EUVD-2024-0253

Malicious code in bioql PyPI...

EUVD-2023-2020

Malicious code in bioql PyPI...

EUVD-2025-9321

Malicious code in bioql PyPI...

EUVD-2023-2715

Malicious code in bioql PyPI...

EUVD-2024-2766

Malicious code in bioql PyPI...

EUVD-2023-37361

Malicious code in bioql PyPI...

EUVD-2025-10863

Malicious code in bioql PyPI...

EUVD-2023-43232

Malicious code in bioql PyPI...

EUVD-2023-35456

Malicious code in bioql PyPI...

Slackware Linux 15.0 / current fetchmail Vulnerability (SSA:2025-276-01)

The version of fetchmail installed on the remote host is prior to 6.4.27 / 6.5.6. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-276-01 advisory. New fetchmail packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the...

Files or Directories Accessible to External Parties

Overview Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties due to improper restriction of file read. An attacker can obtain sensitive information by sending crafted requests to exposed resources. Note: This is only exploitable if the attacker...

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel via the /api/user/updateuser endpoint. An attacker can gain unauthorized access by exploiting this endpoint to bypass authentication mechanisms. Remediation Upgrade...

Files or Directories Accessible to External Parties

Overview org.apache.kylin:kylin-server is an analytics Engine, contributed by eBay Inc., provides SQL interface and multi-dimensional analysis OLAP on Hadoop supporting extremely large datasets. Affected versions of this package are vulnerable to Files or Directories Accessible to External Partie...

Improper Neutralization of Data within XPath Expressions ('XPath Injection')

Overview smolagents is a 🤗 smolagents: a barebones library for agents. Agents write python code to call tools or orchestrate other agents. Affected versions of this package are vulnerable to Improper Neutralization of Data within XPath Expressions 'XPath Injection' via the searchitemctrlf functio...

CVE-2025-38691 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38691 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38574 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38574 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39760 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-39760 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39706 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-39706 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38590 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38590 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38375 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38375 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...