EUVD-2024-34618

Malicious code in bioql PyPI...

EUVD-2022-39951

Malicious code in bioql PyPI...

EUVD-2022-39953

Malicious code in bioql PyPI...

EUVD-2022-39952

Malicious code in bioql PyPI...

EUVD-2023-49651

Malicious code in bioql PyPI...

EUVD-2022-52430

Malicious code in bioql PyPI...

EUVD-2024-23580

Malicious code in bioql PyPI...

EUVD-2024-34620

Malicious code in bioql PyPI...

EUVD-2024-23579

Malicious code in bioql PyPI...

EUVD-2024-43281

Malicious code in bioql PyPI...

EUVD-2023-36984

Malicious code in bioql PyPI...

EUVD-2024-43283

Malicious code in bioql PyPI...

EUVD-2024-39151

Malicious code in bioql PyPI...

CVE-2024-49211

Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before version 2024.08. A remote unauthenticated attacker could potentially exploit this by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web...

CVE-2024-49209

Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and upload additional system icons...

CVE-2024-26309

Archer Platform 6.x before 6.14 P2 HF2 6.14.0.2.2 contains a sensitive information disclosure vulnerability. An unauthenticated attacker could potentially obtain access to sensitive information via an internal URL...

CVE-2024-26310

Archer Platform 6.8 before 6.14 P2 6.14.0.2 contains an improper access control vulnerability. A remote authenticated malicious user could potentially exploit this to gain access to API information that should only be accessible with extra privileges...

CVE-2024-41707

An issue was discovered in Archer Platform 6 before 2024.06. Authenticated users can achieve HTML content injection. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML code in a trusted application data store. When victim users access the data stor...

CVE-2024-49208

Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and delete system icons...

CVE-2024-49210

Reflected XSS was discovered in an iView List Archer Platform UX page in Archer Platform 6.x before version 2024.09. A remote unauthenticated attacker could potentially exploit this by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web...