2320 matches found
EUVD-2025-29568
Malicious code in bioql PyPI...
EUVD-2025-31009
Malicious code in bioql PyPI...
EUVD-2025-25564
Malicious code in bioql PyPI...
EUVD-2025-27884
Malicious code in bioql PyPI...
EUVD-2025-30271
Malicious code in bioql PyPI...
EUVD-2025-26102
Malicious code in bioql PyPI...
EUVD-2025-24847
Malicious code in bioql PyPI...
EUVD-2025-24596
Malicious code in bioql PyPI...
CVE-2023-53477
In the Linux kernel, the following vulnerability has been resolved: ipv6: Add lwtunnel encap size of all siblings in nexthop calculation In function rt6nlmsgsize, the length of nexthop is calculated by multipling the nexthop length of fib6info and the number of siblings. However if the fib6info h...
CVE-2023-53500 xfrm: fix slab-use-after-free in decode_session6
In the Linux kernel, the following vulnerability has been resolved: xfrm: fix slab-use-after-free in decodesession6 When the xfrm device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may occur when the xfrm device sen...
PT-2025-40184
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the IPv6 implementation related to the calculation of the nexthop length in the rt6 nlmsg size function. Specifically, when handling lwtunnel...
CVE-2025-9232
An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the no_proxy environment variable is set and the host portion of the HTTP URL's authority component is an IPv6 address . This vulnerability can result in an application crash, leading to a Denial of Se...
The vulnerability of the __ip_rt_update_pmtu() function in the ipv4/route.c component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the iprtupdatepmtu function in the ipv4/route.c component of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-20339
A vulnerability in the access control list ACL processing of IPv4 packets of Cisco SD-WAN vEdge Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the improper enforcement of the implicit deny all at the end of a configured ACL. An...
CVE-2025-42907
SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system...
GO-2025-3969 DragonFly's manager generates mTLS certificates for arbitrary IP addresses in d7y.io/dragonfly
DragonFly's manager generates mTLS certificates for arbitrary IP addresses in d7y.io/dragonfly...
CVE-2025-20365
A vulnerability in the IPv6 Router Advertisement RA packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attacker to modify the IPv6 gateway on an affected device. This vulnerability is due to a logic error in the processing of IPv6 RA packets that are receive...
Cisco SD-WAN vEdge Software Access Control List Bypass Vulnerability
A vulnerability in the access control list ACL processing of IPv4 packets of Cisco SD-WAN vEdge Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the improper enforcement of the implicit deny all at the end of a configured ACL. An...
USN-7755-3 linux-aws-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; - SPI subsystem; - USB core drivers; - NILFS2 file system; - IPv6 networking; - Network traffic...
