EUVD-2019-11270

Malware in sbrugna...

EUVD-2022-51892

Malicious code in bioql PyPI...

EUVD-2022-1573

Malicious code in bioql PyPI...

EUVD-2022-28131

Malicious code in bioql PyPI...

EUVD-2023-44351

Malicious code in bioql PyPI...

EUVD-2023-54522

Malicious code in bioql PyPI...

EUVD-2025-16135

Malicious code in bioql PyPI...

EUVD-2022-4273

Malicious code in bioql PyPI...

EUVD-2024-52475

Malicious code in bioql PyPI...

EUVD-2023-12659

Malicious code in bioql PyPI...

CVE-2025-6060

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in DECE Software Geodi allows Cross-Site Scripting XSS.This issue affects Geodi: before GEODI Setup 9.0.146...

PT-2025-24653 · Unknown · Loftocean Tinysalt

Name of the Vulnerable Software and Affected Versions: LoftOcean TinySalt versions prior to 3.10.0 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

CVE-2024-7803

Removed by vendor...

CVE-2022-2290

Cross-site Scripting XSS - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta...

CVE-2021-32977

AVEVA System Platform versions 2017 through 2020 R2 P01 does not verify, or incorrectly verifies, the cryptographic signature for data...

CVE-2020-25784

An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15.77. There is an unauthenticated stack-based buffer overflow in the function CNetClientGuard::SubOprMsg during incoming message handling...

CVE-2020-28016

Exim 4 before 4.94.2 allows an off-by-two Out-of-bounds Write because "-F ''" is mishandled by parsefixphrase...

CVE-2018-16275

OPSWAT MetaDefender before v4.11.2 allows CSV injection...

CVE-2025-3875

Thunderbird parses addresses in a way that can allow sender spoofing in case the server allows an invalid From address to be used. For example, if the From header contains an invalid value "Spoofed Name ", Thunderbird treats [email protected] as the actual address. This vulnerability affects...

CVE-2025-43971

An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen...