CVE-2026-37100

The CVE-2026-37100 entry describes a vulnerability in Yamaha SR-B30A sound bar firmware 2.40 (BLE control interface) where remote attackers within BLE range can connect without authentication using the Sound Bar Remote protocol. Affected component: BLE control interface; root cause: unauthenticat...

EUVD-2017-2424

Malware in sbrugna...

EUVD-2017-2401

Malware in sbrugna...

EUVD-2017-5773

Malware in sbrugna...

EUVD-2017-2406

Malware in sbrugna...

EUVD-2017-6039

Malware in sbrugna...

EUVD-2017-2404

Malware in sbrugna...

EUVD-2017-2417

Malware in sbrugna...

EUVD-2017-2405

Malware in sbrugna...

EUVD-2017-2395

Malware in sbrugna...

CVE-2025-32285

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ApusTheme Butcher butcher allows Reflected XSS.This issue affects Butcher: from n/a through 2.54...

CVE-2025-32285

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ApusTheme Butcher butcher allows Reflected XSS.This issue affects Butcher: from n/a through 2.54...

CVE-2025-32286

CVE-2025-32286 refers to an Unauthenticated Local File Inclusion in the WordPress Butcher theme (

Memory corruption

GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function findabstractinstance in dwarf2.c...

Thruk 跨站脚本漏洞

Thruk is an open source multi-backend monitoring web interface from the personal developer Sven Nierlein of Germany. cross-site scripting vulnerability exists in Thruk 2.40-2, which stems from the system allowing the storage of XSS. no detailed vulnerability details are currently available...

Yubico YubiKey Validation Server SQL Injection Vulnerability (CNVD-2020-16073)

Yubico YubiKey Validation Server is an authentication server from the Swedish company Yubico. A SQL injection vulnerability exists in YubiKey Validation Server versions prior to 2.40. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

PT-2019-2342 · Schneider Electric · Modicon M580 +4

Name of the Vulnerable Software and Affected Versions: Modicon M580 versions prior to V2.50 Modicon M340 versions prior to V3.01 BMxCRA312xx versions prior to V2.40 Modicon Premium all firmware versions 140CRA312xxx all firmware versions Description: The issue is related to buffer errors in the...

CVE-2017-14541

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x000000000001f23e."...

CVE-2017-14541

XnView Classic for Windows 2.40 has a buffer overflow vulnerability exploitable via a crafted SVG file, leading to denial of service (local access). CNVD-2017-34093 confirms a local attacker can cause a denial of service; no patch/fix details are provided in the accessible documents. The CVE note...

XnView Classic for Windows Denial of Service Vulnerability (CNVD-2017-32598)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in version 2.40 of XnView Classic for Windows...