2953 matches found
EUVD-2021-6926
Malicious code in bioql PyPI...
EUVD-2021-6830
Malicious code in bioql PyPI...
EUVD-2024-27315
Malicious code in bioql PyPI...
EUVD-2023-46463
Malicious code in bioql PyPI...
EUVD-2023-12773
Malicious code in bioql PyPI...
EUVD-2022-33222
Malicious code in bioql PyPI...
EUVD-2024-2289
Malicious code in bioql PyPI...
EUVD-2023-31751
Malicious code in bioql PyPI...
EUVD-2022-34208
Malicious code in bioql PyPI...
EUVD-2023-39978
Malicious code in bioql PyPI...
EUVD-2022-28706
Malicious code in bioql PyPI...
EUVD-2021-7428
Malicious code in bioql PyPI...
EUVD-2024-50085
Malicious code in bioql PyPI...
EUVD-2022-46971
Malicious code in bioql PyPI...
Improper Validation of Function Hook Arguments
Overview Affected versions of this package are vulnerable to Improper Validation of Function Hook Arguments in the /api/webhook endpoint via the affectedRevisionInfo function. An attacker can cause the server process to crash and disrupt service availability by sending a Gogs push event whose JSO...
Path Traversal
org.opencastproject, opencast-user-interface-configuration is vulnerable to path traversal. The vulnerability is due to insufficient protections in the UI config module where the path is checked without validating the file separator, which allows an attacker to access files within other folders...
CVE-2025-58317 File Parsing Memory Corruption in CNCSoft-G2
Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process...
CVE-2025-10412
The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO Premium plugin for WordPress is vulnerable to arbitrary file uploads due to misconfigured file type validation in the 'unicpouploadfile' function in all versions up to, and including, 4.9.55. This makes it possible for...
CVE-2025-36202 IBM webMethods Integration code execution
IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute commands on the system due to the improper validation of format string strings passed as an argument from an external source...
