EUVD-2023-30570

Malicious code in bioql PyPI...

EUVD-2025-17199

Malicious code in bioql PyPI...

EUVD-2023-29704

Malicious code in bioql PyPI...

EUVD-2023-53715

Malicious code in bioql PyPI...

How Leading CISOs are Getting Budget Approval

It's budget season. Once again, security is being questioned, scrutinized, or deprioritized. If you're a CISO or security leader, you've likely found yourself explaining why your program matters, why a given tool or headcount is essential, and how the next breach is one blind spot away. But these...

Linux Distros Unpatched Vulnerability : CVE-2007-1103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater...

Linux Distros Unpatched Vulnerability : CVE-2016-5627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related...

Linux Distros Unpatched Vulnerability : CVE-2024-22121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application...

Linux Distros Unpatched Vulnerability : CVE-2015-4766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows local users to affect availability via unknown vectors related to Server : Security :...

Linux Distros Unpatched Vulnerability : CVE-2015-4771

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to RBR...

Linux Distros Unpatched Vulnerability : CVE-2020-25693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in loadpnm can be triggered by a specially crafted input...

Linux Distros Unpatched Vulnerability : CVE-2015-4761

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Serv...

Linux Distros Unpatched Vulnerability : CVE-2015-2641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Serv...

Malicious code in @amber-team/log-uptime-deploy (npm)

The package @amber-team/log-uptime-deploy was found to contain malicious code...

MAL-2025-7060 Malicious code in @amber-team/log-uptime-deploy (npm)

The package @amber-team/log-uptime-deploy was found to contain malicious code...

CVE-2025-42955 Missing authorization check in SAP Cloud Connector

Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for testing LDAP connections. A successful exploit could lead to reduced performance, hence a low-impact on availability of...

CVE-2025-30638

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PowieT Powie's Uptime Robot powies-uptime-robot allows Stored XSS.This issue affects Powie's Uptime Robot: from n/a through = 0.9.7...

CVE-2025-30638

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PowieT Powie's Uptime Robot powies-uptime-robot allows Stored XSS.This issue affects Powie's Uptime Robot: from n/a through = 0.9.7...

CVE-2025-30638

The CVE-2025-30638 entry describes a Stored XSS in Powie’s Uptime Robot WordPress plugin due to improper input neutralization during web page generation. Affected software is Powie’s Uptime Robot Plugin, with vulnerable versions listed as from n/a through 0.9.7. Connected Red Hat data confirms th...

CVE-2025-30638 WordPress Powie's Uptime Robot plugin <= 0.9.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PowieT Powie's Uptime Robot powies-uptime-robot allows Stored XSS.This issue affects Powie's Uptime Robot: from n/a through = 0.9.7...