EUVD-2023-47236

Malicious code in bioql PyPI...

CVE-2024-41514

A reflected cross-site scripting XSS vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter...

CVE-2023-42816

Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker could cause denial of service of Kyverno. The vulnerability was in Kyvernos Notary verifier. An attacker would need control over the registry from which Kyverno would fetch...

CVE-2024-41511

CADClick v1.11.0 and earlier is affected by a Path Traversal (Local File Inclusion) vulnerability in BinaryFileRedirector.ashx, allowing an attacker to retrieve arbitrary local files via the path parameter. Affected component: BinaryFileRedirector.ashx in CADClick. Root cause: improper validation...

CVE-2024-41514

A reflected cross-site scripting XSS vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter...

CADClick 安全漏洞

CADClick is a software solution from CADClick, Inc. that creates interactive catalogs of 2D/3D CAD data for individual customer CAD catalogs. A security vulnerability exists in CADClick v1.11.0 and prior versions that stems from the presence of a path traversal vulnerability that allows remote...

CVE-2023-31890

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...

Deserialization of untrusted data

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...

CVE-2023-31890

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...

CVE-2023-31890

CVE-2023-31890 affects glazedlists v1.11.0, due to an XML deserialization flaw in BeanXMLByteCoder.decode() that allows remote code execution. The vulnerability is rated CRITICAL (CVSS v3.1: 9.8) with network attack vector, low complexity, no user interaction. Exploitation information in the conn...