CVE-2026-10025

IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity XXE injection vulnerability. The vulnerability resides in the parseXmlPayload function within the event processing pipeline q1labscore.jar . When at least one log source type is configured...

IBM QRadar SIEM 7.5.x < 7.5.0 UP15 IF03 Multiple Vulnerabilities

According to its self-reported version, the IBM QRadar SIEM installation on the remote host is 7.5.x prior to 7.5.0 Update Pack 15 Interim Fix 03. It is, therefore, affected by multiple vulnerabilities: - XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in...

EUVD-2024-55601

IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 002 could allow a privileged user to upload a malicious backup archive that could be restored and used to gain access to the underlying operating system...

EUVD-2020-25515

Malware in sbrugna...

EUVD-2017-10712

Malware in sbrugna...

EUVD-2016-10528

Malware in sbrugna...

EUVD-2019-14116

Malware in sbrugna...

EUVD-2017-10639

Malware in sbrugna...

EUVD-2021-25315

Malware in sbrugna...

EUVD-2019-14188

Malware in sbrugna...

EUVD-2016-10525

Malware in sbrugna...

EUVD-2016-10755

Malware in sbrugna...

EUVD-2019-14061

Malware in sbrugna...

EUVD-2015-2102

Malware in sbrugna...

EUVD-2017-10250

Malware in sbrugna...

EUVD-2025-16759

Malicious code in bioql PyPI...

EUVD-2022-46833

Malicious code in bioql PyPI...

EUVD-2022-27491

Malicious code in bioql PyPI...

CVE-2025-33117

IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 could allow a privileged user to modify configuration files that would allow the upload of a malicious autoupdate file to execute arbitrary commands...

CVE-2025-25022

IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthenticated user in the environment to obtain highly sensitive information in configuration files...