AMD StoreMi™ Vulnerabilities

Summary Researchers have reported potential vulnerabilities in AMD StoreMi™ technology which may allow escalation of privilege. AMD StoreMi™ technology was a tool for users looking to improve load time, boot time, file management, or system responsiveness. AMD StoreMi™ falls outside of the securi...

EUVD-2023-24765

Malicious code in bioql PyPI...

CVE-2025-3910

A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication. Mitigation No current mitigations are available for this vulnerability...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in axios

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of axios Vulnerability Details CVEID:CVE-2024-57965 DESCRIPTION: In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwanted...

PT-2024-30887 · Truepush · Truepush

Name of the Vulnerable Software and Affected Versions: Truepush versions 1.0.0 through 1.0.8 Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions 1.0.0 through 1.0....

PT-2024-24800 · Unknown · Podlove Podcast Publisher

Name of the Vulnerable Software and Affected Versions: Podlove Podcast Publisher versions through 4.0.14 Description: The issue is related to a Missing Authorization vulnerability in Podlove Podcast Publisher. Recommendations: For versions through 4.0.14, update to a version later than 4.0.14 to...

PT-2024-14418 · Nitropack · Nitropack

Name of the Vulnerable Software and Affected Versions: NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images versions 1.10.2 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the specified software. This type of issue allows an...

Vulnerability discovered in Ansible

A vulnerability has been found in Ansible. The vulnerability allows a locally authenticated malicious person to obtain sensitive information. Certain information such as private keys is displayed in log files even when the system is so configured that this should not be possible. Ansible has not...