47 matches found
EUVD-2022-40764
Malicious code in bioql PyPI...
EUVD-2025-7824
Malicious code in bioql PyPI...
EUVD-2025-7826
Malicious code in bioql PyPI...
EUVD-2025-7825
Malicious code in bioql PyPI...
CVE-2022-38167
The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...
CVE-2025-27926
In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files web.config containing passwords that are readable by unauthorized users...
CVE-2025-27924
Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a URL" action...
CVE-2025-27925
Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input...
CVE-2025-27926
In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files web.config containing passwords that are readable by unauthorized users...
CVE-2025-27925
Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input...
CVE-2025-27924
Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a URL" action...
CVE-2025-27924
Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a URL" action...
CVE-2025-27925
Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input...
CVE-2025-27926
In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files web.config containing passwords that are readable by unauthorized users...
Nintex Automation 安全漏洞
Nintex Automation is a workflow automation software from Nintex. A security vulnerability exists in Nintex Automation versions prior to 5.8, which originates from a configuration file in the K2 SmartForms Designer folder that contains a password that can be read by an unauthorized user...
Nintex Automation 代码问题漏洞
Nintex Automation is a workflow automation software from Nintex. A security vulnerability exists in Nintex Automation versions prior to 5.8 that stems from unsafe deserialization of user input...
Nintex Automation 跨站脚本漏洞
Nintex Automation is a workflow automation software from Nintex. A cross-site scripting vulnerability exists in Nintex Automation versions prior to 5.8. An attacker can exploit this vulnerability to perform a cross-site scripting attack...
CVE-2025-27924
CVE-2025-27924 affects Nintex Automation 5.6 and 5.7 prior to 5.8, with a stored XSS in the “Navigate to a URL” action. Impact details per sources indicate a stored cross-site scripting vulnerability, enabling an attacker to inject script via that action. The indicated remediation is to upgrade t...
CVE-2025-27925
Nintex Automation versions 5.6 and 5.7, prior to 5.8, are affected by insecure deserialization of user input. The CVE-2025-27925 entry describes a vulnerability in Nintex Automation with impact across confidentiality, integrity, and availability (per CVSS scores: high- to critical-severity ranges...
CVE-2025-27926
CVE-2025-27926 affects Nintex Automation versions 5.6–5.7 prior to 5.8. The vulnerability arises from configuration files in the K2 SmartForms Designer folder (web.config) containing passwords that are readable by unauthorized users due to misconfiguration. This leads to potential exposure of cre...