EUVD-2025-139666

Malicious code in nuilva-avmiam-rava npm...

EUVD-2022-41602

Malicious code in bioql PyPI...

EUVD-2022-41604

Malicious code in bioql PyPI...

EUVD-2022-41601

Malicious code in bioql PyPI...

EUVD-2022-41603

Malicious code in bioql PyPI...

CVE-2022-39057

RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remote attacker with administrator privilege can exploit this vulnerability to perform arbitrary system command and disrupt service...

CVE-2022-39056

RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify and delete database...

CVE-2022-39056

RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify and delete database...

CVE-2022-39058

RAVA certification validation system has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and access arbitrary system files...

Command injection

RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remote attacker with administrator privilege can exploit this vulnerability to perform arbitrary system command and disrupt service...

Path traversal

RAVA certification validation system has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and access arbitrary system files...

Sql injection

RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify and delete database...

CVE-2022-39058

CVE-2022-39058 concerns the RAVA certificate validation system from Changing Information Technology Inc. The issue is a path traversal vulnerability allowing an unauthenticated remote attacker to bypass authentication and access arbitrary system files. Multiple sources corroborate the vulnerabili...

CVE-2022-39058 Changing Information Technology Inc. RAVA certificate validation system - Path Traversal

RAVA certification validation system has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and access arbitrary system files...

CVE-2022-39058 Changing Information Technology Inc. RAVA certificate validation system - Path Traversal

RAVA certification validation system has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and access arbitrary system files...

CVE-2022-39057 Changing Information Technology Inc. RAVA certificate validation system - Command Injection

RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remote attacker with administrator privilege can exploit this vulnerability to perform arbitrary system command and disrupt service...

CVE-2022-39057

The CVE-2022-39057 issue concerns Changing Information Technology Inc.’s RAVA certificate validation system, where insufficient filtering of a special parameter in a web page input field allows a remote attacker with administrator privileges to perform arbitrary system commands and disrupt servic...

CVE-2022-39056

CVE-2022-39056 affects the RAVA certificate validation system from Changing Information Technology Inc. The connected sources show a SQL injection vulnerability caused by insufficient validation of user input, allowing an unauthenticated remote attacker to inject arbitrary SQL commands to access,...

CVE-2022-39056 Changing Information Technology Inc. RAVA certificate validation system - SQL Injection

RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify and delete database...

CVE-2022-39056 Changing Information Technology Inc. RAVA certificate validation system - SQL Injection

RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify and delete database...