Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-29500

Malicious code in bioql PyPI...

6.6AI score
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-29433

Malicious code in bioql PyPI...

6.6AI score
Exploits0References3
OSV
OSV
added 2025/09/05 6:15 p.m.3 views

AZL-73692 CVE-2025-39681 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: x86/cpu/hygon: Add missing resctrlcpudetect in bspinit helper Since 923f3a2b48bd "x86/resctrl: Query LLC monitoring properties once during boot" resctrlcpudetect has been moved from common CPU initialization code to the...

5.5CVSS5.7AI score0.00025EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2025/08/26 6:37 p.m.3 views

Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity

Summary Using idlelib.autocomplete.AutoComplete.getentity, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to idlelib.autocomplete.AutoComplete.getentity functio...

7.9AI score
Exploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2025/08/22 4:56 p.m.3 views

Picklescan missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_cprofile

Summary Using torch.utils.bottleneck.main.runcprofile function, which is a pytorch library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to torch.utils.bottleneck.main.runcprofile function in...

7.9AI score
Exploits0References5Affected Software1
OSV
OSV
added 2024/06/28 7:15 a.m.0 views

CVE-2024-30111

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

7.5CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2019/10/10 2:15 p.m.1 views

CVE-2019-4265

IBM Maximo Anywhere 7.6.0, 7.6.1, 7.6.2, and 7.6.3 does not have device root detection which could result in an attacker gaining sensitive information about the device. IBM X-Force ID: 160198...

2.4CVSS5.8AI score
Exploits0References2
CNVD
CNVD
added 2018/03/28 12:0 a.m.2 views

Frog CMS Arbitrary File Upload Vulnerability

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A security vulnerability exists in Frog CMS version 0.9.5 due to a lack of extension detection in the...

9.8CVSS7AI score0.08482EPSS
Exploits1References1
Rows per page
Query Builder