3 matches found
EUVD-2023-25803
Malicious code in bioql PyPI...
7.8CVSS7.7AI score0.00109EPSS
SaveExploits0References1
CVE-2025-11060
Affects SurrealDB. The flaw is in the database engine’s LIVE QUERY subscription mechanism (LIVE SELECT) that can cause record/guest users to observe unauthorized records within the same table by abusing how change notifications respect (or don’t respect) the user’s security context when other use...
5.7CVSS6.1AI score0.00298EPSS
SaveExploits0References7
PT-2024-25761
Name of the Vulnerable Software and Affected Versions QDOCS Smart School version 7.0.0 Description The issue is related to Cross Site Scripting XSS, which results in arbitrary code execution in admin functions, specifically when adding or updating records. This could potentially allow an attacker...
6.1CVSS7AI score0.00373EPSS
SaveExploits1References8
20