EUVD-2021-33468

Malicious code in bioql PyPI...

EUVD-2022-26978

Malicious code in bioql PyPI...

EUVD-2024-19587

Malicious code in bioql PyPI...

EUVD-2024-18693

Malicious code in bioql PyPI...

The vulnerability of the web page rendering module in WebKitGTK and WPE WebKit, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Web page rendering module in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the decode_utf8 function in the base/gp_utf8.c software component of the Ghostscript document processing software allows an attacker to access confidential data and compromise its integrity.

The vulnerability of the decodeutf8 function in the base/gputf8.c software component of the Ghostscript document processing software is related to deficiencies in checking the path name to the restricted-access directory. Exploiting this vulnerability could allow an attacker to gain access to...

The vulnerability of the genirq/msi component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the genirq/msi component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the `include/linux/kvm_host.h` component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the include/linux/kvmhost.h component of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

CVE-2025-27262

Ericsson Indoor Connect 8855 contains a command injection vulnerability which if exploited can result in an escalation of privileges...

Zoom Workplace < 6.5.0 Vulnerability (ZSB-25035)

The version of Zoom Workplace installed on the remote host is prior to 6.5.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25035 advisory. - Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to...

The vulnerability of the FFmpeg multimedia library, related to improper control of resource identifiers (“resource injection”), allows attackers to gain unauthorized access to protected information and compromise its integrity.

The vulnerability of the FFmpeg multimedia library is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and compromise its integrity...

CVE-2025-59410

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the code in the scheduler for downloading a tiny file is hard coded to use the HTTP protocol, rather than HTTPS. This means that an attacker could perform a Man-in-the-Middle attack, changing th...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the getAuthToken function. An attacker can cause denial of service and compromise file integrity by performing a network-level man-in-the-middle attack that provides invalid data to the process. Remediation...

Dragonfly's manager makes requests to external endpoints with disabled TLS authentication

Impact The Manager disables TLS certificate verification in two HTTP clients figures 3.1 and 3.2. The clients are not configurable, so users have no way to re-enable the verification. golang func getAuthTokenctx context.Context, header http.Header string, error skipped client := &http.Client...

Linux Distros Unpatched Vulnerability : CVE-2023-53317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix WARNING in mbfindextent Syzbot found the following issue: EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioreadnolock,...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from Xen Open Source. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. Xen has a security vulnerability that can be exploited by...

The vulnerability of the Kerberos authentication network protocol arises from the use of an algorithm that does not meet security requirements for hash functions. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the Kerberos authentication network protocol lies in the use of an algorithm that does not meet security requirements for the hash function. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

setuptools: Path Traversal Vulnerability in setuptools PackageIndex

A path traversal vulnerability in the Python setuptools library allows attackers with limited system access to write files outside the intended temporary directory by manipulating package download URLs. This flaw bypasses basic filename sanitization and can lead to unauthorized overwrites of...

setuptools: Path Traversal Vulnerability in setuptools PackageIndex

A path traversal vulnerability in the Python setuptools library allows attackers with limited system access to write files outside the intended temporary directory by manipulating package download URLs. This flaw bypasses basic filename sanitization and can lead to unauthorized overwrites of...

CVE-2025-0034

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRVSOCCMDIDSRIOVSPATIALPART and cause read or write past the end of allocated arrays, potentially resulting in a loss of platform integrity or denial of service...