17251 matches found
EUVD-2026-3381
A reflected cross-site scripting xss vulnerability exists in the autoPurge functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a URL to a malicious website to trigger this vulnerability...
EUVD-2026-3387
A reflected cross-site scripting xss vulnerability exists in the sendOruReport functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
EUVD-2026-3428
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. After running a Burp Suite active scan, the device loses ICMP connectivity, causing the web application to become inaccessible...
CVE-2020-3643
creationtimestamp| type| source ---|---|--- 2026-01-20 08:05:01+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...
CVE-2020-11145
creationtimestamp| type| source ---|---|--- 2026-01-20 08:05:00+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...
CVE-2019-14066
creationtimestamp| type| source ---|---|--- 2026-01-20 08:04:57+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...
CVE-2022-25728
creationtimestamp| type| source ---|---|--- 2026-01-20 08:04:56+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...
CVE-2022-25730
creationtimestamp| type| source ---|---|--- 2026-01-20 08:04:56+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...
CVE-2020-11251
creationtimestamp| type| source ---|---|--- 2026-01-20 08:04:56+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...
CVE-2022-33229
creationtimestamp| type| source ---|---|--- 2026-01-20 08:04:55+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...
CVE-2020-3686
creationtimestamp| type| source ---|---|--- 2026-01-20 08:04:52+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...
EUVD-2026-3246
HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability. Versions before 0.032 contain HarfBuzz 8.4.0 or earlier bundled as hbsrc.tar.gz in the source tarball, which is affected by CVE-2026-22693...
CVE-2026-1162
creationtimestamp| type| source ---|---|--- 2026-01-18 21:00:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115918111077763770 2026-01-19 17:25:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcs5xitfz22m 2026-01-19 17:56:35+00:00| seen|...
CVE-2026-1158
creationtimestamp| type| source ---|---|--- 2026-01-18 20:46:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115918055933218922 2026-01-19 15:17:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcrwseoexj22 2026-01-19 18:11:36+00:00| seen|...
CVE-2026-1140
creationtimestamp| type| source ---|---|--- 2026-01-18 07:38:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115914957462260239 2026-01-19 06:51:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcr2jgwnfz2w 2026-01-19 07:58:27+00:00| seen|...
EUVD-2026-3184
A vulnerability was identified in raysan5 raylib up to 909f040. Affected by this issue is the function LoadFontData of the file src/rtext.c. The manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used...
EUVD-2026-3190
A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function checkuserinfo of the file Diyajax.php of the component Member Avatar Handler. Executing a manipulation of the argument viewfile can lead to unrestricted upload. The attack may be performed from remote. The exploit...
EUVD-2026-2943
In ConnectWise PSA versions older than 2026.1, certain session cookies were not set with the HttpOnly attribute. In some scenarios, this could allow client-side scripts access to session cookie values...
EUVD-2026-2939
The Librarian supervisord status page can be retrieved by the webfetch tool, which can be used to retrieve running processes within TheLibrarian backend. The vendor has fixed the vulnerability in all affected versions...