EUVD-2020-4739

Malware in sbrugna...

EUVD-2024-45639

Malicious code in bioql PyPI...

EUVD-2022-34153

Malicious code in bioql PyPI...

EUVD-2022-32372

Malicious code in bioql PyPI...

EUVD-2022-32374

Malicious code in bioql PyPI...

EUVD-2024-19765

Malicious code in bioql PyPI...

EUVD-2023-34121

Malicious code in bioql PyPI...

CVE-2024-51840

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rezaul Wd-image-magnifier-xoss wd-image-magnifier-xoss allows DOM-Based XSS.This issue affects Wd-image-magnifier-xoss: from n/a through = 1.0...

CVE-2024-22169

WD Discovery versions prior to 5.0.589 contain a misconfiguration in the Node.js environment settings that could allow code execution by utilizing the 'ELECTRONRUNASNODE' environment variable. Any malicious application operating with standard user permissions can exploit this vulnerability,...

CVE-2023-2655

The Contact Form by WD WordPress plugin through 1.13.23 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

CVE-2022-29835

WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereby impact the confidentiality of user content...

CVE-2020-12427

The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space...

CVE-2020-15816

In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could potentially execute code in the application's process through library injection by using DYLD environment variables...

CVE-2017-17733

Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...

PT-2025-7356

Name of the Vulnerable Software and Affected Versions LTL Freight Quotes – GlobalTranz Edition plugin for WordPress versions up to, and including, 2.3.11 Description The issue is related to SQL Injection via the 'engtz wd save dropship' AJAX endpoint due to insufficient escaping on the user...

CVE-2023-47807: Missing Authorization

Missing Authorization vulnerability in 10Web 10WebAnalytics wd-google-analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 10WebAnalytics: from n/a through = 1.2.12...

CVE-2024-42329

CVE-2024-42329 affects Zabbix (versions 7.0.0–7.0.3) where the Browser object’s webdriver_session_query may fail without an initialized error object, leaving wd->error as NULL and causing a crash when read. Connected sources corroborate the same underlying flaw across various advisories (e.g.,...

CVE-2024-51840

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rezaul Wd-image-magnifier-xoss wd-image-magnifier-xoss allows DOM-Based XSS.This issue affects Wd-image-magnifier-xoss: from n/a through = 1.0...

CVE-2024-51840 WordPress Wd-image-magnifier-xoss plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rezaul Wd-image-magnifier-xoss wd-image-magnifier-xoss allows DOM-Based XSS.This issue affects Wd-image-magnifier-xoss: from n/a through = 1.0...

CVE-2024-51840 WordPress Wd-image-magnifier-xoss plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rezaul haque Wd-image-magnifier-xoss allows DOM-Based XSS.This issue affects Wd-image-magnifier-xoss: from n/a through 1.0...