18563 matches found
Biopython is vulnerable to doctype XML external entity (XXE) injection through Bio.Entrez
Bio.Entrez in Biopython through 1.86 allows doctype XXE...
CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
UBUNTU-CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
CVE-2025-68463
Biopython (Bio.Entrez) up to version 1.86 is affected by CVE-2025-68463, an XML external entity (XXE) vulnerability in Bio.Entrez that can arise from processing untrusted Doctype declarations. Affected component/file: Bio.Entrez in Biopython; root cause: improper handling of external entities lea...
biopython 代码问题漏洞
biopython is a Python library open-sourced by the Biopython Project. A code issue vulnerability exists in biopython version 186 and earlier, which stems from Bio.Entrez allowing doctype XXE...
PT-2025-51994
Name of the Vulnerable Software and Affected Versions Biopython versions prior to 1.87 Description Bio.Entrez in Biopython allows doctype XML External Entity XXE, which is a technique where an XML parser is tricked into processing external entities within a document type definition, potentially...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: expat (UTSA-2025-991275)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991275 advisory. expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XMLSetEntityDeclHandler function, which allows remote...
Atlassian Jira 11.x < 11.2.0 XML External Entity Injection
According to its self-reported version number, the Atlassian Jira application running on the remote host is 10.3.x prior to 10.3.13 or 11.x prior to 11.2.0. It is, therefore, affected by a XML External Entity Injection XXE vulnerability. Note that the scanner has not tested for these issues but h...
CVE-2025-34411
The Convercent Whistleblowing Platform operated by EQS Group exposes an unauthenticated API endpoint at /GetLegalEntity that returns internal customer legal-entity names based on a supplied searchText fragment. A remote unauthenticated attacker can query the endpoint using common legal-suffix ter...
Malicious code in tailwind-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a9b7a9c02e83e0b4145dc9caaa9d04b407a199ae5d54b9f544f91397980966 The package tailwind-variables was found to contain malicious code. Source: ghsa-malware...
MAL-2025-192590 Malicious code in example-vue2-micro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cda06e9583d6e3b61afb6f1134f4d867559022d5844de0fbb5781312b8d5abc The package example-vue2-micro was found to contain malicious code. Source: ghsa-malware...
MAL-2025-192595 Malicious code in smart-utils-alice (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de5b916487c66ac49dea93a8859097db125ab6c1b8ea18a72bd3f72cdcfaff6 The package smart-utils-alice was found to contain malicious code. Source: ghsa-malware...
MAL-2025-192594 Malicious code in prod-natwest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd39817ff9b18b049493c5014a7a0d4f69bd3cf2f4f2a2aebff64453e6ca7519 The package prod-natwest was found to contain malicious code. Source: ghsa-malware efa89a8af6324d2f6726e938c72b64a0b9a1ffbe7788455e95c7ff05752aba50 A...
Malicious code in elf-stats-aurora-cocoa-911 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce406834ac9b9cfddc78cc4259b1887fcbd907c2a007295cd47528f8f92deae The package elf-stats-aurora-cocoa-911 was found to contain malicious code. Source: ghsa-malware...
Malicious code in elf-stats-nutmeg-sleigh-350 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e43446814eeb05f58979f02ff96534374a9f069055bcc5f5f97425254b0817 The package elf-stats-nutmeg-sleigh-350 was found to contain malicious code. Source: ghsa-malware...