EUVD-2024-21358

Malicious code in bioql PyPI...

EUVD-2023-43161

Malicious code in bioql PyPI...

The vulnerability of the amdgpu_dm_hdcp.c component in the Linux operating system allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the amdgpudmhdcp.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the proton-pack.c component in the Linux operating system’s kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the proton-pack.c component in the Linux operating system’s kernel is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the parisc component in the Linux operating system’s kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the parisc component in the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the DRM/AMD/display components in the Linux operating system allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the DRM/AMD/display components in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the pds_core component in the Linux operating system’s kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the pdscore component in the Linux operating system’s kernel is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service...

Tenda CP6 安全漏洞

Tenda CP6 is a smart camera from Tenda, a Chinese company. Tenda CP6 version 11.10.00.243 suffers from a cryptographic issue vulnerability that stems from the use of a risky encryption algorithm in the function sub2B7D04 in the component uhttp. An attacker could exploit the vulnerability to cause...

Unspecified Vulnerability in Huawei HarmonyOS and EMUI HVB Modules

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A security vulnerability exists in Huawei HarmonyOS an...

CVE-2025-53077

An execution after redirect in Samsung DMSData Management Server allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability...

CVE-2025-53077

An execution after redirect in Samsung DMSData Management Server allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability...

CVE-2025-53077

Samsung DMS (Data Management Server) is affected by CVE-2025-53077, with multiple connected reports describing a set of issues including execution after redirect, deserialization of untrusted data, absolute path traversal, and path traversal that can allow authenticated or unauthenticated actions...

CVE-2025-54062 WeGIA SQL Injection (Blind Time-Based) Vulnerability in id_dependente Parameter on profile_dependente.php Endpoint

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.6 in the /html/funcionario/profiledependente.php endpoint, specifically in the iddependente parameter. This vulnerability...

CVE-2025-42953

SAP NetWeaver AS ABAP System Configuration is affected by CVE-2025-42953 due to missing authorization checks for authenticated users, enabling privilege escalation and potential full integrity/availability compromise (confidentiality not impacted). Root cause: inadequate access control in the Sys...

ROS-20250625-05

Vulnerability of components from memcachestore.rb and rediscachestore.rb of Ruby on Rails software platform is related to recovery of invalid data structure in memory. Exploitation of the vulnerability could allow a remote attacker to gain access to sensitive data, compromise its integrity, as we...

CVE-2025-32977

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to upload backup files to the system. While signature validation is implemented,...

TencentOS Server 2: grub2 (TSSA-2022:0288)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0288 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

CVE-2025-42987

SAP Manage Processing Rules For Bank Statement allows an attacker with basic privileges to edit shared rules of any user by tampering the request parameter. Due to missing authorization check, the attacker can edit rules that should be restricted, compromising the integrity of the application...

CVE-2025-43585 Adobe Commerce | Improper Authorization (CWE-285)

Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access leadi...

CVE-2025-42987

SAP Manage Processing Rules For Bank Statement allows an attacker with basic privileges to edit shared rules of any user by tampering the request parameter. Due to missing authorization check, the attacker can edit rules that should be restricted, compromising the integrity of the application...