mariadb: MariaDB Server Crash via Item_direct_view_ref

A flaw was found in MariaDB Server. This vulnerability may allow an attacker to crash the database via Itemdirectviewref::derivedfieldtransformerforwhere...

WordPress TaxoPress plugin <= 3.40.1 - Authenticated (Contributor+) SQL Injection via ORDER BY Clause vulnerability

Authenticated Contributor+ SQL Injection via ORDER BY Clause vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin TaxoPress versions = 3.40.1...

Trend Micro Endpoint Encryption ProcessWhereClause Privilege Escalation

The vulnerability of the ProcessWhereClause function in the PolicyServer server, a component of Trend Micro Endpoint Encryption TMEE encryption software, relates to the lack of security measures for handling SQL query structures. Exploiting this vulnerability can allow an attacker to enhance thei...

CVE-2025-34304

IPFire

CVE-2025-4203 wpForo Forum <= 2.4.8 - Unauthenticated SQL Injection via get_members Function

The wpForo Forum plugin for WordPress is vulnerable to error‐based or time-based SQL Injection via the getmembers function in all versions up to, and including, 2.4.8 due to missing integer validation on the 'offset' and 'rowcount' parameters. The function blindly interpolates 'rowcount' into a...

EUVD-2014-3116

Malware in sbrugna...

EUVD-2015-3459

Malware in sbrugna...

EUVD-2020-4770

Malware in sbrugna...

EUVD-2020-8131

Malware in sbrugna...

EUVD-2020-23194

Malware in sbrugna...

EUVD-2020-30097

Malware in sbrugna...

EUVD-2021-29050

Malicious code in bioql PyPI...

Django: SQL Injection in Django ORM via Unvalidated `_connector` in Q Objects

A critical SQL injection vulnerability was discovered in the Django ORM's handling of Q objects. The internal WhereNode.assql method used unsafe string formatting to inject the query connector, which could be controlled by an attacker through the connector key when creating a Q object. This allow...

MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where.

...

TencentOS Server 4: sqlite (TSSA-2025:0702)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0702 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2025-38110

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of- bounds clause 45 read/write access When using publicly...

net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in ORDER BY clauses. An attacker can cause denial of service or access sensitive process memory via crafted SELECT statement with a large number of terms in the ORDER BY clause. Remediation Upgrade sqlite3...

kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

A flaw was found in the Linux kernel's MDIO Management Data Input/Output bus subsystem. This vulnerability allows a local user with administrative privileges to cause memory corruption or information disclosure by supplying an out-of-range physical layer PHY address through an input/output contro...

kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

A flaw was found in the Linux kernel's MDIO Management Data Input/Output bus subsystem. This vulnerability allows a local user with administrative privileges to cause memory corruption or information disclosure by supplying an out-of-range physical layer PHY address through an input/output contro...