EUVD-2023-50385

Malicious code in bioql PyPI...

EUVD-2023-32578

Malicious code in bioql PyPI...

EUVD-2025-16197

Malicious code in bioql PyPI...

EUVD-2025-14672

Malicious code in bioql PyPI...

EUVD-2022-27395

Malicious code in bioql PyPI...

EUVD-2023-57474

Malicious code in bioql PyPI...

EUVD-2025-17064

Malicious code in bioql PyPI...

EUVD-2023-56291

Malicious code in bioql PyPI...

EUVD-2025-25316

Malicious code in bioql PyPI...

EUVD-2024-50628

Malicious code in bioql PyPI...

EUVD-2024-54296

Malicious code in bioql PyPI...

EUVD-2022-24941

Malicious code in bioql PyPI...

EUVD-2024-39300

Malicious code in bioql PyPI...

EUVD-2021-8283

Malicious code in bioql PyPI...

EUVD-2023-46929

Malicious code in bioql PyPI...

EUVD-2022-24885

Malicious code in bioql PyPI...

EUVD-2023-51675

Malicious code in bioql PyPI...

EUVD-2022-42660

Malicious code in bioql PyPI...

CVE-2025-43808: Incorrect Permission Assignment for Critical Resource

The Commerce component in Liferay Portal 7.3.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and 7.3 service pack 3 through update 35 saves virtual products uploaded to Documents and Media with guest view permission, which...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to using os.MkdirAll function which does not perform any permission checks when a given directory path already exists. An attacker can gain unauthorized access or modify files by...