2233 matches found
EUVD-2022-2764
Malicious code in bioql PyPI...
EUVD-2022-4376
Malicious code in bioql PyPI...
EUVD-2025-9775
Malicious code in bioql PyPI...
EUVD-2022-5568
Malicious code in bioql PyPI...
EUVD-2022-2825
Malicious code in bioql PyPI...
EUVD-2022-3403
Malicious code in bioql PyPI...
EUVD-2023-2966
Malicious code in bioql PyPI...
EUVD-2022-4442
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2019-16993
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In phpBB before 3.1.7-PL1, includes/acp/acpbbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actu...
Linux Distros Unpatched Vulnerability : CVE-2018-19274
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Passing an absolute path to a fileexists check in phpBB before 3.2.4 allows Remote Code Execution through Object Injection by employing Phar deserialization whe...
Linux Distros Unpatched Vulnerability : CVE-2020-8226
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists in phpBB v3.2.10 and v3.3.1 which allowed remote image dimensions check to be used to SSRF. CVE-2020-8226 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2019-11767
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Server side request forgery SSRF in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the host through the remo...
Linux Distros Unpatched Vulnerability : CVE-2019-9826
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The fulltext search component in phpBB before 3.2.6 allows Denial of Service. CVE-2019-9826 Note that Nessus relies on the presence of the package as reported b...
CVE-2023-5917
A vulnerability, which was classified as problematic, has been found in phpBB up to 3.3.10. This issue affects the function main of the file phpBB/includes/acp/acpicons.php of the component Smiley Pack Handler. The manipulation of the argument pak leads to cross site scripting. The attack may be...
CVE-2020-8226
A vulnerability exists in phpBB...
CVE-2020-5501
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...
CVE-2020-5502
phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships...
CVE-2017-1000419
phpBB version 3.2.0 is vulnerable to SSRF in the Remote Avatar function resulting allowing an attacker to perform port scanning, requesting internal content and potentially attacking such internal services via the web application...
CVE-2019-16993
In phpBB before 3.1.7-PL1, includes/acp/acpbbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack is possible if an attacker also manages to retrieve the session id of a reauthenticated administrator prior to targeting...