malware in sbrugna...

EUVD-2017-10402

Malware in sbrugna...

EUVD-2020-25885

Malware in sbrugna...

EUVD-2018-11968

Malware in sbrugna...

EUVD-2017-10344

Malware in sbrugna...

EUVD-2023-32192

Malicious code in bioql PyPI...

EUVD-2021-7858

Malicious code in bioql PyPI...

EUVD-2023-51820

Malicious code in bioql PyPI...

Security Bulletin: Multiple Vulnerabilities in IBM API Connect

Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.3 Vulnerability Details CVEID:CVE-2013-4660 DESCRIPTION: The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute...

Security Bulletin: Multiple Vulnerabilities in IBM API Connect

Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.2-ifix2 Vulnerability Details CVEID:CVE-2019-12900 DESCRIPTION: BZ2decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors. CWE:CWE-787: Out-of-bounds Write CVSS...

CVE-2023-47722

IBM API Connect V10.0.5.3 and V10.0.6.0 stores user credentials in browser cache which can be read by a local user. IBM X-Force ID: 271912...

CVE-2023-28522

IBM API Connect V10 could allow an authenticated user to perform actions that they should not have access to. IBM X-Force ID: 250585...

CVE-2022-34350

IBM API Connect 10.0.0.0 through 10.0.5.0, 10.0.1.0 through 10.0.1.7, and 2018.4.1.0 through 2018.4.1.20 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to...

Security Bulletin: Multiple Vulnerabilities in IBM API Connect

Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.2-ifix1 Vulnerability Details CVEID:CVE-2025-1974 DESCRIPTION: A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve...