EUVD-2023-57890

Malicious code in bioql PyPI...

EUVD-2024-20710

Malicious code in bioql PyPI...

EUVD-2023-24407

Malicious code in bioql PyPI...

EUVD-2024-48613

Malicious code in bioql PyPI...

EUVD-2023-35473

Malicious code in bioql PyPI...

EUVD-2022-26084

Malicious code in bioql PyPI...

EUVD-2023-32656

Malicious code in bioql PyPI...

EUVD-2022-26038

Malicious code in bioql PyPI...

EUVD-2021-7049

Malicious code in bioql PyPI...

EUVD-2023-46200

Malicious code in bioql PyPI...

EUVD-2022-25896

Malicious code in bioql PyPI...

EUVD-2023-32648

Malicious code in bioql PyPI...

EUVD-2023-42998

Malicious code in bioql PyPI...

EUVD-2023-24237

Malicious code in bioql PyPI...

EUVD-2023-32649

Malicious code in bioql PyPI...

TencentOS Server 4: mod_security (TSSA-2025:0673)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0673 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2014-4920

The twitter-bootstrap-rails Gem for Rails contains a flaw that enables a reflected cross-site scripting XSS attack. This flaw exists because the bootstrapflash helper method does not validate input when handling flash messages before returning it to users. This may allow a context-dependent...

CVE-2025-20307: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied...

CVE-2025-4987

A stored Cross-site Scripting XSS vulnerability affecting Opportunity Management in Project Portfolio Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-4991

A stored Cross-site Scripting XSS vulnerability affecting 3D Markup in Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...