EUVD-2025-10695

Malicious code in bioql PyPI...

EUVD-2024-2761

Malicious code in bioql PyPI...

EUVD-2022-6895

Malicious code in bioql PyPI...

EUVD-2023-0924

Malicious code in bioql PyPI...

EUVD-2024-3256

Malicious code in bioql PyPI...

EUVD-2024-45809

Malicious code in bioql PyPI...

EUVD-2025-5872

Malicious code in bioql PyPI...

EUVD-2024-29337

Malicious code in bioql PyPI...

EUVD-2025-21032

Malicious code in bioql PyPI...

EUVD-2024-22948

Malicious code in bioql PyPI...

EUVD-2024-40252

Malicious code in bioql PyPI...

Slackware Linux 15.0 / current fetchmail Vulnerability (SSA:2025-276-01)

The version of fetchmail installed on the remote host is prior to 6.4.27 / 6.5.6. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-276-01 advisory. New fetchmail packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the...

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel via the /api/user/updateuser endpoint. An attacker can gain unauthorized access by exploiting this endpoint to bypass authentication mechanisms. Remediation Upgrade...

Files or Directories Accessible to External Parties

Overview org.apache.kylin:kylin-server is an analytics Engine, contributed by eBay Inc., provides SQL interface and multi-dimensional analysis OLAP on Hadoop supporting extremely large datasets. Affected versions of this package are vulnerable to Files or Directories Accessible to External Partie...

Files or Directories Accessible to External Parties

Overview Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties due to improper restriction of file read. An attacker can obtain sensitive information by sending crafted requests to exposed resources. Note: This is only exploitable if the attacker...

Improper Neutralization of Data within XPath Expressions ('XPath Injection')

Overview smolagents is a 🤗 smolagents: a barebones library for agents. Agents write python code to call tools or orchestrate other agents. Affected versions of this package are vulnerable to Improper Neutralization of Data within XPath Expressions 'XPath Injection' via the searchitemctrlf functio...

CVE-2025-38590 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38590 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39760 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-39760 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38349 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38349 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38691 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38691 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...