294 matches found
EUVD-2021-34250
Malicious code in bioql PyPI...
EUVD-2024-16170
Malicious code in bioql PyPI...
EUVD-2024-50639
Malicious code in bioql PyPI...
EUVD-2024-50527
Malicious code in bioql PyPI...
EUVD-2024-49420
Malicious code in bioql PyPI...
EUVD-2024-34215
Malicious code in bioql PyPI...
EUVD-2024-50742
Malicious code in bioql PyPI...
EUVD-2022-42725
Malicious code in bioql PyPI...
EUVD-2023-33641
Malicious code in bioql PyPI...
EUVD-2024-50643
Malicious code in bioql PyPI...
EUVD-2024-33997
Malicious code in bioql PyPI...
EUVD-2025-12403
Malicious code in bioql PyPI...
EUVD-2024-49308
Malicious code in bioql PyPI...
EUVD-2024-32732
Malicious code in bioql PyPI...
CVE-2025-8415 Cryostat: authentication bypass if network policies are disabled
A vulnerability was found in the Cryostat HTTP API. Cryostat's HTTP API binds to all network interfaces, allowing possible external visibility and access to the API port if Network Policies are disabled, allowing an unauthenticated, malicious attacker to jeopardize the environment...
Amazon Linux 2023 : java-17-amazon-corretto, java-17-amazon-corretto-devel, java-17-amazon-corretto-headless (ALAS2023-2025-1100)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1100 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE:...
Amazon Linux 2 : java-1.8.0-amazon-corretto (ALASCORRETTO8-2025-020)
The version of java-1.8.0-amazon-corretto installed on the remote host is prior to 1.8.0462.b08-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2CORRETTO8-2025-020 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise...
Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition
Summary This bulletin for IBM SDK, Java Technology Edition covers all applicable Java SE CVEs published by Oracle as part of their July 2025 Critical Patch Update. For more information please refer to Oracle's July 2025 CPU Advisory and the CVE links referenced below. Vulnerability Details...
CVE-2025-5720 Customer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘author’ parameter in all versions up to, and including, 5.80.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2025-5720 Customer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘author’ parameter in all versions up to, and including, 5.80.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...