3149 matches found
PT-2025-40991
Name of the Vulnerable Software and Affected Versions versions prior to 2025-40888 Description A SQL Injection issue exists in the CLI functionality because of inadequate input validation. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the database...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986576)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986576 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity...
CVE-2025-40888: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was discovered in the CLI functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data...
CVE-2025-40885: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized da...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987340)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987340 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986528)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986528 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity...
CVE-2025-40887: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data...
PT-2025-40990
Name of the Vulnerable Software and Affected Versions Alert functionality affected versions not specified Description A SQL Injection issue exists due to inadequate input validation of a parameter within the Alert functionality. An authenticated user with limited privileges can execute arbitrary...
RockyLinux 9 : bootc (RLSA-2025:7160)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7160 advisory. rust-openssl: rust openssl ssl::selectnextproto use after free CVE-2025-24898 Tenable has extracted the preceding description block directly from the RockyLinux...
EUVD-2025-26826
Malicious code in bioql PyPI...
EUVD-2024-34855
Malicious code in bioql PyPI...
EUVD-2022-55354
Malicious code in bioql PyPI...
EUVD-2023-59874
Malicious code in bioql PyPI...
EUVD-2023-1143
Malicious code in bioql PyPI...
EUVD-2024-21476
Malicious code in bioql PyPI...
EUVD-2024-54498
Malicious code in bioql PyPI...
EUVD-2025-7859
Malicious code in bioql PyPI...
EUVD-2024-19596
Malicious code in bioql PyPI...