EUVD-2022-25231

Malicious code in bioql PyPI...

EUVD-2023-32483

Malicious code in bioql PyPI...

EUVD-2024-0205

Malicious code in bioql PyPI...

EUVD-2025-20698

Malicious code in bioql PyPI...

EUVD-2025-16467

Malicious code in bioql PyPI...

EUVD-2022-32672

Malicious code in bioql PyPI...

EUVD-2025-9018

Malicious code in bioql PyPI...

EUVD-2022-42464

Malicious code in bioql PyPI...

EUVD-2023-58737

Malicious code in bioql PyPI...

EUVD-2024-1364

Malicious code in bioql PyPI...

EUVD-2024-41714

Malicious code in bioql PyPI...

EUVD-2022-0533

Malicious code in bioql PyPI...

EUVD-2024-25919

Malicious code in bioql PyPI...

EUVD-2022-1774

Malicious code in bioql PyPI...

EUVD-2024-2856

Malicious code in bioql PyPI...

EUVD-2025-24033

Malicious code in bioql PyPI...

Insufficient Session Expiration

weblate is vulnerable to Insufficient Session Expiration. The vulnerability is due to unsafe settings for the second factor in 2FA due to sessions being allowed to persist for an unusually long period, and an attacker can maintain a valid session to repeatedly attempt authentication, thereby...

CVE-2025-56449

A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0. If an account is locked out due to not enrolling in MFA e.g. after the 7-day enforcement window, the REST API still allows the use of Basic Authentication to authenticate and perform administrative actions...

CVE-2025-56449

A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0. If an account is locked out due to not enrolling in MFA e.g. after the 7-day enforcement window, the REST API still allows the use of Basic Authentication to authenticate and perform administrative actions...

Fortra GoAnywhere Managed File Transfer (MFT) < 7.8.1 Broken Access Control (fi-2025-009)

According to its self-reported version, the instance of Fortra GoAnywhere Managed File Transfer MFT running on the remote web server is prior to 7.8.1. It is, therefore, affected by a broken access Control vulnerability: - Broken access control in Fortra's GoAnywhere MFT prior to 7.8.1 allows an...