EUVD-2022-24534

Malicious code in bioql PyPI...

EUVD-2021-9906

Malicious code in bioql PyPI...

EUVD-2024-2709

Malicious code in bioql PyPI...

EUVD-2024-51098

Malicious code in bioql PyPI...

EUVD-2024-22369

Malicious code in bioql PyPI...

EUVD-2023-41139

Malicious code in bioql PyPI...

EUVD-2022-41403

Malicious code in bioql PyPI...

EUVD-2023-2845

Malicious code in bioql PyPI...

EUVD-2022-27571

Malicious code in bioql PyPI...

EUVD-2024-1862

Malicious code in bioql PyPI...

EUVD-2024-29336

Malicious code in bioql PyPI...

CVE-2025-35033

Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14...

CVE-2025-35033 Medical Informatics Engineering Enterprise Health CSV injection

Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14...

CVE-2025-35033 Medical Informatics Engineering Enterprise Health CSV injection

Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14...

CVE-2025-35033: Improper Neutralization of Formula Elements in a CSV File

Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14...

Medical Informatics Engineering Enterprise Health Security Vulnerabilities

Medical Informatics Engineering Enterprise Health is a healthcare solution from US-based Medical Informatics Engineering. A security vulnerability exists in Medical Informatics Engineering Enterprise Health that originates from a remote authenticated attacker who can inject macros into a...

CVE-2025-10498

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.12.0. This is due to missing or incorrect nonce validation when exporting CSV files. This makes it possible for unauthenticated...

CVE-2025-10498 Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Limited File Deletion

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.12.0. This is due to missing or incorrect nonce validation when exporting CSV files. This makes it possible for unauthenticated...

CVE-2025-10498: Cross-Site Request Forgery (CSRF)

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.12.0. This is due to missing or incorrect nonce validation when exporting CSV files. This makes it possible for unauthenticated...

Prototype Pollution

Overview csvtojson is an A tool concentrating on converting csv data to JSON with customised parser supporting Affected versions of this package are vulnerable to Prototype Pollution in the parserjsonarray process due to insufficient sanitization of nested header names. An attacker can cause deni...