EUVD-2020-0098

Malware in sbrugna...

SUSE CVE-2023-53547

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix sdma v4 sw fini error Fix sdma v4 sw fini error for sdma 4.2.2 to solve the following general protection fault +0.108196 general protection fault, probably for non-canonical address 0xd5e5a4ae79d24a32: 0000 1...

CVE-2023-53547

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix sdma v4 sw fini error Fix sdma v4 sw fini error for sdma 4.2.2 to solve the following general protection fault +0.108196 general protection fault, probably for non-canonical address 0xd5e5a4ae79d24a32: 0000 1...

CVE-2023-53547: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix sdma v4 sw fini error Fix sdma v4 sw fini error for sdma 4.2.2 to solve the following general protection fault +0.108196 general protection fault, probably for non-canonical address 0xd5e5a4ae79d24a32: 0000 1...

EUVD-2022-38044

Malicious code in bioql PyPI...

EUVD-2024-36409

Malicious code in bioql PyPI...

EUVD-2023-45440

Malicious code in bioql PyPI...

SUSE CVE-2025-40779

If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the kea-dhcp4 process will abort with an assertion failure. This happens only if the client request is unicast directly to Kea; broadcast messages do not cause the problem...

MAL-2025-41472 Malicious code in @twork-data-services/communication-api-v4-communication-voice (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-53971: Incorrect Authorization

Mattermost versions 10.5.x = 10.5.8, 9.11.x = 9.11.17 fail to properly validate authorization for team scheme role modifications which allows Team Admins to demote Team Members to Guests via the PUT /api/v4/teams/team-id/members/user-id/schemeRoles API endpoint...

CVE-2025-47870: Missing Authentication for Critical Function

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.9.x = 10.9.2 fail to sanitize the team invite ID in the POST /api/v4/teams/:teamId/restore endpoint which allows an team admin with no member invite privileges to get the team’s invite id...

Malicious code in example-ethers-v4 (npm)

The package example-ethers-v4 was found to contain malicious code...

MAL-2025-20032 Malicious code in example-ethers-v4 (npm)

The package example-ethers-v4 was found to contain malicious code...

MAL-2025-17208 Malicious code in clusterpoint-api-v4 (npm)

The package clusterpoint-api-v4 was found to contain malicious code...

Malicious code in @zalastax/nolb-_v4 (npm)

The package @zalastax/nolb-v4 was found to contain malicious code...

MAL-2025-10557 Malicious code in @zalastax/nolb-_v4 (npm)

The package @zalastax/nolb-v4 was found to contain malicious code...

CVE-2025-27845: Exposure of Sensitive Information to an Unauthorized Actor

In ESPEC North America Web Controller 3 before 3.3.4, /api/v4/auth/ with any invalid authentication request results in exposing a JWT secret. This allows for elevated permissions to the UI...

CVE-2023-41525: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...

CVE-2023-41526: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters...

CVE-2025-54799: Cleartext Transmission of Sensitive Information

Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...