Security Bulletin: IBM® Db2® is vulnerable to a denial of service using a specially crafted SQL statement (CVE-2025-33143).

Summary IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated user to cause a denial of service using a specially crafted SQL statement that performs uncontrolled recursion. Vulnerability Details CVEID:CVE-2025-33143 DESCRIPTION: IBM Db2 for Linux, UNIX and...

EUVD-2012-4782

Malware in sbrugna...

EUVD-2010-4045

Malware in sbrugna...

EUVD-2021-16176

Malware in sbrugna...

EUVD-2015-4025

Malware in sbrugna...

EUVD-2015-0195

Malware in sbrugna...

EUVD-2020-13954

Malware in sbrugna...

EUVD-2023-42515

Malicious code in bioql PyPI...

EUVD-2023-42502

Malicious code in bioql PyPI...

EUVD-2025-22075

Malicious code in bioql PyPI...

EUVD-2024-29740

Malicious code in bioql PyPI...

EUVD-2023-44943

Malicious code in bioql PyPI...

EUVD-2024-29738

Malicious code in bioql PyPI...

EUVD-2023-2955

Malicious code in bioql PyPI...

EUVD-2022-38518

Malicious code in bioql PyPI...

EUVD-2023-32842

Malicious code in bioql PyPI...

CVE-2024-41983: Generation of Error Message Containing Sensitive Information

A vulnerability has been identified in SmartClient modules Opcenter QL Home SC All versions = V13.2 = V13.2 = V13.2 V2506. The affected application displays SQL statement in the error messages encountered during the generation of reports using Cockpit tool...

CVE-2025-7458: Integer Overflow or Wraparound

An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a...

CVE-2025-41678

A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement...

VulnCheck KEV: CVE-2022-3481

The WooCommerce Dropshipping WordPress plugin before 4.4 does not properly sanitise and escape a parameter before using it in a SQL statement via a REST endpoint available to unauthenticated users, leading to a SQL injection...