EUVD-2021-17567

Malware in sbrugna...

EUVD-2014-6058

Malware in sbrugna...

EUVD-2020-6528

Malware in sbrugna...

EUVD-2021-28253

Malicious code in bioql PyPI...

EUVD-2025-21396

Malicious code in bioql PyPI...

EUVD-2022-6644

Malicious code in bioql PyPI...

EUVD-2021-7690

Malicious code in bioql PyPI...

EUVD-2022-28119

Malicious code in bioql PyPI...

EUVD-2024-2170

Malicious code in bioql PyPI...

EUVD-2023-35198

Malicious code in bioql PyPI...

EUVD-2023-0563

Malicious code in bioql PyPI...

EUVD-2023-1056

Malicious code in bioql PyPI...

org.wso2.carbon.devicemgt:org.wso2.carbon.device.mgt.common (>=2.0.6, <=2.0.19) potentially affected by CVE-2025-4760 via org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.api (6.1.35)

org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.api MAVEN version 6.1.35 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.api and may be impacted: - org.wso2.carbon.devicemgt:org.wso2.carbon.device.mgt.common...

CVE-2023-30845

ESPv2 is a service proxy that provides API management capabilities using Google Service Infrastructure. ESPv2 2.20.0 through 2.42.0 contains an authentication bypass vulnerability. API clients can craft a malicious X-HTTP-Method-Override header value to bypass JWT authentication in specific cases...

CVE-2019-25075

HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request...

Security Bulletin: Multiple Vulnerabilities in IBM webMethods API Management

Summary Multiple vulnerabilities were addressed in the latest fix release for IBM webMethods API Management 11.1 Vulnerability Details CVEID:CVE-2024-23672 DESCRIPTION: Denial of Service via incomplete cleanup vulnerability in Apache Tomcat. It was possible for WebSocket clients to keep WebSocket...

CVE-2025-28076: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in EasyVirt DCScope = 8.6.4 and CO2Scope = 1.3.4 allows remote authenticated attackers to execute arbitrary SQL commands via the 1 timeago, 2 user, 3 filter, 4 target, 5 p1, 6 p2, 7 p3, 8 p4, 9 p5, 10 p6, 11 p7, 12 p8, 13 p9, 14 p10, 15 p11, 16 p12, 17 p13, ...

[SECURITY] Fedora 42 Update: rust-icu_locid-1.5.0-2.fc42

API for managing Unicode Language and Locale Identifiers...

CVE-2025-27601

Umbraco is a free and open source .NET content management system. An improper API access control issue has been identified Umbraco's API management package prior to versions 15.2.3 and 14.3.3, allowing low-privilege, authenticated users to create and update data type information that should be...

PT-2025-10785

Name of the Vulnerable Software and Affected Versions: Umbraco versions prior to 15.2.3 Umbraco versions prior to 14.3.3 Description: An improper API access control issue has been identified in Umbraco's API management package, allowing low-privilege, authenticated users to create and update data...