33408 matches found
EUVD-2025-203194
Not used...
EUVD-2025-203198
Not used...
EUVD-2025-22555
Node-SAML is a SAML library not dependent on any frameworks that runs in Node. In versions 5.0.1 and below, Node-SAML loads the assertion from the unsigned original response document. This is different than the parts that are verified when checking signature. This allows an attacker to modify...
EUVD-2025-203145
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An app may be able to elevate privileges...
EUVD-2025-203132
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2. Processing maliciously crafted web content may lead to an unexpected process crash...
EUVD-2025-203150
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...
EUVD-2025-203142
A session management issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. A user with Voice Control enabled may be able to transcribe another user's activity...
EUVD-2025-203144
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An app may be able to access protected user data...
EUVD-2025-203035
Malicious code in sd-pay npm...
EUVD-2025-203041
Malicious code in uba-plugins npm...
EUVD-2025-203042
Malicious code in sdbao-content-sems npm...
EUVD-2025-203046
Malicious code in abrhide npm...
EUVD-2025-202948
Malicious code in ffruitmaliciousxmlparser npm...
EUVD-2025-202947
Malicious code in hfruitmaliciousxmlparser npm...
EUVD-2025-202952
Malicious code in afruitmaliciousxmlparser npm...
EUVD-2025-202925
Next Vulnerable to Denial of Service with Server Components...
EUVD-2025-202841
In GetHostAddress of gxpbuffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2025-202891
OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226EW1800GX-PRO10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleget in file /usr/local/lua/devsta/networkConnect.lua...
EUVD-2025-202731
OS Command Injection vulnerability in Ruijie M18 EW3.01B11P226M1810223116 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleget in file /usr/local/lua/devsta/networkConnect.lua...