264 matches found
CVE-2024-5401: Improper Control of Dynamically-Managed Code Resources
Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manager DSM before 7.1.1-42962-8 and 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller DSMUC before 3.1.4-23079 allows remote authenticated users to obtain privileges witho...
EUVD-2020-7264
Malware in sbrugna...
EUVD-2022-32121
Malicious code in bioql PyPI...
EUVD-2022-1965
Malicious code in bioql PyPI...
EUVD-2024-26254
Malicious code in bioql PyPI...
EUVD-2022-2956
Malicious code in bioql PyPI...
EUVD-2022-32122
Malicious code in bioql PyPI...
EUVD-2024-26243
Malicious code in bioql PyPI...
EUVD-2023-59651
Malicious code in bioql PyPI...
EUVD-2024-26251
Malicious code in bioql PyPI...
EUVD-2024-26241
Malicious code in bioql PyPI...
EUVD-2022-32118
Malicious code in bioql PyPI...
EUVD-2024-26248
Malicious code in bioql PyPI...
Malicious code in ng2-webapi (npm)
The package ng2-webapi was found to contain malicious code...
MAL-2025-27476 Malicious code in ng2-webapi (npm)
The package ng2-webapi was found to contain malicious code...
CVE-2024-29235
Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in IOModule.EnumLog webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and...
CVE-2024-29231
Improper validation of array index vulnerability in UserPrivilege.Enum webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors...
CVE-2024-26470
A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...
CVE-2024-29234
Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in Group.Save webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and conduct...