EUVD-2021-27541

Malicious code in bioql PyPI...

EUVD-2021-7738

Malicious code in bioql PyPI...

EUVD-2022-49616

Malicious code in bioql PyPI...

EUVD-2022-49615

Malicious code in bioql PyPI...

EUVD-2023-46404

Malicious code in bioql PyPI...

EUVD-2024-0360

Malicious code in bioql PyPI...

EUVD-2025-17558

Malicious code in bioql PyPI...

EUVD-2022-29296

Malicious code in bioql PyPI...

EUVD-2023-52140

Malicious code in bioql PyPI...

EUVD-2025-20227

Malicious code in bioql PyPI...

EUVD-2022-6404

Malicious code in bioql PyPI...

SUSE-SU-2025:03445-1 Security update for snpguest

This update for snpguest fixes the following issues: - CVE-2024-12224: idna: acceptance of Punycode labels that do not produce any non-ASCII output may lead to incorrect hostname comparisons and incorrect URL parsing bsc1243869. - CVE-2025-3416: openssl: use-after-free in Md::fetch and...

K000156731: ImageMagick vulnerabilities CVE-2021-20312, CVE-2021-20313, CVE-2021-3596, and CVE-2021-4219

Security Advisory Description CVE-2021-20312 A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using...

openssl:provider: Heap-buffer-overflow in aes_xts_init

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5367200136626176 Project: openssl Fuzzing Engine: afl Fuzz Target: provider Job Type: aflasanopenssl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x763d9d30c250 Crash Stat...

SUSE-SU-2025:03307-1 Security update for sevctl

This update for sevctl fixes the following issues: - CVE-2024-12224: idna: Fixed improper validation of unsafe equivalence in punycode. bsc1243860 - CVE-2025-3416: openssl: Fixed use-after-free in Md::fetch and Cipher::fetch bsc1242618...

ProFTPD < 1.3.8b OpenSSH Terrapin Attack

ProFTPD is prone to the SSH SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:proftpd:proftpd"; ifdescription...

Security update for krb5

This update for krb5 fixes the following issues: CVE-2025-3576: weakness in the MD5 checksum design allows for spoofing of GSSAPI-protected messages that are using RC4-HMAC-MD5 bsc1241219. Krb5, as a very old protocol, supported quite a number of ciphers that are not longer up to current...

CVE-2025-55912

creationtimestamp| type| source ---|---|--- 2025-09-17 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz2qay4iex25 2025-09-18 07:08:47+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3lz3s55r7pt2j 2025-09-18 18:43:15+00:00| seen|...

gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite()

A NULL pointer dereference flaw was found in the GnuTLS software in gnutlsfigurecommonciphersuite...

Security update for sevctl

This update for sevctl fixes the following issues: CVE-2025-3416: openssl: Fixed Use-After-Free in Md::fetch and Cipher::fetch bsc1242618 CVE-2024-12224: idna: Fixed Punycode improper validation bsc1243860 Patch Instructions: To install this SUSE update use the SUSE recommended installation metho...