EUVD-2023-0301

Malicious code in bioql PyPI...

CVE-2025-24764

The CVE-2025-24764 entry pertains to the WordPress plugin “(Simply) Guest Author Name” (versions up to 4.36) and describes a DOM-based Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Public sources in the connected docs indicate this is...

CVE-2023-7018

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36...

PYSEC-2023-301

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36...

Hugging Face Transformers Code Issue Vulnerability

Hugging Face Transformers is advanced natural language processing for Jax, PyTorch and TensorFlow. A code issue vulnerability exists in Hugging Face Transformers versions prior to 4.36, which stems from the presence of a deserialization vulnerability...

PT-2023-32836 · Hugging Face · Transformers

Name of the Vulnerable Software and Affected Versions: huggingface/transformers versions prior to 4.36 Description: The issue concerns the deserialization of untrusted data, which can compromise model integrity and potentially lead to remote code execution RCE. This is particularly relevant when...

Security update for perl-Cpanel-JSON-XS (moderate)

openSUSE Security Update: Security update for perl-Cpanel-JSON-XS Announcement ID: openSUSE-SU-2023:0225-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 An update that contains security fixes can now be installed. Description: This update for perl-Cpanel-JSON-XS...

CVE-2011-5085

Unspecified vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote attackers to read or modify data via unknown vectors...

CVE-2006-6249

Cross-site scripting XSS vulnerability in Chama Cargo 4.36 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-6249

CVE-2006-6249 is a cross-site scripting (XSS) vulnerability in Chama Cargo (a CGI Perl-based shopping site). Affected: Chama Cargo 4.36 and earlier. Root cause/impact: allows remote attackers to inject arbitrary web script or HTML that can execute in the victim’s browser (vector unspecified). Pub...

[SA18751] DataparkSearch Unspecified Cross-Site Scripting Vulnerability

TITLE: DataparkSearch Unspecified Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18751 VERIFY ADVISORY: http://secunia.com/advisories/18751/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: DataparkSearch 4.x http://secunia.com/product/7889/ DESCRIPTION...