PT-2025-40942

Name of the Vulnerable Software and Affected Versions ILIAS versions up to 8.23 ILIAS versions up to 9.13 ILIAS versions up to 10.1 Description A flaw exists due to deserialization in the unserialize function of the Test Import component. This manipulation can be initiated remotely. Recommendatio...

PT-2025-40941

Name of the Vulnerable Software and Affected Versions ILIAS versions 8.23, 9.13, and 10.1 Description A flaw exists in ILIAS related to the Certificate Import Handler component. This issue allows for Remote Code Execution, potentially triggered remotely. Recommendations Upgrade to version 8.24...

EUVD-2023-29712

Malicious code in bioql PyPI...

EUVD-2024-3051

Malicious code in bioql PyPI...

EUVD-2025-7891

Malicious code in bioql PyPI...

EUVD-2023-26624

Malicious code in bioql PyPI...

EUVD-2023-43079

Malicious code in bioql PyPI...

EUVD-2024-3438

Malicious code in bioql PyPI...

EUVD-2024-44828

Malicious code in bioql PyPI...

EUVD-2023-1909

Malicious code in bioql PyPI...

EUVD-2023-0882

Malicious code in bioql PyPI...

EUVD-2025-28825

Malicious code in bioql PyPI...

EUVD-2025-0224

Malicious code in bioql PyPI...

Information Exposure

Overview github.com/canonical/lxd is an a modern, secure and powerful system container and virtual machine manager. Affected versions of this package are vulnerable to Information Exposure via differing HTTP status code responses in the images endpoint's AllowUntrusted API. An attacker can...

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition in the repository credentials handler of the util/db/repositorysecrets.go file while performing concurrent operations for the same repository URL. An attacker can cause the server to crash and become unavailable by...

Security Bulletin: Vulnerability in Apache Tomcat affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Apache Tomcat has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to HTTP parameter pollution [CVE-2025-7783]

Summary Node.js module form-data is used by IBM App Connect Enterprise Certified Container. IBM App Connect Enterprise Certified Container operands are vulnerable to HTTP parameter pollution. This bulletin provides patch information to address the reported vulnerability in Node.js module form-dat...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling due to improper parsing of the HTTP trailer section in the parse function. An attacker can bypass security controls, launch targeted attacks against users, or poison web caches by crafting specially formed HTTP...

DEBIAN-CVE-2025-4444

A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17. Impacted is an unknown function of the component Onion Service Descriptor Handler. Performing manipulation results in resource consumption. The attack may be initiated remotely. The attack's complexity is rated as high. The...

PT-2025-38402

Name of the Vulnerable Software and Affected Versions Tor versions 0.4.7.16 through 0.4.8.17 Description A security flaw exists in Tor within the Onion Service Descriptor Handler component. Manipulation of this component can lead to resource consumption. The issue is potentially exploitable...