33491 matches found
EUVD-2025-198613
Malicious code in tailwind-inquirer npm...
EUVD-2025-198615
Malicious code in hash-guard npm...
EUVD-2025-198616
Malicious code in loliloli npm...
EUVD-2025-198603
Malicious code in base62-58x npm...
EUVD-2025-198601
Malicious code in cbre-flow-common npm...
EUVD-2025-198592
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EUVD-2025-198549
Malicious code in hyatt-ui npm...
EUVD-2025-198555
Malicious code in sentry-ui npm...
EUVD-2025-198544
Malicious code in airbnb-vermeer-node npm...
EUVD-2025-198369
Azure Monitor Elevation of Privilege Vulnerability...
EUVD-2025-198334
HackerOne community member Dang Hung Vi vidang04 has reported a stored XSS vulnerability involving the navigation box at the top of advertiser-related pages, with campaign names being the vector for the stored XSS...
EUVD-2025-198322
Malicious code in @ra-ide/extension-ui npm...
EUVD-2025-198326
Malicious code in @ra-ide/tag-editor-frontend npm...
EUVD-2025-198330
Malicious code in @ra-ftds/motion-extension npm...
EUVD-2025-198277
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service DoS, which could cause an impacted firewall to crash...
EUVD-2025-198283
Unrestricted Upload of File with Dangerous Type vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Pyxis Signage: through 31012025...
EUVD-2025-198280
In version 6.13.0 of LimeSurvey, any external user can cause a 500 error in the survey system by sending a malformed session cookie. Instead of displaying a generic error message, the system exposes internal backend information, including the use of the Yii framework, the MySQL/MariaDB database...
EUVD-2025-198281
Vulnerability in LimeSurvey 6.13.0 in the endpoint /optout that causes infinite HTTP redirects when accessed directly. This behavior can be exploited to generate a Denegation of Service DoS attack, by exhausting server or client resources. The system is unable to break the redirect loop, which ca...
EUVD-2025-198275
The Ultimate Member Widgets for Elementor – WordPress User Directory plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handlefilterusers function in all versions up to, and including, 2.3. This makes it possible for unauthenticated attacker...