32992 matches found
EUVD-2026-4162
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that under certain circumstances could have allowed an authenticated user to create a denial of service condition by configuring malformed Wiki documents that...
EUVD-2026-4164
MeetingHub developed by HAMASTAR Technology has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific API functions and obtain meeting-related information...
EUVD-2026-4163
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Aida Computer Information Technology Inc. Hotel Guest Hotspot allows Reflected XSS.This issue affects Hotel Guest Hotspot: through 22012026. NOTE: The vendor was contacted early about this...
EUVD-2026-4189
Malicious code in @mailpoet/eslint-config npm...
EUVD-2026-4170
Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible and not actually offline because the response to a WebSocket API request includes the user in the presences array with "status": "offline", whereas offline users are omitted from the presences...
EUVD-2026-4172
A stored cross-site scripting XSS vulnerability in the BOM Viewer in Altium AES 7.0.3 allows an authenticated attacker to inject arbitrary JavaScript into the Description field of a schematic, which is executed when the BOM Viewer renders the affected content...
EUVD-2026-4088
A Local File Inclusion LFI and a Server-Side Request Forgery SSRF vulnerability was found in the InsertFromHtmlString function of the Apryse HTML2PDF SDK thru 11.6.0. These vulnerabilities could allow an attacker to read local files on the server or make arbitrary HTTP requests to internal or...
EUVD-2026-3701
Malicious code in ttam-ploy PyPI...
EUVD-2026-3704
Malicious code in terminalbrush PyPI...
EUVD-2026-3708
Malicious code in spellcheckpy PyPI...
EUVD-2026-3689
In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix NULL deref when deactivating inactive aggregate in qfqreset qfqclass-leafqdisc-q.qlen 0 does not imply that the class itself is active. Two qfqclass objects may point to the same leafqdisc. This happens whe...
EUVD-2026-3690
Not used...
EUVD-2026-3696
Not used...
EUVD-2026-3697
Not used...
EUVD-2026-3695
Not used...
EUVD-2026-3717
Malicious code in weaviate-js npm...
EUVD-2026-3719
Malicious code in qdrant-js npm...
EUVD-2026-3721
Malicious code in babel-js npm...