251 matches found
EUVD-2021-7783
Malicious code in bioql PyPI...
EUVD-2022-52448
Malicious code in bioql PyPI...
EUVD-2025-20515
Malicious code in bioql PyPI...
EUVD-2022-26101
Malicious code in bioql PyPI...
EUVD-2022-44508
Malicious code in bioql PyPI...
EUVD-2025-15131
Malicious code in bioql PyPI...
EUVD-2023-42498
Malicious code in bioql PyPI...
EUVD-2022-37181
Malicious code in bioql PyPI...
EUVD-2025-12545
Malicious code in bioql PyPI...
EUVD-2024-42880
Malicious code in bioql PyPI...
EUVD-2021-7049
Malicious code in bioql PyPI...
EUVD-2021-7895
Malicious code in bioql PyPI...
CVE-2025-33118
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 12 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2025-20310
A vulnerability in the web UI of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web UI does not properly validate user-supplied input. An...
CVE-2025-20310
CVE-2025-20310 : Cisco Enterprise Chat and Email (ECE) web UI vulnerability where input in the interface is not properly validated, enabling a stored XSS attack. An unauthenticated, remote attacker could lure a user to click a crafted link, potentially executing arbitrary script in the user’s bro...
Cisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability
A vulnerability in the web UI of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web UI does not properly validate user-supplied input. An...
CVE-2025-5873
CVE-2025-5873 affects the eCharge Hardy Barth Salia PLCC Web UI, with the vulnerable code path in the /firmware.php file. The issue arises from improper handling of the media parameter, allowing unrestricted file upload and enabling remote exploitation. Public exploit details exist, and multiple ...
CVE-2025-2896
IBM Planning Analytics Local (versions 2.0 and 2.1) is affected by a cross-site scripting vulnerability in the Web UI that an authenticated user can exploit to inject arbitrary JavaScript, potentially leaking credentials within a trusted session. Affected products/versions: IBM Planning Analytics...
CVE-2025-2896 IBM Planning Analytics Local cross-site scripting
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2025-25044 IBM Planning Analytics Local cross-site scripting
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...