223 matches found
EUVD-2024-26241
Malicious code in bioql PyPI...
EUVD-2022-32118
Malicious code in bioql PyPI...
EUVD-2023-59651
Malicious code in bioql PyPI...
EUVD-2024-26243
Malicious code in bioql PyPI...
EUVD-2024-26251
Malicious code in bioql PyPI...
EUVD-2024-26248
Malicious code in bioql PyPI...
EUVD-2022-2956
Malicious code in bioql PyPI...
EUVD-2024-26254
Malicious code in bioql PyPI...
EUVD-2022-32121
Malicious code in bioql PyPI...
EUVD-2022-1965
Malicious code in bioql PyPI...
EUVD-2022-32122
Malicious code in bioql PyPI...
Malicious code in ng2-webapi (npm)
The package ng2-webapi was found to contain malicious code...
MAL-2025-27476 Malicious code in ng2-webapi (npm)
The package ng2-webapi was found to contain malicious code...
CVE-2024-29235
Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in IOModule.EnumLog webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and...
CVE-2024-29231
Improper validation of array index vulnerability in UserPrivilege.Enum webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors...
CVE-2024-26470
A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...
CVE-2024-29234
Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in Group.Save webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and conduct...
CVE-2019-15563
Observational Health Data Sciences and Informatics OHDSI WebAPI before 2.7.2 allows SQL injection in FeatureExtractionService.java...
CVE-2024-50629
Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS BSM before 1.1-65374 and Synology DiskStation Manager DSM before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to read limited files via unspecified vectors...
CVE-2024-50629
Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS BSM before 1.1-65374 and Synology DiskStation Manager DSM before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to read limited files via unspecified vectors...