EUVD-2024-0003

Malicious code in bioql PyPI...

EUVD-2023-58916

Malicious code in bioql PyPI...

EUVD-2025-21938

Malicious code in bioql PyPI...

EUVD-2025-21906

Malicious code in bioql PyPI...

EUVD-2022-55612

Malicious code in bioql PyPI...

EUVD-2025-28577

Malicious code in bioql PyPI...

EUVD-2025-27476

Malicious code in bioql PyPI...

EUVD-2025-29348

Malicious code in bioql PyPI...

EUVD-2025-29062

Malicious code in bioql PyPI...

EUVD-2024-54941

Malicious code in bioql PyPI...

EUVD-2025-25696

Malicious code in bioql PyPI...

EUVD-2022-6301

Malicious code in bioql PyPI...

EUVD-2022-44399

Malicious code in bioql PyPI...

EUVD-2023-58252

Malicious code in bioql PyPI...

EUVD-2025-31614

Malicious code in bioql PyPI...

Missing Origin Validation in WebSockets

Overview Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets via the operations API response, which includes secret values used for authenticating WebSocket connections. An attacker can execute arbitrary commands with the privileges of another user by...

Canonical LXD Vulnerable to Privilege Escalation via WebSocket Connection Hijacking in Operations API

Impact LXD's operations API includes secret values necessary for WebSocket connections when retrieving information about running operations. These secret values are used for authentication of WebSocket connections for terminal and console sessions. Therefore, attackers with only read permissions...

CVE-2025-59952

MinIO Java SDK is a Simple Storage Service aka S3 client to perform bucket and object operations to any Amazon S3 compatible object storage service. In minio-java versions prior to 8.6.0, XML tag values containing references to system properties or environment variables were automatically...

In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.

...

CVE-2021-4460

CVE-2021-4460 affects the Linux kernel drm/amdkfd path. The issue is a UBSAN shift-out-of-bounds warning when get_num_sdma_queues or get_num_xgmi_sdma_queues is 0, causing a shift by the operand’s bit width (undefined behavior). The fix changes the code to set num_sdma_queues or num_xgmi_sdma_que...