4786 matches found
CVE-2025-61687 FlowiseAI/Flosise has File Upload vulnerability
Flowise is a drag & drop user interface to build a customized large language model flow. A file upload vulnerability in version 3.0.7 of FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web...
RockyLinux 10 : nodejs22 (RLSA-2025:8493)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:8493 advisory. nodejs: Remote Crash via SignTraits::DeriveBits in Node.js CVE-2025-23166 Tenable has extracted the preceding description block directly from the...
ROS-20251006-11
A vulnerability in the permissions model of the Node.js software platform is related to flaws in the processing of HTTP requests. Exploitation of the vulnerability could allow a remote attacker to bypass existing security restrictions and send unauthorized requests. existing security restrictions...
EUVD-2025-26139
Malicious code in bioql PyPI...
EUVD-2025-22263
Malicious code in bioql PyPI...
EUVD-2025-0209
Malicious code in bioql PyPI...
EUVD-2025-22261
Malicious code in bioql PyPI...
EUVD-2024-1440
Malicious code in bioql PyPI...
EUVD-2023-38212
Malicious code in bioql PyPI...
EUVD-2025-22388
Malicious code in bioql PyPI...
EUVD-2023-3146
Malicious code in bioql PyPI...
EUVD-2025-12598
Malicious code in bioql PyPI...
EUVD-2023-1814
Malicious code in bioql PyPI...
EUVD-2025-22265
Malicious code in bioql PyPI...
EUVD-2023-2077
Malicious code in bioql PyPI...
EUVD-2023-2191
Malicious code in bioql PyPI...
EUVD-2025-22383
Malicious code in bioql PyPI...
EUVD-2022-29923
Malicious code in bioql PyPI...