12254 matches found
EUVD-2022-41791
Malicious code in bioql PyPI...
EUVD-2022-5684
Malicious code in bioql PyPI...
EUVD-2024-50718
Malicious code in bioql PyPI...
EUVD-2022-0042
Malicious code in bioql PyPI...
EUVD-2022-43944
Malicious code in bioql PyPI...
EUVD-2021-28240
Malicious code in bioql PyPI...
EUVD-2023-34937
Malicious code in bioql PyPI...
EUVD-2024-19444
Malicious code in bioql PyPI...
EUVD-2022-4054
Malicious code in bioql PyPI...
EUVD-2025-14635
Malicious code in bioql PyPI...
EUVD-2024-44175
Malicious code in bioql PyPI...
EUVD-2025-22617
Malicious code in bioql PyPI...
EUVD-2025-7998
Malicious code in bioql PyPI...
org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability
A flaw was found in org.apache.cxf/cxf, where untrusted users can configure JMS to allow the specification of RMI or LDAP URLs, possibly leading to code execution. This vulnerability allows an attacker to provide malicious protocol URLs during JMS configuration...
org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability
A flaw was found in org.apache.cxf/cxf, where untrusted users can configure JMS to allow the specification of RMI or LDAP URLs, possibly leading to code execution. This vulnerability allows an attacker to provide malicious protocol URLs during JMS configuration...
org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability
A flaw was found in org.apache.cxf/cxf, where untrusted users can configure JMS to allow the specification of RMI or LDAP URLs, possibly leading to code execution. This vulnerability allows an attacker to provide malicious protocol URLs during JMS configuration...
CRLF Injection
Overview aioftp is a ftp client/server for asyncio Affected versions of this package are vulnerable to CRLF Injection via the aioftp.Client.command method that lacks checks for CR/LF characters in command strings. An attacker can add the \r\n characters and inject additional headers in the FTP...
PT-2025-40341
Name of the Vulnerable Software and Affected Versions OpenSIAC affected versions not specified Description An incorrect authentication issue exists in OpenSIAC that could allow an attacker to impersonate a person using Cl@ve as an authentication method. The issue enables full Cl@ve identity...
PYSEC-2025-106
An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...
