17251 matches found
EUVD-2026-4032
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Retrieve Embedded Sensitive Data.This issue affects Salon booking system: from n/a through = 10.30.3...
EUVD-2026-4058
Server-Side Request Forgery SSRF vulnerability in Marco Milesi ANAC XML Viewer anac-xml-viewer allows Server Side Request Forgery.This issue affects ANAC XML Viewer: from n/a through = 1.8.2...
EUVD-2026-4060
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam REHub Framework rehub-framework allows Retrieve Embedded Sensitive Data.This issue affects REHub Framework: from n/a through 19.9.9.4...
EUVD-2026-4116
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tagDiv tagDiv Composer td-composer allows DOM-Based XSS.This issue affects tagDiv Composer: from n/a through = 5.4.2...
EUVD-2026-4108
Incorrect Privilege Assignment vulnerability in Jthemes xSmart xsmart allows Privilege Escalation.This issue affects xSmart: from n/a through = 1.2.9.4...
EUVD-2026-4090
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Amuli amuli allows PHP Local File Inclusion.This issue affects Amuli: from n/a through = 2.3.0...
EUVD-2026-3810
An issue was discovered in the InsertFromURL function of the Apryse HTML2PDF SDK thru 11.10. This vulnerability could allow an attacker to execute arbitrary operating system commands on the local server...
EUVD-2026-4088
A Local File Inclusion LFI and a Server-Side Request Forgery SSRF vulnerability was found in the InsertFromHtmlString function of the Apryse HTML2PDF SDK thru 11.6.0. These vulnerabilities could allow an attacker to read local files on the server or make arbitrary HTTP requests to internal or...
CVE-2025-36059
creationtimestamp| type| source ---|---|--- 2026-01-20 22:21:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115929754153566783...
CVE-2026-21928
...
EUVD-2026-3325
A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via futimes even when the process has only read permissions. Unlike utimes, futimes does not apply the expected write-permission checks, which means file metadata can be modified in read-only...
CVE-2025-36556
creationtimestamp| type| source ---|---|--- 2026-01-20 16:30:45+00:00| seen| https://infosec.place/objects/dc282a34-771e-4ad6-bc9c-a355b161d8b0...
CVE-2025-58087
creationtimestamp| type| source ---|---|--- 2026-01-20 16:30:40+00:00| seen| https://infosec.place/objects/86c1cfe3-6826-4fb9-8bab-2163ea39c0ed...
CVE-2025-53912
creationtimestamp| type| source ---|---|--- 2026-01-20 16:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcuk75iw7w2c 2026-01-20 16:30:51+00:00| seen| https://infosec.place/objects/7a4b9871-e1dc-42aa-96f2-7d71c4fb4863 2026-01-20 17:12:04+00:00| seen|...
EUVD-2026-3362
IBM ApplinX 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2025-57881
creationtimestamp| type| source ---|---|--- 2026-01-20 15:30:56+00:00| seen| https://infosec.place/objects/2925ca4f-1110-4230-b31a-240f2755bbe8...
CVE-2025-54852
creationtimestamp| type| source ---|---|--- 2026-01-20 15:30:40+00:00| seen| https://infosec.place/objects/23c3e016-78b1-467e-8e84-2cd0b8650286...
CVE-2025-55071
creationtimestamp| type| source ---|---|--- 2026-01-20 15:30:34+00:00| seen| https://infosec.place/objects/969a9679-e3e3-4dc5-aca0-7dc13f1e9b3d...