33715 matches found
EUVD-2026-83432
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation...
EUVD-2026-83131
IBM MQ Console allows authenticated non-administrative users to create and start queue managers due to improper authorization checks...
EUVD-2026-82863
A stored Cross-Site Scripting XSS vulnerability in the profile management functionality of T-Systems’ TAO 2.0 suite. An authenticated user could inject malicious HTML or JavaScript content into the fields containing their personal data. The content entered is stored and displayed without being...
EUVD-2026-82655
ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without proper authentication...
EUVD-2026-82586
Azure Arc Elevation of Privilege Vulnerability...
EUVD-2026-81518
Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...
EUVD-2026-81496
Unauthenticated Insecure Direct Object References IDOR in King Addons for Elementor = 51.1.81 versions...
EUVD-2026-81331
Information Disclosure when a pointer is reused after being deallocated...
EUVD-2026-81330
Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size...
EUVD-2026-81329
Transient DOS when processing unverified data from a neighboring system causes out of bound memory access...
EUVD-2026-81328
Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation...
EUVD-2026-81326
Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...
EUVD-2025-210926
Memory Corruption when copying large input data exceeds normal allocation limits...
EUVD-2026-81070
decap-server contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation. Attackers can access sibling directories whose names begin with the repository directory name to read, write, or delete files outsi...
EUVD-2026-80956
A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, ...
EUVD-2026-80699
A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges...
EUVD-2026-80236
A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnosticstab/ajaxdiagtablerows endpoint using a valid user cookie allowing disclosure of all user password hashes...
EUVD-2026-80005
An insufficient check allowed for the overwrite of arbitrary files via a symlink...