EUVD-2024-0186

Malicious code in bioql PyPI...

EUVD-2022-39350

Malicious code in bioql PyPI...

EUVD-2022-49862

Malicious code in bioql PyPI...

EUVD-2022-1097

Malicious code in bioql PyPI...

EUVD-2022-55423

Malicious code in bioql PyPI...

EUVD-2023-31521

Malicious code in bioql PyPI...

EUVD-2025-32005

Malicious code in bioql PyPI...

EUVD-2025-21001

Malicious code in bioql PyPI...

EUVD-2022-55342

Malicious code in bioql PyPI...

EUVD-2023-28385

Malicious code in bioql PyPI...

EUVD-2025-31088

Malicious code in bioql PyPI...

EUVD-2022-0673

Malicious code in bioql PyPI...

EUVD-2025-7240

Malicious code in bioql PyPI...

EUVD-2022-4110

Malicious code in bioql PyPI...

EUVD-2022-5979

Malicious code in bioql PyPI...

RLSA-2025:8131 Moderate: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: net-imap: Net::IMAP vulnerable to possible DoS by memory exhaustion CVE-2025-25186 CGI: Denial of Service in CGI::Cookie.parse...

The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

...

SUSE CVE-2023-53479

In the Linux kernel, the following vulnerability has been resolved: cxl/acpi: Fix a use-after-free in cxlparsecfmws KASAN and KFENCE detected an user-after-free in the CXL driver. This happens in the cxldecoderadd fail path. KASAN prints the following error: BUG: KASAN: slab-use-after-free in...

The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service

...

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.

...