EUVD-2023-44410

Malicious code in bioql PyPI...

EUVD-2023-59027

Malicious code in bioql PyPI...

EUVD-2024-38096

Malicious code in bioql PyPI...

EUVD-2023-54082

Malicious code in bioql PyPI...

EUVD-2021-9680

Malicious code in bioql PyPI...

EUVD-2023-0178

Malicious code in bioql PyPI...

EUVD-2022-42979

Malicious code in bioql PyPI...

EUVD-2022-26891

Malicious code in bioql PyPI...

EUVD-2022-29623

Malicious code in bioql PyPI...

EUVD-2022-33566

Malicious code in bioql PyPI...

EUVD-2024-3603

Malicious code in bioql PyPI...

EUVD-2024-52176

Malicious code in bioql PyPI...

EUVD-2023-1717

Malicious code in bioql PyPI...

EUVD-2024-38335

Malicious code in bioql PyPI...

RLSA-2025:10873 Important: java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixes: JDK: Better Glyph drawing CVE-2025-30749 JDK: Enhance TLS protocol support CVE-2025-30754 JDK: Improve HTTP client header handling CVE-2025-50059 JDK: Better...

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel via the /api/user/updateuser endpoint. An attacker can gain unauthorized access by exploiting this endpoint to bypass authentication mechanisms. Remediation Upgrade...

GHSA-7JP2-5H22-M432 Auth0 Symfony SDK Does Not Properly Handle File Types in Bulk User Import

Overview In applications built with the Auth0-PHP SDK, the Bulk User Import endpoint does not validate the file path wrapper or value. Without proper validation, affected applications may accept arbitrary file paths or URLs. Am I affected? You are affected by this vulnerability if you meet the...

Exploit for CVE-2011-2553

...

Amazon Linux 2 : libvpx, --advisory ALAS2-2025-3015 (ALAS-2025-3015)

The version of libvpx installed on the remote host is prior to 1.9.0-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3015 advisory. There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpximgalloc with a large value of the dw, dh, or alig...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Apache Wink (CVE-2010-2245)

Summary A vulnerability in Apache Wink that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2010-2245 DESCRIPTION: XML External Entity XXE vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial o...