515 matches found
EUVD-2021-1240
Malware in sbrugna...
EUVD-2002-0801
Malware in sbrugna...
EUVD-2003-0102
Malware in sbrugna...
EUVD-2025-21758
Malicious code in bioql PyPI...
EUVD-2024-2860
Malicious code in bioql PyPI...
EUVD-2022-3033
Malicious code in bioql PyPI...
EUVD-2024-43127
Malicious code in bioql PyPI...
EUVD-2023-32435
Malicious code in bioql PyPI...
EUVD-2022-7628
Malicious code in bioql PyPI...
EUVD-2024-21409
Malicious code in bioql PyPI...
EUVD-2025-30380
Malicious code in bioql PyPI...
EUVD-2022-0964
Malicious code in bioql PyPI...
EUVD-2024-1440
Malicious code in bioql PyPI...
EUVD-2022-32797
Malicious code in bioql PyPI...
PT-2025-39430
Name of the Vulnerable Software and Affected Versions vulnerability-lookup version 2.16.0 Description A cross-site scripting XSS issue exists in the handling of user-supplied input within the Bundles, Comments, and Sightings components of the software. Untrusted data was not properly sanitized...
CVE-2025-60249
vulnerability-lookup 2.16.0 allows XSS in bundle.py, comment.py, and user.py, by a user on a vulnerability-lookup instance who can add bundles, comments, or sightings. A cross-site scripting XSS vulnerability was discovered in the handling of user-supplied input in the Bundles, Comments, and...
CVE-2025-60249
CVE-2025-60249 affects vulnerability-lookup 2.16.0 and enables XSS via Bundles, Comments, and Sightings components (bundle.py, comment.py, user.py). The root cause is unsafe handling of user-supplied input, with untrusted data rendered in templates/tables due to innerHTML usage and insufficient v...
H2O affected by a deserialization vulnerability
A deserialization vulnerability exists in h2oai/h2o-3 versions = 3.46.0.7, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and...
GHSA-5W3J-GWGH-4RFV H2O affected by a deserialization vulnerability
A deserialization vulnerability exists in h2oai/h2o-3 versions = 3.46.0.7, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and...
CVE-2025-6544
A deserialization vulnerability exists in h2oai/h2o-3 versions = 3.46.0.8, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and...