47 matches found
EUVD-2025-7824
Malicious code in bioql PyPI...
EUVD-2025-7826
Malicious code in bioql PyPI...
EUVD-2022-40764
Malicious code in bioql PyPI...
EUVD-2025-7825
Malicious code in bioql PyPI...
CVE-2022-38167
The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...
CVE-2025-27926
In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files web.config containing passwords that are readable by unauthorized users...
CVE-2025-27924
Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a URL" action...
CVE-2025-27925
Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input...
CVE-2025-27924
Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a URL" action...
CVE-2025-27924
Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a URL" action...
CVE-2025-27925
Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input...
CVE-2025-27926
In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files web.config containing passwords that are readable by unauthorized users...
CVE-2025-27926
In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files web.config containing passwords that are readable by unauthorized users...
CVE-2025-27925
Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input...
CVE-2025-27924
CVE-2025-27924 affects Nintex Automation 5.6 and 5.7 prior to 5.8, with a stored XSS in the “Navigate to a URL” action. Impact details per sources indicate a stored cross-site scripting vulnerability, enabling an attacker to inject script via that action. The indicated remediation is to upgrade t...
CVE-2025-27926
CVE-2025-27926 affects Nintex Automation versions 5.6–5.7 prior to 5.8. The vulnerability arises from configuration files in the K2 SmartForms Designer folder (web.config) containing passwords that are readable by unauthorized users due to misconfiguration. This leads to potential exposure of cre...
CVE-2025-27926
In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files web.config containing passwords that are readable by unauthorized users...
CVE-2025-27925
Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input...