EUVD-2024-47715

Malicious code in bioql PyPI...

EUVD-2025-5705

Malicious code in bioql PyPI...

EUVD-2021-7049

Malicious code in bioql PyPI...

EUVD-2022-25615

Malicious code in bioql PyPI...

EUVD-2021-6594

Malicious code in bioql PyPI...

EUVD-2023-25041

Malicious code in bioql PyPI...

EUVD-2022-29313

Malicious code in bioql PyPI...

EUVD-2022-4068

Malicious code in bioql PyPI...

EUVD-2022-35886

Malicious code in bioql PyPI...

Perfex CRM 跨站脚本漏洞

Perfex CRM is a customer relationship management software from Perfex CRM open source. It is used to manage customers, projects and create invoices in the cloud. A cross-site scripting vulnerability exists in Perfex CRM version 3.2.1, which stems from insufficient validation of user input and cou...

CVE-2025-20327

A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a...

CVE-2025-58228 WordPress Quick View for WooCommerce Plugin <= 2.2.16 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ShapedPlugin LLC Quick View for WooCommerce woo-quickview allows Stored XSS.This issue affects Quick View for WooCommerce: from n/a through = 2.2.16...

PT-2025-38309

Name of the Vulnerable Software and Affected Versions ABB FLXEON versions through 9.3.5 Description An improper input validation issue exists in ABB FLXEON, potentially leading to remote code execution. Recommendations Update to a version later than 9.3.5...

CVE-2025-43347

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An input validation issue was addressed...

Use of Low-Level Functionality

Overview Affected versions of this package are vulnerable to Use of Low-Level Functionality through improper validation of user-supplied input. An attacker can execute arbitrary code or compromise user data by enticing a victim to visit a malicious website. Remediation Upgrade Firefox to version...

Security Bulletin: NVIDIA Triton Inference Server - September 2025

NVIDIA has released a software update for NVIDIA Triton Inference Server to address the issue disclosed in this bulletin. To protect your system, install the latest release from the Triton Inference Server Releases page on GitHub, and view the Secure Deployment Considerations Guide. Go to NVIDIA...

CVE-2025-43347

This issue was addressed by removing the vulnerable code. This issue is fixed in visionOS 26, tvOS 26, iOS 26 and iPadOS 26, watchOS 26. An input validation issue was addressed...

CVE-2025-43347

This issue was addressed by removing the vulnerable code. This issue is fixed in visionOS 26, tvOS 26, iOS 26 and iPadOS 26, watchOS 26. An input validation issue was addressed...

CVE-2025-10094 Improper Validation of Specified Quantity in Input in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to disrupt access to token listings and related administrative operations by creating tokens with excessively large...

PT-2025-36803

Name of the Vulnerable Software and Affected Versions: Pixeline's Email Protector versions through 1.3.8 Description: Pixeline's Email Protector is susceptible to a cross-site scripting XSS issue due to improper input neutralization during web page generation. This allows for stored XSS attacks...