TencentOS Server 3: prometheus-jmx-exporter (TSSA-2022:0250)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0250 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Security Bulletin: Multiple Vulnerabilities in IBM API Connect

Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.5 Vulnerability Details CVEID:CVE-2020-36732 DESCRIPTION: The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer, which makes the output more...

EUVD-2021-0165

Malware in sbrugna...

EUVD-2021-13978

Malware in sbrugna...

EUVD-2014-0005

Malware in sbrugna...

EUVD-2017-0230

Malware in sbrugna...

EUVD-2021-20736

Malware in sbrugna...

EUVD-2014-0006

Malware in sbrugna...

EUVD-2017-11478

Malware in sbrugna...

EUVD-2017-11475

Malware in sbrugna...

EUVD-2023-0249

Malicious code in bioql PyPI...

EUVD-2022-6303

Malicious code in bioql PyPI...

EUVD-2023-56110

Malicious code in bioql PyPI...

EUVD-2022-4613

Malicious code in bioql PyPI...

EUVD-2024-54360

Malicious code in bioql PyPI...

EUVD-2023-0292

Malicious code in bioql PyPI...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Console

Summary Multiple vulnerabilities were addressed in IBM Aspera Console version 3.4.7. Vulnerability Details CVEID:CVE-2022-44566 DESCRIPTION: A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter 7.0.4.1 and 6.1.7.1. When a value outside the range for a 64bit signed intege...

CVE-2025-56816

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal. The configuration file handling of the application allows attackers to upload arbitrary YAML files to the config/jdbc-driver-ext.yml path. The application parses this file using SnakeYAML's unsafe load or loadAs method without input...

Exploit for CVE-2025-56815

CVE-2025-56815 Datart 1.0.0-rc.3 is vulnerable to Directory Tr...

CVE-2025-56816

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal via uploading YAML to config/jdbc-driver-ext.yml, parsed with SnakeYAML unsafe load/loadAs. This allows attacker-controlled YAML deserialization, potentially enabling remote code execution (RCE) under certain conditions. Exploitation details ...