432693 matches found
EUVD-2026-29666
Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network...
EUVD-2025-27203
Malicious code in bioql PyPI...
EUVD-2026-31247
Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when multiple error conditions occur simultaneously, which may allow a remote attacker to cause a minor service disruption via conditions that trigger incorrect error-handling paths...
EUVD-2019-11516
Malware in sbrugna...
EUVD-2026-30334
Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, a trustremotecode bypass in DiffusionPipeline.frompretrained allows arbitrary remote code execution despite the user passing trustremotecode=False or omitting it, which is the default. The vulnerability has three variant...
EUVD-2025-204037
Biopython is vulnerable to doctype XML external entity XXE injection through Bio.Entrez...
EUVD-2017-18736
Malware in sbrugna...
EUVD-2020-1620
Malware in sbrugna...
EUVD-2025-6630
Malicious code in bioql PyPI...
EUVD-2023-25265
Malicious code in bioql PyPI...
EUVD-2026-44982
A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler...
EUVD-2026-9462
Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. These vulnerabilities are due to improper error checking when decompressing VBA data. An attacker could exploit...
EUVD-2024-54770
Malicious code in bioql PyPI...
EUVD-2026-29193
Improper Neutralization of CRLF Sequences 'CRLF Injection' vulnerability in ninenines cowlib allows HTTP request splitting and cookie smuggling via unvalidated cookie name and value fields. cowcookie:cookie/1 in cowlib builds a client-side Cookie: request header from a list of name-value pairs...
EUVD-2025-14881
Malicious code in bioql PyPI...
EUVD-2026-57192
A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via...
EUVD-2026-30774
Dify version 1.14.1 and prior contain an authorization bypass vulnerability in the file preview endpoint that allows any authenticated user to read up to 3,000 characters of any uploaded document across all tenants and workspaces using only the file's UUID. Attackers can access the...
EUVD-2025-205293
LogicalDOC Enterprise 7.7.4 contains multiple authenticated OS command execution vulnerabilities that allow attackers to manipulate binary paths when changing system settings. Attackers can exploit these vulnerabilities by modifying configuration parameters like antivirus.command,...
EUVD-2015-5479
Malware in sbrugna...
EUVD-2026-40955
MCO does not correctly validate types of uploaded files. File upload validation functionality relies only on client-side checks, which can be bypassed. An authorized, low-privileged attacker can upload files with arbitrary types to the server. Because vendor contact attempts were unsuccessful, th...
EUVD-2026-29033
Zephyr sockets created with IPPROTOTLS13 can still negotiate a TLS 1.2 connection when both TLS versions are enabled in Kconfig, because the socket-level protocol selection is not propagated to mbedTLS e.g. via mbedtlssslconfmintlsversion. The ClientHello advertises both versions and the peer can...
EUVD-2025-36134
A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. The impacted element is an unknown function of the component Edit Ticket Page. Performing manipulation of the argument Title results in csv injection. It is possible to initiate the attack remotely. The exploit is now...
EUVD-2014-4829
Malware in sbrugna...
EUVD-2024-46576
Malicious code in bioql PyPI...
EUVD-2025-23677
Malicious code in bioql PyPI...
EUVD-2026-50472
Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply SSRF to internal/metadata...
EUVD-2026-35531
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-35586
Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
EUVD-2025-25062
Malicious code in bioql PyPI...
EUVD-2025-24298
Malicious code in bioql PyPI...
EUVD-2025-210043
A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J Blu-ray Disc Java sandbox can be escaped through a malformed JAR file...
EUVD-2026-29413
The Forms Rb plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access a...
EUVD-2023-0955
Malicious code in bioql PyPI...
EUVD-2026-36199
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Updates Environment Management. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
EUVD-2026-31113
Twig: Possible sandbox bypass when using a source policy...
EUVD-2025-207565
free5GC is an open-source project for 5th generation 5G mobile core networks. Versions up to and including 1.4.1 of the User Data Repository are affected by Improper Error Handling with Information Exposure. The NEF component reliably leaks internal parsing error details e.g., invalid character '...
EUVD-2021-2577
Malware in sbrugna...
EUVD-2023-40615
Malicious code in bioql PyPI...
EUVD-2023-29949
Malicious code in bioql PyPI...
EUVD-2025-24062
Malicious code in bioql PyPI...
EUVD-2023-53104
Malicious code in bioql PyPI...
EUVD-2025-13411
Malicious code in bioql PyPI...
EUVD-2023-28856
Malicious code in bioql PyPI...
EUVD-2026-32920
TinyMCE Cross-Site Scripting XSS vulnerability using sanitization bypass through nested SVGs...
EUVD-2026-31205
A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoint exposes search index operations without requiring authentication, session tokens, or any form of identity verification. An unauthenticated network attacker who can reference a target workspace's...
EUVD-2025-205104
In the Linux kernel, the following vulnerability has been resolved: exfat: fix divide-by-zero in exfatallocatebitmap The variable maxracount can be 0 in exfatallocatebitmap, which causes a divide-by-zero error in the subsequent modulo operation i % maxracount, leading to a system crash. When...
EUVD-2025-177539
Malicious code in norma-sagitta-bellatrix-postgres npm...
EUVD-2019-14907
Malware in sbrugna...