EUVD-2022-1620

Malicious code in bioql PyPI...

EUVD-2022-31757

Malicious code in bioql PyPI...

EUVD-2025-28028

Malicious code in bioql PyPI...

EUVD-2025-4161

Malicious code in bioql PyPI...

EUVD-2023-30355

Malicious code in bioql PyPI...

EUVD-2022-5063

Malicious code in bioql PyPI...

EUVD-2023-49285

Malicious code in bioql PyPI...

EUVD-2024-29363

Malicious code in bioql PyPI...

CVE-2025-47211 QTS, QuTS hero

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the...

CVE-2025-54293

CVE-2025-54293 describes a path traversal in Canonical LXD 5.0 LTS (Linux) via the log-file retrieval function, allowing an authenticated remote attacker to read arbitrary host files by crafting log file names or symlinks. The vulnerability impacts LXD’s instance log retrieval endpoint and potent...

Race condition in xterm allows local users to modify arbitrary files via the logging option.

...

The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files.

...

efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message.

...

CVE-2025-35032

Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08...

CVE-2025-35032

Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08...

CVE-2025-35032

Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08...

CVE-2025-35032 Medical Informatics Engineering Enterprise Health arbitrary file upload

Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08...

CVE-2025-35032

CVE-2025-35032 — Medical Informatics Engineering Enterprise Health has a vulnerability where authenticated users can upload arbitrary files. The impact depends on how those files are subsequently accessed, per Red Hat and related advisories. The issue is reported as fixed as of 2025-04-08. Linked...

DataSpider Servista improper restriction of XML external entity references

Overview DataSpider Servista provided by Saison Technology Co.,Ltd. is a data integration software. DataSpider Servista contains the following vulnerability. Improper restriction of XML external entity reference CWE-611 - CVE-2025-48006 Shigeaki Tsunoda of Cyber Defense Institute, Inc. reported...

Medical Informatics Engineering Enterprise Health 安全漏洞

Medical Informatics Engineering Enterprise Health is a healthcare solution from US-based Medical Informatics Engineering. A security vulnerability exists in Medical Informatics Engineering Enterprise Health that stems from allowing authenticated users to upload arbitrary files, which could result...