CPython security vulnerabilities

CPython is a Python interpreter implemented in C language by the Python Foundation. CPython has security vulnerabilities, which stem from unvalidated resource parameters, potentially leading to path traversal attacks...

Erlang/OTP security vulnerabilities

Erlang/OTP is an open-source JavaScript library for handling exceptions. This library can catch exceptions caused by the built-in APIs of node.js. Erlang/OTP has a security vulnerability, which stems from issues with relative path traversal and improper isolation in the tftpfile module. These...

EUVD-2020-24523

Malware in sbrugna...

EUVD-2015-0145

Malware in sbrugna...

EUVD-2021-0987

Malware in sbrugna...

EUVD-2018-1287

Malware in sbrugna...

EUVD-2008-4112

Malware in sbrugna...

EUVD-2022-1156

Malicious code in bioql PyPI...

EUVD-2021-30293

Malicious code in bioql PyPI...

EUVD-2021-6763

Malicious code in bioql PyPI...

EUVD-2022-26026

Malicious code in bioql PyPI...

EUVD-2022-26205

Malicious code in bioql PyPI...

EUVD-2022-26061

Malicious code in bioql PyPI...

EUVD-2023-49978

Malicious code in bioql PyPI...

EUVD-2024-15868

Malicious code in bioql PyPI...

EUVD-2022-35275

Malicious code in bioql PyPI...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in spring-webflux-5.3.27.jar

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of spring-webflux-5.3.27.jar Vulnerability Details CVEID:CVE-2024-38816 DESCRIPTION: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks...

Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2024-38816, CVE-2024-38808, CVE-2024-35952)

Summary IBM Security Guardium has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2024-38816 DESCRIPTION: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can cra...

ROS-20250619-09

The vulnerability in the Golang programming language is related to input validation errors when processing directory traversal sequences in file names. Exploitation of the vulnerability could allow an attacker to perform directory traversal attacks...

ROS-20250619-10

The vulnerability of Pgpool-II connection balancing and management software tools is related to errors of input validation errors when processing directory traversal sequences in filenames. Exploitation exploitation of the vulnerability could allow a remote attacker to perform directory traversal...