EUVD-2025-27503

Malicious code in bioql PyPI...

EUVD-2024-1306

Malicious code in bioql PyPI...

EUVD-2025-23197

Malicious code in bioql PyPI...

EUVD-2022-1297

Malicious code in bioql PyPI...

EUVD-2023-28012

Malicious code in bioql PyPI...

EUVD-2022-41784

Malicious code in bioql PyPI...

EUVD-2023-28816

Malicious code in bioql PyPI...

EUVD-2024-54718

Malicious code in bioql PyPI...

EUVD-2022-5383

Malicious code in bioql PyPI...

CVE-2025-49844

CVE-2025-49844 affects Redis—an in‑memory data store—with Lua scripting. An authenticated user can abuse a specially crafted Lua script to trigger a use‑after‑free and potentially achieve remote code execution. Affected versions: Redis 8.2.1 and earlier; fix: 8.2.2. Workarounds include ACL‑based ...

AZL-68355 CVE-2025-46819 affecting package compat-lua 5.1.5-17

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua...

CVE-2025-46819

CVE-2025-46819 affects Redis (versions 8.2.1 and earlier) where an authenticated user can craft a Lua script that reads out-of-bound data or crashes the server, enabling denial of service. The issue is part of a set of Lua-related vulnerabilities (also CVE-2025-46817/46818; and related CVE-2025-4...

CVE-2025-46819

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua...

EUVD-2025-32328

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions o...

SUSE CVE-2025-59148

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Versions 8.0.0 and below incorrectly handle the entropy keyword when not anchored to a "sticky" buffer, which can lead to a segmentation fault. This issue is fixed ...

CVE-2025-59150 Suricata: Keyword tls.subjectaltname can lead to NULL-ptr deref

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed i...

CVE-2025-59150

CVE-2025-59150 affects Suricata 8.0.0, where using the tls.subjectaltname keyword can cause a segmentation fault if the decoded subjectaltname contains a NULL byte. The issue is fixed in 8.0.1; a workaround is to disable rules using the tls.subjectaltname keyword. The NVD/NASL/Nessus entries corr...

UBUNTU-CVE-2025-59148

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Versions 8.0.0 and below incorrectly handle the entropy keyword when not anchored to a "sticky" buffer, which can lead to a segmentation fault. This issue is fixed ...

CVE-2025-59149 Suricata: Stack buffer overflow in rule parser when processing long keywords with transforms

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. In version 8.0.0, rules using keyword ldap.responses.attributetype which is long with transforms can lead to a stack buffer overflow during Suricata startup or duri...

CVE-2025-59148

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Versions 8.0.0 and below incorrectly handle the entropy keyword when not anchored to a "sticky" buffer, which can lead to a segmentation fault. This issue is fixed ...