EUVD-2023-1279

Malicious code in bioql PyPI...

EUVD-2021-27824

Malicious code in bioql PyPI...

EUVD-2025-27484

Malicious code in bioql PyPI...

EUVD-2024-16145

Malicious code in bioql PyPI...

EUVD-2022-0341

Malicious code in bioql PyPI...

EUVD-2022-5629

Malicious code in bioql PyPI...

EUVD-2024-36135

Malicious code in bioql PyPI...

EUVD-2024-3106

Malicious code in bioql PyPI...

EUVD-2024-0604

Malicious code in bioql PyPI...

EUVD-2024-54140

Malicious code in bioql PyPI...

EUVD-2024-36214

Malicious code in bioql PyPI...

EUVD-2025-3092

Malicious code in bioql PyPI...

EUVD-2025-14012

Malicious code in bioql PyPI...

EUVD-2024-47776

Malicious code in bioql PyPI...

EUVD-2025-7079

Malicious code in bioql PyPI...

PT-2025-39857

Name of the Vulnerable Software and Affected Versions MyCourts version 3 Description A stored cross-site scripting XSS issue exists in the LTA number profile field of the MyCourts v3 application. An attacker can inject arbitrary JavaScript code into their profile. This code will then execute in t...

CVE-2025-4760

An authenticated stored cross-site scripting XSS vulnerability exists in multiple WSO2 products due to improper validation of user-supplied input during API document upload in the Publisher portal. A user with publisher privileges can upload a crafted API document containing malicious JavaScript,...

CVE-2025-36011

IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to...

CVE-2025-36011

IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to...

CVE-2025-36011 IBM Jazz for Service Management information disclosure

IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to...