EUVD-2022-4339

Malicious code in bioql PyPI...

EUVD-2022-53454

Malicious code in bioql PyPI...

EUVD-2023-32036

Malicious code in bioql PyPI...

EUVD-2023-39179

Malicious code in bioql PyPI...

EUVD-2025-29082

Malicious code in bioql PyPI...

EUVD-2023-30270

Malicious code in bioql PyPI...

EUVD-2022-1916

Malicious code in bioql PyPI...

EUVD-2021-29868

Malicious code in bioql PyPI...

EUVD-2022-48833

Malicious code in bioql PyPI...

EUVD-2025-26515

Malicious code in bioql PyPI...

EUVD-2022-51714

Malicious code in bioql PyPI...

EUVD-2022-1571

Malicious code in bioql PyPI...

EUVD-2022-2024

Malicious code in bioql PyPI...

EUVD-2021-28006

Malicious code in bioql PyPI...

EUVD-2024-49609

Malicious code in bioql PyPI...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.0 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2025-40645 Exposure of sensitive information in Viday

Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter...

CVE-2025-40645

CVE-2025-40645 relates to ViDay/Viday. An unauthenticated attacker can retrieve sensitive customer information by issuing an HTTP GET to /api/reserva/web/clients with the phone parameter. Technical details from sources: CVSS v4.0 base score 8.7 (HIGH) with NETWORK attack vector, LOW attack comple...

FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint

An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/schemaId endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed...

CVE-2025-41098

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a misuse of the general enquiry web service...