8348 matches found
PT-2025-41145
Name of the Vulnerable Software and Affected Versions B Industrial Automation Automation Runtime versions 6.0 through 6.4 Description A flaw exists in the generation of numbers or identifiers within B Industrial Automation Automation Runtime. This issue could potentially compromise the security o...
CVE-2025-3449: Generation of Predictable Numbers or Identifiers
A Generation of Predictable Numbers or Identifiers vulnerability in the SDM component of B&R Automation Runtime versions before 6.4 may allow an unauthenticated network-based attacker to take over already established sessions...
Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : Squid vulnerability (USN-7804-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7804-1 advisory. It was discovered that Squid incorrectly handled certain long SNMP OIDs. A remote attacker could possibly use this issue to cause Squid to...
USN-7804-1: Squid vulnerability
It was discovered that Squid incorrectly handled certain long SNMP OIDs. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service...
USN-7804-1 squid vulnerability
It was discovered that Squid incorrectly handled certain long SNMP OIDs. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service...
PT-2025-40946
Name of the Vulnerable Software and Affected Versions YoSmart YoLink MQTT broker versions through 2025-10-02 Description The YoLink MQTT broker does not adequately enforce authorization controls, which can lead to cross-account attacks. An attacker who obtains device IDs can remotely operate...
CVE-2025-59449
The YoSmart YoLink MQTT broker and ecosystem components through 2025-10-02 contain multiple concrete issues: (1) insufficient authorization controls allow cross-account attack if an attacker learns device IDs, potentially enabling remote control of other users’ devices; (2) YoLink device IDs are ...
CVE-2025-59452: Generation of Predictable Numbers or Identifiers
The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's MAC address along with an MD5 hash of non-secret information, such as a key that begins with cf50...
CVE-2025-59449
The YoSmart YoLink MQTT broker through 2025-10-02 does not enforce sufficient authorization controls to prevent cross-account attacks, allowing an attacker to remotely operate affected devices if the attacker obtains the associated device IDs. Because YoLink device IDs are predictable, an attacke...
avahi security update
An update is available for avahi. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Avahi is an implementation of the DNS Service Discovery and Multicast DNS...
EUVD-2025-31595
Malicious code in bioql PyPI...
EUVD-2025-29192
Malicious code in bioql PyPI...
EUVD-2023-57420
Malicious code in bioql PyPI...
EUVD-2025-25270
Malicious code in bioql PyPI...
EUVD-2025-23915
Malicious code in bioql PyPI...
EUVD-2024-48543
Malicious code in bioql PyPI...
EUVD-2022-2297
Malicious code in bioql PyPI...
EUVD-2025-24603
Malicious code in bioql PyPI...