26497 matches found
EUVD-2025-210878
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...
EUVD-2025-210860
HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it originates from a trusted source, potentially leading to phishing or data theft...
EUVD-2025-210859
HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security issues...
EUVD-2025-210783
CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack...
EUVD-2025-210752
HCL IntelliOps Event Management IEM is affected by a race condition. A "timing window" can occur where an attacker can modify the resource causing unpredictable behavior...
EUVD-2025-210751
HCL IntelliOps Event Management IEM is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could hinder incident response...
EUVD-2025-210757
Unauthenticated Broken Access Control in Altair = 5.2.2 versions...
EUVD-2025-210755
Unauthenticated SQL Injection in Capella = 2.5.5 versions...
EUVD-2025-210756
Unauthenticated Privilege Escalation in Capella = 2.5.5 versions...
EUVD-2025-210742
An insecure deserialization vulnerability in vsDesk allows a remote attacker to gain unauthorized administrative access. By manipulating application configuration data, an attacker can force the system to authenticate against an arbitrary LDAP server and provision a new administrative account...
EUVD-2025-210558
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /printmembershipcard.php?id=1...
EUVD-2025-33183
Wasmtime: Memory leak in C API with externref and anyref types...
EUVD-2025-210351
Contributor Broken Access Control in Forget About Shortcode Buttons = 2.1.3 versions...
EUVD-2025-210360
Contributor Cross Site Scripting XSS in Image Carousel = 1.0.0.41 versions...
EUVD-2025-210202
Unauthenticated Local File Inclusion in Food Drop = 1.3 versions...
EUVD-2025-26377
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass. This issue affects OctoCloud: from s1.09.03 before v1.11.01...
EUVD-2025-210041
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Axiomthemes Racquet allows PHP Local File Inclusion. This issue affects Racquet: from n/a through 1.12.0...
EUVD-2025-210019
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer...