HP App 安全漏洞

HP App is an integrated management tool developed by the American company Hewlett-Packard HP. There is a security vulnerability in HP App, which stems from the use of outdated versions. This vulnerability may lead to cross-site scripting attacks...

CVE-2025-68493 Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component

Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Struts: from 2.0.0 before 2.2.1; Apache Struts: from 2.2.1 through 6.1.0. Users are recommended to upgrade to version 6.1.1, which fixes the issue...

CVE-2025-68493 Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component

Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Struts: from 2.0.0 before 2.2.1; Apache Struts: from 2.2.1 through 6.1.0. Users are recommended to upgrade to version 6.1.1, which fixes the issue...

CVE-2020-7213

Parallels 13 uses cleartext HTTP as part of the update process, allowing man-in-the-middle attacks. Users of out-of-date versions are presented with a pop-up window for a parallelsupdates.xml file on the http://update.parallels.com web site...

CVE-2024-2300

HP Advance Mobile Applications for iOS and Android are potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices...

IBM MQ 9.1 < 9.1.0.33 LTS / 9.2 < 9.2.0.40 LTS / 9.3 < 9.3.0.36 LTS / 9.3 < 9.4.4.1 CD / 9.4 < 9.4.0.17 LTS / 9.4.4.1 (7254158)

The version of IBM MQ Server running on the remote host is affected by multiple vulnerabilities as referenced in the 7254158 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions tha...

CVE-2025-40018 affecting package kernel for versions less than 6.6.112.1-2

CVE-2025-40018 affecting package kernel for versions less than 6.6.112.1-2. An upgraded version of the package is available that resolves this issue...

Deno 安全漏洞

Deno is a simple, modern and secure JavaScript and TypeScript runtime environment from Deno Open Source. A security vulnerability exists in Deno versions prior to 2.5.3 and prior to 2.2.15, which stems from the fact that the utime and utimeSync methods are not constrained by the privilege model,...

CVE-2025-52658

HCL MyXalytics 6.6. product is affected by Use of Vulnerable/Outdated Versions Vulnerability...

EUVD-2021-10260

Malware in sbrugna...

EUVD-2003-0207

Malware in sbrugna...

EUVD-2015-9363

Malware in sbrugna...

EUVD-2020-27953

Malware in sbrugna...

EUVD-2016-7822

Malware in sbrugna...

EUVD-2022-34473

Malicious code in bioql PyPI...

EUVD-2024-52994

Malicious code in bioql PyPI...

EUVD-2025-29434

Malicious code in bioql PyPI...

CVE-2025-52658

HCL MyXalytics is affected by the use of vulnerable/outdated versions which can expose the application to known security risks that could be exploited...

EUVD-2025-32358

HCL MyXalytics 6.6. product is affected by Use of Vulnerable/Outdated Versions Vulnerability...

CVE-2025-52658

CVE-2025-52658 affects HCL MyXalytics 6.6 due to the use of vulnerable/outdated versions. The connected sources (Red Hat, NVD, CVE list, CNNVD) consistently describe this as a version-based vulnerability with no specific exploitation details provided in the documents. A remediation/fixed version ...