85 matches found
EUVD-2021-21265
Malware in sbrugna...
EUVD-2023-3224
Malicious code in bioql PyPI...
EUVD-2024-2675
Malicious code in bioql PyPI...
CVE-2025-58357
5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Version 0.13.2 contains a vulnerability in the chat page's script gadgets that enables content injection attacks through multiple vectors: malicious prompt injection pages, compromised MCP server...
CVE-2025-4988 Stored Cross-site Scripting (XSS) vulnerability affecting Results Analytics in Multidisciplinary Optimization Engineer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
A stored Cross-site Scripting XSS vulnerability affecting Results Analytics in Multidisciplinary Optimization Engineer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...
SUSE-SU-2025:01765-1 Security update for postgresql17
This update for postgresql17 fixes the following issues: Upgrade to 17.5: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation bsc1242931 Changelog: https://www.postgresql.org/docs/release/17.5/...
MINI-CP3X-WFCP-V63R
Bulletin has no description...
CVE-2024-21906
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.8.2823...
CVE-2023-23929
vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Currently, the refresh token is valid indefinitely. The refresh token should get a validity of 24-48 hours. A fix was released in version 3.8.0...
CVE-2022-4810
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
PT-2025-20583 · Opensuse +1 · Govulncheck-Vulndb
Name of the Vulnerable Software and Affected Versions: govulncheck-vulndb versions prior to 0.0.20250506T153719 Description: This update addresses multiple issues within govulncheck-vulndb. The update includes fixes for issues identified as GO-2025-3645, GO-2025-3646, GO-2025-3647, GO-2025-3648,...
python3.12-packaging bug fix and enhancement update
An update is available for python3.12-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Roc...
PT-2025-19703 · Opensuse +1 · Govulncheck-Vulndb
Name of the Vulnerable Software and Affected Versions: govulncheck-vulndb versions prior to 0.0.20250422T152923 govulncheck-vulndb versions prior to 0.0.20250422T181640 Description: This update addresses multiple issues in govulncheck-vulndb. The issues addressed include GO-2025-3600, GO-2025-360...
Important: Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release
The 1.1.2 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16, 4.17...
OPENSUSE-SU-2025:0115-1 Security update for chromium, gn
This update for chromium, gn fixes the following issues: Changes in chromium: - Chromium 135.0.7049.52 stable release 2025-04-01 boo1240555 CVE-2025-3066: Use after free in Navigations CVE-2025-3067: Inappropriate implementation in Custom Tabs CVE-2025-3068: Inappropriate implementation in Intent...
CGA-356V-QW98-V97Q
Bulletin has no description...
Incorrect Privilege Assignment
Overview Affected versions of this package are vulnerable to Incorrect Privilege Assignment in the runsc process, which has "root-like" permissions. An attacker can expose files on the underlying filesystem by escalating privileges before a project is forked. Remediation Upgrade...
spamassassin bug fix and enhancement update
An update is available for spamassassin. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...
HP ThinPro 8.1 SP6 Security Updates
Previous versions of HP ThinPro prior to HP ThinPro 8.1 SP6 could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP6, which includes updates to mitigate potential vulnerabilities. All of the identified vulnerabilities listed above were addressed and fixed as part of...