EUVD-2022-27407

Malicious code in bioql PyPI...

EUVD-2023-32069

Malicious code in bioql PyPI...

EUVD-2022-49133

Malicious code in bioql PyPI...

The vulnerability of the find_cifs_entry() function in the fs/smb/client/readdir.c module of the SMB client support library in Linux kernels allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the findcifsentry function in the fs/smb/client/readdir.c module of the SMB client support in Linux kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the Rlottie library for reproducing Lottie animations, related to reading data beyond the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Rlottie library for reproducing Lottie animations involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the MMRDecoder::scanruns method in the viewing, creation, and editing of DjVu files provided by the DjVuLibre library allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the MMRDecoder::scanruns method in the viewing, creation, and editing of DjVu files in the DjVuLibre library is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2025-42916

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database but no impact on...

The vulnerability of the SAP NetWeaver software integration platform, related to deficiencies in the deserialization mechanism, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SAP NetWeaver software integration platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Vulnerability of the macsec_dev_init() function in the drivers/net/macsec.c module – The network device driver in Linux allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the macsecdevinit function in the drivers/net/macsec.c module – The Linux kernel network device driver framework is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the `bfq_dispatch_request()` function in the `block/bfq-iosched.c` module exposes the confidentiality, integrity, and accessibility of protected information under Linux’s kernel-level block-level support. This vulnerability allows attackers to compromise these aspects of protected information.

The vulnerability of the bfqdispatchrequest function in the block/bfq-iosched.c module, which supports the block-level kernel in the Linux operating system, is related to the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the...

The vulnerability of the functional module of the RFC interface of the software tool for managing changes and migrations in SAP Landscape Transformation (SLT) allows a attacker to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functional module of the RFC interface of the software tool for managing changes and migrations in SAP Landscape Transformation SLT is related to improper code generation. Exploiting this vulnerability can allow an attacker to influence the confidentiality, integrity, and...

The vulnerability in the JavaScript Engine component of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the JavaScript Engine component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the bpf_trampoline_get_progs() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpftrampolinegetprogs function in the Linux operating system’s kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability in the drivers/net/virtio_net.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the drivers/net/virtionet.c module of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the downloadFile.cgi file in the TOTOLINK A810R router microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the downloadFile.cgi file in the TOTOLINK A810R router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the Computer Vision component of Qualcomm’s embedded software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Computer Vision component of Qualcomm’s embedded software systems lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the /etc/shadow file in the microprogramming router LB-LINK BL-AC3600 allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the /etc/shadow file in the microprogramming router LB-LINK BL-AC3600 lies in the use of strictly encrypted user credentials. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information by sendi...

The vulnerability of the lan743x_ptp_io_event_clock_get() function in the Linux kernel component allows a attacker to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lan743xptpioeventclockget function in the Linux kernel’s networking component involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the IBM Planning Analytics Local software for managing business efficiency lies in its incorrect session duration settings, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the IBM Planning Analytics Local software for managing business efficiency is related to an incorrect session duration. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the get_cur_lang_ver() function in Netgear’s JWNR2000v2 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the getcurlangver function in Netgear JWNR2000v2 router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the host parameter. Exploiting this vulnerability can allow an attacker to compromise the...