EUVD-2025-5087

Malicious code in bioql PyPI...

EUVD-2024-22182

Malicious code in bioql PyPI...

EUVD-2025-7890

Malicious code in bioql PyPI...

EUVD-2024-2761

Malicious code in bioql PyPI...

EUVD-2024-0907

Malicious code in bioql PyPI...

EUVD-2025-21032

Malicious code in bioql PyPI...

EUVD-2024-45809

Malicious code in bioql PyPI...

EUVD-2024-3398

Malicious code in bioql PyPI...

EUVD-2024-2723

Malicious code in bioql PyPI...

Slackware Linux 15.0 / current fetchmail Vulnerability (SSA:2025-276-01)

The version of fetchmail installed on the remote host is prior to 6.4.27 / 6.5.6. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-276-01 advisory. New fetchmail packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the...

Files or Directories Accessible to External Parties

Overview Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties due to improper restriction of file read. An attacker can obtain sensitive information by sending crafted requests to exposed resources. Note: This is only exploitable if the attacker...

Files or Directories Accessible to External Parties

Overview org.apache.kylin:kylin-server is an analytics Engine, contributed by eBay Inc., provides SQL interface and multi-dimensional analysis OLAP on Hadoop supporting extremely large datasets. Affected versions of this package are vulnerable to Files or Directories Accessible to External Partie...

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel via the /api/user/updateuser endpoint. An attacker can gain unauthorized access by exploiting this endpoint to bypass authentication mechanisms. Remediation Upgrade...

Improper Neutralization of Data within XPath Expressions ('XPath Injection')

Overview smolagents is a 🤗 smolagents: a barebones library for agents. Agents write python code to call tools or orchestrate other agents. Affected versions of this package are vulnerable to Improper Neutralization of Data within XPath Expressions 'XPath Injection' via the searchitemctrlf functio...

CVE-2025-39706 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-39706 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38574 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38574 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39760 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-39760 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38691 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38691 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38349 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38349 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38590 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38590 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...