159 matches found
CVE-2025-56423
A security vulnerability exists in Austrian Academy of Sciences (AW) Austrian Archaeological Institute OpenAtlas v.8.12.0 , a database application for archaeology and history. A remote attacker can obtain sensitive information by leveraging login error messages (CWE-203). No information regarding...
CVE-2025-60915
An issue in the size query parameter /views/file.py of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute a path traversal via a crafted request...
CVE-2025-60917
A reflected cross-site scripting XSS vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the color parameter...
CVE-2025-60915: Improper Limitation of a Pathname to a Restricted Directory
An issue in the size query parameter /views/file.py of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute a path traversal via a crafted request...
CVE-2025-60916: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the charge parameter...
CVE-2025-60915
An issue in the size query parameter /views/file.py of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute a path traversal via a crafted request...
CVE-2025-60917: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the color parameter...
CVE-2025-56423: Observable Discrepancy
An issue in Austrian Academy of Sciences AW Austrian Archaeological Institute OpenAtlas v.8.12.0 allows a remote attacker to obtain sensitive information via the login error messages...
CVE-2025-60914
Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to access sensitive information via sending a crafted GET request to the /displaylogo endpoint...
PT-2025-47931
Name of the Vulnerable Software and Affected Versions Austrian Archaeological Institute Openatlas versions prior to 8.12.0 Description An issue exists in the size query parameter of the /views/file.py component that allows attackers to execute a path traversal via a crafted request. The vulnerabl...
EUVD-2025-23513
Malicious code in bioql PyPI...
EUVD-2025-26182
Malicious code in bioql PyPI...
EUVD-2025-26185
Malicious code in bioql PyPI...
EUVD-2025-26187
Malicious code in bioql PyPI...
EUVD-2025-26188
Malicious code in bioql PyPI...
EUVD-2025-26186
Malicious code in bioql PyPI...
EUVD-2025-23504
Malicious code in bioql PyPI...
EUVD-2025-23512
Malicious code in bioql PyPI...