Euvd - Page 14 of Euvd Most Viewed Vulnerabilities List

EuvdMost viewed

418054 matches found

EUVD•added 2026/05/07 3:53 a.m.•28 views

EUVD-2026-28248

The base directory spring.cloud.config.server.git.basedir used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 inclusive; upgrade to 3.1.14 or greater Enterpris...

7.2CVSS5.8AI score0.0022EPSS

Exploits0References1

EUVD•added 2026/05/05 6:33 p.m.•28 views

EUVD-2026-27390

A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. This issue affects the function PIL.Image.tobytes of the file libs/chatchat-server/chatchat/webuipages/dialogue/dialogue.py of the component Vision Chat Paste Image Handler. This manipulation of the argument...

2.6CVSS5.1AI score0.0014EPSS

Exploits0References7

EUVD•added 2026/05/03 1:30 p.m.•28 views

EUVD-2026-26836

A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Affected by this vulnerability is an unknown functionality of the file /Easy7/rest/systemInfo/updateDbBackupInfo. Such manipulation of the argument week leads to os command injection. The attack can be executed...

7.5CVSS6.9AI score0.01655EPSS

Exploits0References4

EUVD•added 2026/05/02 10:0 p.m.•28 views

EUVD-2026-26802

A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function gettokenizer of the file python/sglang/srt/utils/hftransformersutils.py of the component HuggingFace Transformer Handler. The manipulation results in deserialization. The attack can be executed remotely. A hi...

6.3CVSS5.3AI score0.00368EPSS

Exploits0References3

EUVD•added 2026/04/09 3:35 p.m.•28 views

EUVD-2026-20894

HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This vulnerability, CVE-2026-4660, is fixed in go-getter v1.8.6. This vulnerability does not affect the go-getter/v2 branch and package...

7.5CVSS6AI score0.00583EPSS

Exploits1References2

EUVD•added 2025/10/22 9:36 p.m.•28 views

EUVD-2025-35625

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

8.7CVSS6.3AI score0.00402EPSS

Exploits0References5

EUVD•added 2025/10/17 5:11 p.m.•29 views

EUVD-2025-34919

DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC URL injection vulnerability exists in the DB2 and MongoDB data source configuration handlers. In the DB2 data source handler, when the extraParams field is empty, the HOSTNAME, PORT, and DATABASE...

9.8CVSS6.7AI score0.07306EPSS

Exploits2References2

EUVD•added 2025/10/07 12:30 a.m.•28 views

EUVD-2021-21472

Malware in sbrugna...

7.5CVSS7.4AI score0.00616EPSS

Exploits1References7

EUVD•added 2025/10/07 12:30 a.m.•28 views

EUVD-2020-4557

Malware in sbrugna...

7.8CVSS7.5AI score0.01088EPSS

Exploits4References2