9358 matches found
CVE-2025-40887: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data...
CVE-2025-3719: Incorrect Authorization
An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can issue administrative CLI commands, altering the device configuration, and/o...
PT-2025-40989
Name of the Vulnerable Software and Affected Versions Alert functionality affected versions not specified Description A SQL Injection issue exists due to inadequate input validation. An authenticated user with limited privileges can execute arbitrary SQL statements, potentially leading to...
CVE-2025-40886: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SQL statements on the DBMS used by the web application, potentially exposing unauthorized data, altering...
CVE-2025-40888: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was discovered in the CLI functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data...
CVE-2025-36355: Inclusion of Functionality from Untrusted Control Sphere
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from outside of its control sphere...
Lovable VDP: Users can change project visibility which requires high subscription by just changing request body
A Broken Access Control vulnerability was discovered that allowed users to change project visibility to higher subscription tiers by modifying the request body. The visibility was changed from the default setting to Personal or Workspace, bypassing subscription checks and enabling unauthorized...
EUVD-2025-24058
Malicious code in bioql PyPI...
EUVD-2024-54641
Malicious code in bioql PyPI...
EUVD-2024-23299
Malicious code in bioql PyPI...
EUVD-2024-42218
Malicious code in bioql PyPI...
EUVD-2025-25869
Malicious code in bioql PyPI...
EUVD-2023-43864
Malicious code in bioql PyPI...
EUVD-2024-39411
Malicious code in bioql PyPI...
EUVD-2023-33612
Malicious code in bioql PyPI...
EUVD-2023-29682
Malicious code in bioql PyPI...
EUVD-2023-49889
Malicious code in bioql PyPI...
EUVD-2025-1698
Malicious code in bioql PyPI...