32992 matches found
EUVD-2026-17819
A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The exploit has be...
EUVD-2025-209019
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...
EUVD-2025-209021
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could provide weaker than expected security when administering security settings...
EUVD-2026-15989
Rejected reason: Not used...
EUVD-2026-15987
melange pipeline working-directory could allow command injection...
EUVD-2025-209008
IBM Concert 1.0.0 through 2.2.0 contains hard-coded credentials that could be obtained by a local user...
EUVD-2025-208983
Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting XSS vulnerability which, if exploited, can lead to unauthorized disclosure and modification of certain information...
EUVD-2026-15117
The issue was addressed with improved bounds checks. This issue is fixed in macOS Tahoe 26.4. A buffer overflow may result in memory corruption and unexpected app termination...
EUVD-2026-14469
XnSoft NConvert 7.230 is vulnerable to Use-After-Free via a crafted .tiff file...
EUVD-2025-208911
AWStats 8.0 is vulnerable to Command Injection via the open function...
EUVD-2025-208891
Bitcoin Core 0.13.0 through 29.x has an integer overflow...
EUVD-2026-12706
A flaw has been found in itsourcecode University Management System 1.0. Affected is an unknown function of the file /addresult.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used...
EUVD-2026-11576
A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...
EUVD-2019-19764
Varient 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the userid parameter. Attackers can submit POST requests with crafted SQL payloads in the userid field to bypass authentication and extract...
EUVD-2026-11081
pnpm has Path Traversal via arbitrary file permission modification...
EUVD-2026-11269
flagd Vulnerable to Allocation of Resources Without Limits or Throttling...
EUVD-2025-208465
PROBLEMTYPE in COMPONENT in VENDOR PRODUCT VERSION on PLATFORMS allows ATTACKER to IMPACT via VECTOR...
EUVD-2025-208462
Affected ProductsVersionsInfoSphere Data Architect9.2.1...