1681 matches found
EUVD-2022-35821
Malicious code in bioql PyPI...
EUVD-2024-23273
Malicious code in bioql PyPI...
EUVD-2024-41300
Malicious code in bioql PyPI...
EUVD-2023-51295
Malicious code in bioql PyPI...
EUVD-2021-7771
Malicious code in bioql PyPI...
EUVD-2021-7872
Malicious code in bioql PyPI...
EUVD-2024-33920
Malicious code in bioql PyPI...
EUVD-2023-0081
Malicious code in bioql PyPI...
EUVD-2022-34122
Malicious code in bioql PyPI...
EUVD-2025-23998
Malicious code in bioql PyPI...
EUVD-2024-52325
Malicious code in bioql PyPI...
EUVD-2023-31862
Malicious code in bioql PyPI...
EUVD-2023-28488
Malicious code in bioql PyPI...
EUVD-2022-1420
Malicious code in bioql PyPI...
EUVD-2022-37303
Malicious code in bioql PyPI...
EUVD-2024-3256
Malicious code in bioql PyPI...
CVE-2025-20369
In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privilege user that does not hold the "admin" or "power" Splunk roles could perform an extensible markup language XML external entity XXE...
CVE-2025-20369
The CVE-2025-20369 affects Splunk Enterprise and Splunk Cloud Platform. A low-privilege user not in admin/power roles can perform an XML External Entity (XXE) injection via the dashboard tab label field, potentially enabling Denial of Service (DoS). Affected versions include Splunk Enterprise <...
CVE-2025-20369 Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise
In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privilege user that does not hold the "admin" or "power" Splunk roles could perform an extensible markup language XML external entity XXE...
XML External Entity Injection (XXE)
org.apache.tika, tika-parser-pdf-module is vulnerable to XML External Entity XXE injection. The vulnerability is due to improper handling of crafted XFA files inside PDFs, which allows an attacker to read sensitive data or trigger malicious requests to internal or third-party servers...