Download Monitor <= 4.7.60 - Sensitive Information Exposure

The Download Monitor plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.7.60 via REST API. This can allow unauthenticated attackers to extract sensitive data including user reports, download reports, and user data including email, role, id and...

CVE-2020-12477

The REST API functions in TeamPass 2.1.27.36 allow any user with a valid API token to bypass IP address whitelist restrictions via an X-Forwarded-For client HTTP header to the getIp function...

CVE-2023-29507

XWiki Commons are technical libraries common to several other top level XWiki projects. The Document script API returns directly a DocumentAuthors allowing to set any authors to the document, which in consequence can allow subsequent executions of scripts since this author is used for checking...

EUVD-2018-19773

Malware in sbrugna...

EUVD-2018-12358

Malware in sbrugna...

EUVD-2018-12009

Malware in sbrugna...

EUVD-2018-1963

Malware in sbrugna...

EUVD-2020-19072

Malware in sbrugna...

EUVD-2015-7252

Malware in sbrugna...

EUVD-2018-0320

Malware in sbrugna...

EUVD-2024-1618

Malicious code in bioql PyPI...

EUVD-2023-43119

Malicious code in bioql PyPI...

EUVD-2023-51739

Malicious code in bioql PyPI...

EUVD-2022-2934

Malicious code in bioql PyPI...

EUVD-2025-22766

Malicious code in bioql PyPI...

EUVD-2021-9982

Malicious code in bioql PyPI...

EUVD-2022-2947

Malicious code in bioql PyPI...

CVE-2025-54554

tiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that reveal sensitive information about the underlying SQL queries and database structure...

CVE-2025-54768

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to download logs from the appliance configuration, exposing sensitive information...

CVE-2023-39530

PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete files from the server via the CustomerMessage API. Version 8.1.1 contains a patch for this issue. There are no known workarounds...