EUVD-2022-2208

Malicious code in bioql PyPI...

EUVD-2025-29573

Malicious code in bioql PyPI...

EUVD-2022-26769

Malicious code in bioql PyPI...

EUVD-2023-26277

Malicious code in bioql PyPI...

EUVD-2023-26209

Malicious code in bioql PyPI...

EUVD-2022-5477

Malicious code in bioql PyPI...

EUVD-2021-6836

Malicious code in bioql PyPI...

EUVD-2022-5121

Malicious code in bioql PyPI...

EUVD-2021-27988

Malicious code in bioql PyPI...

EUVD-2025-27623

Malicious code in bioql PyPI...

EUVD-2024-40290

Malicious code in bioql PyPI...

EUVD-2022-54628

Malicious code in bioql PyPI...

EUVD-2022-2145

Malicious code in bioql PyPI...

CVE-2025-54289 Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which

...

i40e: remove read access to debugfs files

...

SSH Communications Security SSH Tectia Server 安全漏洞

SSH Communications Security SSH Tectia Server is a remote login server software from SSH Communications Security, Finland. A security vulnerability exists in SSH Communications Security SSH Tectia Server versions prior to 6.6.6, which stems from a vulnerability that could allow an attacker to rea...

CVE-2025-10847

CVE-2025-10847 concerns Broadcom’s DX Unified Infrastructure Management (Nimsoft/UIM) robot/controller ACL handling. Connected sources indicate an improper ACL handling flaw that allows a remote attacker to execute commands and read from or write to the target system via the robot component. The ...

CVE-2025-39901

In the Linux kernel, the following vulnerability has been resolved: i40e: remove read access to debugfs files The 'command' and 'netdevops' debugfs files are a legacy debugging interface supported by the i40e driver since its early days by commit 02e9c290814c "i40e: debugfs interface". Both of...

AZL-72355 CVE-2025-39901 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: i40e: remove read access to debugfs files The 'command' and 'netdevops' debugfs files are a legacy debugging interface supported by the i40e driver since its early days by commit 02e9c290814c "i40e: debugfs interface". Both of...