EUVD-2025-12165

Malicious code in bioql PyPI...

EUVD-2022-5018

Malicious code in bioql PyPI...

EUVD-2025-16015

Malicious code in bioql PyPI...

EUVD-2024-51507

Malicious code in bioql PyPI...

EUVD-2024-0265

Malicious code in bioql PyPI...

EUVD-2025-22128

Malicious code in bioql PyPI...

EUVD-2025-18109

Malicious code in bioql PyPI...

EUVD-2024-51498

Malicious code in bioql PyPI...

EUVD-2024-51467

Malicious code in bioql PyPI...

EUVD-2025-18123

Malicious code in bioql PyPI...

EUVD-2025-20698

Malicious code in bioql PyPI...

CVE-2025-8675 AI SEO Link Advisor - Less critical - Server-side Request Forgery - SA-CONTRIB-2025-095

Server-Side Request Forgery SSRF vulnerability in Drupal AI SEO Link Advisor allows Server Side Request Forgery.This issue affects AI SEO Link Advisor: from 0.0.0 before 1.0.6...

CVE-2025-8675

Summary (CVE-2025-8675): Drupal AI SEO Link Advisor module has a Server-Side Request Forgery (SSRF) weakness in how it handles user-supplied URLs, affecting versions earlier than 1.0.6 (0.0.0–1.0.5). The issue stems from insufficient sanitization, allowing an attacker to trigger SSRF via the modu...

Linux Distros Unpatched Vulnerability : CVE-2017-6922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymous user but not permanently attached to...

Linux Distros Unpatched Vulnerability : CVE-2014-2983

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain...

Linux Distros Unpatched Vulnerability : CVE-2014-9015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal 6.x before 6.34 and 7.x before 7.34 allows remote attackers to hijack sessions via a crafted request, as demonstrated by a crafted request to a server th...

Linux Distros Unpatched Vulnerability : CVE-2014-5265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Incutio XML-RPC IXR Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity declarations without consideri...

Linux Distros Unpatched Vulnerability : CVE-2015-6665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the Ctools module 6.x-1.x before 6.x-1.14 for Drupal allows remote...

Linux Distros Unpatched Vulnerability : CVE-2016-3170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The have you forgotten your password links in the User module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allow remote attackers to obtain sensitive username...

Linux Distros Unpatched Vulnerability : CVE-2014-5022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the Ajax system in Drupal 7.x before 7.29 allows remote attackers to inject arbitrary web script or HTML via vectors...