EUVD-2024-17234

Malicious code in bioql PyPI...

EUVD-2022-46943

Malicious code in bioql PyPI...

EUVD-2022-46944

Malicious code in bioql PyPI...

EUVD-2022-46945

Malicious code in bioql PyPI...

EUVD-2022-35173

Malicious code in bioql PyPI...

EUVD-2024-24357

Malicious code in bioql PyPI...

EUVD-2025-30752

Malicious code in bioql PyPI...

EUVD-2023-12636

Malicious code in bioql PyPI...

EUVD-2025-7759

Malicious code in bioql PyPI...

EUVD-2024-17368

Malicious code in bioql PyPI...

EUVD-2024-17369

Malicious code in bioql PyPI...

EUVD-2024-24359

Malicious code in bioql PyPI...

EUVD-2025-7761

Malicious code in bioql PyPI...

EUVD-2025-15794

Malicious code in bioql PyPI...

EUVD-2024-24356

Malicious code in bioql PyPI...

GE Reason S20 Ethernet Switch Improper Neutralization of Input During Web Page Generation (CVE-2020-16242)

The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting XSS, which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts. This plugin only works with Tenable.ot. Please...

GE Reason S20 Ethernet Switch Improper Neutralization of Input During Web Page Generation (CVE-2020-16246)

The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting XSS, which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site, causing the malicious JavaScript to be rendered by the site...

GE S2020/S2020G Fast Switch 61850 Improper Neutralization of Input During Web Page Generation (CVE-2019-18267)

An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that may be reflected back in the HTTP response. The device is also vulnerable to a stored cross-site...

GE UR family Exposure of Sensitive Information to an Unauthorized Actor (CVE-2021-27424)

GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a Last-key pressed MODBUS register can be used to gain unauthorized information. This plugin only works with Tenable.ot. Please visit...

GE UR family Improper Input Validation (CVE-2021-27418)

GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attacks, which may be used to send a malicious script. Also, UR Firmware web server does not perform HTM...