EUVD-2025-22949

Malicious code in bioql PyPI...

EUVD-2025-27623

Malicious code in bioql PyPI...

EUVD-2024-45836

Malicious code in bioql PyPI...

EUVD-2023-39918

Malicious code in bioql PyPI...

EUVD-2025-10696

Malicious code in bioql PyPI...

EUVD-2025-21795

Malicious code in bioql PyPI...

EUVD-2023-46899

Malicious code in bioql PyPI...

EUVD-2024-37895

Malicious code in bioql PyPI...

EUVD-2025-14784

Malicious code in bioql PyPI...

EUVD-2022-0309

Malicious code in bioql PyPI...

EUVD-2023-2988

Malicious code in bioql PyPI...

EUVD-2025-26263

Malicious code in bioql PyPI...

EUVD-2025-21032

Malicious code in bioql PyPI...

EUVD-2025-29762

Malicious code in bioql PyPI...

CVE-2025-52429

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerabili...

EUVD-2025-32364

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-48727 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

PT-2025-40564

Name of the Vulnerable Software and Affected Versions QNAP versions prior to 5.2.6.3195 build 20250715 QNAP QuTS hero versions prior to 5.2.6.3195 build 20250715 Description A NULL pointer dereference issue exists in QNAP operating systems. Successful exploitation by a remote attacker with...

SUSE CVE-2025-59538

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the default configuration, the /api/webhook endpoi...

CVE-2025-59937 go-mail has insufficient address encoding when passing mail addresses to the SMTP client

go-mail is a comprehensive library for sending mails with Go. In versions 0.7.0 and below, due to incorrect handling of the mail.Address values when a sender- or recipient address is passed to the corresponding MAIL FROM or RCPT TO commands of the SMTP client, there is a possibility of wrong...