PT-2025-44706

Name of the Vulnerable Software and Affected Versions Schema Scalpel versions prior to 1.6.2 Description The Schema Scalpel plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to inadequate input sanitization and output escaping when handling user-supplied data in the...

CVE-2025-12118: Improper Neutralization of Input During Web Page Generation

The Schema Scalpel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping when outputting user-supplied data into JSON-LD schema markup. This makes it possible for...

EUVD-1999-1123

Malware in sbrugna...

EUVD-2023-53727

Malicious code in bioql PyPI...

EUVD-2022-29205

Malicious code in bioql PyPI...

EUVD-2024-42271

Malicious code in bioql PyPI...

EUVD-2025-3035

Malicious code in bioql PyPI...

EUVD-2024-22164

Malicious code in bioql PyPI...

EUVD-2021-8061

Malicious code in bioql PyPI...

EUVD-2024-0310

Malicious code in bioql PyPI...

EUVD-2023-53728

Malicious code in bioql PyPI...

EUVD-2022-51990

Malicious code in bioql PyPI...

EUVD-2024-22202

Malicious code in bioql PyPI...

EUVD-2024-42272

Malicious code in bioql PyPI...

The vulnerability of the components of the GNU Binutils development environment for software development allows a hacker to trigger a service failure.

The vulnerability of the ld components of the GNU GNU Binutils development environment is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2025-34190

Vasion Print (PrinterLogic) PrinterInstallerClientService is affected by an authentication bypass through LD_PRELOAD hooking of geteuid, enabling local privilege escalation. Affected versions include Virtual Appliance Host prior to 25.1.102 and Application (macOS/Linux client deployments) prior t...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2025-2160)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl.

...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2025-1888)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2025-1906)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...