PT-2026-66571

Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue...

The vulnerability of the Glances monitoring tool lies in the lack of protection for service data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Glances monitoring tool is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Crowdstrike Falcon endpoint protection software lies in its lack of a mechanism for verifying the source of files. This allows attackers to delete any files they desire.

The vulnerability of the Crowdstrike Falcon endpoint protection software is related to a lack of verification mechanism for the source of the source code. Exploiting this vulnerability could allow an attacker to delete arbitrary files...

EUVD-2002-0928

Malware in sbrugna...

EUVD-2018-8355

Malware in sbrugna...

EUVD-2010-0254

Malware in sbrugna...

EUVD-2005-0088

Malware in sbrugna...

EUVD-2011-4615

Malware in sbrugna...

EUVD-2011-4690

Malware in sbrugna...

EUVD-2021-12314

Malware in sbrugna...

EUVD-2015-2978

Malware in sbrugna...

EUVD-2024-48343

Malicious code in bioql PyPI...

EUVD-2022-40763

Malicious code in bioql PyPI...

CVE-2025-34523 Arcserve UDP < 10.2 Pre-Authentication Heap Overflow

A heap-based buffer overflow vulnerability exists in the network-facing input handling routines of Arcserve Unified Data Protection UDP. This flaw is reachable without authentication and results from improper bounds checking when processing attacker-controlled input. By sending specially crafted...

mod_auth_openidc:2.3 security update

An update is available for module.cjose, module.modauthopenidc, modauthopenidc, cjose. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The modauthopenidc is an...

CVE-2025-43863 vantage6 lacks brute-force protection on change password functionality

vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Learning and Multi-Party Computation. If attacker gets access to an authenticated session, they can try to brute-force the user password by using the change password functionality...

CVE-2022-43751

McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a subdirectory that may be controllable by an unprivileged user. This may have allowed the unprivileged user to execute arbitrary code with system...

CVE-2021-25418

Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrary activity in specific condition...

CVE-2020-19886

DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcmspid=-80=9 can delete any menu...

CVE-2019-15686

Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component allowed an attacker remotely disable various anti-virus protection features. DoS, Bypass...