EUVD-2022-46308

Malicious code in bioql PyPI...

EUVD-2022-46307

Malicious code in bioql PyPI...

CVE-2022-43264

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request...

CVE-2022-43263

A cross-site scripting XSS vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the name of an uploaded file...

CVE-2022-43263

A cross-site scripting XSS vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the name of an uploaded file...

CVE-2022-43264

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request...

Cross site scripting

A cross-site scripting XSS vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the name of an uploaded file...

Directory traversal

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request...

CVE-2022-43264

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request...

CVE-2022-43263

A cross-site scripting XSS vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the name of an uploaded file...

CVE-2022-43263

A cross-site scripting XSS vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the name of an uploaded file...

CVE-2022-43264

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request...

CVE-2022-43264: Improper Limitation of a Pathname to a Restricted Directory

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request...

CVE-2022-43263: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the name of an uploaded file...

CVE-2022-43264

CVE-2022-43264 affects Arobas Music Guitar Pro for iPad and iPhone prior to 1.10.2. The issue allows directory traversal and arbitrary file download via a crafted web request, leaking sensitive data (confidentiality impact high). Root cause described in sources as a path traversal flaw in the web...

CVE-2022-43263

Arobas Music Guitar Pro for iPad/iPhone is affected by a cross-site scripting (XSS) vulnerability in versions prior to 1.10.2. The issue allows an attacker to inject arbitrary web scripts or HTML by crafting the name of a file uploaded to the app. The root cause is tied to handling of uploaded fi...