EUVD-2017-17793

Malware in sbrugna...

EUVD-2025-13520

Malicious code in bioql PyPI...

EUVD-2023-37270

Malicious code in bioql PyPI...

EUVD-2022-43811

Malicious code in bioql PyPI...

EUVD-2022-29691

Malicious code in bioql PyPI...

EUVD-2023-58563

Malicious code in bioql PyPI...

EUVD-2024-20862

Malicious code in bioql PyPI...

EUVD-2023-46319

Malicious code in bioql PyPI...

EUVD-2024-48534

Malicious code in bioql PyPI...

EUVD-2023-47929

Malicious code in bioql PyPI...

EUVD-2021-9133

Malicious code in bioql PyPI...

EUVD-2021-7446

Malicious code in bioql PyPI...

EUVD-2021-9138

Malicious code in bioql PyPI...

EUVD-2024-20856

Malicious code in bioql PyPI...

EUVD-2023-37265

Malicious code in bioql PyPI...

GHSA-MXH2-CCGJ-8635 ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header

Summary On the ESP-IDF platform, ESPHome's webserver authentication check can pass incorrectly when the client-supplied base64-encoded Authorization value is empty or is a substring of the correct value e.g., correct username with partial password. This allows access to webserver functionality...

CVE-2024-7647

The OTA Sync Booking Engine Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.7. This is due to missing or incorrect nonce validation on the otasyncwidgetsettingsfnc function. This makes it possible for unauthenticated attackers to...

CVE-2023-41827

An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based message on screen UI...

CVE-2023-33095

Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR...

CVE-2023-33076

Memory corruption in Core when updating rollback version for TA and OTA feature is enabled...