33715 matches found
EUVD-2025-201823
Static Web Server SWS is a production-ready web server suitable for static web files or assets. Versions 2.40.0 and below contain symbolic links symlinks which can be used to access files or directories outside the intended web root folder. SWS generally does not prevent symlinks from escaping th...
EUVD-2025-201828
The ruby-saml library implements the client side of an SAML authorization. Versions up to and including 1.12.4, are vulnerable to authentication bypass through the libxml2 canonicalization process used by Nokogiri for document transformation, which allows an attacker to execute a Signature Wrappi...
EUVD-2025-201730
Traefik is an HTTP reverse proxy and load balancer. Versions 3.5.0 through 3.6.2 have inverted TLS verification logic in the nginx.ingress.kubernetes.io/proxy-ssl-verify annotation. Setting the annotation to "on" intending to enable backend TLS certificate verification actually disables...
EUVD-2025-201711
Malicious code in graphnode PyPI...
EUVD-2025-201684
Permission control vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
EUVD-2025-201676
Denial of service DoS vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2025-201687
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2025-201692
Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote attackers to exploit Absolute Path Traversal to download arbitrary system files...
EUVD-2025-201612
Malicious code in hexdeci PyPI...
EUVD-2025-201565
Malicious code in telco PyPI...
EUVD-2025-201554
Malicious code in fdir5 npm...
EUVD-2025-201556
Malicious code in fdir1 npm...
EUVD-2025-201558
Malicious code in ido-sdk-web npm...
EUVD-2025-201560
Malicious code in fdir4 npm...
EUVD-2025-201559
Malicious code in sharp32 npm...
EUVD-2025-201508
Malicious code in qt-main PyPI...
EUVD-2025-201471
Malicious code in native-component-list npm...
EUVD-2025-201472
Malicious code in elf-stats-whimsical-pantry-974 npm...