EUVD-2023-58278

Malicious code in bioql PyPI...

EUVD-2025-22989

Malicious code in bioql PyPI...

EUVD-2025-22987

Malicious code in bioql PyPI...

CVE-2025-6060

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in DECE Software Geodi allows Cross-Site Scripting XSS.This issue affects Geodi: before GEODI Setup 9.0.146...

CVE-2025-6175

Improper Neutralization of CRLF Sequences 'CRLF Injection' vulnerability in DECE Software Geodi allows HTTP Request Splitting.This issue affects Geodi: before GEODI Setup 9.0.146...

CVE-2025-6175

Improper Neutralization of CRLF Sequences 'CRLF Injection' vulnerability in DECE Software Geodi allows HTTP Request Splitting.This issue affects Geodi: before GEODI Setup 9.0.146...

CVE-2025-6060

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in DECE Software Geodi allows Cross-Site Scripting XSS.This issue affects Geodi: before GEODI Setup 9.0.146...

CVE-2025-6060

CVE-2025-6060 corresponds to an XSS vulnerability in DECE Software Geodi. Public documents specify improper neutralization of input during web page generation affecting Geodi prior to GEODI Setup 9.0.146. The PT-2025-31197 advisory recommends updating to 9.0.146 or later as a fix. No exploit deta...

CVE-2025-6060 XSS in DECE Software's Geodi

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in DECE Software Geodi allows Cross-Site Scripting XSS.This issue affects Geodi: before GEODI Setup 9.0.146...

CVE-2025-6060 XSS in DECE Software's Geodi

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in DECE Software Geodi allows Cross-Site Scripting XSS.This issue affects Geodi: before GEODI Setup 9.0.146...

CVE-2025-6175 CRLF Injection in DECE Software's Geodi

Improper Neutralization of CRLF Sequences 'CRLF Injection' vulnerability in DECE Software Geodi allows HTTP Request Splitting.This issue affects Geodi: before GEODI Setup 9.0.146...

CVE-2025-6175

CVE-2025-6175 describes an Improper Neutralization of CRLF Sequences (CRLF Injection) in DECE Software Geodi that allows HTTP Request Splitting. Affected product: DECE Software Geodi (before GEODI Setup 9.0.146). Root cause documented as improper CRLF handling, enabling split requests. Impact not...

CVE-2025-6175 CRLF Injection in DECE Software's Geodi

Improper Neutralization of CRLF Sequences 'CRLF Injection' vulnerability in DECE Software Geodi allows HTTP Request Splitting.This issue affects Geodi: before GEODI Setup 9.0.146...

DECE Software Geodi 注入漏洞

DECE Software Geodi is an AI and NLP-driven data discovery, classification, and search platform from DECE Software, UK. DECE Software Geodi suffers from an injection vulnerability that stems from improper CRLF sequence neutralization, which could lead to HTTP request splitting...

PT-2025-31197 · Dece · Dece Software Geodi

Name of the Vulnerable Software and Affected Versions: DECE Software Geodi versions prior to 9.0.146 Description: The software contains an Improper Neutralization of Input During Web Page Generation, which allows for Cross-Site Scripting XSS. This issue can potentially allow attackers to inject...

CVE-2023-5921

Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass. This issue affects Geodi: before 8.0.0.27396...

CVE-2023-6011

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DECE Software Geodi allows Stored XSS. This issue affects Geodi: before 8.0.0.27396...

Design/Logic Flaw

Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass.This issue affects Geodi: before 8.0.0.27396...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DECE Software Geodi allows Stored XSS.This issue affects Geodi: before 8.0.0.27396...

CVE-2023-6011

** vuln***: CVE-2023-6011 relates to a Stored XSS in DECE Software Geodi prior to version 8.0.0.27396. The root cause is improper neutralization of input during web page generation, enabling an attacker to inject malicious scripts that could be stored and later reflected/executed in Geodi. Affect...