757 matches found
ingress-nginx rules.http.paths.path nginx configuration injection
CVSS Rating: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H A security issue was discovered in ingress-nginx where the rules.http.paths.path Ingress field can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and...
Advanced Vulnerability Scanning for Open Source Software: Detection and Mitigation of Log4j Vulnerabilities
Automated detection of software vulnerabilities remains a critical challenge in software security. Log4j is an industrial-grade Java logging framework listed as one of the top 100 critical open source projects. On Dec. 10, 2021 a severe vulnerability Log4Shell was disclosed before being fully...
CVE-2022-50815 ext2: Add sanity checks for group and filesystem size
In the Linux kernel, the following vulnerability has been resolved: ext2: Add sanity checks for group and filesystem size Add sanity check that filesystem size does not exceed the underlying device size and that group size is big enough so that metadata can fit into it. This avoid trying to mount...
Agentic AI for Autonomous Defense in Software Supply Chain Security: Beyond Provenance to Vulnerability Mitigation
The software supply chain attacks are becoming more and more focused on trusted development and delivery procedures, so the conventional post-build integrity mechanisms cannot be used anymore. The available frameworks like SLSA, SBOM and in toto are majorly used to offer provenance and traceabili...
Vulnerabilites
Vendor Acknowledgment & Coordination...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989645)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989645 advisory. In the Linux kernel, the following vulnerability has been resolved: net/rds: fix possible cp null dereference cp might be null, calling cp-cpconn would produce null...
CVE-2025-43017
HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities...
EUVD-2019-13124
Malware in sbrugna...
EUVD-2018-0794
Malware in sbrugna...
HP Sure Start IFD Protection - BIOS Security Update
A potential security vulnerability has been identified in HP Sure Start’s protection of the Intel Flash Descriptor in certain HP PC products, which might allow security bypass, arbitrary code execution, loss of integrity or confidentiality, or denial of service. HP is releasing BIOS updates to...
EUVD-2023-54354
Malicious code in bioql PyPI...
EUVD-2024-35259
Malicious code in bioql PyPI...
EUVD-2023-1019
Malicious code in bioql PyPI...
EUVD-2021-31499
Malicious code in bioql PyPI...
EUVD-2022-5410
Malicious code in bioql PyPI...
EUVD-2022-4260
Malicious code in bioql PyPI...
EUVD-2022-28551
Malicious code in bioql PyPI...
EUVD-2025-6811
Malicious code in bioql PyPI...