EUVD-2024-43938

Malicious code in bioql PyPI...

CVE-2025-43938

creationtimestamp| type| source ---|---|--- 2025-09-10 16:36:46+00:00| seen| Telegram/2l5kks5wxavZ6WPSNIyrQT4reZ9emfQFMxxIJMKhCOouTE...

CVE-2022-43938

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator to disable scripting capabilities of Pentaho Reports .prpt through the JVM script manager...

CVE-2024-43938

creationtimestamp| type| source ---|---|--- 2024-09-18 01:39:35+00:00| seen| https://t.me/cvedetector/5879...

CVE-2024-43938

CVE-2024-43938 describes a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress Name Directory plugin, affecting versions up to 1.29.0. The issue arises from improper neutralization of user input during web page generation, enabling Attackers to inject scripts via crafted input tha...

CVE-2024-43938 WordPress Name Directory plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeroen Peters Name Directory name-directory.This issue affects Name Directory: from n/a through = 1.29.0...

WordPress Name Directory Plugin <= 1.29.0 is vulnerable to Cross Site Scripting (XSS)

Software Name Directory Type Plugin Vulnerable versions = 1.29.0 Fixed in 1.29.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43938 Patch priority Medium CVSS severity Medium 7.1 Developer Jeroen Peters PSID 00d0c2d9ba55 Credits LVT-tholv2k Required privilege...

CVE-2022-43938

creationtimestamp| type| source ---|---|--- 2023-04-03 22:25:07+00:00| seen| https://t.me/cibsecurity/61356 2023-04-08 20:04:44+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8078...

CVE-2022-43938 Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator to disable scripting capabilities of Pentaho Reports .prpt through the JVM script manager...

CVE-2022-43938 Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator to disable scripting capabilities of Pentaho Reports .prpt through the JVM script manager...

CVE-2022-43938

CVE-2022-43938 affects Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x. The issue is described as an improper neutralization of directives in statically saved code (Static Code Injection) that, due to a JVM Script Manager flaw, cannot relia...

CVE-2021-43938

creationtimestamp| type| source ---|---|--- 2022-04-29 20:25:12+00:00| seen| https://t.me/cibsecurity/41679...

CVE-2021-43938 Elcomplus SmartPTT SCADA Server Information Exposure

Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization...

CVE-2021-43938

Elcomplus SmartPTT SCADA Server (vulnerable component: information exposure via unauthenticated file requests) is affected by CVE-2021-43938. The vulnerability arises from allowing an unauthenticated user to request various files from the server without authentication or authorization, leading to...