5130 matches found
EUVD-2025-38197
EUVD-2025-38197...
EUVD-2025-38195
EUVD-2025-38195...
EUVD-2025-38198
EUVD-2025-38198...
EUVD-2025-38194
EUVD-2025-38194...
EUVD-2025-38193
EUVD-2025-38193...
EUVD-2025-38207
EUVD-2025-38207...
EUVD-2025-38202
EUVD-2025-38202...
EUVD-2025-38201
EUVD-2025-38201...
EUVD-2025-38203
EUVD-2025-38203...
EUVD-2025-38211
EUVD-2025-38211...
EUVD-2025-38209
EUVD-2025-38209...
EUVD-2025-38210
EUVD-2025-38210...
EUVD-2025-38160
evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of evernote-mcp-server. An attacker must first obtain the ability to execute low-privileged code on the target system in...
EUVD-2025-38164
Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in NetworksController.addNetworkAction that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information...
EUVD-2025-38161
IBM OpenPages 9.1, and 9.0 with Watson is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...
EUVD-2025-38168
Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxNetworkController.ajaxAction that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information...
EUVD-2025-38173
Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxFwRulesController.ajaxNetworkFwRulesAction that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information...
EUVD-2025-38180
Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘ztpsearchvalue’ parameter to the ‘NetworkServlet’ endpoint. Successful...
EUVD-2025-38179
SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functionality. Successful exploitation allows remote unauthenticated attackers to alter database objects including changing the email address of t...