308 matches found
HTTP Response Splitting
Overview Affected versions of this package are vulnerable to HTTP Response Splitting via the Content-Disposition header. An attacker can manipulate the file extension of downloaded vCard files by supplying crafted input, potentially leading to user confusion or further exploitation. Remediation...
EUVD-2021-18917
Malware in sbrugna...
EUVD-2021-10851
Malware in sbrugna...
EUVD-2004-1484
Malware in sbrugna...
EUVD-2005-1108
Malware in sbrugna...
EUVD-2005-0587
Malware in sbrugna...
EUVD-2017-0248
Malware in sbrugna...
EUVD-2009-1304
Malware in sbrugna...
EUVD-2010-2263
Malware in sbrugna...
EUVD-2015-5867
Malware in sbrugna...
CVE-2025-43824
The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows...
CVE-2025-43824
The CVE-2025-43824 affects the Profile widget in Liferay Portal 7.4.0–7.4.3.111 (and older unsupported versions) and Liferay DXP 2023.Q3–2023.Q4 and 7.4 GA up to update 92. The root cause is a user name being included in the Content-Disposition header, allowing remote authenticated users to chang...
PT-2025-40950
Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.4.0 through 7.4.3.111 Liferay DXP versions 2023.Q3.1 through 2023.Q3.8 Liferay DXP versions 2023.Q4.0 through 2023.Q4.5 Liferay Portal 7.4 GA through update 92 Description The Profile widget is susceptible to a...
EUVD-2025-25227
Malicious code in bioql PyPI...
EUVD-2022-7200
Malicious code in bioql PyPI...
EUVD-2023-1445
Malicious code in bioql PyPI...
EUVD-2025-21377
Malicious code in bioql PyPI...
EUVD-2025-25223
Malicious code in bioql PyPI...
EUVD-2022-0092
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2015-5921
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple iOS before 9 mishandles Content-Disposition: attachment HTTP headers, which might allow man-in-the-middle attackers to obtain sensitive...