EUVD-2022-3805

Malicious code in bioql PyPI...

EUVD-2023-28762

Malicious code in bioql PyPI...

EUVD-2021-31332

Malicious code in bioql PyPI...

EUVD-2024-43124

Malicious code in bioql PyPI...

EUVD-2023-28764

Malicious code in bioql PyPI...

EUVD-2022-3094

Malicious code in bioql PyPI...

EUVD-2023-52934

Malicious code in bioql PyPI...

EUVD-2025-3075

Malicious code in bioql PyPI...

EUVD-2025-19555

Malicious code in bioql PyPI...

EUVD-2023-49756

Malicious code in bioql PyPI...

EUVD-2022-6209

Malicious code in bioql PyPI...

EUVD-2022-24807

Malicious code in bioql PyPI...

EUVD-2022-41292

Malicious code in bioql PyPI...

Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions

...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the rich text field in web content articles. An attacker can execute arbitrary web scripts or inject malicious HTML by submitting crafted input to this field. Details Cross-site scripting or XSS is a code...

Moderate: perl-JSON-XS security update

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. Security Fixes: JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 For...

Cross-site Scripting (XSS)

Overview joomla/filter is a Joomla Filter Package Affected versions of this package are vulnerable to Cross-site Scripting XSS via the checkAttribute method. An attacker can execute arbitrary scripts in the context of the affected application by submitting specially crafted input that bypasses...

CVE-2025-23274

NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service...

CVE-2025-57873

There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote authenticated attacker with administrative access to supply a crafted string which would execute arbitrary JavaScript code in the browser...

CVE-2025-57871 BUG-000174020 - Reflected XSS vulnerability identified in Portal for ArcGIS. (11.3, 11.1, 10.9.1)

There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote authenticated attacker with administrative access to supply a crafted string which would execute arbitrary JavaScript code in the browser...