266 matches found
EUVD-2023-1201
Malicious code in bioql PyPI...
EUVD-2022-48978
Malicious code in bioql PyPI...
EUVD-2025-9790
Malicious code in bioql PyPI...
EUVD-2025-20922
Malicious code in bioql PyPI...
EUVD-2023-33329
Malicious code in bioql PyPI...
EUVD-2023-59793
Malicious code in bioql PyPI...
EUVD-2023-23855
Malicious code in bioql PyPI...
EUVD-2024-21244
Malicious code in bioql PyPI...
SUSE CVE-2023-53183
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
DEBIAN-CVE-2023-53183
In the Linux kernel, the following vulnerability has been resolved: btrfs: exit gracefully if reloc roots don't match BUG Syzbot reported a crash that an ASSERT got triggered inside preparetomerge. CAUSE The root cause of the triggered ASSERT is we can have a race between quota tree creation and...
CVE-2023-53183
CVE-2023-53183 is rejected/not used and not an active vulnerability entry.
CVE-2025-8225
A flaw was found in binutils. The processdebuginfo function in the DWARF section handler exhibits a memory leak due to improper handling of debug information. This issue may allow a local attacker to trigger a resource exhaustion condition. This manipulation occurs when processing a specially...
CVE-2025-38397
In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix suspicious RCU usage warning When I run the NVME over TCP test in virtme-ng, I get the following "suspicious RCU usage" warning in nvmempathaddsysfslink: ''' 5.024557 T44 nvmet: Created nvm controller 1 for...
CVE-2025-34081
The CVE-2025-34081 affects Contec CONPROSYS HMI System (CHS) prior to version 3.7.7. The issue is the exposure of a PHP phpinfo() debugging page to unauthenticated users, which may disclose sensitive runtime information useful to an attacker. Public sources in the connected documents confirm the ...
CVE-2025-34081 CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info
The Contec Co.,Ltd. CONPROSYS HMI System CHS exposes a PHP phpinfo debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System CHS: before 3.7.7...
WeGIA Operating System Command Injection Vulnerability
WeGIA is a web manager for welfare organizations. WeGIA suffers from an operating system command injection vulnerability that stems from the branch parameter not being properly cleaned up in the /html/configuracao/debuginfo.php endpoint. An attacker could exploit this vulnerability to execute...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read due to improper handling of certain debug information in the debugtypesamep function of the /binutils/debug.c file. An attacker can cause memory corruption by manipulating the input data to this function. This is only...
CVE-2024-28154
Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in build logs by default...
CVE-2024-12265
The Web3 Crypto Payments by DePay for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/depay/wc/debug REST API endpoint in all versions up to, and including, 2.12.17. This makes it possible for unauthenticated attacker...