EUVD-2017-9491

Malware in sbrugna...

EUVD-2021-0603

Malware in sbrugna...

EUVD-2023-47229

Malicious code in bioql PyPI...

EUVD-2022-5458

Malicious code in bioql PyPI...

EUVD-2022-52239

Malicious code in bioql PyPI...

EUVD-2025-9694

Malicious code in bioql PyPI...

EUVD-2022-52741

Malicious code in bioql PyPI...

EUVD-2023-31603

Malicious code in bioql PyPI...

EUVD-2022-1192

Malicious code in bioql PyPI...

EUVD-2021-8673

Malicious code in bioql PyPI...

EUVD-2024-32756

Malicious code in bioql PyPI...

CVE-2025-7825: Improper Neutralization of Directives in Statically Saved Code

The Schema Plugin For Divi, Gutenberg & Shortcodes plugin for WordPress is vulnerable to Object Instantiation in all versions up to, and including, 4.3.2 via deserialization of untrusted input via the wptschemabreadcrumbs shortcode. This makes it possible for authenticated attackers, with...

Improper Neutralization of Special Elements Used in a Template Engine

Overview com.hubspot.jinjava:jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates at least the subset of jinja in use in HubSpot content. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a...

CVE-2025-59340

Summary: CVE-2025-59340 affects jinjava (Java-based template engine). The issue arises when mapper.getTypeFactory().constructFromCanonical() allows attacker-controlled input to deserialize into arbitrary classes via ObjectMapper, enabling sandbox escape and potential access to local files/URLs (e...

Linux Distros Unpatched Vulnerability : CVE-2017-18375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ampache 3.8.3 allows PHP Object Instantiation via democratic.ajax.php and democratic.class.php. CVE-2017-18375 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2021-21327

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI befor...

Linux Distros Unpatched Vulnerability : CVE-2018-1137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Moodle 3.x. By substituting URLs in portfolios, users can instantiate any class. This can also be exploited by users who are logged i...

Linux Distros Unpatched Vulnerability : CVE-2023-42802

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Starting in version 10.0.7 and prior to version 10.0.10, an unverified object instantiation allows one ...

Linux Distros Unpatched Vulnerability : CVE-2022-31084

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 There are...

Linux Distros Unpatched Vulnerability : CVE-2024-26978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - In the Linux kernel, the following vulnerability has been resolved: serial: max310x: fix NULL pointer dereference in I2C instantiation When tryin...