CVE-2025-48981

An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection...

EUVD-2014-8714

Malware in sbrugna...

EUVD-2016-3122

Malware in sbrugna...

EUVD-2014-0869

Malware in sbrugna...

EUVD-2013-6524

Malware in sbrugna...

EUVD-2015-5324

Malware in sbrugna...

EUVD-2010-4466

Malware in sbrugna...

EUVD-2015-1998

Malware in sbrugna...

EUVD-1999-0656

Malware in sbrugna...

EUVD-2016-5371

Malware in sbrugna...

EUVD-2022-6966

Malicious code in bioql PyPI...

EUVD-2025-30189

Malicious code in bioql PyPI...

EUVD-2022-1738

Malicious code in bioql PyPI...

mysql: InnoDB unspecified vulnerability (CPU Apr 2025)

A flaw was found in Oracle MySQL Server InnoDB component. A high-privileged remote attacker with network access can cause a denial of service DoS and gain unauthorized ability to modify data in MySQL Server...

CVE-2025-10266

NUP Pro developed by NewType Infortech has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2025-10266 NewType Infortech｜NUP Portal - SQL Injection

NUP Pro developed by NewType Infortech has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

PT-2025-37301

Name of the Vulnerable Software and Affected Versions: NUP Pro affected versions not specified Description: NUP Pro developed by NewType Infortech has a SQL Injection vulnerability that allows unauthenticated remote attackers to inject arbitrary SQL commands. Successful exploitation can lead to t...

CVE-2025-7746

CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause an unvalidated data injected by a malicious user potentially leading to modify or read data in a victim’s browser...

CVE-2025-0165

IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2025-8861 Changing｜TSA - Missing Authentication

TSA developed by Changing has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents...