EUVD-2023-29706

Malicious code in bioql PyPI...

EUVD-2023-0932

Malicious code in bioql PyPI...

EUVD-2024-30282

Malicious code in bioql PyPI...

EUVD-2021-28280

Malicious code in bioql PyPI...

EUVD-2023-34935

Malicious code in bioql PyPI...

EUVD-2024-35889

Malicious code in bioql PyPI...

EUVD-2023-2803

Malicious code in bioql PyPI...

EUVD-2023-36555

Malicious code in bioql PyPI...

EUVD-2023-42473

Malicious code in bioql PyPI...

EUVD-2024-46198

Malicious code in bioql PyPI...

EUVD-2023-34939

Malicious code in bioql PyPI...

EUVD-2023-27715

Malicious code in bioql PyPI...

EUVD-2024-3385

Malicious code in bioql PyPI...

Vulnerability-Lookup 跨站脚本漏洞

Vulnerability-Lookup is an open source Vulnerability-Lookup platform for managing disclosure of vulnerabilities. A cross-site scripting vulnerability exists in Vulnerability-Lookup version 2.16.0 that stems from insufficient cleanup of user input and could lead to a cross-site scripting attack...

datart 安全漏洞

datart is an open source data visualization open platform by running-elephant. A security vulnerability exists in datart version 1.0.0-rc.3, which stems from the POST /viz/image interface not strictly validating filenames, which could lead to a directory traversal attack...

datart 安全漏洞

datart is an open source data visualization open platform by running-elephant. A security vulnerability exists in datart version 1.0.0-rc.3, which stems from mishandling of configuration files and can lead to path traversal and remote code execution...

O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA 10.0-410 and earlier versions, which originates from a cross-site scripting due to incorrect manipulation of the parameters name/alias/description in the file...

O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA version 10.0-410 and earlier, which originates from cross-site scripting due to incorrect manipulation of parameters in the file /xportalassembledesigner/jaxrs/widget...

O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA 10.0-410 and earlier versions, which originates from a cross-site scripting due to the incorrect operation of the parameter name/alias/description in the file...

MeterSphere SQL注入漏洞

MeterSphere is MeterSphere's open source one-stop open source continuous testing platform. A SQL injection vulnerability exists in MeterSphere versions prior to 3.6.5-lts, which stems from insufficient validation of the sortField parameter and could lead to SQL injection...