EUVD-2025-23299

Malicious code in bioql PyPI...

EUVD-2021-7985

Malicious code in bioql PyPI...

EUVD-2025-19869

Malicious code in bioql PyPI...

EUVD-2025-23954

Malicious code in bioql PyPI...

EUVD-2023-52123

Malicious code in bioql PyPI...

EUVD-2024-54868

Malicious code in bioql PyPI...

EUVD-2022-48978

Malicious code in bioql PyPI...

EUVD-2025-23305

Malicious code in bioql PyPI...

EUVD-2025-23364

Malicious code in bioql PyPI...

EUVD-2025-25385

Malicious code in bioql PyPI...

EUVD-2024-36489

Malicious code in bioql PyPI...

MetaCPAN Crypt::RandomEncryption 安全漏洞

MetaCPAN Crypt::RandomEncryption is a Perl library from the MetaCPAN Foundation. A security vulnerability exists in MetaCPAN Crypt::RandomEncryption version 0.01, which stems from the use of an insecure rand function for encryption, which may result in insufficient encryption strength...

PT-2025-55106

Уязвимость системы контроля доступа PERCo-Web связана с использованием слабого алгоритма шифрования. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, раскрыть аутентификационные данные пользователя...

The vulnerability of the PERCo-Web access control system, related to the use of a weak encryption algorithm, allows attackers to disclose user’s authentication data.

The vulnerability of the PERCo-Web access control system is related to the use of a weak encryption algorithm. Exploiting this vulnerability could allow an attacker, operating remotely, to obtain user authentication data...

Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses pyjwt v2.10.1 library which is vulnerable to CVE-2025-45768

Summary Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses pyjwt v2.10.1 library which is vulnerable to CVE-2025-45768. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-45768 DESCRIPTION: pyjwt v2.10.1 was...

Security Bulletin: IBM Watsonx BI is affected by use of jose v6.0.10 and was discovered to contain weak encryption

Summary IBM Watsonx BI is affected by use of jose v6.0.10 where the library uses a weak encryption algorithm, allowing an attacker to decrypt sensitive data Vulnerability Details CVEID:CVE-2025-45767 DESCRIPTION: jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a...

CVE-2025-57176

On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption metadata only with file contents...

CVE-2025-57176

On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption metadata only with file contents...

CVE-2025-57176

On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption metadata only with file contents...

Security Bulletin: Astronomer with IBM is vulnerable to weak encryption due to the jose package (CVE-2025-45767)

Summary Jose is used by Astronomer with IBM as part of the JSON encryption functionality. Vulnerability Details CVEID:CVE-2025-45767 DESCRIPTION: jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a third party because the claim of "do not meet recommended security...