EUVD-2024-38822

Malicious code in bioql PyPI...

EUVD-2023-44451

Malicious code in bioql PyPI...

EUVD-2022-2103

Malicious code in bioql PyPI...

EUVD-2022-1470

Malicious code in bioql PyPI...

EUVD-2022-24658

Malicious code in bioql PyPI...

EUVD-2025-18657

Malicious code in bioql PyPI...

EUVD-2022-34719

Malicious code in bioql PyPI...

EUVD-2022-2747

Malicious code in bioql PyPI...

EUVD-2022-4348

Malicious code in bioql PyPI...

EUVD-2021-8744

Malicious code in bioql PyPI...

EUVD-2021-29176

Malicious code in bioql PyPI...

EUVD-2021-8633

Malicious code in bioql PyPI...

EUVD-2022-2441

Malicious code in bioql PyPI...

EUVD-2022-3505

Malicious code in bioql PyPI...

EUVD-2021-29506

Malicious code in bioql PyPI...

CVE-2025-54468 Rancher sends sensitive information to external services through the `/meta/proxy` endpoint

A vulnerability has been identified within Rancher Manager whereby Impersonate-Extra- headers are being sent to an external entity, for example amazonaws.com, via the /meta/proxy Rancher endpoint. These headers may contain identifiable and/or sensitive information e.g. email addresses...

BIT-NIFI-2023-22832 Apache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes

The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...

CVE-2025-6984 Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain

The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity XXE attacks due to insecure XML parsing. The affected version is 0.3.63. The vulnerability arises from the use of etree.iterparse without disabling external entity references, which...

CVE-2025-35112

Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31...

Linux Distros Unpatched Vulnerability : CVE-2018-1285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in...