1067 matches found
EUVD-2025-10103
Malicious code in bioql PyPI...
EUVD-2025-22407
Malicious code in bioql PyPI...
EUVD-2023-0219
Malicious code in bioql PyPI...
EUVD-2023-33925
Malicious code in bioql PyPI...
EUVD-2022-45367
Malicious code in bioql PyPI...
EUVD-2022-41569
Malicious code in bioql PyPI...
EUVD-2025-4500
Malicious code in bioql PyPI...
EUVD-2022-29198
Malicious code in bioql PyPI...
EUVD-2023-23642
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2010-5105
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.ble...
Linux Distros Unpatched Vulnerability : CVE-2021-4203
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free read flaw was found in sockgetsockopt in net/core/sock.c due to SOPEERCRED and SOPEERGROUPS race with listen and connect in the Linux kernel. I...
Mageia: Security Advisory (MGASA-2025-0215)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-31528 · Unknown · Magnusbilling
Name of the Vulnerable Software and Affected Versions: MagnusBilling version 7.8.5.3 Description: A broken access control issue in MagnusBilling version 7.8.5.3 allows newly registered users to gain escalated privileges. This is achieved by sending a crafted request to the...
CVE-2025-8069
During the AWS Client VPN client installation on Windows devices, the install process references the C:\usr\local\windows-x8664-openssl-localbuild\ssl directory location to fetch the OpenSSL configuration file. As a result, a non-admin user could place arbitrary code in the configuration file. If...
CVE-2025-30750
Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 19.3-19.27, 21.3-21.18 and 23.4-23.8. Easily exploitable vulnerability allows high privileged attacker having Create User privilege with network access via Oracle Net to compromise...
CVE-2025-4972 Incorrect Authorization in GitLab
An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that could have allowed authenticated users with invitation privileges to bypass group-level user invitation restrictions by manipulating group invitation functionality...
CVE-2025-27028
The Linux deprivileged user vpuser in Radiflow iSAP Smart Collector CentOS 7 - VSAP 1.20 can read the entire file system content, including files belonging to other users and having restricted access like, for example, the root password hash...
CVE-2014-7210
pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends are not affected...
ALSA-2025:A004 Important: libblockdev security update
libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology like LVM, Btrfs, MD RAID, Swap,... is implemented in a separate plugin, possibly with multiple implementations e.g. using LVM CLI or the new LVM...