1681 matches found
EUVD-2022-37303
Malicious code in bioql PyPI...
EUVD-2024-3256
Malicious code in bioql PyPI...
EUVD-2024-3518
Malicious code in bioql PyPI...
EUVD-2023-0072
Malicious code in bioql PyPI...
EUVD-2025-23998
Malicious code in bioql PyPI...
EUVD-2021-7817
Malicious code in bioql PyPI...
EUVD-2022-1420
Malicious code in bioql PyPI...
EUVD-2023-28488
Malicious code in bioql PyPI...
EUVD-2021-7920
Malicious code in bioql PyPI...
EUVD-2021-7872
Malicious code in bioql PyPI...
EUVD-2024-52325
Malicious code in bioql PyPI...
EUVD-2023-23553
Malicious code in bioql PyPI...
EUVD-2024-33920
Malicious code in bioql PyPI...
EUVD-2024-23273
Malicious code in bioql PyPI...
EUVD-2022-35821
Malicious code in bioql PyPI...
EUVD-2023-31734
Malicious code in bioql PyPI...
CVE-2025-20369
In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privilege user that does not hold the "admin" or "power" Splunk roles could perform an extensible markup language XML external entity XXE...
CVE-2025-20369 Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise
In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privilege user that does not hold the "admin" or "power" Splunk roles could perform an extensible markup language XML external entity XXE...
CVE-2025-20369
The CVE-2025-20369 affects Splunk Enterprise and Splunk Cloud Platform. A low-privilege user not in admin/power roles can perform an XML External Entity (XXE) injection via the dashboard tab label field, potentially enabling Denial of Service (DoS). Affected versions include Splunk Enterprise <...
XML External Entity Injection (XXE)
org.apache.tika, tika-parser-pdf-module is vulnerable to XML External Entity XXE injection. The vulnerability is due to improper handling of crafted XFA files inside PDFs, which allows an attacker to read sensitive data or trigger malicious requests to internal or third-party servers...