EUVD-2024-29065

Malicious code in bioql PyPI...

EUVD-2024-25140

Malicious code in bioql PyPI...

EUVD-2022-7551

Malicious code in bioql PyPI...

valkey security update

An update is available for valkey. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Valkey is an advanced key-value store. It is often referred to as a data...

NewStart CGSL MAIN 6.06 : cloud-init Multiple Vulnerabilities (NS-SA-2025-0230)

The remote NewStart CGSL host, running version MAIN 6.06, has cloud-init packages installed that are affected by multiple vulnerabilities: - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included sshdeletekeys: 0, disabling cloud-init's deletion of ssh host keys. In some...

Improper Neutralization of Null Byte or NUL Character

Overview Affected versions of this package are vulnerable to Improper Neutralization of Null Byte or NUL Character due to improper handling of unexpected conditions in the function mghandleformrequest. An attacker can cause the application to become unresponsive or crash by sending specially...

Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2025-5187)

Summary IBM Cloud Kubernetes Service is affected by a security vulnerability in the Kubernetes API server that may allow node users to delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. CVE-2025-5187. Vulnerability Details CVEID:...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the elfswapshdr function in bfd/elfcode.h of the Linker component. An attacker can execute arbitrary code or cause a denial of service by providing crafted input that triggers a heap-based buffer overflow...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the dumpdwarfsection function. An attacker can cause a denial of service by providing specially crafted input that triggers an out-of-bounds read during processing. Remediation A fix was pushed into the master...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the dumpdwarfsection function. An attacker can cause a denial of service by providing specially crafted input that triggers an out-of-bounds read during processing. Remediation A fix was pushed into the master...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the loadDocImpl function. An attacker can cause a denial of service by triggering a null pointer dereference through local access to the affected component. Remediation Upgrade behaviortree.cpp to version...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the fromJson function. An attacker can cause a denial of service by providing a crafted argument to trigger a null pointer dereference. Remediation A fix was pushed into the master branch but not yet...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the fromJson function. An attacker can cause a denial of service by providing a crafted argument to trigger a null pointer dereference. Remediation Upgrade behaviortree.cpp to version 4.9.0 or higher...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the uclincludecommon function. An attacker can execute arbitrary code or cause a denial of service by supplying crafted input to this function. Remediation A fix was pushed into the master branch but not y...

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the ParseScript function in the Diagnostic Message Handler component of scriptparser.cpp. An attacker can execute arbitrary code or cause a denial of service by providing a specially crafted argument to...

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via improper handling of memory buffers in asnbuildobjid in lib/snmplib/asn1.c. An attacker can cause a denial of service by sending specially crafted input that triggers a buffer overflow. Remediation A fix...

CVE-2025-58025

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Master Slider master-slider allows Stored XSS.This issue affects Master Slider: from n/a through = 3.11.0...

CVE-2025-58025

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Master Slider allows Stored XSS. This issue affects Master Slider: from n/a through 3.11.0...

CVE-2025-58025

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Master Slider master-slider allows Stored XSS.This issue affects Master Slider: from n/a through = 3.11.0...

WordPress Master Slider Plugin <= 3.11.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Master Slider versions = 3.11.0...