EUVD-2023-54201

Malicious code in bioql PyPI...

EUVD-2023-34096

Malicious code in bioql PyPI...

EUVD-2025-22454

Malicious code in bioql PyPI...

EUVD-2023-54321

Malicious code in bioql PyPI...

EUVD-2023-53807

Malicious code in bioql PyPI...

EUVD-2021-6800

Malicious code in bioql PyPI...

EUVD-2023-54077

Malicious code in bioql PyPI...

EUVD-2023-42195

Malicious code in bioql PyPI...

EUVD-2023-54197

Malicious code in bioql PyPI...

EUVD-2022-45530

Malicious code in bioql PyPI...

EUVD-2023-47906

Malicious code in bioql PyPI...

EUVD-2022-38757

Malicious code in bioql PyPI...

EUVD-2022-26052

Malicious code in bioql PyPI...

CVE-2025-10547 CVE-2025-10547

An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption...

Apache Airflow Unauthenticated Access

Apache Airflow is a platform to programmatically author, schedule and monitor workflows. When authentication is not enabled, an attacker can access the Airflow web interface without any credentials. This may allow an attacker to view and modify workflows, access sensitive information, and...

CVE-2025-20357

A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-base...

CVE-2025-20356

A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-base...

CVE-2025-20361

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of...

CVE-2025-54292

CVE-2025-54292 concerns a path traversal vulnerability in Canonical’s LXD/LXD-UI prior to versions 6.5 and 5.21.4. The accessible details in the provided documents indicate that an authenticated remote attacker could abuse crafted resource names in URL paths to access or modify unintended resourc...

VulnCheck KEV: CVE-2025-4008

The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulnerable to command injection. Remote...