CVE-2026-95674 MISP EventsController queryEnrichment allows querying unavailable or legacy modules without validation

In MISP, the queryEnrichment method in EventsController.php accepted a module name parameter and iterated over the list of enabled modules to find a match. If the specified module was not present in the enabled modules list, the code silently continued processing using default parameters format s...

PT-2026-96728

Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description The queryEnrichment function in EventsController.php fails to properly validate the module name parameter. When a module name is provided that is not in the list of enabled modules, the system...

CVE-2025-68956

CVE-2025-68956 corresponds to a multi-thread race condition in the Card Framework module of Huawei HarmonyOS. Multiple connected sources (Red Hat, CIRCL, CNNVD, CVE databases, PT-Security) describe a vulnerability that could affect system availability. The Huawei/NVD entries indicate a local atta...

CVE-2025-58295

Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability...

EUVD-2024-30737

Malicious code in bioql PyPI...

EUVD-2025-23721

Malicious code in bioql PyPI...

EUVD-2023-57165

Malicious code in bioql PyPI...

EUVD-2023-57040

Malicious code in bioql PyPI...

EUVD-2022-51302

Malicious code in bioql PyPI...

EUVD-2023-56772

Malicious code in bioql PyPI...

EUVD-2025-23724

Malicious code in bioql PyPI...

EUVD-2022-51213

Malicious code in bioql PyPI...

CVE-2025-54628

CVE-2025-54628 corresponds to a vulnerability described as incomplete verification information in the communication module, with potential impact to availability. Multiple sources (including Red Hat, NVD, CNVD/CNNVD, PT-2025-32070) reference Huawei HarmonyOS/EMUI and related communication compone...

CVE-2025-54606

CVE-2025-54606 affects Huawei HarmonyOS lock screen module. The vulnerability is a status verification flaw in the lock screen component that can be exploited locally, with attack complexity low and privileges not clearly required in some sources. Impact is described as affecting confidentiality ...

PT-2025-32013 · Unknown · Lock Screen Module

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A status verification vulnerability exists in the lock screen module. Successful exploitation of this issue may affect availability and confidentiality. Recommendations: At the moment, there is no...

CVE-2024-51511

Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-46593

Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2023-39396

Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability...