EUVD-2024-0679

Malicious code in bioql PyPI...

EUVD-2023-58791

Malicious code in bioql PyPI...

EUVD-2023-23417

Malicious code in bioql PyPI...

EUVD-2022-41363

Malicious code in bioql PyPI...

EUVD-2023-33631

Malicious code in bioql PyPI...

EUVD-2024-22993

Malicious code in bioql PyPI...

EUVD-2025-3947

Malicious code in bioql PyPI...

EUVD-2023-46977

Malicious code in bioql PyPI...

EUVD-2025-10857

Malicious code in bioql PyPI...

EUVD-2021-28651

Malicious code in bioql PyPI...

EUVD-2023-1375

Malicious code in bioql PyPI...

EUVD-2025-8618

Malicious code in bioql PyPI...

CLSA-2025-1758228073 Fix CVE(s): CVE-2023-30630

SECURITY UPDATE: Overwrite a local file - debian/patches/CVE-2023-30630.patch: Prevent --dump-bin from overwriting local files to address privilege escalation vulnerability - CVE-2023-30630...

Flowise has an Arbitrary File Read

Summary An arbitrary file read vulnerability in the chatId parameter supplied to both the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints allows unauthenticated users to read unintended files on the local filesystem. In the default Flowise configuration this allows...

ROS-20250912-12

A vulnerability in the cross-platform BitTorrent client qBittorrent is related to the lack of blocking access to the local file specified in the link URL. Exploitation of the vulnerability could allow an attacker, acting remotely, to gain access to confidential data...

Linux Distros Unpatched Vulnerability : CVE-2021-3779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. Thi...

CVE-2025-9273

CData API Server MySQL Misconfiguration Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of CData API Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

CVE-2025-9273

CData API Server MySQL Misconfiguration Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of CData API Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

Linux Distros Unpatched Vulnerability : CVE-2021-31863

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient input validation in the Git repository integration of Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows Redmine users to read...

Linux Distros Unpatched Vulnerability : CVE-2025-44021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling if a deployment was performed via the API. A malicious...