3 matches found
EUVD-2025-9930
Malicious code in bioql PyPI...
9.8CVSS8.6AI score0.60586EPSS
SaveExploits3References4
CVE-2025-32370
Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated uploads; however, because .zip is processed through TryZipProviderSafe, there is additional functionality to create files with other extensions. NOTE: this is a separate issue not...
9.8CVSS5.9AI score0.01583EPSS
SaveExploits3References1
CVE-2025-32370
Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated uploads; however, because .zip is processed through TryZipProviderSafe, there is additional functionality to create files with other extensions. NOTE: this is a separate issue not...
7.2CVSS5.9AI score0.01583EPSS
SaveExploits3References2
20