EUVD-2024-1068

Malicious code in bioql PyPI...

EUVD-2024-2127

Malicious code in bioql PyPI...

EUVD-2022-0317

Malicious code in bioql PyPI...

EUVD-2023-23608

Malicious code in bioql PyPI...

EUVD-2025-22613

Malicious code in bioql PyPI...

EUVD-2025-27185

Malicious code in bioql PyPI...

EUVD-2024-37390

Malicious code in bioql PyPI...

EUVD-2022-7388

Malicious code in bioql PyPI...

EUVD-2022-7202

Malicious code in bioql PyPI...

EUVD-2024-45179

Malicious code in bioql PyPI...

EUVD-2024-3222

Malicious code in bioql PyPI...

EUVD-2024-52307

Malicious code in bioql PyPI...

EUVD-2021-28270

Malicious code in bioql PyPI...

icu security update

An update is available for icu. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The International Components for Unicode ICU library provides robust and...

CVE-2025-59270 psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse

psPAS PowerShell module does not explicitly enforce TLS 1.2 within the 'Get-PASSAMLResponse' function during the SAML authentication process. An unauthenticated attacker in a 'Man-in-the-Middle' position could manipulate the TLS handshake and downgrade TLS to a deprecated protocol. Fixed in 7.0.2...

CVE-2023-53206 hwmon: (pmbus_core) Fix NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbuscore Fix NULL pointer dereference Pass i2cclient to pmbusisenabled to drop the assumption that a regulator device is passed in. This will fix the issue of a NULL pointer dereference when called from pmbusgetflags...

CVE-2025-58439

ERP is a free and open source Enterprise Resource Planning tool. In versions below 14.89.2 and 15.0.0 through 15.75.1, lack of validation of parameters left certain endpoints vulnerable to error-based SQL Injection. Some information like version could be retrieved. This issue is fixed in versions...

f2fs: fix to avoid potential panic during recovery

...

PT-2025-35495

Name of the Vulnerable Software and Affected Versions: StreamVault versions prior to 250822 Description: StreamVault is a multi-platform video parsing and downloading tool. Prior to version 250822, after logging into the StreamVault system, an attacker can modify system parameters, construct...

CVE-2025-55304 Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A denial-of-service was found in Exiv2 version 0.28.5: a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata can cause Exiv2 to run for a long time...