Lucene search
K

16 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-44351

Malicious code in bioql PyPI...

5.4CVSS6.6AI score0.00155EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-46856

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00191EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:36 a.m.4 views

CVE-2024-4754

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Stored XSS. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...

5.4CVSS5.8AI score0.00155EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:24 a.m.3 views

CVE-2024-5683

Improper Control of Generation of Code 'Code Injection' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Remote Code Inclusion. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...

9.8CVSS5.8AI score0.00191EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/06/24 9:15 a.m.2 views

CVE-2024-5683

Improper Control of Generation of Code 'Code Injection' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Remote Code Inclusion. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...

9.8CVSS5.8AI score0.00191EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2024/06/24 9:15 a.m.17 views

CVE-2024-4754

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Stored XSS. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...

5.4CVSS0.00155EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2024/06/24 9:15 a.m.2 views

CVE-2024-4754

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Stored XSS. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...

5.4CVSS5.8AI score0.00155EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2024/06/24 9:15 a.m.19 views

CVE-2024-5683

Improper Control of Generation of Code 'Code Injection' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Remote Code Inclusion. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...

9.8CVSS0.00191EPSS
Exploits0References2
CVE
CVE
added 2024/06/24 9:1 a.m.40 views

CVE-2024-4754

CVE-2024-4754 describes a stored cross-site scripting vulnerability in Next4Biz CRM & BPM Software (Business Process Management). The issue arises from improper neutralization of input during web page generation, affecting BPM versions 6.6.4.4 and earlier, with a fix in 6.6.4.5. The CVE entry con...

5.4CVSS5.8AI score0.00155EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/24 9:1 a.m.9 views

CVE-2024-4754 Stored XSS in Next4Biz's BPM

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Stored XSS. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...

5.4CVSS5.8AI score0.00155EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/06/24 9:1 a.m.13 views

CVE-2024-4754 Stored XSS in Next4Biz's BPM

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Stored XSS. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...

5.4CVSS0.00155EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/06/24 8:54 a.m.18 views

CVE-2024-5683 Remote Code Execution in Next4Biz's BPM

Improper Control of Generation of Code 'Code Injection' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Remote Code Inclusion. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...

9.8CVSS0.00191EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/24 8:54 a.m.10 views

CVE-2024-5683 Remote Code Execution in Next4Biz's BPM

Improper Control of Generation of Code 'Code Injection' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Remote Code Inclusion. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...

9.8CVSS5.8AI score0.00191EPSS
Exploits0References2
CVE
CVE
added 2024/06/24 8:54 a.m.48 views

CVE-2024-5683

CVE-2024-5683 is an improper control of generation of code vulnerability in Next4Biz BPM software. Multiple connected records confirm the issue affects Next4Biz BPM/CRM with vulnerable versions: 6.6.4.4 prior to 6.6.4.5, indicating a flaw in code generation controls that can lead to remote code e...

9.8CVSS5.8AI score0.00191EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/06/24 12:0 a.m.2 views

Next4Biz Code Injection Vulnerability

Next4Biz is a marketing and sales management software from Next4Biz, Inc. A code injection vulnerability exists in Next4Biz versions 6.6.4.4 through prior to 6.6.4.5 that stems from improper code generation controls...

9.8CVSS7.4AI score0.00191EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/06/24 12:0 a.m.1 views

Next4Biz Cross-Site Scripting Vulnerability

Next4Biz is a marketing and sales management software from Next4Biz, Inc. A cross-site scripting vulnerability exists in Next4Biz versions 6.6.4.4 through prior to 6.6.4.5, which stems from improper neutralization of input during web page generation...

5.4CVSS6.1AI score0.00155EPSS
Exploits0References3
Rows per page
Query Builder