397 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993073)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993073 advisory. In the Linux kernel, the following vulnerability has been resolved: keys: Fix overwrite of key expiration on instantiation The expiry time of a key is unconditionall...
LangChain serialization injection vulnerability enables secret extraction
Context A serialization injection vulnerability exists in LangChain JS's toJSON method and subsequently when string-ifying objects using JSON.stringify. The method did not escape objects with 'lc' keys when serializing free-form data in kwargs. The 'lc' key is used internally by LangChain to mark...
EUVD-2025-204565
pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. Prior to version 1.1.2, in certain conditions database write access must first be obtained through another vulnerability or misconfiguration...
Database inventory plugin 代码问题漏洞
Database inventory plugin is an open source database management plugin for GLPI Project Plugins. A code issue vulnerability exists in versions of Database inventory plugin prior to 1.1.2, which stems from insecure storage of user-controlled data and could lead to the instantiation of arbitrary PH...
CVE-2023-53842
A resource leak was found in the WCD MBHC v2 audio codec driver in the Linux kernel. MBHC resources are not properly released on component probe failure or removal, causing interrupt request failures and preventing successful reprobing of the codec component. This leads to sound card initializati...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990735)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990735 advisory. In the Linux kernel, the following vulnerability has been resolved: keys: Fix overwrite of key expiration on instantiation The expiry time of a key is unconditionall...
CVE-2025-54805 TMM Vulnerability
When an iRule is configured on a virtual server via the declarative API, upon re-instantiation, the cleanup process can cause an increase in the Traffic Management Microkernel TMM memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not...
EUVD-2017-9491
Malware in sbrugna...
EUVD-2021-0603
Malware in sbrugna...
EUVD-2023-47229
Malicious code in bioql PyPI...
EUVD-2025-9694
Malicious code in bioql PyPI...
EUVD-2022-5458
Malicious code in bioql PyPI...
EUVD-2022-52741
Malicious code in bioql PyPI...
EUVD-2023-31603
Malicious code in bioql PyPI...
EUVD-2024-32756
Malicious code in bioql PyPI...
EUVD-2021-8673
Malicious code in bioql PyPI...
EUVD-2022-52239
Malicious code in bioql PyPI...
EUVD-2022-1192
Malicious code in bioql PyPI...
Improper Neutralization of Special Elements Used in a Template Engine
Overview com.hubspot.jinjava:jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates at least the subset of jinja in use in HubSpot content. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a...
CVE-2025-59340
Summary: CVE-2025-59340 affects jinjava (Java-based template engine). The issue arises when mapper.getTypeFactory().constructFromCanonical() allows attacker-controlled input to deserialize into arbitrary classes via ObjectMapper, enabling sandbox escape and potential access to local files/URLs (e...