EUVD-2024-34373

Malicious code in bioql PyPI...

EUVD-2024-33693

Malicious code in bioql PyPI...

EUVD-2024-34090

Malicious code in bioql PyPI...

EUVD-2025-23428

Malicious code in bioql PyPI...

EUVD-2024-46745

Malicious code in bioql PyPI...

EUVD-2023-54455

Malicious code in bioql PyPI...

EUVD-2024-16605

Malicious code in bioql PyPI...

EUVD-2024-16578

Malicious code in bioql PyPI...

EUVD-2024-16310

Malicious code in bioql PyPI...

EUVD-2024-32774

Malicious code in bioql PyPI...

EUVD-2024-32194

Malicious code in bioql PyPI...

EUVD-2024-50810

Malicious code in bioql PyPI...

EUVD-2024-51014

Malicious code in bioql PyPI...

EUVD-2024-49789

Malicious code in bioql PyPI...

EUVD-2024-34052

Malicious code in bioql PyPI...

CVE-2025-8415 Cryostat: authentication bypass if network policies are disabled

A vulnerability was found in the Cryostat HTTP API. Cryostat's HTTP API binds to all network interfaces, allowing possible external visibility and access to the API port if Network Policies are disabled, allowing an unauthenticated, malicious attacker to jeopardize the environment...

Amazon Linux 2023 : java-17-amazon-corretto, java-17-amazon-corretto-devel, java-17-amazon-corretto-headless (ALAS2023-2025-1100)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1100 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE:...

Amazon Linux 2 : java-1.8.0-amazon-corretto (ALASCORRETTO8-2025-020)

The version of java-1.8.0-amazon-corretto installed on the remote host is prior to 1.8.0462.b08-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2CORRETTO8-2025-020 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise...

Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition

Summary This bulletin for IBM SDK, Java Technology Edition covers all applicable Java SE CVEs published by Oracle as part of their July 2025 Critical Patch Update. For more information please refer to Oracle's July 2025 CPU Advisory and the CVE links referenced below. Vulnerability Details...

CVE-2025-5720 Customer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘author’ parameter in all versions up to, and including, 5.80.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...