18576 matches found
EUVD-2018-14667
Malware in sbrugna...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2025-986145)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986145 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 5.7.33 and prior and 8.0.23...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414539)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414539 advisory. A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that functio...
CVE-2025-6985 XXE Vulnerability in langchain-ai/langchain
The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSL...
CVE-2025-58579
Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration...
CVE-2025-60956
Cross Site Request Forgery CSRF vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...
CVE-2025-60956
Summary: CVE-2025-60956 affects EndRun Technologies Sonoma D12 Network Time Server (GPS) firmware version 4.00 (GPS) running on server hardware. The vulnerability is a Cross-Site Request Forgery (CSRF) flaw that could allow an attacker to cause arbitrary code execution, a denial of service, privi...
The vulnerability in the SkRegion.cpp component of the Firefox ESR web browser and Thunderbird email client allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability in the SkRegion.cpp component of the Firefox ESR web browser and Thunderbird email client is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
BIT-MONGODB-2025-6713 MongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage
An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDB Server. This may lead to access to data without further authorisation. This issue affects MongoDB Server MongoDB...
kernel security update
An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...
EUVD-2024-47868
Malicious code in bioql PyPI...
EUVD-2025-16021
Malicious code in bioql PyPI...
EUVD-2025-21512
Malicious code in bioql PyPI...
EUVD-2023-1003
Malicious code in bioql PyPI...
EUVD-2023-24218
Malicious code in bioql PyPI...
EUVD-2024-33570
Malicious code in bioql PyPI...
EUVD-2025-6292
Malicious code in bioql PyPI...
EUVD-2024-18957
Malicious code in bioql PyPI...