EUVD-2022-4434

Malicious code in bioql PyPI...

EUVD-2023-37356

Malicious code in bioql PyPI...

EUVD-2023-25894

Malicious code in bioql PyPI...

EUVD-2021-7168

Malicious code in bioql PyPI...

EUVD-2022-30347

Malicious code in bioql PyPI...

EUVD-2025-25367

Malicious code in bioql PyPI...

EUVD-2023-40541

Malicious code in bioql PyPI...

EUVD-2023-25875

Malicious code in bioql PyPI...

EUVD-2023-36321

Malicious code in bioql PyPI...

EUVD-2022-27192

Malicious code in bioql PyPI...

EUVD-2022-55317

Malicious code in bioql PyPI...

EUVD-2022-46915

Malicious code in bioql PyPI...

EUVD-2022-55315

Malicious code in bioql PyPI...

EUVD-2023-28859

Malicious code in bioql PyPI...

mysql-selinux and mysql8.4 security update

An update is available for mysql8.4, mysql-selinux. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MySQL is a multi-user, multi-threaded SQL database server...

mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the procedure module. An attacker can execute arbitrary code by sending specially crafted procedure files. Details Serialization is a process of converting an object into a sequence of bytes which c...

CVE-2025-9487

The Admin and Site Enhancements ASE WordPress plugin before 7.9.8 does not sanitise SVG files when uploaded via xmlrpc.php when such uploads are enabled, which could allow users to upload a malicious SVG containing XSS payloads...

CVE-2025-59305

Improper authorization in the background migration endpoints of Langfuse 3.1 before d67b317 allows any authenticated user to invoke migration control functions. This can lead to data corruption or denial of service through unauthorized access to TRPC endpoints such as backgroundMigrations.all,...

CVE-2025-59305

Improper authorization in the background migration endpoints of Langfuse 3.1 before d67b317 allows any authenticated user to invoke migration control functions. This can lead to data corruption or denial of service through unauthorized access to TRPC endpoints such as backgroundMigrations.all,...