EUVD-2023-56257

Malicious code in bioql PyPI...

EUVD-2023-45551

Malicious code in bioql PyPI...

EUVD-2022-53306

Malicious code in bioql PyPI...

EUVD-2025-3824

Malicious code in bioql PyPI...

EUVD-2022-6869

Malicious code in bioql PyPI...

EUVD-2023-29127

Malicious code in bioql PyPI...

EUVD-2022-5780

Malicious code in bioql PyPI...

EUVD-2022-3446

Malicious code in bioql PyPI...

EUVD-2023-56796

Malicious code in bioql PyPI...

EUVD-2024-37034

Malicious code in bioql PyPI...

EUVD-2024-49203

Malicious code in bioql PyPI...

EUVD-2024-27629

Malicious code in bioql PyPI...

CVE-2025-20366

In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.111, 9.3.2408.119, and 9.2.2406.122, a low-privileged user that does not hold the admin or power Splunk roles could access sensitive search results if Splunk Enterprise runs an...

CVE-2025-11239

Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a job can see all information including in- and output data i...

CVE-2025-11239

Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a job can see all information including in- and output data i...

CVE-2025-11239

KNIME Business Hub vulnerability CVE-2025-11239 is about exposure of potentially sensitive job information to all team members in versions before 1.16.0. KNIME states that starting with 1.16.0 only metadata of jobs is visible to team members, while the creator of a job can see all information, in...

CVE-2025-11239 Job details are visible to all team members on KNIME Business Hub

Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a job can see all information including in- and output data i...

CVE-2025-40646

Stored Cross-Site Scripting XSS vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/createjobsubmit.php”, using the “JobCreatedBy” parameter. This vulnerability could allow a remote...

CVE-2025-20366

In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.111, 9.3.2408.119, and 9.2.2406.122, a low-privileged user that does not hold the admin or power Splunk roles could access sensitive search results if Splunk Enterprise runs an...

CVE-2025-20368 Stored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk Enterprise

In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privileged user that does not hold the admin or power Splunk roles could craft a malicious payload through the error messages and job inspection...