EUVD-2023-54201

Malicious code in bioql PyPI...

EUVD-2023-53807

Malicious code in bioql PyPI...

EUVD-2022-26704

Malicious code in bioql PyPI...

EUVD-2024-52020

Malicious code in bioql PyPI...

EUVD-2023-26601

Malicious code in bioql PyPI...

EUVD-2024-46118

Malicious code in bioql PyPI...

EUVD-2024-46117

Malicious code in bioql PyPI...

EUVD-2023-50521

Malicious code in bioql PyPI...

EUVD-2023-35560

Malicious code in bioql PyPI...

EUVD-2023-53810

Malicious code in bioql PyPI...

CVE-2025-54292

CVE-2025-54292 concerns a path traversal vulnerability in Canonical’s LXD/LXD-UI prior to versions 6.5 and 5.21.4. The accessible details in the provided documents indicate that an authenticated remote attacker could abuse crafted resource names in URL paths to access or modify unintended resourc...

CVE-2025-20361 Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of...

Ruckus Wireless ICX Switches Cross-site Scripting and Cross-site Request Forgery (CVE-2023-39905)

A vulnerability in the web-based management interface of the RUCKUS ICX product line could allow a remote attacker to execute XSS and CSRF attacks against the user of the interface. To exploit this vulnerability, an attacker would require the targeted user to click a crafted link that would send ...

The vulnerability in the web interface of Cisco IOS XE allows attackers to perform cross-site scripting attacks.

The vulnerability in the web interface of Cisco IOS XE operating systems is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Security Bulletin: TS4500 Tape Library/Diamondback Tape Library addresses security vulnerability CVE-2025-36088

Summary The web GUI did not sufficiently sanitize user input in certain dialogs, allowing HTML or JavaScript to be stored and later displayed to other users. Malicious code would only execute if a user opened the affected event entry. The issue has been resolved by adding proper input sanitizatio...

CVE-2025-9495 Viessmann Vitogate 300 Authentication Bypass

The Vitogate 300 web interface fails to enforce proper server-side authentication and relies on frontend-based authentication controls. This allows an attacker to simply modify HTML elements in the browser’s developer tools to bypass login restrictions. By removing specific UI elements, an attack...

CVE-2025-37128

A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...

Vulnerabilities fixed in HPE Aruba Networking EdgeConnect SD-WAN Gateways

HPE has fixed vulnerabilities in HPE Aruba Networking EdgeConnect SD-WAN Gateways. The vulnerabilities are in the command-line interface and Web API of the HPE Aruba Networking EdgeConnect SD-WAN Gateways. These vulnerabilities allow authenticated attackers to execute arbitrary system commands wi...

Kyocera Command Center RX EXOSYS M5521cdn 安全漏洞

Kyocera Command Center RX EXOSYS M5521cdn is a color multifunction printer from Kyocera, USA. A security vulnerability exists in the Kyocera Command Center RX EXOSYS M5521cdn, which stems from a user interface issue, and could allow a remote attacker to obtain sensitive information by inspecting...

Stable Channel Update for ChromeOS / ChromeOS Flex

The ChromeOS Stable channel is being updated to OS version 16371.49.0 Browser version 140.0.7339.201 for most ChromeOS devices. If you find new issues, please let us know one of the following ways: 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta...