EUVD-2023-23608

Malicious code in bioql PyPI...

EUVD-2022-7198

Malicious code in bioql PyPI...

EUVD-2023-2609

Malicious code in bioql PyPI...

EUVD-2024-25348

Malicious code in bioql PyPI...

EUVD-2022-0043

Malicious code in bioql PyPI...

EUVD-2023-32299

Malicious code in bioql PyPI...

EUVD-2023-2361

Malicious code in bioql PyPI...

EUVD-2022-1687

Malicious code in bioql PyPI...

EUVD-2023-29542

Malicious code in bioql PyPI...

EUVD-2024-54485

Malicious code in bioql PyPI...

EUVD-2023-1118

Malicious code in bioql PyPI...

icu security update

An update is available for icu. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The International Components for Unicode ICU library provides robust and...

CVE-2025-59270 psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse

psPAS PowerShell module does not explicitly enforce TLS 1.2 within the 'Get-PASSAMLResponse' function during the SAML authentication process. An unauthenticated attacker in a 'Man-in-the-Middle' position could manipulate the TLS handshake and downgrade TLS to a deprecated protocol. Fixed in 7.0.2...

CVE-2023-53206 hwmon: (pmbus_core) Fix NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbuscore Fix NULL pointer dereference Pass i2cclient to pmbusisenabled to drop the assumption that a regulator device is passed in. This will fix the issue of a NULL pointer dereference when called from pmbusgetflags...

CVE-2025-58439

ERP is a free and open source Enterprise Resource Planning tool. In versions below 14.89.2 and 15.0.0 through 15.75.1, lack of validation of parameters left certain endpoints vulnerable to error-based SQL Injection. Some information like version could be retrieved. This issue is fixed in versions...

f2fs: fix to avoid potential panic during recovery

...

PT-2025-35495

Name of the Vulnerable Software and Affected Versions: StreamVault versions prior to 250822 Description: StreamVault is a multi-platform video parsing and downloading tool. Prior to version 250822, after logging into the StreamVault system, an attacker can modify system parameters, construct...

CVE-2025-55304 Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A denial-of-service was found in Exiv2 version 0.28.5: a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata can cause Exiv2 to run for a long time...

PT-2025-35096

Name of the Vulnerable Software and Affected Versions Asterisk versions prior to 18.26.4 Asterisk versions prior to 18.9-cert17 Description Asterisk, an open source private branch exchange and telephony toolkit, is susceptible to resource exhaustion due to a lack of session termination. This can...

OpenBao TOTP Secrets Engine Code Reuse

Impact OpenBao's TOTP secrets engine could accept valid codes multiple times rather than strictly-once. This was caused by unexpected normalization in the underlying TOTP library. Patches OpenBao v2.3.2 will patch this issue. In patching, codes which were not normalized strictly N numeric digits...