Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to the virt-api component failing to validate the CN field in client TLS certificates against allowed values in the extension-apiserver-authentication configmap. An attacker can...

Improper Domain Name Validation

com.liferay.portal, com.liferay.portal.impl is vulnerable to an improper domain name validation. The vulnerability is due to incorrect identification of the subdomain in domain names, which can lead to the creation of a supercookie, allowing an attacker controlling a website with the same top-lev...

JLSEC-2025-5 Lack of validation for user-provided fields in GitHub.jl

There is a lack of input validation for user-provided values in certain functions. In the GitHub.repo function, the user can provide any string for the reponame field. These inputs are not validated or safely encoded and are sent directly to the server. Impact This means a user can add path...

EUVD-2005-1453

Malware in sbrugna...

EUVD-2021-2607

Malware in sbrugna...

EUVD-2018-0276

Malware in sbrugna...

EUVD-2018-4594

Malware in sbrugna...

EUVD-2012-5071

Malware in sbrugna...

EUVD-2021-1132

Malware in sbrugna...

EUVD-2003-0350

Malware in sbrugna...

Critical: 389-ds-base

Issue Overview: A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM...

EUVD-2022-7559

Malicious code in bioql PyPI...

EUVD-2022-5668

Malicious code in bioql PyPI...

EUVD-2021-9339

Malicious code in bioql PyPI...

EUVD-2025-21936

Malicious code in bioql PyPI...

EUVD-2024-48284

Malicious code in bioql PyPI...

EUVD-2024-0910

Malicious code in bioql PyPI...

EUVD-2022-45072

Malicious code in bioql PyPI...

EUVD-2024-37267

Malicious code in bioql PyPI...

CVE-2025-11195

Rapid7 AppSpider Pro versions below 7.5.021 are affected by a project name validation bypass. The issue arises from insufficient verification of project name uniqueness when editing the configuration file outside the application, allowing an attacker to set a project name to one that already exis...