EUVD-2022-31756

Malicious code in bioql PyPI...

EUVD-2022-33772

Malicious code in bioql PyPI...

EUVD-2023-55605

Malicious code in bioql PyPI...

EUVD-2023-2183

Malicious code in bioql PyPI...

EUVD-2021-33094

Malicious code in bioql PyPI...

EUVD-2023-59175

Malicious code in bioql PyPI...

EUVD-2025-22306

Malicious code in bioql PyPI...

EUVD-2022-30141

Malicious code in bioql PyPI...

EUVD-2022-42718

Malicious code in bioql PyPI...

EUVD-2025-17649

Malicious code in bioql PyPI...

EUVD-2021-8421

Malicious code in bioql PyPI...

EUVD-2022-4190

Malicious code in bioql PyPI...

EUVD-2025-23938

Malicious code in bioql PyPI...

EUVD-2024-49815

Malicious code in bioql PyPI...

EUVD-2025-23544

Malicious code in bioql PyPI...

CVE-2025-59687

IMPAQTR Aurora before 1.36 allows Insecure Direct Object Reference attacks against the users list, organization details, bookmarks, and notifications of an arbitrary organization...

Discourse < 3.5.1 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

CVE-2025-43827

Insecure Direct Object Reference IDOR vulnerability with audit events in Liferay Portal 7.4.0 through 7.4.3.117, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported...

CVE-2025-41098

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a misuse of the general enquiry web service...

CVE-2025-41094

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to functional contract details using unauthorised internal identifiers...