EUVD-2016-7476

Malware in sbrugna...

EUVD-2023-0704

Malicious code in bioql PyPI...

EUVD-2022-3388

Malicious code in bioql PyPI...

EUVD-2022-3490

Malicious code in bioql PyPI...

EUVD-2025-19232

Malicious code in bioql PyPI...

EUVD-2023-0739

Malicious code in bioql PyPI...

EUVD-2023-0658

Malicious code in bioql PyPI...

EUVD-2022-3107

Malicious code in bioql PyPI...

EUVD-2023-0684

Malicious code in bioql PyPI...

EUVD-2023-0651

Malicious code in bioql PyPI...

EUVD-2023-1053

Malicious code in bioql PyPI...

EUVD-2023-2949

Malicious code in bioql PyPI...

SQL Injection

OpenNMS is vulnerable to SQL Injection. The vulnerability is due to improper neutralization of special elements in SQL commands caused by insufficient sanitization of user-supplied input in Horizon and Meridian applications...

CVE-2025-53122

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in OpenNMS Horizon and Meridian applications allows SQL Injection. Users should upgrade to Meridian 2024.2.6 or newer, or Horizon 33.16 or newer. Meridian and Horizon installation instructions state...

CVE-2025-53122

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in OpenNMS Horizon and Meridian applications allows SQL Injection. Users should upgrade to Meridian 2024.2.6 or newer, or Horizon 33.16 or newer. Meridian and Horizon installation instructions state...

CVE-2025-53122

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in OpenNMS Horizon and Meridian applications allows SQL Injection. Users should upgrade to Meridian 2024.2.6 or newer, or Horizon 33.16 or newer. Meridian and Horizon installation instructions state...

CVE-2025-53122 SQLi in OpenNMS Horizon and Meridian

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in OpenNMS Horizon and Meridian applications allows SQL Injection. Users should upgrade to Meridian 2024.2.6 or newer, or Horizon 33.16 or newer. Meridian and Horizon installation instructions state...

CVE-2025-53122

OpenNMS Horizon and Meridian are affected by CVE-2025-53122, a SQL Injection due to improper neutralization of special elements in SQL commands. The fix is upgrading to Meridian 2024.2.6+ or Horizon 33.16+ (as referenced in OpenNMS advisories). Affected products: OpenNMS Horizon and Meridian; roo...

CVE-2025-53122 SQLi in OpenNMS Horizon and Meridian

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in OpenNMS Horizon and Meridian applications allows SQL Injection. Users should upgrade to Meridian 2024.2.6 or newer, or Horizon 33.16 or newer. Meridian and Horizon installation instructions state...

CVE-2025-53121

Multiple stored XSS were found on different nodes with unsanitized parameters in OpenMNS Horizon 33.0.8 and versions earlier than 33.1.6 on multiple platforms that allow an attacker to store on database and then inject HTML and/or Javascript on the page. The solution is to upgrade to Horizon...