EUVD-2023-2507

Malicious code in bioql PyPI...

EUVD-2023-2053

Malicious code in bioql PyPI...

EUVD-2022-1384

Malicious code in bioql PyPI...

EUVD-2025-29374

Malicious code in bioql PyPI...

EUVD-2025-31380

Malicious code in bioql PyPI...

EUVD-2022-53480

Malicious code in bioql PyPI...

EUVD-2024-0557

Malicious code in bioql PyPI...

EUVD-2022-3982

Malicious code in bioql PyPI...

EUVD-2022-2288

Malicious code in bioql PyPI...

EUVD-2022-2656

Malicious code in bioql PyPI...

EUVD-2022-1943

Malicious code in bioql PyPI...

EUVD-2022-5647

Malicious code in bioql PyPI...

EUVD-2025-11530

Malicious code in bioql PyPI...

Jinher OA 代码问题漏洞

Jinher OA is a collaborative management software from Jinher, China. A code issue vulnerability exists in Jinher OA version 2.0, which stems from incorrect operation of the XML processing component in file /c6/Jhsoft.Web.module/ToolBar/GetWordFileName.aspx, which could lead to an XML external...

CVE-2025-6984 Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain

The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity XXE attacks due to insecure XML parsing. The affected version is 0.3.63. The vulnerability arises from the use of etree.iterparse without disabling external entity references, which...

ROS-20250825-02

A vulnerability in the Nokogiri program library of the Ruby interpreter is related to improper handling of an an unexpected data type. Exploitation of the vulnerability could allow an attacker, acting remotely, disclose protected information or cause a denial of service A vulnerability in the...

Linux Distros Unpatched Vulnerability : CVE-2016-2175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External...

Linux Distros Unpatched Vulnerability : CVE-2016-10127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PySAML2 allows remote attackers to conduct XML external entity XXE attacks via a crafted SAML XML request or response. CVE-2016-10127 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2024-40896

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers t...

GeoServer 代码问题漏洞

GeoServer is GeoServer open source an open source software server written in Java. It allows users to share and edit geospatial data. A code issue vulnerability exists in GeoServer that stems from improper URI validation, which could allow an unauthorized attacker to perform an XML external entit...