EUVD-2026-4058

Server-Side Request Forgery SSRF vulnerability in Marco Milesi ANAC XML Viewer anac-xml-viewer allows Server Side Request Forgery.This issue affects ANAC XML Viewer: from n/a through = 1.8.2...

EUVD-2026-4060

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam REHub Framework rehub-framework allows Retrieve Embedded Sensitive Data.This issue affects REHub Framework: from n/a through 19.9.9.4...

EUVD-2026-4116

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tagDiv tagDiv Composer td-composer allows DOM-Based XSS.This issue affects tagDiv Composer: from n/a through = 5.4.2...

EUVD-2026-4108

Incorrect Privilege Assignment vulnerability in Jthemes xSmart xsmart allows Privilege Escalation.This issue affects xSmart: from n/a through = 1.2.9.4...

EUVD-2026-4090

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Amuli amuli allows PHP Local File Inclusion.This issue affects Amuli: from n/a through = 2.3.0...

EUVD-2026-3810

An issue was discovered in the InsertFromURL function of the Apryse HTML2PDF SDK thru 11.10. This vulnerability could allow an attacker to execute arbitrary operating system commands on the local server...

EUVD-2026-4088

A Local File Inclusion LFI and a Server-Side Request Forgery SSRF vulnerability was found in the InsertFromHtmlString function of the Apryse HTML2PDF SDK thru 11.6.0. These vulnerabilities could allow an attacker to read local files on the server or make arbitrary HTTP requests to internal or...

CVE-2025-36059

creationtimestamp| type| source ---|---|--- 2026-01-20 22:21:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115929754153566783...

CVE-2026-21928

...

EUVD-2026-3325

A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via futimes even when the process has only read permissions. Unlike utimes, futimes does not apply the expected write-permission checks, which means file metadata can be modified in read-only...

CVE-2025-36556

creationtimestamp| type| source ---|---|--- 2026-01-20 16:30:45+00:00| seen| https://infosec.place/objects/dc282a34-771e-4ad6-bc9c-a355b161d8b0...

CVE-2025-58087

creationtimestamp| type| source ---|---|--- 2026-01-20 16:30:40+00:00| seen| https://infosec.place/objects/86c1cfe3-6826-4fb9-8bab-2163ea39c0ed...

CVE-2025-53912

creationtimestamp| type| source ---|---|--- 2026-01-20 16:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcuk75iw7w2c 2026-01-20 16:30:51+00:00| seen| https://infosec.place/objects/7a4b9871-e1dc-42aa-96f2-7d71c4fb4863 2026-01-20 17:12:04+00:00| seen|...

EUVD-2026-3362

IBM ApplinX 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2025-57881

creationtimestamp| type| source ---|---|--- 2026-01-20 15:30:56+00:00| seen| https://infosec.place/objects/2925ca4f-1110-4230-b31a-240f2755bbe8...

CVE-2025-54852

creationtimestamp| type| source ---|---|--- 2026-01-20 15:30:40+00:00| seen| https://infosec.place/objects/23c3e016-78b1-467e-8e84-2cd0b8650286...

CVE-2025-55071

creationtimestamp| type| source ---|---|--- 2026-01-20 15:30:34+00:00| seen| https://infosec.place/objects/969a9679-e3e3-4dc5-aca0-7dc13f1e9b3d...

CVE-2025-54157

creationtimestamp| type| source ---|---|--- 2026-01-20 15:30:16+00:00| seen| https://infosec.place/objects/dd126fef-1806-47a6-ac38-f0fc19cbdefa...

CVE-2025-53516

creationtimestamp| type| source ---|---|--- 2026-01-20 15:30:05+00:00| seen| https://infosec.place/objects/e37928c6-b460-417f-bacd-0edba3d47b63...

EUVD-2026-3381

A reflected cross-site scripting xss vulnerability exists in the autoPurge functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a URL to a malicious website to trigger this vulnerability...