EUVD-2020-20322

Malware in sbrugna...

EUVD-2021-19430

Malware in sbrugna...

EUVD-2020-27023

Malware in sbrugna...

EUVD-2017-8090

Malware in sbrugna...

EUVD-2023-2999

Malicious code in bioql PyPI...

EUVD-2023-57862

Malicious code in bioql PyPI...

EUVD-2022-5338

Malicious code in bioql PyPI...

EUVD-2022-1564

Malicious code in bioql PyPI...

EUVD-2023-2952

Malicious code in bioql PyPI...

EUVD-2024-29191

Malicious code in bioql PyPI...

EUVD-2021-32629

Malicious code in bioql PyPI...

EUVD-2022-1786

Malicious code in bioql PyPI...

EUVD-2023-2889

Malicious code in bioql PyPI...

EUVD-2023-2968

Malicious code in bioql PyPI...

WordPress LatePoint plugin <= 5.1.94 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by WordFence in WordPress Plugin LatePoint versions = 5.1.94...

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to plaintext token modification due to the krb5 package (CVE-2024-37370)

Summary krb5 is used by DataStage on Cloud Pak for Data as part of network authentication. Vulnerability Details CVEID:CVE-2024-37370 DESCRIPTION: In MIT Kerberos 5 aka krb5 before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the...

PT-2025-35358

Name of the Vulnerable Software and Affected Versions IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data versions 4.8.4 through 5.2.0 Description IBM watsonx Orchestrate is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, potentially allowing...

Linux Distros Unpatched Vulnerability : CVE-2021-22096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the...

CVE-2025-54793

Astro is a web framework for content-driven websites. In versions 5.2.0 through 5.12.7, there is an Open Redirect vulnerability in the trailing slash redirection logic when handling paths with double slashes. This allows an attacker to redirect users to arbitrary external domains by crafting URLs...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a sensitive header drop in Golang/net/http [CVE-2024-45336]

Summary IBM Watson Speech Services Cartridge is vulnerable to a sensitive header drop in Golang/net/http, which can occour following a cross-domain redirect CVE-2024-45336. The Golang/net/http package is used as part of our speech utilities. This vulnerabilitiy has been addressed. Please read the...