EUVD-2022-35886

Malicious code in bioql PyPI...

EUVD-2022-49183

Malicious code in bioql PyPI...

EUVD-2025-6432

Malicious code in bioql PyPI...

EUVD-2021-30477

Malicious code in bioql PyPI...

EUVD-2023-34338

Malicious code in bioql PyPI...

EUVD-2021-34234

Malicious code in bioql PyPI...

EUVD-2023-45348

Malicious code in bioql PyPI...

EUVD-2022-32757

Malicious code in bioql PyPI...

EUVD-2023-43703

Malicious code in bioql PyPI...

EUVD-2025-18229

Malicious code in bioql PyPI...

EUVD-2021-34224

Malicious code in bioql PyPI...

EUVD-2021-34227

Malicious code in bioql PyPI...

EUVD-2022-33125

Malicious code in bioql PyPI...

The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service (DoS) via a crafted input.

...

Perfex CRM 跨站脚本漏洞

Perfex CRM is a customer relationship management software from Perfex CRM open source. It is used to manage customers, projects and create invoices in the cloud. A cross-site scripting vulnerability exists in Perfex CRM version 3.2.1, which stems from insufficient validation of user input and cou...

PT-2025-39817

Name of the Vulnerable Software and Affected Versions Perfex CRM version 3.2.1 Description An HTML injection issue exists in Perfex CRM version 3.2.1. This is due to insufficient validation of user-supplied data. An attacker can inject HTML code by sending a POST request to the /projects/project/...

The vulnerability of monitoring software and Performance Co-Pilot (PCP) systems, which is related to improper validation of input data, allows attackers to trigger service failures.

The vulnerability of monitoring and performance visualization software, such as Performance Co-Pilot PCP, is related to improper validation of input data. Exploiting this vulnerability can allow attackers to trigger service failures...

WSO2 Enterprise Integrator 安全漏洞

WSO2 Enterprise Integrator is an open source hybrid integration platform from WSO2, Inc. in the United States. The platform supports communication between multiple applications. A security vulnerability exists in WSO2 Enterprise Integrator that stems from the BPEL uploader SOAP service endpoint n...

CVE-2025-20327

A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a...

CVE-2025-58228 WordPress Quick View for WooCommerce Plugin <= 2.2.16 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ShapedPlugin LLC Quick View for WooCommerce woo-quickview allows Stored XSS.This issue affects Quick View for WooCommerce: from n/a through = 2.2.16...