EUVD-2025-30124

Malicious code in bioql PyPI...

EUVD-2022-27101

Malicious code in bioql PyPI...

EUVD-2025-31776

Malicious code in bioql PyPI...

EUVD-2024-3357

Malicious code in bioql PyPI...

EUVD-2023-33246

Malicious code in bioql PyPI...

EUVD-2022-41610

Malicious code in bioql PyPI...

EUVD-2024-30541

Malicious code in bioql PyPI...

EUVD-2024-50215

Malicious code in bioql PyPI...

EUVD-2025-27003

Malicious code in bioql PyPI...

EUVD-2022-52833

Malicious code in bioql PyPI...

EUVD-2022-52830

Malicious code in bioql PyPI...

EUVD-2021-6475

Malicious code in bioql PyPI...

EUVD-2025-4173

Malicious code in bioql PyPI...

EUVD-2023-2587

Malicious code in bioql PyPI...

EUVD-2022-27102

Malicious code in bioql PyPI...

EUVD-2024-52455

Malicious code in bioql PyPI...

github.com/MANTRA-Chain/mantrachain/x/tokenfactory tx gas limit is not enforced in send hooks

Impact send hooks can spend more gas than what's remained in tx, combined with recursive calls in the wasm contract, can amplify the gas consumption exponentially. Patches It's patched in v4.0.2 and v5.0.0 Workarounds Is there a way for users to fix or remediate the vulnerability without upgradin...

GE UR family Insecure Default Variable Initialization (CVE-2021-27426)

GE UR IED firmware versions prior to version 8.1x with Basic security variant does not allow the disabling of the Factory Mode, which is used for servicing the IED by a Factory user. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

CVE-2025-57911

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Adverts adverts-click-tracker allows DOM-Based XSS.This issue affects Adverts: from n/a through = 1.4...

CVE-2025-59340

jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Priori to 2.8.1, by using mapper.getTypeFactory.constructFromCanonical, it is possible to instruct the underlying ObjectMapper to deserialize attacker-controlled input into arbitrary classe...