EUVD-2019-13817

Malware in sbrugna...

EUVD-2017-11895

Malware in sbrugna...

EUVD-2017-9768

Malware in sbrugna...

EUVD-2024-35359

Malicious code in bioql PyPI...

EUVD-2022-47879

Malicious code in bioql PyPI...

EUVD-2024-45748

Malicious code in bioql PyPI...

EUVD-2024-31636

Malicious code in bioql PyPI...

EUVD-2025-12181

Malicious code in bioql PyPI...

EUVD-2024-34916

Malicious code in bioql PyPI...

EUVD-2025-21802

Malicious code in bioql PyPI...

CVE-2025-30027

An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a...

AXIS Device Manger 安全漏洞

AXIS Device Manger is an on-premise tool from Axis Sweden AXIS that provides a simple, cost-effective and secure way to perform device management. AXIS Device Manger has a security vulnerability that stems from insufficient validation of ACAP configuration file inputs, which could lead to the...

CVE-2025-6231

An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying an application configuration file...

CVE-2023-21409

Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configuration of the application...

CVE-2020-26517

A cross-site scripting XSS issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. It is possible to perform XSS attacks through using the WebDAV functionality to upload files to a project Authn users, using the users import functionality Admin only, and changing the login text in t...

CVE-2025-4375 Cross-Site Request Forgery vulnerability in Pro Cloud Server's WebEA

Cross-Site Request Forgery CSRF vulnerability in Sparx Systems Pro Cloud Server allows Cross-Site Request Forgery to perform Session Hijacking. Cross-Site Request Forgery is present at the whole application but it can be used to change the Pro Cloud Server Configuration password. This issue affec...

CVE-2025-25586

yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via the component /resources/application.yml...

[SECURITY] Fedora 41 Update: iniparser-4.2.4-3.fc41

iniParser is an ANSI C library to parse "INI-style" files, often used to hold application configuration information...

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series systems arises from errors in system configuration or setup. This vulnerability allows attackers to gain unauthorized access to application configuration information.

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to errors in system configuration or setup. Exploiting this vulnerability can allow an attacker to gain unauthorized access to application...

GHSA-W8GC-X259-RC7X rails-html-sanitize has XSS vulnerability with certain configurations

Summary There is a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer 1.6.0 when used with Rails = 7.1.0 and Nokogiri = 1.16.8. Impact A possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer may allow an attacker to inject content if HTML5...