EUVD-2025-19752

Malicious code in bioql PyPI...

EUVD-2024-36335

Malicious code in bioql PyPI...

EUVD-2022-52272

Malicious code in bioql PyPI...

EUVD-2023-58575

Malicious code in bioql PyPI...

EUVD-2023-32627

Malicious code in bioql PyPI...

EUVD-2021-7595

Malicious code in bioql PyPI...

EUVD-2022-52273

Malicious code in bioql PyPI...

EUVD-2025-13884

Malicious code in bioql PyPI...

EUVD-2022-53160

Malicious code in bioql PyPI...

EUVD-2023-54203

Malicious code in bioql PyPI...

EUVD-2025-15136

Malicious code in bioql PyPI...

EUVD-2024-18124

Malicious code in bioql PyPI...

EUVD-2024-46759

Malicious code in bioql PyPI...

CVE-2025-10547 CVE-2025-10547

An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption...

Apache Airflow Unauthenticated Access

Apache Airflow is a platform to programmatically author, schedule and monitor workflows. When authentication is not enabled, an attacker can access the Airflow web interface without any credentials. This may allow an attacker to view and modify workflows, access sensitive information, and...

CVE-2025-20361

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of...

CVE-2025-20356

A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-base...

CVE-2025-20357

A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-base...

CVE-2025-54292

CVE-2025-54292 concerns a path traversal vulnerability in Canonical’s LXD/LXD-UI prior to versions 6.5 and 5.21.4. The accessible details in the provided documents indicate that an authenticated remote attacker could abuse crafted resource names in URL paths to access or modify unintended resourc...

VulnCheck KEV: CVE-2025-4008

Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers to gain arbitrary command execution with elevated privileges root on affected devices...