EUVD-2024-53958

Malicious code in bioql PyPI...

EUVD-2024-53959

Malicious code in bioql PyPI...

EUVD-2024-53960

Malicious code in bioql PyPI...

CVE-2024-38291

In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which could lead to privilege escalation...

CVE-2024-38292

In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which may lead to privilege escalation...

CVE-2024-38292

In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which may lead to privilege escalation...

CVE-2024-38292

In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which may lead to privilege escalation...

CVE-2024-38291

In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which could lead to privilege escalation...

CVE-2024-38290

In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific conditions are met...

CVE-2024-38291

In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which could lead to privilege escalation...

CVE-2024-38290

In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific conditions are met...

CVE-2024-38290: Exposure of Sensitive Information to an Unauthorized Actor

In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific conditions are met...

CVE-2024-38292

Extreme Networks ExtremeCloud IQ Site Engine (XIQ-SE) is vulnerable to a path traversal flaw in versions prior to 24.2.11 . The root cause is a missing access control check , which could allow an attacker to perform a path traversal and potentially achieve privilege escalation . To resolve this i...

CVE-2024-38291: Improper Access Control

In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which could lead to privilege escalation...

CVE-2024-38292: Improper Limitation of a Pathname to a Restricted Directory

In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which may lead to privilege escalation...

PT-2025-9027 · Xiq-Se · Xiq-Se

Name of the Vulnerable Software and Affected Versions: XIQ-SE versions prior to 24.2.11 Description: A low-privileged user may be able to access admin passwords, which could lead to privilege escalation. Recommendations: For versions prior to 24.2.11, update to version 24.2.11 or later to resolve...

PT-2025-9028 · Xiq-Se · Xiq-Se

Name of the Vulnerable Software and Affected Versions: XIQ-SE versions prior to 24.2.11 Description: The issue is due to a missing access control check, allowing a path traversal that may lead to privilege escalation. Recommendations: For versions prior to 24.2.11, update to version 24.2.11 or...

CVE-2024-38290

In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific conditions are met...

CVE-2024-38292

In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which may lead to privilege escalation...

CVE-2024-38290

In Extreme Networks ExtremeCloud IQ Site Engine (XIQ-SE) versions prior to 24.2.11 , a server misconfiguration may allow user enumeration when specific conditions are met. This vulnerability leads to the exposure of sensitive information to an unauthorized actor. To remediate this issue, users ar...