EUVD-2019-2968

Malware in sbrugna...

EUVD-2025-30256

Malicious code in bioql PyPI...

EUVD-2022-1817

Malicious code in bioql PyPI...

EUVD-2022-33890

Malicious code in bioql PyPI...

tom-microservice (3.2.28) potentially affected by CVE-2025-59526 via mailgen (2.0.20)

mailgen NPM version 2.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on mailgen and may be impacted: - tom-microservice 3.2.28 Source cves: CVE-2025-59526 Source advisory: SNYK:JS-MAILGEN-13004540...

tom-microservice (3.2.28) potentially affected by CVE-2025-59526 via mailgen (2.0.20)

mailgen NPM version 2.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on mailgen and may be impacted: - tom-microservice 3.2.28 Source cves: CVE-2025-59526 Source advisory: OSV:GHSA-J2XJ-H7W5-R7VP...

CVE-2025-34199

Vasion Print Virtual Appliance Host (pre-22.0.1049) and Vasion Print Application (pre-20.0.2786) expose insecure TLS usage due to disabling verification. Specifically, the code disables CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER and uses environment variables (e.g., API_*_VERIFYSSL=false) ...

PT-2025-38598

Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.1049 Vasion Print formerly PrinterLogic Application versions prior to 20.0.2786 Description Vasion Print formerly PrinterLogic Virtual Appliance Host and...

MAL-2025-21267 Malicious code in generator-accelerate-node-microservice (npm)

The package generator-accelerate-node-microservice was found to contain malicious code...

Malicious code in generator-ikom-microservice (npm)

The package generator-ikom-microservice was found to contain malicious code...

MAL-2025-21287 Malicious code in generator-ikom-microservice (npm)

The package generator-ikom-microservice was found to contain malicious code...

Malicious code in generator-accelerate-node-microservice (npm)

The package generator-accelerate-node-microservice was found to contain malicious code...

Network Hexagons under Attack: Secure Crowdsourcing of Geo-Referenced Data

A critical requirement for modern-day Intelligent Transportation Systems ITS is the ability to collect geo-referenced data from connected vehicles and mobile devices in a safe, secure and anonymous way. The Nexagon protocol, which builds on the IETF Locator/ID Separation Protocol LISP and the...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.0.2

Red Hat OpenShift Service Mesh 3.0.2 This update has a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section Red Hat OpenShift Service Mesh 3.0.2,...

CVE-2022-29555

The Deviceconnect microservice through 1.3.0 in Northern.tech Mender Enterprise before 3.2.2. allows Cross-Origin Websocket Hijacking...

The vulnerability of the distribution and transaction optimization software in the Apache Seata microservice architecture, related to shortcomings in the deserialization mechanism, allows attackers to trigger service failures.

The vulnerability of distribution software and the improvement of transaction performance in the architecture of Apache Seata microservices is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to trigger service failures through a...

MAL-2025-2822 Malicious code in @uniqa/sales-ms-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2819 Malicious code in @uniqa/health-claim-ms-api (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-25286 Crayfish allows Remote Code Execution via Homarus Authorization header

Crayfish is a collection of Islandora 8 microservices, one of which, Homarus, provides FFmpeg as a microservice. Prior to Crayfish version 4.1.0, remote code execution may be possible in web-accessible installations of Homarus in certain configurations. The issue has been patched in...

CVE-2022-24815

JHipster is a development platform to quickly generate, develop, & deploy modern web applications & microservice architectures. SQL Injection vulnerability in entities for applications generated with the option "reactive with Spring WebFlux" enabled and an SQL database using r2dbc. Applications...