EUVD-2025-209724

NPM package next-npm-version1.0.1 is vulnerable to Command injection...

EUVD-2026-26753

A security flaw has been discovered in JeecgBoot up to 3.9.1. This vulnerability affects the function CommonController.uploadImgByHttp/HttpFileToMultipartFileUtil.httpFileToMultipartFile/HttpFileToMultipartFileUtil.downloadImageData of the file CommonController.java of the component...

EUVD-2026-26698

AGL agl-service-can-low-level contains a stack buffer overflow in the uds-c library. The senddiagnosticrequest function in uds.c allocates a 6-byte stack buffer MAXDIAGNOSTICPAYLOADSIZE=6 but copies up to 7 bytes MAXUDSREQUESTPAYLOADLENGTH=7 via memcpy at an offset of 1+pidlength 2-3 bytes,...

CVE-2026-33449

creationtimestamp| type| source ---|---|--- 2026-04-30 22:01:16+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mkqmh7xuxs2s...

EUVD-2026-26331

GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

EUVD-2026-26347

WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

EUVD-2026-25722

A vulnerability was determined in baomidou dynamic-datasource 2.5.0. Affected by this vulnerability is the function DsSpelExpressionProcessordoDetermineDatasource of the file dynamic-datasource-spring/src/main/java/com/baomidou/dynamic/datasource/processor/DsSpelExpressionProcessor.java of the...

EUVD-2026-25146

A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function mathequal of the file primemath/grader.py. The manipulation leads to sandbox issue. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be...

EUVD-2026-24601

The a+HRD developed by aEnrich has a Missing Authorization vulnerability, allowing authenticated remote attackers to arbitrarily read database contents through a specific API method...

EUVD-2026-24120

Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150...

EUVD-2026-23114

Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role...

EUVD-2025-209487

Nordic Semiconductor IronSide SE for nRF54H20 before 23.0.2+17 has an Algorithmic complexity issue...

EUVD-2026-22947

HP System Optimizer might potentially be vulnerable to escalation of privilege. HP is releasing an update to mitigate this potential vulnerability...

EUVD-2026-22937

CentSDR commit e40795 was discovered to contain a stack overflow in the "Thread1" function...

EUVD-2026-22501

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally...

EUVD-2026-22026

simple-git Affected by Command Execution via Option-Parsing Bypass...

EUVD-2026-21912

Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/loadadmin.php...

EUVD-2026-21829

UAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-21836

UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-21819

Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335...