1917 matches found
EUVD-2024-19915
Malicious code in bioql PyPI...
EUVD-2022-5634
Malicious code in bioql PyPI...
EUVD-2023-49499
Malicious code in bioql PyPI...
EUVD-2023-28488
Malicious code in bioql PyPI...
EUVD-2023-0081
Malicious code in bioql PyPI...
EUVD-2021-27534
Malicious code in bioql PyPI...
EUVD-2023-29814
Malicious code in bioql PyPI...
EUVD-2021-9291
Malicious code in bioql PyPI...
EUVD-2022-1420
Malicious code in bioql PyPI...
EUVD-2021-7817
Malicious code in bioql PyPI...
EUVD-2024-1382
Malicious code in bioql PyPI...
EUVD-2025-22979
Malicious code in bioql PyPI...
EUVD-2024-52325
Malicious code in bioql PyPI...
EUVD-2024-52023
Malicious code in bioql PyPI...
EUVD-2023-28379
Malicious code in bioql PyPI...
CVE-2025-20369
In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privilege user that does not hold the "admin" or "power" Splunk roles could perform an extensible markup language XML external entity XXE...
CVE-2025-20369 Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise
In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privilege user that does not hold the "admin" or "power" Splunk roles could perform an extensible markup language XML external entity XXE...
CVE-2025-20369
The CVE-2025-20369 affects Splunk Enterprise and Splunk Cloud Platform. A low-privilege user not in admin/power roles can perform an XML External Entity (XXE) injection via the dashboard tab label field, potentially enabling Denial of Service (DoS). Affected versions include Splunk Enterprise <...
XML External Entity Injection (XXE)
org.apache.tika, tika-parser-pdf-module is vulnerable to XML External Entity XXE injection. The vulnerability is due to improper handling of crafted XFA files inside PDFs, which allows an attacker to read sensitive data or trigger malicious requests to internal or third-party servers...
Adobe Experience ManagerXML Entity Injection Vulnerability
Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. An XML entity injection vulnerability exists in Adobe Experienc...