7379 matches found
EUVD-2023-32458
Malicious code in bioql PyPI...
EUVD-2024-52635
Malicious code in bioql PyPI...
EUVD-2022-27878
Malicious code in bioql PyPI...
EUVD-2025-29343
Malicious code in bioql PyPI...
EUVD-2022-5591
Malicious code in bioql PyPI...
EUVD-2021-9988
Malicious code in bioql PyPI...
EUVD-2025-29277
Malicious code in bioql PyPI...
EUVD-2024-51962
Malicious code in bioql PyPI...
EUVD-2021-32512
Malicious code in bioql PyPI...
EUVD-2025-12647
Malicious code in bioql PyPI...
EUVD-2022-6443
Malicious code in bioql PyPI...
EUVD-2022-55239
Malicious code in bioql PyPI...
Liferay Portal和Liferay DXP 安全漏洞
Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...
CVE-2025-56161
YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...
CVE-2025-56161
YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...
CVE-2025-56161
YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...
PT-2025-40399
Name of the Vulnerable Software and Affected Versions YOSHOP 2.0 Description The software allows unauthorized disclosure of information through comment-list API endpoints within the Goods module. The Comment model loads the related User model without filtering specific fields. Due to the absence ...
ViDay 跨站脚本漏洞
ViDay is a business management platform from the Spanish company ViDay. ViDay suffers from a cross-site scripting vulnerability that originates from a JWT containing sensitive user information in an HTTP request, which could lead to information disclosure...
CVE-2025-56161
YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...