EUVD-2022-47727

Malicious code in bioql PyPI...

EUVD-2023-30270

Malicious code in bioql PyPI...

EUVD-2022-3979

Malicious code in bioql PyPI...

EUVD-2024-16878

Malicious code in bioql PyPI...

EUVD-2022-51714

Malicious code in bioql PyPI...

EUVD-2025-25390

Malicious code in bioql PyPI...

EUVD-2025-29082

Malicious code in bioql PyPI...

EUVD-2023-33869

Malicious code in bioql PyPI...

EUVD-2021-28007

Malicious code in bioql PyPI...

EUVD-2021-28006

Malicious code in bioql PyPI...

EUVD-2025-15970

Malicious code in bioql PyPI...

EUVD-2022-2663

Malicious code in bioql PyPI...

EUVD-2022-5650

Malicious code in bioql PyPI...

EUVD-2022-2500

Malicious code in bioql PyPI...

EUVD-2024-54700

Malicious code in bioql PyPI...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.0 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2025-40645 Exposure of sensitive information in Viday

Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter...

CVE-2025-40645

CVE-2025-40645 relates to ViDay/Viday. An unauthenticated attacker can retrieve sensitive customer information by issuing an HTTP GET to /api/reserva/web/clients with the phone parameter. Technical details from sources: CVSS v4.0 base score 8.7 (HIGH) with NETWORK attack vector, LOW attack comple...

FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint

An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/schemaId endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed...

CVE-2025-41098

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a misuse of the general enquiry web service...