EUVD-2022-37113

Malicious code in bioql PyPI...

EUVD-2023-45286

Malicious code in bioql PyPI...

EUVD-2022-3907

Malicious code in bioql PyPI...

EUVD-2022-37576

Malicious code in bioql PyPI...

EUVD-2023-0370

Malicious code in bioql PyPI...

EUVD-2024-29109

Malicious code in bioql PyPI...

EUVD-2023-49666

Malicious code in bioql PyPI...

EUVD-2024-1892

Malicious code in bioql PyPI...

EUVD-2024-46513

Malicious code in bioql PyPI...

EUVD-2022-15736

Malicious code in bioql PyPI...

EUVD-2024-1618

Malicious code in bioql PyPI...

EUVD-2024-21968

Malicious code in bioql PyPI...

EUVD-2023-2695

Malicious code in bioql PyPI...

EUVD-2024-49630

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-22236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Due to improper handling of OAuth client IDs, new subscriptions generated OAuth tokens on an incorrect OAuth client application. This vulnerability is present i...

CVE-2025-0249

HCL IEM is affected by an improper invalidation of access or JWT token vulnerability. A token was not invalidated which may allow attackers to access sensitive data without authorization...

PT-2025-30708 · Hcl · Hcl Iem

Name of the Vulnerable Software and Affected Versions: HCL IEM affected versions not specified Description: HCL IEM is susceptible to an issue involving improper invalidation of access or JWT JSON Web Token tokens. Failure to invalidate tokens may allow unauthorized access to sensitive data...

CVE-2020-26033

An issue was discovered in Zammad before 3.4.1. The Tag and Link REST API endpoints for add and delete lack a CSRF token check...

CVE-2020-11825

In Dolibarr 10.0.6, forms are protected with a CSRF token against CSRF attacks. The problem is any CSRF token in any user's session can be used in another user's session. CSRF tokens should not be valid in this situation...

CVE-2020-9487

In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token one-time password mechanism used a fixed cache size and did not authenticate a request to create a download token, only when attempting to use the token to access the content. An unauthenticated user could repeatedly request download tokens,...