EUVD-2023-1201

Malicious code in bioql PyPI...

EUVD-2023-33329

Malicious code in bioql PyPI...

EUVD-2025-9790

Malicious code in bioql PyPI...

EUVD-2022-48978

Malicious code in bioql PyPI...

EUVD-2023-23855

Malicious code in bioql PyPI...

EUVD-2024-21244

Malicious code in bioql PyPI...

EUVD-2025-20922

Malicious code in bioql PyPI...

EUVD-2023-59793

Malicious code in bioql PyPI...

SUSE CVE-2023-53183

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

DEBIAN-CVE-2023-53183

In the Linux kernel, the following vulnerability has been resolved: btrfs: exit gracefully if reloc roots don't match BUG Syzbot reported a crash that an ASSERT got triggered inside preparetomerge. CAUSE The root cause of the triggered ASSERT is we can have a race between quota tree creation and...

CVE-2023-53183

...

CVE-2023-53183

CVE-2023-53183 is rejected/not used and not an active vulnerability entry.

CVE-2025-8225

A flaw was found in binutils. The processdebuginfo function in the DWARF section handler exhibits a memory leak due to improper handling of debug information. This issue may allow a local attacker to trigger a resource exhaustion condition. This manipulation occurs when processing a specially...

CVE-2025-38397

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix suspicious RCU usage warning When I run the NVME over TCP test in virtme-ng, I get the following "suspicious RCU usage" warning in nvmempathaddsysfslink: ''' 5.024557 T44 nvmet: Created nvm controller 1 for...

CVE-2025-34081 CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info

The Contec Co.,Ltd. CONPROSYS HMI System CHS exposes a PHP phpinfo debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System CHS: before 3.7.7...

CVE-2025-34081

The CVE-2025-34081 affects Contec CONPROSYS HMI System (CHS) prior to version 3.7.7. The issue is the exposure of a PHP phpinfo() debugging page to unauthenticated users, which may disclose sensitive runtime information useful to an attacker. Public sources in the connected documents confirm the ...

WeGIA Operating System Command Injection Vulnerability

WeGIA is a web manager for welfare organizations. WeGIA suffers from an operating system command injection vulnerability that stems from the branch parameter not being properly cleaned up in the /html/configuracao/debuginfo.php endpoint. An attacker could exploit this vulnerability to execute...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read due to improper handling of certain debug information in the debugtypesamep function of the /binutils/debug.c file. An attacker can cause memory corruption by manipulating the input data to this function. This is only...

CVE-2024-28154

Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in build logs by default...

CVE-2024-12265

The Web3 Crypto Payments by DePay for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/depay/wc/debug REST API endpoint in all versions up to, and including, 2.12.17. This makes it possible for unauthenticated attacker...