EUVD-2025-5054

Malicious code in bioql PyPI...

EUVD-2025-5051

Malicious code in bioql PyPI...

CVE-2024-52882

An issue was discovered in AudioCodes One Voice Operations Center OVOC before 8.4.582. Due to improper neutralization of input via the devices API, an attacker can inject malicious JavaScript code XSS to attack logged-in administrator sessions...

CVE-2024-52883

An issue was discovered in AudioCodes One Voice Operations Center OVOC before 8.4.582. Due to a path traversal vulnerability, sensitive data can be read without any authentication...

CVE-2024-52881

An issue was discovered in AudioCodes One Voice Operations Center OVOC before 8.4.582. Due to the use of a hard-coded key, an attacker is able to decrypt sensitive data such as passwords extracted from the topology file...

CVE-2024-52883

An issue was discovered in AudioCodes One Voice Operations Center OVOC before 8.4.582. Due to a path traversal vulnerability, sensitive data can be read without any authentication...

CVE-2024-52881

An issue was discovered in AudioCodes One Voice Operations Center OVOC before 8.4.582. Due to the use of a hard-coded key, an attacker is able to decrypt sensitive data such as passwords extracted from the topology file...

CVE-2024-52881

AudioCodes One Voice Operations Center (OVOC) versions prior to 8.4.582 are vulnerable to a security issue caused by the use of a hard-coded cryptographic key . An attacker can exploit this flaw to decrypt sensitive data, specifically passwords extracted from the topology file . To remediate this...

CVE-2024-52882

AudioCodes One Voice Operations Center (OVOC) versions prior to 8.4.582 are vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the improper neutralization of input via the devices API , which allows an attacker to inject malicious JavaScript code. This vulnerability can b...

CVE-2024-52882

An issue was discovered in AudioCodes One Voice Operations Center OVOC before 8.4.582. Due to improper neutralization of input via the devices API, an attacker can inject malicious JavaScript code XSS to attack logged-in administrator sessions...

CVE-2024-52881

An issue was discovered in AudioCodes One Voice Operations Center OVOC before 8.4.582. Due to the use of a hard-coded key, an attacker is able to decrypt sensitive data such as passwords extracted from the topology file...

CVE-2024-52883

An issue was discovered in AudioCodes One Voice Operations Center OVOC before 8.4.582. Due to a path traversal vulnerability, sensitive data can be read without any authentication...

CVE-2024-52882: Improper Neutralization of Input During Web Page Generation

An issue was discovered in AudioCodes One Voice Operations Center OVOC before 8.4.582. Due to improper neutralization of input via the devices API, an attacker can inject malicious JavaScript code XSS to attack logged-in administrator sessions...

CVE-2024-52881: Use of Hard-coded Cryptographic Key

An issue was discovered in AudioCodes One Voice Operations Center OVOC before 8.4.582. Due to the use of a hard-coded key, an attacker is able to decrypt sensitive data such as passwords extracted from the topology file...

CVE-2024-52883: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in AudioCodes One Voice Operations Center OVOC before 8.4.582. Due to a path traversal vulnerability, sensitive data can be read without any authentication...

CVE-2024-52883

AudioCodes One Voice Operations Center (OVOC) versions prior to 8.4.582 are susceptible to a path traversal vulnerability. This flaw allows an unauthenticated attacker to read sensitive data by manipulating file paths. To remediate this issue, users should update to version 8.4.582 or later. As a...