86 matches found
EUVD-2015-4689
Malware in sbrugna...
EUVD-2021-23085
Malware in sbrugna...
EUVD-2023-39810
Malicious code in bioql PyPI...
EUVD-2023-39812
Malicious code in bioql PyPI...
EUVD-2023-39809
Malicious code in bioql PyPI...
EUVD-2023-39811
Malicious code in bioql PyPI...
EUVD-2022-44672
Malicious code in bioql PyPI...
CVE-2022-41479
The DevExpress Resource Handler ASPxHttpHandlerModule in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify the referenced objects in the /DXR.axd?r= HTTP GET parameter. This leads to an Insecure Direct Object References IDOR vulnerability which allows attackers to access the application...
CVE-2021-36483
DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization...
CVE-2023-35815
DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...
CVE-2023-35816
DevExpress before 23.1.3 allows arbitrary TypeConverter conversion...
CVE-2023-35814
DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms...
CVE-2023-35817
DevExpress before 23.1.3 allows AsyncDownloader SSRF...
CVE-2023-35817
DevExpress before 23.1.3 allows AsyncDownloader SSRF...
CVE-2023-35816
DevExpress before 23.1.3 allows arbitrary TypeConverter conversion...
CVE-2023-35816
DevExpress before 23.1.3 allows arbitrary TypeConverter conversion...
CVE-2023-35817
DevExpress before 23.1.3 allows AsyncDownloader SSRF...
CVE-2023-35814
DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms...
CVE-2023-35815
DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...
CVE-2023-35815
DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...