EUVD-2015-7435

Malware in sbrugna...

The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, arises from the lack of measures taken to clean data at the management level. This allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the VMware vCenter Server virtualization infrastructure management tool is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to compromise the integrity and accessibility of protected...

EUVD-2023-40117

Malicious code in bioql PyPI...

EUVD-2023-2637

Malicious code in bioql PyPI...

EUVD-2021-7414

Malicious code in bioql PyPI...

EUVD-2023-1264

Malicious code in bioql PyPI...

EUVD-2025-12742

Malicious code in bioql PyPI...

EUVD-2024-0206

Malicious code in bioql PyPI...

EUVD-2023-51003

Malicious code in bioql PyPI...

EUVD-2023-34279

Malicious code in bioql PyPI...

EUVD-2023-56048

Malicious code in bioql PyPI...

The vulnerability of NVIDIA Unified Memory driver, related to incomplete cleaning, allows an attacker to access confidential data.

The vulnerability of NVIDIA Unified Memory’s driver is related to incomplete cleaning. Exploiting this vulnerability can allow an attacker to access confidential data...

The vulnerability of the Virtual GPU Manager driver component on NVIDIA’s Virtual GPU hosts allows a attacker to trigger a service failure.

The vulnerability of the Virtual GPU Manager driver component of NVIDIA’s Virtual GPU technology is related to incomplete cleaning. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the HTTP API component of Cisco IOS XE allows a perpetrator to execute arbitrary commands.

The vulnerability of the HTTP API component of Cisco IOS XE operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Counterpart 安全漏洞

Counterpart is a translation library by the individual developer Martin Andert. A security vulnerability exists in Counterpart versions prior to 0.18.6, which stems from insufficient cleaning of user input and could lead to a prototype contamination attack...

GHSA-MM7X-QFJJ-5G2C Ammonia incorrectly handles embedded SVG and MathML leading to mutation XSS after removal

Affected versions of this crate did not correctly strip namespace-incompatible tags in certain situations, causing it to incorrectly account for differences between HTML, SVG, and MathML. This vulnerability only has an effect when the svg or math tag is allowed, because it relies on a tag being...

The vulnerability of JetBrains Junie software, related to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary code.

The vulnerability of JetBrains Junie software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

RUSTSEC-2025-0071 Incorrect handling of embedded SVG and MathML leads to mutation XSS after removal

Affected versions of this crate did not correctly strip namespace-incompatible tags in certain situations, causing it to incorrectly account for differences between HTML, SVG, and MathML. This vulnerability only has an effect when the svg or math tag is allowed, because it relies on a tag being...

The vulnerability of the sub_417D74() function in the microprogramming software for TOTOLINK X6000R allows a hacker to execute arbitrary commands.

The vulnerability of the sub417D74 function in the microprogrammed software of TOTOLINK X6000R routers is related to the lack of measures taken to clean data at the control level when processing the parameter filename. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

PT-2025-37479

Name of the Vulnerable Software and Affected Versions Gen Digital CCleaner versions prior to 6.36.11508 Description A local user can gain SYSTEM privileges through insecure file delete operations within the cleaning feature on Windows. Recommendations Update to version 6.36.11508 or later...