Lucene search
K

15 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-13111

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00376EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-13110

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00167EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 10:32 a.m.4 views

CVE-2024-7015

Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse. This issue affects PassBox: before v1.2...

9.8CVSS5.8AI score0.00148EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/04 12:10 p.m.17 views

CVE-2025-2421

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Informatics SambaBox allows Code Injection. This issue affects SambaBox: before 5.1...

9.8CVSS7.1AI score0.00376EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/04 12:10 p.m.14 views

CVE-2025-2488

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Profelis Informatics SambaBox allows Cross-Site Scripting XSS. This issue affects SambaBox: before 5.1...

6.1CVSS5.4AI score0.00167EPSS
Exploits0References1
NVD
NVD
added 2025/05/02 12:15 p.m.9 views

CVE-2025-2488

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Profelis Informatics SambaBox allows Cross-Site Scripting XSS. This issue affects SambaBox: before 5.1...

6.1CVSS0.00167EPSS
Exploits0References3
NVD
NVD
added 2025/05/02 12:15 p.m.12 views

CVE-2025-2421

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Informatics SambaBox allows Code Injection. This issue affects SambaBox: before 5.1...

9.8CVSS0.00376EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2025/05/02 12:15 p.m.2 views

CVE-2025-2421

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Informatics SambaBox allows Code Injection. This issue affects SambaBox: before 5.1...

9.8CVSS5.4AI score0.00376EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/05/02 11:30 a.m.9 views

CVE-2025-2488 XSS in Profelis Informatics' SambaBox

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Profelis Informatics SambaBox allows Cross-Site Scripting XSS. This issue affects SambaBox: before 5.1...

6.1CVSS0.00167EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/05/02 11:30 a.m.3 views

CVE-2025-2488 XSS in Profelis Informatics' SambaBox

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Profelis Informatics SambaBox allows Cross-Site Scripting XSS. This issue affects SambaBox: before 5.1...

6.1CVSS5.4AI score0.00167EPSS
Exploits0References3
CVE
CVE
added 2025/05/02 11:30 a.m.56 views

CVE-2025-2488

CVE-2025-2488 affects SambaBox by Profelis Informatics. The vulnerability is an XSS due to improper neutralization of input during web page generation, impacting SambaBox versions before 5.1. Technical details across connected sources confirm the affected component (web page generation), root cau...

6.1CVSS5.4AI score0.00167EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/02 11:27 a.m.6 views

CVE-2025-2421 Remote Code Execution in Profelis Informatics' SambaBox

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Informatics SambaBox allows Code Injection. This issue affects SambaBox: before 5.1...

9.8CVSS5.5AI score0.00376EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/05/02 11:27 a.m.16 views

CVE-2025-2421 Remote Code Execution in Profelis Informatics' SambaBox

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Informatics SambaBox allows Code Injection. This issue affects SambaBox: before 5.1...

9.8CVSS0.00376EPSS
Exploits0References3
CVE
CVE
added 2025/05/02 11:27 a.m.47 views

CVE-2025-2421

CVE-2025-2421 affects SambaBox (Profelis Informatics) prior to version 5.1. The root cause is improper control of code generation, enabling a code injection vulnerability. Multiple sources consistently describe impact as code injection with a high severity risk; CVSS metrics in the initial entry ...

9.8CVSS5.4AI score0.00376EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/09 2:3 p.m.18 views

CVE-2024-7015 Improper Authentication in Profelis Informatics and Consulting's PassBOX

Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse. This issue affects PassBox: before v1.2...

7.1CVSS5.8AI score0.00148EPSS
Exploits0References2
Rows per page
Query Builder