EUVD-2024-45897

Malicious code in bioql PyPI...

EUVD-2023-40839

Malicious code in bioql PyPI...

EUVD-2023-37377

Malicious code in bioql PyPI...

EUVD-2025-6419

Malicious code in bioql PyPI...

EUVD-2022-2170

Malicious code in bioql PyPI...

EUVD-2025-22567

Malicious code in bioql PyPI...

EUVD-2025-29497

Malicious code in bioql PyPI...

Ruckus Wireless ICX Switches Cross-site Scripting (CVE-2013-6786)

Due to a Cross-site scripting XSS vulnerability, by requesting a nonexistent URI in a crafted HTTP Referrer header, arbitrary web scripts or HTML can be injected to the Ruckus FastIron device's web server. This plugin only works with Tenable.ot. Please visit...

Linux Distros Unpatched Vulnerability : CVE-2024-33999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The referrer URL used by MFA required additional sanitizing, rather than being used directly. CVE-2024-33999 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2016-5739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content...

CVE-2025-52351

Aikaan IoT management platform v3.25.0325-5-g2e9c59796 sends a newly generated password to users in plaintext via email and also includes the same password as a query parameter in the account activation URL e.g., https://domain.com/activate=xyz. This practice can result in password exposure via...

Linux Distros Unpatched Vulnerability : CVE-2018-6048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak referrer information via a crafte...

Linux Distros Unpatched Vulnerability : CVE-2018-6051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which allowed a remote...

Linux Distros Unpatched Vulnerability : CVE-2018-6052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain referrer detail...

Huawei HarmonyOS and EMUI Resource Read Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A resource read vulnerability exists in Huawei HarmonyOS...

Linux Distros Unpatched Vulnerability : CVE-2018-6134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass no- referrer policy via a crafted HTML page. CVE-2018-6134...

Open Redirect

Koa is vulnerable to Open Redirect. The vulnerability is due to improper validation of the Referrer argument in the back function of lib/response.js, which allows remote attackers to redirect users to malicious sites...

CVE-2025-54783 SuiteCRM: Reflected Cross Site Scripting (XSS) through HTTP Referrer header

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions 7.14.6 and below have a Reflected Cross-Site Scripting XSS vulnerability. This vulnerability allows an attacker to execute JavaScript code by modifying the HTTP Referer header to inclu...

CVE-2025-54783 SuiteCRM: Reflected Cross Site Scripting (XSS) through HTTP Referrer header

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions 7.14.6 and below have a Reflected Cross-Site Scripting XSS vulnerability. This vulnerability allows an attacker to execute JavaScript code by modifying the HTTP Referer header to inclu...

Linux Distros Unpatched Vulnerability : CVE-2021-23971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially resulted i...