3696 matches found
EUVD-2025-4795
Malicious code in bioql PyPI...
EUVD-2021-30064
Malicious code in bioql PyPI...
EUVD-2021-28173
Malicious code in bioql PyPI...
EUVD-2022-36794
Malicious code in bioql PyPI...
EUVD-2022-36778
Malicious code in bioql PyPI...
CVE-2025-34222
Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 VA/SaaS deployments expose four admin routes – /admin/hp/certupload, /admin/hp/certdelete, /admin/certs/ca, and /admin/certs/serviceclients/scid – without any...
CVE-2025-9708 Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacks
A vulnerability exists in the Kubernetes C client where the certificate validation logic accepts properly constructed certificates from any Certificate Authority CA without properly verifying the trust chain. This flaw allows a malicious actor to present a forged certificate and potentially...
PT-2025-38069
Name of the Vulnerable Software and Affected Versions Kubernetes C client versions prior to 17.0.14 Description A flaw exists in the Kubernetes C client's certificate validation logic, allowing it to accept certificates from any Certificate Authority CA without proper trust chain verification. Th...
Linux Distros Unpatched Vulnerability : CVE-2021-27018
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to n...
CVE-2025-58447 rAthena has heap-based buffer overflow in login server
rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. Versions prior to commit 2f5248b have a heap-based buffer overflow in the login server, remote attacker to overwrite adjacent session fields by sending a crafted CASSOLOGINREQ with an oversized...
Malicious code in gi-ft-ca-rds-fortnite-2023-zdkzld (npm)
The package gi-ft-ca-rds-fortnite-2023-zdkzld was found to contain malicious code...
MAL-2025-44405 Malicious code in gi-ft-ca-rds-fortnite-2023-zdkzld (npm)
The package gi-ft-ca-rds-fortnite-2023-zdkzld was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2020-28053
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration...
Linux Distros Unpatched Vulnerability : CVE-2019-10221
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused ...
Linux Distros Unpatched Vulnerability : CVE-2024-1351
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Under certain configurations of --tlsCAFile and tls.CAFile, MongoDB Server may skip peer certificate validation which may result in untrusted connections to...
MAL-2025-10852 Malicious code in @zalastax/nolb-ca_ (npm)
The package @zalastax/nolb-ca was found to contain malicious code...
MAL-2025-20560 Malicious code in fimanagementservice_ca-paypal (npm)
The package fimanagementserviceca-paypal was found to contain malicious code...
Malicious code in @zalastax/nolb-ca_ (npm)
The package @zalastax/nolb-ca was found to contain malicious code...