EUVD-2024-17183

Malicious code in bioql PyPI...

EUVD-2022-1786

Malicious code in bioql PyPI...

EUVD-2022-6068

Malicious code in bioql PyPI...

EUVD-2022-6293

Malicious code in bioql PyPI...

EUVD-2022-24933

Malicious code in bioql PyPI...

EUVD-2024-30571

Malicious code in bioql PyPI...

EUVD-2024-43996

Malicious code in bioql PyPI...

EUVD-2023-38121

Malicious code in bioql PyPI...

EUVD-2025-10620

Malicious code in bioql PyPI...

EUVD-2024-54873

Malicious code in bioql PyPI...

EUVD-2024-37608

Malicious code in bioql PyPI...

IBM InfoSphere 11.7.0.x < 11.7.1.6 SP1 Command Injection (7246170)

The version of IBM InfoSphere Information Server installed on the remote host is 11.7.0 prior to 11.7.1.6 SP1. It is, therefore, affected by a command injection vulnerability, as referenced in the 7246170 advisory. - IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an...

CVE-2025-8214

The The Pack Elementor addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typing Letter widget in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

The vulnerability of the Service Discovery Management Pack (SDMP) function in the monitoring tool for VMware Aria Operations and the VMware Tools suite allows a perpetrator to elevate their privileges to the root level.

The vulnerability of the Service Discovery Management Pack SDMP function in the VMware Aria Operations virtual infrastructure monitoring tool and the VMware Tools utility set is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to elevate their...

CVE-2025-34212

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.843 and Application prior to version 20.0.1923 VA/SaaS deployments possess CI/CD weaknesses: the build pulls an unverified third-party image, downloads the VirtualBox Extension Pack over plain HTTP without signature...

Denial Of Service (DoS)

PocketMine-MP is vulnerable to Denial Of Service DoS. The vulnerability is due to improper validation because the server does not verify uniqueness of packIds in STATUSSENDPACKS, allowing a malicious Bedrock client to send duplicate UUIDs and force repeated pack transfers until memory is exhauste...

CVE-2025-8214 The Pack Elementor addon <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typing Letter Widget

The The Pack Elementor addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typing Letter widget in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-8214

CVE-2025-8214 concerns The Pack Elementor addon for WordPress. The vulnerability is a Stored Cross-Site Scripting (XSS) in the widget “Typing Letter”, affecting all versions up to and including 2.1.5. Root cause is insufficient input sanitization and output escaping on user-supplied attributes, e...

CVE-2025-8214 The Pack Elementor addon <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typing Letter Widget

The The Pack Elementor addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typing Letter widget in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

SUSE SLES15 Security Update : kernel (Live Patch 23 for SLE 15 SP5) (SUSE-SU-2025:03400-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03400-1 advisory. This update for the Linux Kernel 5.14.21-1505005594 fixes several issues. The following security issues were fixed: - CVE-2025-38177: schhfsc:...