EUVD-2023-56100

Malicious code in bioql PyPI...

EUVD-2025-26634

Malicious code in bioql PyPI...

EUVD-2025-14778

Malicious code in bioql PyPI...

EUVD-2023-1459

Malicious code in bioql PyPI...

EUVD-2022-1741

Malicious code in bioql PyPI...

EUVD-2024-0249

Malicious code in bioql PyPI...

EUVD-2022-7555

Malicious code in bioql PyPI...

EUVD-2022-49077

Malicious code in bioql PyPI...

EUVD-2025-26875

Malicious code in bioql PyPI...

EUVD-2022-31204

Malicious code in bioql PyPI...

EUVD-2025-10417

Malicious code in bioql PyPI...

EUVD-2024-2296

Malicious code in bioql PyPI...

EUVD-2025-23164

Malicious code in bioql PyPI...

EUVD-2022-5488

Malicious code in bioql PyPI...

CVE-2025-52424

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-61668

Volto is a ReactJS-based frontend for the Plone Content Management System. Versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a...

CVE-2025-55191

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0-rc1, 3.1.0-rc1 through 3.1.7, and 3.0.0-rc1 through 3.0.18 contain a race condition in the repository credentials handler that can cause the Argo CD server to panic and crash when...

CVE-2025-43357

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to fingerprint the user...

CVE-2025-59154

Openfire’s SASL EXTERNAL client TLS authentication uses X509Certificate.getSubjectDN().getName() with a regex to extract CN, producing a provider-dependent string that can fail to escape characters. This allows crafted DN values (e.g., OU="CN=admin,") to masquerade as another user by spoofing the...

CVE-2025-58752

A path traversal / static-file serving bypass vulnerability has been identified in Vite’s static file server, where HTML files located outside the configured root or deny/allow lists may be served even when server.fs settings such as deny are used. An attacker can exploit this by requesting HTML...