330 matches found
EUVD-2024-52299
Malicious code in bioql PyPI...
EUVD-2023-1732
Malicious code in bioql PyPI...
EUVD-2022-1926
Malicious code in bioql PyPI...
EUVD-2022-5230
Malicious code in bioql PyPI...
EUVD-2022-4289
Malicious code in bioql PyPI...
EUVD-2022-37027
Malicious code in bioql PyPI...
EUVD-2022-0650
Malicious code in bioql PyPI...
EUVD-2023-42861
Malicious code in bioql PyPI...
CVE-2024-29273
There is Stored Cross-Site Scripting XSS in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php, with the XSS payload in an SVG document...
CVE-2024-37741
OpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a profile picture...
CVE-2024-50637
UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting XSS in the Create User function. This allows attackers to perform XSS via an SVG document, which can be used to steal cookies...
CVE-2024-54123
Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text format...
CVE-2024-56173
In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from JavaScript in an SVG document...
CVE-2023-50465
A stored cross-site scripting XSS vulnerability exists in Monica aka MonicaHQ 4.0.0 via an SVG document uploaded by an authenticated user...
CVE-2023-39115
install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document...
CVE-2023-37298
Joplin before 2.11.5 allows XSS via a USE element in an SVG document...
CVE-2023-49146
DOMSanitizer aka dom-sanitizer before 1.0.7 allows XSS via an SVG document because of mishandling of comments and greedy regular expressions...
CVE-2021-3312
An XML external entity XXE vulnerability in Alkacon OpenCms 11.0, 11.0.1 and 11.0.2 allows remote authenticated users with edit privileges to exfiltrate files from the server's file system by uploading a crafted SVG document...