31545 matches found
CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
UBUNTU-CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
biopython 代码问题漏洞
biopython is a Python library open-sourced by the Biopython Project. A code issue vulnerability exists in biopython version 186 and earlier, which stems from Bio.Entrez allowing doctype XXE...
PT-2025-51994
Name of the Vulnerable Software and Affected Versions Biopython versions prior to 1.87 Description Bio.Entrez in Biopython allows doctype XML External Entity XXE, which is a technique where an XML parser is tricked into processing external entities within a document type definition, potentially...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: expat (UTSA-2025-991275)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991275 advisory. expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XMLSetEntityDeclHandler function, which allows remote...
CVE-2025-63386
A Cross-Origin Resource Sharing CORS misconfiguration vulnerability exists in Dify v1.9.1 in the /console/api/setup endpoint. The endpoint implements an insecure CORS policy that reflects any Origin header and enables Access-Control-Allow-Credentials: true, permitting arbitrary external domains t...
Insertion of Sensitive Information into Externally-Accessible File or Directory
Overview @storybook/builder-webpack5 is an A Storybook builder to dev and build with Webpack Affected versions of this package are vulnerable to Insertion of Sensitive Information into Externally-Accessible File or Directory via the storybook build command. An attacker can access sensitive...
CVE-2025-34439
AVideo versions prior to 20.1 are vulnerable to an open redirect flaw due to missing validation of the cancelUri parameter during user login. An attacker can craft a link to redirect users to arbitrary external sites, enabling phishing attacks...
CVE-2025-34439 AVideo < 20.1 Open Redirect via cancelUri Parameter
AVideo versions prior to 20.1 are vulnerable to an open redirect flaw due to missing validation of the cancelUri parameter during user login. An attacker can craft a link to redirect users to arbitrary external sites, enabling phishing attacks...
CVE-2023-53899
PodcastGenerator 3.2.9 contains a blind server-side request forgery vulnerability that allows attackers to inject XML in the episode upload form. Attackers can manipulate the 'shortdesc' parameter to trigger external HTTP requests to arbitrary endpoints during podcast episode creation...
CVE-2023-53900
Spip 4.1.10 contains a file upload vulnerability that allows attackers to upload malicious SVG files with embedded external links. Attackers can trick administrators into clicking a crafted SVG logo that redirects to a potentially dangerous URL through improper file upload filtering...
CVE-2025-64245
Missing Authorization vulnerability in ryanpcmcquen Import external attachments import-external-attachments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Import external attachments: from n/a through = 1.5.12...
CVE-2025-14765
creationtimestamp| type| source ---|---|--- 2025-12-17 07:44:46+00:00| seen| https://gist.github.com/Darkcrai86/f13a3f85cd7d681eb476546e8cd0963a 2025-12-17 08:05:39+00:00| seen| https://gist.github.com/Darkcrai86/e98982419330973b32ad4fceddb40631 2025-12-17 08:32:21+00:00| seen|...
CVE-2025-14766
creationtimestamp| type| source ---|---|--- 2025-12-17 07:44:24+00:00| seen| https://gist.github.com/Darkcrai86/05dd0b6aed937b6cb3692d4ecdcb6e5a 2025-12-17 08:05:04+00:00| seen| https://gist.github.com/Darkcrai86/bb67ba707f1bbf538f455794a679320b 2025-12-17 08:32:21+00:00| seen|...
Unvalidated Redirect
NocoDB is vulnerable to an unvalidated redirect. The vulnerability is due to missing validation of the user-controlled continueAfterSignIn parameter in the login flow, which allows an attacker to redirect authenticated users to arbitrary external websites after login...
CVE-2025-11369 Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure
The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to unauthorized access of data due to a missing or incorrect capability checks on the getinstagramaccesstokencallback, googlemapapikeysavecallback and getsiteinfo functions in all...
EUVD-2025-203863
The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to unauthorized access of data due to a missing or incorrect capability checks on the getinstagramaccesstokencallback, googlemapapikeysavecallback and getsiteinfo functions in all...