EUVD-2024-49090

Malicious code in bioql PyPI...

EUVD-2024-51396

Malicious code in bioql PyPI...

EUVD-2024-51390

Malicious code in bioql PyPI...

EUVD-2021-8744

Malicious code in bioql PyPI...

EUVD-2024-19656

Malicious code in bioql PyPI...

EUVD-2024-26822

Malicious code in bioql PyPI...

EUVD-2023-32030

Malicious code in bioql PyPI...

EUVD-2024-26823

Malicious code in bioql PyPI...

EUVD-2025-5326

Malicious code in bioql PyPI...

EUVD-2024-51395

Malicious code in bioql PyPI...

EUVD-2024-36623

Malicious code in bioql PyPI...

EUVD-2024-30629

Malicious code in bioql PyPI...

EUVD-2024-36633

Malicious code in bioql PyPI...

CVE-2024-8322

Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker to access restricted functionality...

CVE-2024-8321

Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to isolate managed devices from the network...

CVE-2023-28323

A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights. This exploit could potentially be used in conjunction with other OS Operating System vulnerabilities to escalate privileges on the machine or be used as a...

CVE-2022-27773

A privilege escalation vulnerability is identified in Ivanti EPM LANDesk Management Suite that allows a user to execute commands with elevated privileges...

CVE-2021-21470

SAP EPM Add-in for Microsoft Office, version - 1010 and SAP EPM Add-in for SAP Analysis Office, version - 2.8, allows an authenticated attacker with user privileges to parse malicious XML files which could result in XXE-based attacks in applications that accept attacker-controlled XML configurati...

CVE-2013-3584

Cross-site scripting XSS vulnerability in Corporater EPM Suite allows remote attackers to inject arbitrary web script or HTML via the customerId parameter to an unspecified component...

CVE-2013-3583

Cross-site request forgery CSRF vulnerability in saveProperties.html in Corporater EPM Suite allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords...