227 matches found
EUVD-2022-33600
Malicious code in bioql PyPI...
EUVD-2025-12742
Malicious code in bioql PyPI...
OESA-2025-2117 exiv2 security update
Exiv2 is a Cross-platform C++ library and a command line utility to manage image metadata. It provides fast and easy read and write access to the Exif, IPTC and XMP metadata and the ICC Profile embedded within digital images in various formats. Security Fixes: A vulnerability, which was classifie...
GHSA-W54X-XFXG-4GXQ NeuVector process with sensitive arguments lead to leakage
Impact When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation. For example, java -cp /app ... Djavax.net.ssl.trustStorePassword= The command with the password appears in the NeuVector security event. To prevent this, NeuVector uses the...
PT-2025-35111
Name of the Vulnerable Software and Affected Versions: NeuVector versions prior to 5.4.6 Description: NeuVector process handling can lead to the leakage of sensitive arguments, such as passwords, within security event logs. The software uses regular expressions to detect and redact sensitive data...
Linux Distros Unpatched Vulnerability : CVE-2025-22125
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid1,raid10: don't ignore IO flags If blk-wbt is enabled by default, it's found that raid write performance is quite bad because all IO are throttled by wbt...
CVE-2025-54646
Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance...
CVE-2025-54646
Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance...
CVE-2025-54646
Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance...
CVE-2025-54646
Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance...
CVE-2025-54646
Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance...
CVE-2025-54646
The CVE-2025-54646 entry concerns Huawei HarmonyOS/EMUI with an inadequate packet length check in the BLE module. The root cause is a faulty packet length validation in the BLE component, leading to potential performance impact when exploited. Public data provides two CVSS vectors: NVD’s CVSSv3.1...
PT-2025-32090 · Unknown · Ble Module
Name of the Vulnerable Software and Affected Versions: BLE module affected versions not specified Description: The vulnerability is due to an inadequate packet length check in the BLE module. Successful exploitation may affect performance. Recommendations: At the moment, there is no information...
Linux Distros Unpatched Vulnerability : CVE-2024-42142
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-switch, Create ingress ACL when needed Currently, ingress acl is used for three...
CVE-2025-7674 navify Monitoring API input validation
Improper Input Validation vulnerability in Roche Diagnostics navify Monitoring allows an attacker to manipulate input data, which may lead to a denial of service DoS due to negatively impacting the server's performance. This vulnerability has no impact on data confidentiality or integrity. This...
CVE-2025-38434 Revert "riscv: Define TASK_SIZE_MAX for __access_ok()"
In the Linux kernel, the following vulnerability has been resolved: Revert "riscv: Define TASKSIZEMAX for accessok" This reverts commit ad5643cf2f69 "riscv: Define TASKSIZEMAX for accessok". This commit changes TASKSIZEMAX to be LONGMAX to optimize accessok, because the previous TASKSIZEMAX defau...
CVE-2025-42954
SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high CPU load by executing a RFC enabled function modules without any input parameters, which results in reduced performance or interrupted operation of the affected resource. This leads to low impact on...
PT-2025-28277 · Sap · Sap Netweaver Business Warehouse
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Business Warehouse CCAW affected versions not specified Description: The issue allows a privileged attacker to cause a high CPU load by executing RFC enabled function modules without any input parameters. This results in reduced...
fastapi-guard is vulnerable to ReDoS through inefficient regex
Summary fastapi-guard detects penetration attempts by using regex patterns to scan incoming requests. However, some of the regex patterns used in detection are extremely inefficient and can cause polynomial complexity backtracks when handling specially crafted inputs. It is not as severe as...