CVE-2025-61019

A flaw was found in virtuoso-opensource. An attacker could send specially crafted SQL Structured Query Language statements to the sqlokeypartbest component, leading to a Denial of Service DoS. This vulnerability allows an attacker to disrupt the availability of the service...

CVE-2025-61023

A flaw was found in virtuoso-opensource. An attacker could exploit a vulnerability in the stcompare component by sending specially crafted SQL statements. This could lead to a Denial of Service DoS, making the service unavailable to legitimate users...

CVE-2025-61018

A flaw was found in openlink virtuoso-opensource. This vulnerability allows attackers to cause a Denial of Service DoS by sending specially crafted SQL statements to the sqloplacedtset component. A successful exploit could make the service unavailable to legitimate users...

CVE-2025-61028

A flaw was found in the virtuoso-opensource component. An attacker could exploit this vulnerability by sending specially crafted SQL statements, leading to a Denial of Service DoS condition. This could make the affected system unavailable to legitimate users...

CVE-2025-61024

A flaw was found in virtuoso-opensource. An attacker could send specially crafted SQL Structured Query Language statements to a specific component, sqlotryinloop, leading to a Denial of Service DoS. This could make the service unavailable to legitimate users. Mitigation To reduce the attack...

CVE-2025-61022

A flaw was found in openlink virtuoso-opensource. This issue, specifically within the sqlotbcolpreds component, allows attackers to cause a Denial of Service DoS by sending specially crafted SQL statements. This can lead to the unavailability of the service...

EUVD-2025-210323

An issue in the sqlotryinloop component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

EUVD-2025-210320

An issue in the tsetpush component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

EUVD-2025-210314

An issue in the sqlokeypartbest component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2025-61020

An issue in the sqlostripinjoin component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2025-61022

An issue in the sqlotbcolpreds component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2025-61028

The CVE-2025-61028 entry describes an issue in the time_t_to_dt component of openlink virtuoso-opensource prior to or in version 7.2.11, where crafted SQL statements can trigger a Denial of Service. The available connected documents identify affected software as Virtuoso Open-Source (v7.2.11) and...

CVE-2025-61029

An issue in the sqlountry component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

EUVD-2023-35923

Malicious code in bioql PyPI...

EUVD-2023-35921

Malicious code in bioql PyPI...

EUVD-2024-53695

Malicious code in bioql PyPI...

TencentOS Server 2: virtuoso-opensource (TSSA-2025:0326)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0326 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

Oracle Linux 7 : virtuoso-opensource (ELSA-2025-4039)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-4039 advisory. 1:6.1.6-7.0.1 - Back port fix for CVE-2024-57656 Orabug:37856848 Tenable has extracted the preceding description block directly from the Oracle Linux security...

RHSA-2025:4039 Red Hat Security Advisory: virtuoso-opensource security update

Bulletin has no description...

Important: Red Hat Security Advisory: virtuoso-opensource security update

An update for virtuoso-opensource is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...