EUVD-2016-5371

Malware in sbrugna...

EUVD-2022-6966

Malicious code in bioql PyPI...

EUVD-2025-30189

Malicious code in bioql PyPI...

EUVD-2022-1738

Malicious code in bioql PyPI...

The vulnerability of the Device Analytics component, which manages microprogrammed software on Cisco Wireless Access Points, allows a hacker to gain access and modify data.

The vulnerability of the Device Analytics component, which manages microprogrammed software on Cisco Wireless Access Points, is related to a data source confirmation error. Exploiting this vulnerability could allow an attacker operating remotely to gain access to modify data...

The vulnerability of the DELT_file.xgi function in the D-Link DSL7740C router microprogramming system allows a hacker to gain access to read, modify, delete data, and alter device settings.

The vulnerability of the DELTfile.xgi function in the D-Link DSL7740C router microprogramming system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain read, modify, delete data, and alter device settings remotely...

mysql: InnoDB unspecified vulnerability (CPU Apr 2025)

A flaw was found in Oracle MySQL Server InnoDB component. A high-privileged remote attacker with network access can cause a denial of service DoS and gain unauthorized ability to modify data in MySQL Server...

CVE-2025-10266

NUP Pro developed by NewType Infortech has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2025-10266 NewType Infortech｜NUP Portal - SQL Injection

NUP Pro developed by NewType Infortech has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

PT-2025-37301

Name of the Vulnerable Software and Affected Versions: NUP Pro affected versions not specified Description: NUP Pro developed by NewType Infortech has a SQL Injection vulnerability that allows unauthenticated remote attackers to inject arbitrary SQL commands. Successful exploitation can lead to t...

CVE-2025-7746

CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause an unvalidated data injected by a malicious user potentially leading to modify or read data in a victim’s browser...

CVE-2025-0165

IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2025-8861 Changing｜TSA - Missing Authentication

TSA developed by Changing has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents...

CVE-2025-8861

CVE-2025-8861 concerns Changing TSA, a timestamp server product, with a Missing Authentication vulnerability that allows unauthenticated remote attackers to read, modify, and delete database contents. The underlying issue is an access-control flaw (lack of authentication). The connected documents...

Changing TSA 访问控制错误漏洞

Changing TSA is a timestamp server from Panorama Changing Corporation in Taiwan, China. Changing TSA suffers from an Access Control Error vulnerability that stems from a lack of authentication, which could allow an unauthenticated, remote attacker to read, modify, and delete database contents...

Linux Distros Unpatched Vulnerability : CVE-2023-22091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Compiler. Supported versions that are affect...

Linux Distros Unpatched Vulnerability : CVE-2023-21999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.44 and Prior t...

Linux Distros Unpatched Vulnerability : CVE-2020-14797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u271, 8u261,...

The vulnerability of the application’s request handling component relates to access, organization, and interaction with various types of Oracle Universal Work Queue tasks. This allows attackers to gain unauthorized access to modify, read, and delete protected information.

The vulnerability of the application’s request handling component for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

The vulnerability of the Web Utilities component of the Oracle Applications Framework software platform allows a perpetrator to gain unauthorized access to modify, read, and delete protected information.

The vulnerability of the Web Utilities component of the Oracle Applications Framework is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to modify, read, and delete protected information using the HTTP protoc...