EUVD-2022-42523

Malicious code in bioql PyPI...

EUVD-2025-20491

Malicious code in bioql PyPI...

EUVD-2025-27839

Malicious code in bioql PyPI...

EUVD-2023-0099

Malicious code in bioql PyPI...

EUVD-2022-37313

Malicious code in bioql PyPI...

EUVD-2024-55025

Malicious code in bioql PyPI...

EUVD-2023-46473

Malicious code in bioql PyPI...

EUVD-2022-51035

Malicious code in bioql PyPI...

EUVD-2023-2113

Malicious code in bioql PyPI...

EUVD-2022-48987

Malicious code in bioql PyPI...

EUVD-2021-30532

Malicious code in bioql PyPI...

EUVD-2022-2434

Malicious code in bioql PyPI...

EUVD-2025-23967

Malicious code in bioql PyPI...

RLSA-2025:16428 Moderate: libtpms security update

The libtpms is a library providing Trusted Platform Module TPM functionality for virtual machines. Security Fixes: libtpms: Libtpms Out-of-Bounds Read Vulnerability CVE-2025-49133 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

WordPress plugin Comment Info Detector 跨站请求伪造漏洞

WordPress Comment Info Detector plugin is a WordPress plugin for displaying commenter browser and operating system information, developed by Kyle Baker. The WordPress Comment Info Detector plugin suffers from a cross-site request forgery vulnerability that stems from the options.php file not...

K000156758: GNOME GLib vulnerability CVE-2024-34397

Security Advisory Description An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bu...

External Initialization of Trusted Variables or Data Stores

Overview ch.qos.logback:logback-core is a logback-core module. Affected versions of this package are vulnerable to External Initialization of Trusted Variables or Data Stores via the conditional processing of the logback.xml configuration file when both the Janino library and Spring Framework are...

CVE-2025-11148

All versions of the package check-branches are vulnerable to Command Injection check-branches is a command-line tool that is interacted with locally, or via CI, to confirm no conflicts exist in git branches. However, the library follows these conventions which can be abused: 1. It trusts branch...

kernel security update

4.18.0-553.77.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

CVE-2024-43192 IBM Storage TS4500 Library cross-site request forgery

IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...