EUVD-2024-46214

Malicious code in bioql PyPI...

EUVD-2024-17524

Malicious code in bioql PyPI...

EUVD-2024-17522

Malicious code in bioql PyPI...

EUVD-2024-51542

Malicious code in bioql PyPI...

EUVD-2025-21848

Malicious code in bioql PyPI...

EUVD-2021-28016

Malicious code in bioql PyPI...

EUVD-2023-57778

Malicious code in bioql PyPI...

EUVD-2022-34959

Malicious code in bioql PyPI...

EUVD-2024-51449

Malicious code in bioql PyPI...

EUVD-2023-34262

Malicious code in bioql PyPI...

EUVD-2024-44339

Malicious code in bioql PyPI...

CVE-2025-52048

In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function addtag at frappe/desk/doctype/tag/tag.py is vulnerable to SQL Injection, which allows an attacker to extract information from databases by injecting a SQL query into the dt parameter...

CVE-2025-50468

OpenMetadata =1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the DocStoreDAO interface. The entityType parameters can be used to build a SQL query...

CVE-2025-50467

OpenMetadata =1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The supportedDataTypeParam parameter can be used to build a SQL query...

CVE-2025-50468

CVE-2025-50468 affects OpenMetadata

CVE-2025-50467

OpenMetadata

CVE-2025-50467

OpenMetadata =1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The supportedDataTypeParam parameter can be used to build a SQL query...

CVE-2025-6986 FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injection

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in all versions up to, and including, 6.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...

Fortinet FortiAnalyzer SQLi (FG-IR-24-437)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-437 advisory. - An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 in...

Fortinet FortiManager SQLi (FG-IR-24-437)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-437 advisory. - An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 in FortiManag...