EUVD-2023-31714

Malicious code in bioql PyPI...

EUVD-2024-35213

Malicious code in bioql PyPI...

EUVD-2023-26600

Malicious code in bioql PyPI...

EUVD-2023-31160

Malicious code in bioql PyPI...

EUVD-2025-5531

Malicious code in bioql PyPI...

EUVD-2025-3072

Malicious code in bioql PyPI...

EUVD-2024-47160

Malicious code in bioql PyPI...

EUVD-2025-18347

Malicious code in bioql PyPI...

EUVD-2025-24259

Malicious code in bioql PyPI...

EUVD-2025-25271

Malicious code in bioql PyPI...

EUVD-2025-6469

Malicious code in bioql PyPI...

EUVD-2025-12710

Malicious code in bioql PyPI...

EUVD-2025-25383

Malicious code in bioql PyPI...

EUVD-2023-49517

Malicious code in bioql PyPI...

Liferay Portal vulnerable to cross-site scripting in the related asset selector

Multiple stored cross-site scripting XSS vulnerability in the related asset selector in Liferay Portal 7.4.3.50 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.7, and 7.4 update 50 through update 92 allows remote authenticated attackers to inject arbitrar...

CVE-2025-35033

CVE-2025-35033 concerns Medical Informatics Engineering Enterprise Health. Affected: the platform's CSV export/download feature allowing a remote, authenticated attacker to inject macros into downloadable CSV files (CSV injection). Root cause details are not expanded in the provided documents bey...

Esri Portal For ArcGIS 跨站脚本漏洞

Esri Portal For ArcGIS is a component of Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A cross-site scripting vulnerability exists in Esri Portal For ArcGIS version 11.4 and earlier, which stems from a remote...

Esri Portal For ArcGIS 跨站脚本漏洞

Esri Portal For ArcGIS is a component of Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A cross-site scripting vulnerability exists in Esri Portal for ArcGIS version 11.4 and earlier, which stems from a remote...

GHSA-46V4-5MC8-Q2CF GP247 and S-Cart have a stored cross-site scripting (XSS) vulnerability

A stored cross-site scripting XSS vulnerability in the Admin Log Viewer of S-Cart =10.0.3 allows a remote authenticated attacker to inject arbitrary web script or HTML via a crafted User-Agent header. The script is executed in an administrator's browser when they view the security log page, which...

CVE-2025-58116

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote authenticated attacker...