4448 matches found
EUVD-2024-0289
Malicious code in bioql PyPI...
EUVD-2022-30398
Malicious code in bioql PyPI...
Moderate: Red Hat Security Advisory: Submariner v0.20.2 security fixes and container updates
Submariner v0.20.2 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
USN-7780-1 qtbase-opensource-src vulnerabilities
It was discovered that Qt did not correctly handle certain inputs when using the SQL ODBC driver plugin. An attacker could possibly use this issue to cause a denial of service. CVE-2023-24607 It was discovered that Qt did not correctly parse certain strict-transport- security headers. An attacker...
Virtuozzo Hybrid Infrastructure 7.1 (7.1.0-179)
In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover the compute service, file and object storage, as well as updates. Additionally, this release delivers stability improvements and addresses issues found in previous releases. Vulnerability id: VSTOR-91660...
September 25, 2025—KB5066198 (OS Build 19045.6396) Preview
None None...
GHSA-5W3J-GWGH-4RFV H2O affected by a deserialization vulnerability
A deserialization vulnerability exists in h2oai/h2o-3 versions = 3.46.0.7, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and...
CVE-2025-6544 Deserialization Vulnerability in h2oai/h2o-3
A deserialization vulnerability exists in h2oai/h2o-3 versions = 3.46.0.8, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and...
CVE-2025-6544 Deserialization Vulnerability in h2oai/h2o-3
A deserialization vulnerability exists in h2oai/h2o-3 versions = 3.46.0.8, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and...
H2O 安全漏洞
H2O is an open source in-memory platform for distributed, scalable machine learning from H2O.ai. A security vulnerability exists in H2O 3.46.0.8 and earlier versions, which stems from improper handling of JDBC connection parameters and could lead to reading arbitrary system files and executing...
installer Privilege Escalation
The vulnerability of the software installer for improving the performance of the Intel Connectivity Performance Suite wireless network is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow an attacker to enhance their privilege...
TCP/IP Connectivity Utilities Privilege Escalation
The vulnerability of the TCP/IP Connectivity Utilities component in IBM i operating systems is related to access control errors. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...
Linux Distros Unpatched Vulnerability : CVE-2023-53168
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: ucsiacpi: Increase the command completion timeout Commit 130a96d698d7 usb: typec: ucsi: acpi: Increase command completion timeout value increased the timeo...
Debian dla-4300 : libapache2-mod-shib - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4300 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4300-1 [email protected] https://www.debian.org/lts/security/...
CVE-2025-9943
An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing f...
CVE-2025-9943
An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing f...
UBUNTU-CVE-2025-9943
An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing f...
CVE-2025-9943
An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing f...
CVE-2025-9943 Unauthenticated SQL Injection Vulnerability in Shibboleth Service Provider
An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing f...
CVE-2025-9943
The Shibboleth Service Provider (SP) is vulnerable to a blind SQL injection in the "ID" attribute of the SAML response. This issue occurs when the replay cache is configured to use an SQL database as a storage service and the database connection utilizes the ODBC plugin . The root cause is insuff...