EUVD-2021-7646

Malicious code in bioql PyPI...

EUVD-2024-49169

Malicious code in bioql PyPI...

EUVD-2025-11740

Malicious code in bioql PyPI...

NewStart CGSL MAIN 6.06 : qemu Multiple Vulnerabilities (NS-SA-2025-0227)

The remote NewStart CGSL host, running version MAIN 6.06, has qemu packages installed that are affected by multiple vulnerabilities: - A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a SPIC...

CVE-2025-57880

Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice Extension:BlueSpiceWhoIsOnline allows Cross-Site Scripting XSS. This issue affects BlueSpice: from 5 through 5.1.1...

CVE-2025-58114 Potential XSS in Extension:CognitiveProcessDesigner

Improper Input Validation vulnerability in Hallo Welt! GmbH BlueSpice Extension:CognitiveProcessDesigner allows Cross-Site Scripting XSS.This issue affects BlueSpice: from 5 through 5.1.1...

CVE-2025-58114 Potential XSS in Extension:CognitiveProcessDesigner

Improper Input Validation vulnerability in Hallo Welt! GmbH BlueSpice Extension:CognitiveProcessDesigner allows Cross-Site Scripting XSS.This issue affects BlueSpice: from 5 through 5.1.1...

Fedora 43 : qemu (2025-b8b6acb283)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-b8b6acb283 advisory. Fix crash with spice GL bz 2391334 ---- Update to 10.1.0 GA release ---- Automatic update for qemu-10.1.0-0.4.rc4.fc43. Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2020-23793

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in spice-server spice-server-0.14.0-6.el76.1.x8664 of Redhat's VDI product. There is a security vulnerablility that can restart KVMvirtu...

Linux Distros Unpatched Vulnerability : CVE-2020-25651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in the client connection of an illegitimate...

Linux Distros Unpatched Vulnerability : CVE-2020-25653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest us...

Linux Distros Unpatched Vulnerability : CVE-2020-25650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine. Any unprivileged local guest user with...

Linux Distros Unpatched Vulnerability : CVE-2020-25652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket in...

Linux Distros Unpatched Vulnerability : CVE-2018-10873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A...

Linux Distros Unpatched Vulnerability : CVE-2020-14355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE...

mingw-freetype and spice-client-win security update

An update is available for mingw-freetype, spice-client-win. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MinGW Windows Freetype library. Security Fixes:...

RHSA-2025:9380 Red Hat Security Advisory: spice-client-win security update

Bulletin has no description...

Important: Red Hat Security Advisory: spice-client-win security update

An update for spice-client-win is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 8 : spice-client-win (RHSA-2025:9380)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9380 advisory. Spice client MSI installers for Windows clients Security Fixes: freetype: OOB write when attempting to parse font subglyph structures related to...

TencentOS Server 3: spice-vdagent (TSSA-2022:0084)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0084 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...