888 matches found
EUVD-2024-34578
Malicious code in bioql PyPI...
EUVD-2024-47859
Malicious code in bioql PyPI...
EUVD-2023-37179
Malicious code in bioql PyPI...
EUVD-2023-42318
Malicious code in bioql PyPI...
EUVD-2022-45084
Malicious code in bioql PyPI...
EUVD-2023-29689
Malicious code in bioql PyPI...
EUVD-2023-27796
Malicious code in bioql PyPI...
EUVD-2025-28246
Malicious code in bioql PyPI...
EUVD-2021-8170
Malicious code in bioql PyPI...
EUVD-2021-8255
Malicious code in bioql PyPI...
EUVD-2023-51358
Malicious code in bioql PyPI...
EUVD-2023-28432
Malicious code in bioql PyPI...
EUVD-2023-35214
Malicious code in bioql PyPI...
EUVD-2022-32130
Malicious code in bioql PyPI...
EUVD-2025-31037
Malicious code in bioql PyPI...
CVE-2025-52433
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...
CVE-2025-6815
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘servicename’ parameter in all versions up to, and including, 5.1.94 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2025-6815
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘servicename’ parameter in all versions up to, and including, 5.1.94 due to insufficient input sanitization and output escaping. This makes it possible for...
Cisco IOS XE Software HTTP API Command Injection Vulnerability
A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with root privileges into the underlying operating system. This vulnerability is due to insufficient input validation. An attacker with administrative privileges...
CVE-2025-57203
MagicProject AI version 9.1 is affected by a Cross-Site Scripting XSS vulnerability within the chatbot generation feature available to authenticated admin users. The vulnerability resides in the prompt parameter submitted to the /dashboard/user/generator/generate-stream endpoint via a...