EUVD-2023-46463

Malicious code in bioql PyPI...

EUVD-2023-29940

Malicious code in bioql PyPI...

EUVD-2022-24970

Malicious code in bioql PyPI...

EUVD-2023-31751

Malicious code in bioql PyPI...

EUVD-2022-52541

Malicious code in bioql PyPI...

EUVD-2025-12104

Malicious code in bioql PyPI...

EUVD-2022-46969

Malicious code in bioql PyPI...

EUVD-2022-35160

Malicious code in bioql PyPI...

EUVD-2023-50087

Malicious code in bioql PyPI...

EUVD-2021-6681

Malicious code in bioql PyPI...

EUVD-2022-33222

Malicious code in bioql PyPI...

EUVD-2022-36332

Malicious code in bioql PyPI...

Improper Validation of Function Hook Arguments

Overview Affected versions of this package are vulnerable to Improper Validation of Function Hook Arguments in the /api/webhook endpoint via the affectedRevisionInfo function. An attacker can cause the server process to crash and disrupt service availability by sending a Gogs push event whose JSO...

Path Traversal

org.opencastproject, opencast-user-interface-configuration is vulnerable to path traversal. The vulnerability is due to insufficient protections in the UI config module where the path is checked without validating the file separator, which allows an attacker to access files within other folders...

CVE-2025-58317 File Parsing Memory Corruption in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process...

CVE-2025-10412

The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO Premium plugin for WordPress is vulnerable to arbitrary file uploads due to misconfigured file type validation in the 'unicpouploadfile' function in all versions up to, and including, 4.9.55. This makes it possible for...

CVE-2025-36202 IBM webMethods Integration code execution

IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute commands on the system due to the improper validation of format string strings passed as an argument from an external source...

SUSE-SU-2025:03281-1 Security update for cmake

This update for cmake fixes the following issues: - CVE-2025-9301: Fixed assertion failure due to improper validation bsc1248461...

JetBrains Junie Command Injection Vulnerability

JetBrains Junie is a coding agent of the Czech company JetBrains. JetBrains Junie suffers from a command injection vulnerability that stems from improper command validation, which can be exploited by an attacker to cause code execution...

Unspecified Vulnerability in BMC Control-M (CNVD-2025-22541)

BMC Control-M is an application from BMC Corporation. Simplifies application and data workflow orchestration locally or as a service. A security vulnerability exists in BMC Control-M/Agent, which stems from improper ordering of AUTHORIZEDCTMIP validation, and can be exploited by an attacker to...