33656 matches found
EUVD-2026-18815
Rejected reason: Not used...
EUVD-2026-18812
Microsoft Bing Elevation of Privilege Vulnerability...
EUVD-2026-18258
phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, the MediaBrowserController::index method handles file deletion for the media browser. When the fileRemove action is triggered, the user-supplied name parameter is concatenated with the base upload directory path without any...
EUVD-2026-18013
Payload has an SQL Injection via Query Handling...
EUVD-2026-17819
A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The exploit has be...
EUVD-2026-15987
melange pipeline working-directory could allow command injection...
EUVD-2025-209021
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could provide weaker than expected security when administering security settings...
EUVD-2025-209019
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...
EUVD-2026-15989
Rejected reason: Not used...
EUVD-2025-209008
IBM Concert 1.0.0 through 2.2.0 contains hard-coded credentials that could be obtained by a local user...
EUVD-2025-208983
Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting XSS vulnerability which, if exploited, can lead to unauthorized disclosure and modification of certain information...
EUVD-2026-15117
The issue was addressed with improved bounds checks. This issue is fixed in macOS Tahoe 26.4. A buffer overflow may result in memory corruption and unexpected app termination...
EUVD-2026-14469
XnSoft NConvert 7.230 is vulnerable to Use-After-Free via a crafted .tiff file...
EUVD-2025-208911
AWStats 8.0 is vulnerable to Command Injection via the open function...
EUVD-2025-208891
Bitcoin Core 0.13.0 through 29.x has an integer overflow...
EUVD-2026-12706
A flaw has been found in itsourcecode University Management System 1.0. Affected is an unknown function of the file /addresult.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used...
EUVD-2026-11576
A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...
EUVD-2019-19764
Varient 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the userid parameter. Attackers can submit POST requests with crafted SQL payloads in the userid field to bypass authentication and extract...