EUVD-2022-38110

Malicious code in bioql PyPI...

EUVD-2024-16878

Malicious code in bioql PyPI...

EUVD-2025-25390

Malicious code in bioql PyPI...

EUVD-2025-26515

Malicious code in bioql PyPI...

EUVD-2022-45951

Malicious code in bioql PyPI...

EUVD-2022-48833

Malicious code in bioql PyPI...

EUVD-2025-31717

Malicious code in bioql PyPI...

EUVD-2022-3979

Malicious code in bioql PyPI...

EUVD-2021-28006

Malicious code in bioql PyPI...

EUVD-2025-29082

Malicious code in bioql PyPI...

EUVD-2024-49609

Malicious code in bioql PyPI...

EUVD-2022-5650

Malicious code in bioql PyPI...

EUVD-2023-2959

Malicious code in bioql PyPI...

EUVD-2022-49551

Malicious code in bioql PyPI...

EUVD-2022-4112

Malicious code in bioql PyPI...

EUVD-2025-30497

Malicious code in bioql PyPI...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.0 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2025-40645 Exposure of sensitive information in Viday

Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter...

CVE-2025-40645

CVE-2025-40645 relates to ViDay/Viday. An unauthenticated attacker can retrieve sensitive customer information by issuing an HTTP GET to /api/reserva/web/clients with the phone parameter. Technical details from sources: CVSS v4.0 base score 8.7 (HIGH) with NETWORK attack vector, LOW attack comple...

FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint

An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/schemaId endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed...