29367 matches found
PT-2025-41827
Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager affected versions not specified Description A SQL injection issue exists in Ivanti Endpoint Manager. A remote authenticated attacker can potentially read arbitrary data from the database. The issue allows for unauthoriz...
PT-2025-41834
Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager affected versions not specified Description A SQL injection issue exists in Ivanti Endpoint Manager. A remote authenticated attacker can potentially read arbitrary data from the database. The issue allows unauthorized...
PT-2025-41832
Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager affected versions not specified Description A SQL injection issue exists in Ivanti Endpoint Manager. A remotely authenticated attacker can potentially read arbitrary data from the database. The issue allows unauthorized...
CVE-2025-43824
The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows...
CVE-2025-43824
The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows...
CVE-2025-54292
Path traversal in Canonical LXD LXD-UI versions before 6.5 and 5.21.4 on all platforms allows remote authenticated attackers to access or modify unintended resources via crafted resource names embedded in URL paths...
CVE-2025-43824: Improper Neutralization of Input During Web Page Generation
The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows...
EUVD-2025-18260
Malicious code in bioql PyPI...
EUVD-2025-25143
Malicious code in bioql PyPI...
EUVD-2025-3072
Malicious code in bioql PyPI...
EUVD-2024-50403
Malicious code in bioql PyPI...
EUVD-2023-34576
Malicious code in bioql PyPI...
EUVD-2021-30833
Malicious code in bioql PyPI...
EUVD-2022-3443
Malicious code in bioql PyPI...
EUVD-2024-35213
Malicious code in bioql PyPI...
EUVD-2025-25478
Malicious code in bioql PyPI...
EUVD-2022-3227
Malicious code in bioql PyPI...
EUVD-2022-3073
Malicious code in bioql PyPI...