152 matches found
CVE-2025-69749
Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code...
CVE-2025-69749
Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code...
PT-2026-5324
Name of the Vulnerable Software and Affected Versions tale versions 2.0.5 Description A Cross Site Scripting issue exists in tale version 2.0.5 that could allow an attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version that contains a fix...
CVE-2025-69749
Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code...
Tale Blog Security Vulnerabilities
Tale Blog is a Java blog developed using the Tale Blog System, which is open-source. Version 2.0.5 of Tale Blog has a security vulnerability that can be exploited by cross-site scripting attacks...
EUVD-2025-206532
Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code...
CVE-2025-69749
Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code...
CVE-2025-69749
Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code...
CVE-2025-69749
A Cross Site Scripting (XSS) vulnerability exists in tale v.2.0.5 , an open-source Java blog system. The flaw allows an attacker to execute arbitrary code via improper neutralization of input during web page generation. While the technical root cause is identified as XSS, the vulnerability is des...
CVE-2025-69749: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code...
CVE-2025-69749
Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code...
CVE-2025-1585
A vulnerability, which was classified as problematic, has been found in otale tale up to 2.0.5. This issue affects the function OptionsService of the file src/main/resources/templates/themes/default/partial/header.html. The manipulation of the argument logourl leads to cross site scripting. The...
VulnCheck KEV: CVE-2024-55890
D-Tale is a visualizer for pandas data structures. Prior to version 3.16.1, users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.16.1 where the update-settings endpoint blocks the ability...
EUVD-2024-0283
Malicious code in bioql PyPI...
EUVD-2024-3447
Malicious code in bioql PyPI...
EUVD-2025-6664
Malicious code in bioql PyPI...
EUVD-2025-4409
Malicious code in bioql PyPI...
EUVD-2023-2766
Malicious code in bioql PyPI...