322 matches found
EUVD-2022-4124
Malicious code in bioql PyPI...
EUVD-2024-34169
Malicious code in bioql PyPI...
EUVD-2024-50444
Malicious code in bioql PyPI...
EUVD-2024-20960
Malicious code in bioql PyPI...
EUVD-2022-25605
Malicious code in bioql PyPI...
EUVD-2022-42290
Malicious code in bioql PyPI...
EUVD-2025-11099
Malicious code in bioql PyPI...
EUVD-2024-46745
Malicious code in bioql PyPI...
EUVD-2024-54113
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2020-12105
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenConnect through 8.08 mishandles negative return values from X509check function calls, which might assist attackers in performing man-in-the-middle attacks...
CVE-2025-54387 IPX is Vulnerable to Path Traversal via Prefix Matching Bypass
IPX is an image optimizer powered by sharp and svgo. In versions 1.3.1 and below, 2.0.0-0 through 2.1.0, and 3.0.0 through 3.1.0, the approach used to check whether a path is within allowed directories is vulnerable to path prefix bypass when the allowed directories do not end with a path...
CVE-2025-8068
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of data due to an improper capability check on the 'ajaxtrashtemplates' function in all versions up to, and including, 2.9.1. This makes it possible for authenticated attackers, wi...
CVE-2025-8198
The MinimogWP – The High Converting eCommerce WordPress Theme theme for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.9.0. This is due to an insufficient check on quantity values when changing quantities in the cart. This makes it possible for unauthenticat...
PT-2025-28536 · Microsoft · Windows Virtualization-Based Security +1
Name of the Vulnerable Software and Affected Versions: Windows Virtualization-Based Security VBS affected versions not specified Description: The issue concerns a lack of integrity check support in Windows Virtualization-Based Security VBS Enclave, allowing an authorized attacker to locally eleva...
CVE-2025-47202
In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400, the lack of a length check leads to out-of-bounds writes...
CVE-2025-26780
The CVE-2025-26780 entry concerns Samsung’s Mobile Processor (Exynos 2400) and Modem 5400. A lack of length checking in L2 handling of PDCP packets can lead to Denial of Service. Public technical details across connected sources confirm the affected components and the root cause (missing PDCP len...
CVE-2025-4571
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and modification of data due to an insufficient capability check on the permissionsCheck functions in all versions up to, and including, 4.3.0. This makes it possible for authenticated...
PT-2025-25351 · Aveva · Aveva Pi Connector For Cygnet
Name of the Vulnerable Software and Affected Versions: AVEVA PI Connector for CygNet versions 1.6.14 and prior Description: An improper validation of integrity check value issue exists that, if exploited, could allow a miscreant with elevated privileges to modify local data files in a way that...
PT-2025-24594 · Sap · Sap S/4Hana
Name of the Vulnerable Software and Affected Versions: SAP S/4HANA affected versions not specified Description: The issue is related to a missing authorization check in the Enterprise Event Enablement component. An attacker with access to the Inbound Binding Configuration can create an RFC...
CVE-2025-49011
SpiceDB (v1.44.x) vulnerability: when resolving CheckPermission paths that involve arrows with caveats, the evaluation across multiple caveated branches may incorrectly return NO_PERMISSION instead of PERMISSION. Root cause is in caveats on an arrow’ed relation affecting multi-branch permission c...