33408 matches found
EUVD-2025-203908
A Cross-site scripting XSS vulnerability in Create/Update Customers in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via the phonenumber parameter...
EUVD-2025-203906
RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution RCE vulnerability via the parsespecialtags function...
EUVD-2025-203912
A Cross-site scripting XSS vulnerability in Create/Update Items Module in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via the "name" parameter...
EUVD-2025-203904
Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device...
EUVD-2025-203901
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information...
EUVD-2025-203913
Malicious code in trondec PyPI...
EUVD-2025-203878
Malicious code in vitor-js npm...
EUVD-2025-203877
Malicious code in plugin-senna npm...
EUVD-2025-203845
Better Auth's rou3 Dependency has Double-Slash Path Normalization which can Bypass disabledPaths Config and Rate Limits...
EUVD-2025-203814
NVIDIA Isaac Lab contains a deserialization vulnerability. A successful exploit of this vulnerability might lead to code execution...
EUVD-2025-203827
An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application logs. This vulnerability has been fully addressed in FileMaker Server 22.0.4...
EUVD-2025-203828
To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting NtfsDisable8dot3NameCreation in the Windows registry. This prevents attackers from using the tilde character to discover hidden files and directories. This...
EUVD-2025-203820
Mercury D196G d196gv1-cn-up2020-01-0911.21.44 is vulnerable to Buffer Overflow in the function sub404CAEDC via the parameter facpassword...
EUVD-2025-203803
A remote code execution issue exists in HPE OneView...
EUVD-2025-203644
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix dmabuf object leak in fastrpcmaplookup In fastrpcmaplookup, dmabufget is called to obtain a reference to the dmabuf for comparison purposes. However, this reference is never released when the function returns,...
EUVD-2025-203624
The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getAuthors function in all versions up to, and including, 4.9.2. This makes it...
EUVD-2025-203527
Malicious code in tailwind-variables npm...
EUVD-2025-203515
Malicious code in i18never npm...