EUVD-2022-31487

Malicious code in bioql PyPI...

EUVD-2024-26089

Malicious code in bioql PyPI...

EUVD-2022-44028

Malicious code in bioql PyPI...

EUVD-2022-48987

Malicious code in bioql PyPI...

EUVD-2025-23967

Malicious code in bioql PyPI...

EUVD-2023-1763

Malicious code in bioql PyPI...

EUVD-2024-30806

Malicious code in bioql PyPI...

EUVD-2025-16128

Malicious code in bioql PyPI...

EUVD-2022-37313

Malicious code in bioql PyPI...

EUVD-2025-21018

Malicious code in bioql PyPI...

EUVD-2023-1882

Malicious code in bioql PyPI...

EUVD-2022-5938

Malicious code in bioql PyPI...

EUVD-2022-2434

Malicious code in bioql PyPI...

EUVD-2024-3518

Malicious code in bioql PyPI...

RLSA-2025:16428 Moderate: libtpms security update

The libtpms is a library providing Trusted Platform Module TPM functionality for virtual machines. Security Fixes: libtpms: Libtpms Out-of-Bounds Read Vulnerability CVE-2025-49133 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

WordPress plugin Comment Info Detector 跨站请求伪造漏洞

WordPress Comment Info Detector plugin is a WordPress plugin for displaying commenter browser and operating system information, developed by Kyle Baker. The WordPress Comment Info Detector plugin suffers from a cross-site request forgery vulnerability that stems from the options.php file not...

K000156758: GNOME GLib vulnerability CVE-2024-34397

Security Advisory Description An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bu...

External Initialization of Trusted Variables or Data Stores

Overview ch.qos.logback:logback-core is a logback-core module. Affected versions of this package are vulnerable to External Initialization of Trusted Variables or Data Stores via the conditional processing of the logback.xml configuration file when both the Janino library and Spring Framework are...

CVE-2025-11148

All versions of the package check-branches are vulnerable to Command Injection check-branches is a command-line tool that is interacted with locally, or via CI, to confirm no conflicts exist in git branches. However, the library follows these conventions which can be abused: 1. It trusts branch...

kernel security update

4.18.0-553.77.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...