EUVD-2024-53958

Malicious code in bioql PyPI...

EUVD-2024-53959

Malicious code in bioql PyPI...

EUVD-2024-53960

Malicious code in bioql PyPI...

CVE-2024-38291

In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which could lead to privilege escalation...

CVE-2024-38292

In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which may lead to privilege escalation...

CVE-2024-38291

In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which could lead to privilege escalation...

CVE-2024-38290

In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific conditions are met...

CVE-2024-38291

In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which could lead to privilege escalation...

CVE-2024-38292

In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which may lead to privilege escalation...

CVE-2024-38290

In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific conditions are met...

CVE-2024-38292

In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which may lead to privilege escalation...

CVE-2024-38290

In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific conditions are met...

CVE-2024-38290: Exposure of Sensitive Information to an Unauthorized Actor

In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific conditions are met...

PT-2025-9026 · Xiq-Se · Xiq-Se

Name of the Vulnerable Software and Affected Versions: XIQ-SE versions prior to 24.2.11 Description: A server misconfiguration in XIQ-SE may allow user enumeration under specific conditions. Recommendations: For versions prior to 24.2.11, update to version 24.2.11 or later to resolve the issue...

CVE-2024-38292

In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which may lead to privilege escalation...

CVE-2024-38290

In Extreme Networks ExtremeCloud IQ Site Engine (XIQ-SE) versions prior to 24.2.11 , a server misconfiguration may allow user enumeration when specific conditions are met. This vulnerability leads to the exposure of sensitive information to an unauthorized actor. To remediate this issue, users ar...

CVE-2024-38291

In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which could lead to privilege escalation...

CVE-2024-38292

Extreme Networks ExtremeCloud IQ Site Engine (XIQ-SE) is vulnerable to a path traversal flaw in versions prior to 24.2.11 . The root cause is a missing access control check , which could allow an attacker to perform a path traversal and potentially achieve privilege escalation . To resolve this i...

CVE-2024-38291

Extreme Networks ExtremeCloud IQ Site Engine (XIQ-SE) is vulnerable in versions prior to 24.2.11 due to an improper access control flaw. A low-privileged user may be able to access administrator passwords , which could result in privilege escalation . To resolve this issue, users are recommended ...

PT-2025-9027 · Xiq-Se · Xiq-Se

Name of the Vulnerable Software and Affected Versions: XIQ-SE versions prior to 24.2.11 Description: A low-privileged user may be able to access admin passwords, which could lead to privilege escalation. Recommendations: For versions prior to 24.2.11, update to version 24.2.11 or later to resolve...