EUVD-2024-17686

Malicious code in bioql PyPI...

EUVD-2021-29081

Malicious code in bioql PyPI...

EUVD-2023-29968

Malicious code in bioql PyPI...

EUVD-2022-25002

Malicious code in bioql PyPI...

EUVD-2022-24918

Malicious code in bioql PyPI...

EUVD-2022-27659

Malicious code in bioql PyPI...

EUVD-2022-53397

Malicious code in bioql PyPI...

EUVD-2022-2533

Malicious code in bioql PyPI...

EUVD-2023-52482

Malicious code in bioql PyPI...

EUVD-2022-39938

Malicious code in bioql PyPI...

EUVD-2023-0861

Malicious code in bioql PyPI...

EUVD-2022-24905

Malicious code in bioql PyPI...

EUVD-2022-24910

Malicious code in bioql PyPI...

CVE-2025-53010

MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, when parsing shader nodes in a MTLX file, the MaterialXCore code accesses a potentially null pointer, which can lead to crashes with maliciously craft...

PT-2025-31588

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.3.2 Description OpenEXR is an image storage format used in the motion picture industry. A NULL pointer dereference can occur in a write operation when reading a deep scanline image with a large sample count in reduceMemory...

Security update for libxmp (moderate)

openSUSE Security Update: Security update for libxmp Announcement ID: openSUSE-SU-2025:0186-1 Rating: moderate References: Cross-References: CVE-2025-47256 CVSS scores: CVE-2025-47256 SUSE: 5.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP6 An update...

CVE-2025-54134 HAX CMS NodeJs's Improper Error Handling Leads to Denial of Service

HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.8 and below, the HAX CMS NodeJS application crashes when an authenticated attacker provides an API request lacking required URL parameters. This vulnerability affects the listFiles and saveFiles...

Adobe ColdFusion Operating System Command Injection Vulnerability

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion operating system command injection vulnerability, the vulnerability stems from the...

CVE-2025-40777

If a named caching resolver is configured with serve-stale-enable yes, and with stale-answer-client-timeout set to 0 the only allowable value other than disabled, and if the resolver, in the process of resolving a query, encounters a CNAME chain involving a specific combination of cached or...

GHSA-H952-963H-RV99 ExecuTorch vulnerable to Heap-based Buffer Overflow attack

A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f...