CVE-2025-13844

CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file SSD file shared by the attacker into Rapsody...

EUVD-2019-4054

Malware in sbrugna...

EUVD-2021-28593

Malicious code in bioql PyPI...

CVE-2020-12499: Improper Limitation of a Pathname to a Restricted Directory

In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files...

UBUNTU-CVE-2019-12445

An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute JavaScript code on notes by importing a specially crafted project file. It allows XSS...

CVE-2019-12445: Improper Neutralization of Input During Web Page Generation

An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute JavaScript code on notes by importing a specially crafted project file. It allows XSS...

CVE-2019-3580

OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file...

CVE-2019-3580: Improper Limitation of a Pathname to a Restricted Directory

OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file...