EUVD-2025-5594

Malicious code in bioql PyPI...

EUVD-2025-26089

Malicious code in bioql PyPI...

EUVD-2022-51404

Malicious code in bioql PyPI...

EUVD-2021-8575

Malicious code in bioql PyPI...

EUVD-2025-6382

Malicious code in bioql PyPI...

EUVD-2024-16597

Malicious code in bioql PyPI...

EUVD-2022-15327

Malicious code in bioql PyPI...

EUVD-2022-45983

Malicious code in bioql PyPI...

EUVD-2022-44837

Malicious code in bioql PyPI...

EUVD-2021-8602

Malicious code in bioql PyPI...

EUVD-2025-14909

Malicious code in bioql PyPI...

EUVD-2022-34857

Malicious code in bioql PyPI...

EUVD-2021-8612

Malicious code in bioql PyPI...

EUVD-2022-45880

Malicious code in bioql PyPI...

RLSA-2025:9304 Important: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors CVE-2025-49175 xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests...

RLSA-2025:7490 Important: mod_auth_openidc security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: modauthopenidc allows OIDCProviderAuthRequestMethod POSTs to leak...

CVE-2025-53406 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerabili...

CVE-2025-52429

CVE-2025-52429 affects QNAP QTS and QuTS hero. The issue is a use of externally-controlled format string in the OS, which an administrator-authenticated remote attacker could exploit to access secret data or modify memory. Affected products/versions: QTS prior to 5.2.6.3195 (build 20250715) and Q...

AZL-68007 CVE-2025-39891 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Initialize the chanstats array to zero The adapter-chanstats array is initialized in mwifiexinitchannelscangap with vmalloc, which doesn't zero out memory. The array is filled in mwifiexupdatechanstatistics and the...

Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for September 2025.

Summary Security vulnerabilities are addressed with IBM Business Automation Insights 24.0.1-IF005. These vulnerabilities have been also addressed in 25.0.0-IF001 and 24.0.0-IF004. Vulnerability Details CVEID:CVE-2025-48997 DESCRIPTION: Multer is a node.js middleware for handling...