2012 matches found
CVE-2025-11573 Denial of Service issue in Amazon.IonDotnet
An infinite loop issue in Amazon.IonDotnet library versions v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not...
CVE-2025-59999 Junos Space: API Access Profiles page is vulnerable to reflected cross-site script injection
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the API Access Profiles page that, when visited by another user, enables the attacker to execute commands with the target...
PT-2025-41432
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 24.1R4 Description An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue exists in Juniper Networks Junos Space. This allows an attacker to inject script tags...
EUVD-2025-32708
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Callvision Healthcare Callvision Emergency Code allows SQL Injection, Blind SQL Injection.This issue affects Callvision Emergency Code: before V3.0...
CVE-2025-0603
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Callvision Healthcare Callvision Emergency Code allows SQL Injection, Blind SQL Injection. This issue affects Callvision Emergency Code: before V3.0...
CVE-2025-0603
The CVE-2025-0603 issue is an SQL injection vulnerability in Callvision Healthcare’s Callvision Emergency Code, caused by improper neutralization of special elements in SQL commands. Affects Callvision Emergency Code versions before V3.0. Impact is high across confidentiality, integrity, and avai...
CVE-2025-0603 SQLi in Callvision Healthcare's Callvision Emergency Code
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Callvision Healthcare Callvision Emergency Code allows SQL Injection, Blind SQL Injection. This issue affects Callvision Emergency Code: before V3.0...
CVE-2025-0608
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing. This issue affects Logo Cloud: before 2025.R6...
CVE-2025-62185
In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed for a YouTube link in the deck. The executable name could be youtube-dl.exe or yt-dlp.exe or yt-dlpx86.exe...
Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987419)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987419 advisory. Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10. This bug showed evidence of memory corruption and we presume that with enough effort this...
EUVD-2024-54962
Malicious code in bioql PyPI...
EUVD-2025-24415
Malicious code in bioql PyPI...
EUVD-2025-24158
Malicious code in bioql PyPI...
EUVD-2025-25404
Malicious code in bioql PyPI...
EUVD-2025-24156
Malicious code in bioql PyPI...
EUVD-2025-30408
Malicious code in bioql PyPI...
EUVD-2025-28249
Malicious code in bioql PyPI...
EUVD-2025-30781
Malicious code in bioql PyPI...