Euvd - Page 20 of Euvd Most Viewed Vulnerabilities List

EuvdMost viewed

417920 matches found

EUVD•added 2026/05/04 12:39 a.m.•25 views

EUVD-2026-26862

An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to credentials leak. An attacker can listen to broadcast messages to trigger this vulnerability. When interacting with variou...

9.3CVSS5.8AI score0.00214EPSS

Exploits0References2

EUVD•added 2026/05/02 11:16 a.m.•25 views

EUVD-2026-26778

The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'sort' parameter in all versions up to, and including, 1.13.18. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. The escsql functi...

7.5CVSS6AI score0.00304EPSS

Exploits1References5

EUVD•added 2026/03/12 5:57 p.m.•25 views

EUVD-2026-11649

Dataease is an open source data visualization analysis tool. In DataEase 2.10.19 and earlier, the static resource upload interface allows SVG uploads. However, backend validation only checks whether the XML is parseable and whether the root node is svg. It does not sanitize active content such as...

5.3CVSS5.9AI score0.002EPSS

Exploits1References1

EUVD•added 2026/03/10 6:31 p.m.•25 views

EUVD-2026-10523

A NULL Pointer Dereference vulnerability CWE-476 vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow an authenticated attacker to crash the HTTP daemon via crafted HTTP...

2.7CVSS5.8AI score0.00386EPSS

Exploits0References2

EUVD•added 2026/03/09 6:31 p.m.•25 views

EUVD-2026-10342

MobaXterm versions prior to 26.1 contain an uncontrolled search path element vulnerability. The application calls WinExec to execute Notepad++ without a fully qualified executable path when opening remote files. An attacker can exploit the search path behavior by placing a malicious executable...

8.5CVSS6.3AI score0.00132EPSS

Exploits0References3

EUVD•added 2026/03/08 3:30 a.m.•25 views

EUVD-2026-10207

A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigDnsFilterGlobal. This manipulation causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could ...

9CVSS7.5AI score0.00655EPSS

Exploits1References5

EUVD•added 2026/01/28 9:31 p.m.•25 views

EUVD-2025-26490

Missing Authorization vulnerability in ThemeMove Makeaholic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Makeaholic: from n/a through 1.8.5...

9.8CVSS5.9AI score0.00237EPSS

Exploits0References2

EUVD•added 2025/11/24 7:30 a.m.•25 views

EUVD-2025-198625

A sensitive information disclosure vulnerability exists in the error handling component of ATISoluciones CIGES Application version 2.15.6 and earlier. When certain unexpected conditions trigger unhandled exceptions, the application returns detailed error messages and stack traces to the client...

6.9CVSS6.5AI score0.00334EPSS

Exploits0References2

EUVD•added 2025/10/17 5:8 p.m.•25 views

EUVD-2025-34895

OpenBao has potential Denial of Service vulnerability when processing malicious unauthenticated JSON requests...

7.5CVSS6.5AI score0.00697EPSS

Exploits0References7

EUVD•added 2025/10/07 12:30 a.m.•25 views

EUVD-2015-6196

Malware in sbrugna...

6CVSS7.6AI score0.01781EPSS

Exploits0References11