EUVD-2024-43734

Malicious code in bioql PyPI...

PT-2025-46607

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ASoC Audio Subsystem on Chip Intel sof sdw component. Specifically, the create sdw dailink function does not adequately verify that the add...

@agentforce/adk (>=0.9.0 <=0.12.1), @bgord/bun (>=0.11.2 <=1.0.1) +38 more potentially affected by CVE-2025-58362 via hono (>=4.8.0 <=4.9.5)

hono NPM version =4.8.0, =0.9.0, =0.11.2, =1.3.0, =1.3.2, =4.0.0-alpha.5, =1.3.3, =0.67.0, =0.14.2, =0.4.0, =0.21.0, =0.21.0, =0.19.0, =0.16.0, =0.0.1, =0.0.6, =0.6.3 and more Source cves: CVE-2025-58362 Source advisory: OSV:GHSA-9HP6-4448-45G2...

Malicious code in koa-react-sidecar (npm)

The package koa-react-sidecar was found to contain malicious code...

MAL-2025-24718 Malicious code in koa-react-sidecar (npm)

The package koa-react-sidecar was found to contain malicious code...

CVE-2025-50182 vulnerabilities

Vulnerabilities for packages: az, confluent-docker-utils, emissary, superset, jupyter-base-notebook, kubeflow-pipelines, ggshield, reflex, k8s-sidecar, pypy-3.10, kubeflow-jupyter-web-app, dask-gateway, kserve, py3-pipenv, jwt-tool, airflow, py3-pip, mlflow, dask-kubernetes, py3-cassandra-medusa,...

CVE-2025-50181 vulnerabilities

Vulnerabilities for packages: az, confluent-docker-utils, emissary, superset, jupyter-base-notebook, kubeflow-pipelines, ggshield, k8s-sidecar, pypy-3.10, kubeflow-jupyter-web-app, dask-gateway, kserve, py3-pipenv, jwt-tool, airflow, py3-pip, mlflow, datadog-agent, dask-kubernetes,...

GHSA-48P4-8XCF-VXJ5 vulnerabilities

Vulnerabilities for packages: az, confluent-docker-utils, emissary, superset, jupyter-base-notebook, kubeflow-pipelines, ggshield, reflex, k8s-sidecar, pypy-3.10, kubeflow-jupyter-web-app, dask-gateway, kserve, py3-pipenv, jwt-tool, airflow, py3-pip, mlflow, dask-kubernetes, py3-cassandra-medusa,...

GHSA-PQ67-6M6Q-MJ2V vulnerabilities

Vulnerabilities for packages: az, confluent-docker-utils, emissary, superset, jupyter-base-notebook, kubeflow-pipelines, ggshield, k8s-sidecar, pypy-3.10, kubeflow-jupyter-web-app, dask-gateway, kserve, py3-pipenv, jwt-tool, airflow, py3-pip, mlflow, datadog-agent, dask-kubernetes,...

CVE-2024-49588

Multiple endpoints in oracle-sidecar in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections...

CVE-2024-49588

Multiple endpoints in oracle-sidecar in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections...

CVE-2024-49588 Multiple authenticated SQL injections in oracle-sidecar

Multiple endpoints in oracle-sidecar in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections...

CVE-2024-49588 Multiple authenticated SQL injections in oracle-sidecar

Multiple endpoints in oracle-sidecar in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections...

CVE-2024-49588

CVE-2024-49588 affects the Palantir oracle-sidecar component. Affected versions are 0.347.0 through 0.543.0, with multiple endpoints susceptible to SQL injections. The vulnerability is described across several sources as authenticated SQL injection weaknesses in oracle-sidecar, enabling potential...

PT-2024-33556 · Oracle · Oracle-Sidecar

Name of the Vulnerable Software and Affected Versions: oracle-sidecar versions 0.347.0 through 0.543.0 Description: The issue concerns SQL injections in multiple endpoints. An unauthenticated attacker can compromise data. Recommendations: For versions 0.347.0 through 0.543.0, upgrade the affected...

Palantir sls-oracle-sidecar SQL注入漏洞

Palantir sls-oracle-sidecar is a utility program from Palantir Corporation, USA. A SQL injection vulnerability exists in Palantir sls-oracle-sidecar versions 0.347.0 through 0.543.0, which stems from multiple endpoints that are susceptible to SQL injection attacks...

CVE-2024-44145

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15, iOS 18 and iPadOS 18. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen...

CVE-2024-44145

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen...

CVE-2024-44145

CVE-2024-44145 affects macOS Sequoia 15, iOS 18, and iPadOS 18. The issue, tied to Sidecar, could allow a physically proximate attacker to bypass the Lock Screen due to a state-management flaw. Apple fixed the vulnerability in the indicated OS versions (Sequoia 15, iOS 18, iPadOS 18) through impr...

CVE-2024-44145

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen...