CVE-2025-13844

CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file SSD file shared by the attacker into Rapsody...

EUVD-2019-4054

Malware in sbrugna...

EUVD-2021-28593

Malicious code in bioql PyPI...

PT-2021-6951

Name of the Vulnerable Software and Affected Versions mySCADA myDESIGNER versions 8.20.0 and prior Description The issue is related to errors in processing relative paths to directories when importing a project file. This may allow an attacker to plant files on the file system in arbitrary...

PT-2020-13144

Name of the Vulnerable Software and Affected Versions PLCnext Engineer versions 2020.3.1 and earlier Description An improper path sanitation issue exists when importing project files, which can lead to potential security issues. Recommendations For versions 2020.3.1 and earlier, at the moment,...

CVE-2020-12499: Improper Limitation of a Pathname to a Restricted Directory

In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files...

UBUNTU-CVE-2019-12445

An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute JavaScript code on notes by importing a specially crafted project file. It allows XSS...

CVE-2019-12445: Improper Neutralization of Input During Web Page Generation

An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute JavaScript code on notes by importing a specially crafted project file. It allows XSS...

CVE-2019-3580

OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file...

CVE-2019-3580: Improper Limitation of a Pathname to a Restricted Directory

OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file...