256 matches found
CVE-2024-41808
The OpenObserve open-source observability platform provides the ability to filter logs in a dashboard by the values uploaded in a given log. However, all versions of the platform through 0.9.1 do not sanitize user input in the filter selection menu, which may result in complete account takeover. ...
CVE-2019-16682
The urlredirect aka URL redirect extension through 1.2.1 for TYPO3 fails to properly sanitize user input and is susceptible to SQL Injection...
EUVD-2016-9207
Malware in sbrugna...
EUVD-2018-10696
Malware in sbrugna...
EUVD-2021-0839
Malware in sbrugna...
EUVD-2017-11817
Malware in sbrugna...
EUVD-2019-8766
Malware in sbrugna...
EUVD-2021-30121
Malicious code in bioql PyPI...
EUVD-2025-7085
Malicious code in bioql PyPI...
EUVD-2025-4819
Malicious code in bioql PyPI...
EUVD-2023-25580
Malicious code in bioql PyPI...
EUVD-2023-2444
Malicious code in bioql PyPI...
EUVD-2022-6091
Malicious code in bioql PyPI...
EUVD-2022-6660
Malicious code in bioql PyPI...
EUVD-2025-23279
Malicious code in bioql PyPI...
EUVD-2024-2972
Malicious code in bioql PyPI...
EUVD-2024-0091
Malicious code in bioql PyPI...
EUVD-2022-2547
Malicious code in bioql PyPI...
CVE-2025-51569
A cross-site scripting XSS vulnerability exists in the LB-Link BL-CPE300M 01.01.02P42U1406 router's web interface. The /goform/goformgetcmdprocess endpoint fails to sanitize user input in the cmd parameter before reflecting it into a text/html response. This allows unauthenticated attackers to...
CVE-2025-50869
A stored Cross-Site Scripting XSS vulnerability exists in the qureydetails.php page of Institute-of-Current-Students 1.0, where the input fields for Query and Answer do not properly sanitize user input. Authenticated users can inject arbitrary JavaScript code...