9305 matches found
Tesla Telematics Control Unit security vulnerabilities
Tesla Telematics Control Unit is an in-vehicle communications and data management module from Tesla, Inc. A security vulnerability exists in Tesla Telematics Control Unit versions prior to v2025.14, which stems from an authentication bypass that could lead to arbitrary file writing and script...
CVE-2025-36355
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from outside of its control sphere...
EUVD-2025-32575
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from outside of its control sphere...
CVE-2025-36355
CVE-2025-36355 affects IBM Security Verify Access and IBM Security Verify Access Docker. A locally authenticated user could execute malicious scripts from outside the software’s control sphere in versions 10.0.0.0–10.0.9.0 and 11.0.0.0–11.0.1.0. IBM’s bulletin notes remediation via updates: IBM S...
CVE-2025-61769
CVE-2025-61769 concerns Emlog, an open source PHP/MySQL CMS. The issue is a cross-site scripting (XSS) vulnerability present in Emlog up to and including version 2.5.22, exploitable via the file upload function where an authenticated user can upload an SVG containing JavaScript that is later exec...
CVE-2025-36355: Inclusion of Functionality from Untrusted Control Sphere
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from outside of its control sphere...
PT-2025-40953
Name of the Vulnerable Software and Affected Versions Tesla Telematics Control Unit TCU firmware versions prior to 2025.14 Description The Tesla Telematics Control Unit TCU firmware is susceptible to an authentication bypass. The TCU operates the Android Debug Bridge adbd with root privileges...
RLSA-2025:11462 Important: git security update
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to wo...
RLSA-2025:8607 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Out-of-bounds access when resolving Promise objects CVE-2025-4918 firefox: thunderbird: Out-of-bounds access when optimizing linear sums CVE-2025-4919 firefox: thunderbird: Clickjacking...
git security update
An update is available for git. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Git is a distributed revision control system with a decentralized architecture. A...
RockyLinux 9 : git (RLSA-2025:11462)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:11462 advisory. git: Git does not sanitize URLs when asking for credentials interactively CVE-2024-50349 git: Newline confusion in credential helpers can lead to...
EUVD-2022-33406
Malicious code in bioql PyPI...
EUVD-2023-52324
Malicious code in bioql PyPI...
EUVD-2023-41410
Malicious code in bioql PyPI...
EUVD-2024-21235
Malicious code in bioql PyPI...
EUVD-2023-53228
Malicious code in bioql PyPI...
EUVD-2024-22557
Malicious code in bioql PyPI...
EUVD-2022-44446
Malicious code in bioql PyPI...