EUVD-2022-1741

Malicious code in bioql PyPI...

EUVD-2025-6529

Malicious code in bioql PyPI...

EUVD-2023-2749

Malicious code in bioql PyPI...

EUVD-2017-12852

Malicious code in bioql PyPI...

EUVD-2022-3675

Malicious code in bioql PyPI...

EUVD-2022-5320

Malicious code in bioql PyPI...

EUVD-2021-8702

Malicious code in bioql PyPI...

EUVD-2025-5324

Malicious code in bioql PyPI...

EUVD-2025-3597

Malicious code in bioql PyPI...

EUVD-2023-35299

Malicious code in bioql PyPI...

EUVD-2022-27887

Malicious code in bioql PyPI...

EUVD-2023-26944

Malicious code in bioql PyPI...

EUVD-2023-36263

Malicious code in bioql PyPI...

EUVD-2023-1842

Malicious code in bioql PyPI...

EUVD-2022-1411

Malicious code in bioql PyPI...

CVE-2025-39912

In the Linux kernel, the following vulnerability has been resolved: nfs/localio: restore creds before releasing pageio data Otherwise if the nfsd filecache code releases the nfsdfile immediately, it can trigger the BUGONcred == current-cred in putcred when it puts the nfsdfile-nffile-f-cred...

CVE-2025-46152

CVE-2025-46152 affects PyTorch where bitwise_right_shift can produce incorrect output for certain out-of-bounds values of the OTHER argument. Affected versions include PyTorch before 2.7.0; a patched version is available. The connected Mariner data notes PyTorch packages less than 2.2.2-9 are aff...

CVE-2025-59335 CubeCart Session Not Invalidated After Password Change

CubeCart is an ecommerce software solution. Prior to version 6.5.11, there is an absence of automatic session expiration following a user's password change. This oversight poses a security risk, as if a user forgets to log out from a location where they accessed their account, an unauthorized use...

Firefox -- Spoofing issue in the Site Permissions component

https://bugzilla.mozilla.org/showbug.cgi?id=1665334 reports: Spoofing issue in the Site Permissions component...

CVE-2025-27238 API hostprototype.get lists data to users with insufficient authorization.

Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them...