614 matches found
EUVD-2022-38393
Malicious code in bioql PyPI...
EUVD-2023-46258
Malicious code in bioql PyPI...
EUVD-2022-38510
Malicious code in bioql PyPI...
EUVD-2023-2890
Malicious code in bioql PyPI...
EUVD-2021-28028
Malicious code in bioql PyPI...
EUVD-2024-2249
Malicious code in bioql PyPI...
EUVD-2023-27494
Malicious code in bioql PyPI...
EUVD-2023-27509
Malicious code in bioql PyPI...
EUVD-2023-33928
Malicious code in bioql PyPI...
Exploit for CVE-2014-3566
POODLE Attack Proof of Concept A complete demonstration envir...
CVE-2025-10540
iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information such as...
dev.i10416:slackapis-core_sjs1_3 (>=0.0.1 <=0.0.2), org.creativescala:krop-core_sjs1_3 (>=0.6.0 <=0.9.4) +2 more potentially affected by CVE-2025-59822 via org.http4s:http4s-ember-core_sjs1_3 (>=1.0.0-M24 <=1.0.0-M44)
org.http4s:http4s-ember-coresjs13 MAVEN version =1.0.0-M24, =0.0.1, =0.6.0, =1.0.0-M24, =1.0.0-M24, =1.0.0-M44 Source cves: CVE-2025-59822 Source advisory: SNYK:JAVA-ORGHTTP4S-13019563...
Viessmann Vitogate 300
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to modify an intended OS command when it is sent to a downstream component, or allow an attacker to cause unexpected interactions between the client and server. 2. RECOMMENDED PRACTICES CISA recommends users...
CVE-2025-59160
Matrix JavaScript SDK is a Matrix Client-Server SDK for JavaScript and TypeScript. matrix-js-sdk before 38.2.0 has insufficient validation of room predecessor links in MatrixClient::getJoinedRooms, allowing a remote attacker to attempt to replace a tombstoned room with an unrelated...
CVE-2023-53296 sctp: check send stream number after wait_for_sndbuf
In the Linux kernel, the following vulnerability has been resolved: sctp: check send stream number after waitforsndbuf This patch fixes a corner case where the asoc out stream count may change after waitforsndbuf. When the main thread in the client starts a connection, if its out stream count is...
OSV-2025-723 Heap-buffer-overflow in processClientServerHello
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=444547710 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processtls fuzzquicgetcryptodata.c...
SUSE CVE-2025-8671
A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service DoS. By opening streams and then rapidly triggering the serv...
User Impersonation
Overview Affected versions of this package are vulnerable to User Impersonation due to insufficient authentication checks in the client and server processes. An attacker can gain unauthorized access to sensitive data by establishing a connection without proper certificate validation or...
User Impersonation
Overview Affected versions of this package are vulnerable to User Impersonation due to insufficient authentication checks in the client and server processes. An attacker can gain unauthorized access to sensitive data by establishing a connection without proper certificate validation or...
Linux Distros Unpatched Vulnerability : CVE-2020-14792
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 7u271, 8u261,...