293 matches found
Software-Component-Verification-Standard
OWASP 软件组件验证标准 软件组件验证标准（SCVS）是一项由社区驱动的努力，旨在建立一个用于识别活动、控制措施和最佳实践的框架，以帮助识别并降低软件供应链中的风险。 管理软件供应链中的风险对于减少易受攻击系统的暴露面，以及将技术债务作为修复障碍进行评估非常重要。 衡量和改进软件供应链保障对于成功至关重要。具有供应链可见性的组织更有能力保护其品牌、增强信任、缩短上市时间，并在发生供应链事件时管理成本。 软件供应链涉及： 技术 人员 流程 机构 以及其他变量 提高供应链保障的门槛需要风险管理人、任务负责人以及法律和采购等业务部门的积极参与，这些部门传统上并未参与技术实施。...
EUVD-2025-209661
HCL DFXAnalytics is affected by a Using Components with Known Vulnerabilities flaw where the application utilizes unpatched libraries or sub-components, which could allow an attacker to identify and exploit publicly known security vulnerabilities to gain unauthorized access or compromise the...
[SECURITY] Fedora 42 Update: qt5-qtwebengine-5.15.19-2.fc42
Qt5 - QtWebEngine components...
EUVD-2018-9631
Malware in sbrugna...
EUVD-2020-2721
Malware in sbrugna...
EUVD-2018-14279
Malware in sbrugna...
EUVD-2022-4625
Malicious code in bioql PyPI...
Establishing a Baseline of Software Supply Chain Security Task Adoption by Software Organizations
Software supply chain attacks have increased exponentially since 2020. The primary attack vectors for supply chain attacks are through: 1 software components; 2 the build infrastructure; and 3 humans a.k.a software practitioners. Software supply chain risk management frameworks provide a list of...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper handling of integer values in the msdia140.dll process. An attacker can execute arbitrary code by supplying specially crafted input that triggers an integer overflow and subsequent heap-bas...
CVE-2025-53032
...
CVE-2025-50091
CVE-2025-50091 : In Oracle MySQL, vulnerability in the MySQL Server Server: Optimizer affects versions 8.0.0–8.0.42, 8.4.0–8.4.5 and 9.0.0–9.3.0. It is described as easily exploitable with network access via multiple protocols, potentially causing a hang or crash (DOS) of MySQL Server. The CVSS b...
CVE-2025-50073
...
CVE-2025-50076
...
CVE-2025-50060
...
CVE-2025-30762
...
CVE-2025-30754
...
CVE-2025-30751
CVE-2025-30751 affects Oracle Database Server (Oracle Database component). Affected supported versions are 19.27 and 23.4–23.8. The flaw enables a low-privileged attacker who has Create Session and Create Procedure privileges with network access via Oracle Net to compromise the database, potentia...
TencentOS Server 4: java-11-konajdk (TSSA-2024:0587)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0587 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
