EUVD-2025-11512

Malicious code in bioql PyPI...

EUVD-2024-36376

Malicious code in bioql PyPI...

EUVD-2024-36384

Malicious code in bioql PyPI...

EUVD-2025-32027

Malicious code in bioql PyPI...

EUVD-2025-32028

Malicious code in bioql PyPI...

EUVD-2023-52364

Malicious code in bioql PyPI...

EUVD-2025-31113

Malicious code in bioql PyPI...

EUVD-2025-32025

Malicious code in bioql PyPI...

EUVD-2023-43658

Malicious code in bioql PyPI...

EUVD-2023-36943

Malicious code in bioql PyPI...

EUVD-2023-38777

Malicious code in bioql PyPI...

EUVD-2024-50703

Malicious code in bioql PyPI...

EUVD-2022-53390

Malicious code in bioql PyPI...

EUVD-2024-36381

Malicious code in bioql PyPI...

EUVD-2025-8263

Malicious code in bioql PyPI...

Splunk Enterprise 9.2.0 < 9.2.8, 9.3.0 < 9.3.6, 9.4.0 < 9.4.4 (SVD-2025-1001)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2025-1001 advisory. - In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.111,...

CVE-2025-20370

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a user who holds a role that contains the high-privilege capability changeauthentication, could send multiple LDAP bind requests to a specific...

CVE-2025-20371

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attacker could trigger a blind server-side request forgery SSRF potentially letting an attacker perform REST API calls on...

CVE-2025-20369

In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privilege user that does not hold the "admin" or "power" Splunk roles could perform an extensible markup language XML external entity XXE...

CVE-2025-20368

In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privileged user that does not hold the admin or power Splunk roles could craft a malicious payload through the error messages and job inspection...