EUVD-2020-3969

Malware in sbrugna...

EUVD-2024-53913

Malicious code in bioql PyPI...

EUVD-2023-34046

Malicious code in bioql PyPI...

EUVD-2024-54186

Malicious code in bioql PyPI...

CVE-2021-32573

The express-cart package through 1.1.10 for Node.js allows Reflected XSS for an admin via a user input field for product options. NOTE: the vendor states that this "would rely on an admin hacking his/her own website...

CVE-2024-8050

The Custom Author Base WordPress plugin through 1.1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...