EUVD-2023-50091

Malicious code in bioql PyPI...

EUVD-2025-23982

Malicious code in bioql PyPI...

EUVD-2023-49453

Malicious code in bioql PyPI...

EUVD-2022-41804

Malicious code in bioql PyPI...

EUVD-2022-35500

Malicious code in bioql PyPI...

EUVD-2022-40501

Malicious code in bioql PyPI...

CVE-2025-38663 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38663 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-21884 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-21884 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

httpd: HTTP Session Hijack via a TLS upgrade

An HTTP session hijacking flaw was found in Apache httpd. In some modssl configurations on Apache HTTP Server, an HTTP desynchronization attack allows a man-in-the-middle attacker to hijack an HTTP session via a TLS upgrade...

CVE-2025-58059 Valtimo scripting engine can be used to gain access to sensitive data or resources

Valtimo is a platform for Business Process Automation. In versions before 12.16.0.RELEASE, and from 13.0.0.RELEASE to before 13.1.2.RELEASE, any admin that can create or modify and execute process-definitions could gain access to sensitive data or resources. This includes but is not limited to:...

httpd: HTTP Session Hijack via a TLS upgrade

An HTTP session hijacking flaw was found in Apache httpd. In some modssl configurations on Apache HTTP Server, an HTTP desynchronization attack allows a man-in-the-middle attacker to hijack an HTTP session via a TLS upgrade...

July 8, 2025—KB5062570 (OS Build 25398.1732)

None None...

httpd: HTTP Session Hijack via a TLS upgrade

An HTTP session hijacking flaw was found in Apache httpd. In some modssl configurations on Apache HTTP Server, an HTTP desynchronization attack allows a man-in-the-middle attacker to hijack an HTTP session via a TLS upgrade...

CVE-2025-50078 affecting package mysql for versions less than 8.0.43-1

CVE-2025-50078 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the URL validation process. An attacker can access internal or otherwise restricted resources by submitting a specially crafted URL that bypasses configured allowlists. Remediation Upgrade...

CVE-2025-24853 Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Header Link processing

A carefully crafted request when creating a header link using the wiki markup syntax, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Further research by the JSPWiki team showed that the markdown parser allowed this...

CVE-2025-49812 affecting package httpd for versions less than 2.4.64-1

CVE-2025-49812 affecting package httpd for versions less than 2.4.64-1. An upgraded version of the package is available that resolves this issue...

Open Redirect

Overview github.com/grafana/grafana/pkg/api is an open and composable observability and data visualization platform. Affected versions of this package are vulnerable to Open Redirect via the organization switching process. An attacker can redirect users to arbitrary external sites by crafting a...

Open Redirect

Overview github.com/grafana/grafana/pkg/middleware is a The open-source platform for monitoring and observability. Affected versions of this package are vulnerable to Open Redirect via the organization switching process. An attacker can redirect users to arbitrary external sites by crafting a...

CVE-2025-7339

on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead. Users should upgrade to version 1.1.0 to receive a patch. Uses are...