241 matches found
EUVD-2024-19847
Malicious code in bioql PyPI...
Malicious code in ba-test (npm)
The package ba-test was found to contain malicious code...
MAL-2025-7109 Malicious code in @ba-bc-child/provider (npm)
The package @ba-bc-child/provider was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-15278 Malicious code in ba-test (npm)
The package ba-test was found to contain malicious code...
MAL-2025-9801 Malicious code in @zalastax/nolb-_ba- (npm)
The package @zalastax/nolb-ba- was found to contain malicious code...
Malicious code in @ba-bc-child/provider (npm)
The package @ba-bc-child/provider was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
CVE-2024-3672
The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'all-items' shortcode in all versions up to, and including, 1.6.8 due to insufficient input sanitization and output escaping on user supplied attributes such as 'classes'. This makes it...
CVE-2017-17974
BA SYSTEMS BAS Web on BAS920 devices with Firmware 01.01.00, HTTPserv 00002, and Script 02. and ISC2000 devices allows remote attackers to obtain sensitive information via a request for isc/getsidjs.aspx or isc/getsid.aspx, as demonstrated by obtaining administrative access by subsequently using...
CLSA-2025-1747739502 Update of microcode_ctl
Remove old firmware versions: 06-8f-04, 06-8f-05, 06-8f-06, 06-ba-08;...
Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization...
Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution...
CVE-2024-47360
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bookingalgorithms BA Book Everything ba-book-everything.This issue affects BA Book Everything: from n/a through = 1.6.20...
CVE-2024-32125
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Booking Algorithms BA Book Everything.This issue affects BA Book Everything: from n/a through 1.6.4...
CVE-2024-22286
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aluka BA Plus – Before & After Image Slider FREE allows Reflected XSS.This issue affects BA Plus – Before & After Image Slider FREE: from n/a through 1.0.3...
MAL-2024-11206 Malicious code in ba-graphics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d25fb780dcd8c598565114379e013b220e0a17c1b3586acce60a4aa0e0306c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ba-graphics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d25fb780dcd8c598565114379e013b220e0a17c1b3586acce60a4aa0e0306c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @ba-ui-toolkit/ba-graphics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cecc8f033039168aed0576db76b1cae3235b3ec9b6634c22a38c1696a4a80fc1 The OpenSSF Package Analysis project identified '@ba-ui-toolkit/ba-graphics' @ 7.1.11 npm as malicious. It is considered malicious because: - Th...
CVE-2024-47360
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bookingalgorithms BA Book Everything ba-book-everything.This issue affects BA Book Everything: from n/a through = 1.6.20...
CVE-2024-47360 WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Reflected XSS.This issue affects BA Book Everything: from n/a through 1.6.20...
