468410 matches found
EUVD-2026-30349
Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.9, 7.8.9, 8.22.1, and 9.1.6, a vulnerability allows bypassing Mongoose’s sanitizeFilter query sanitization mechanism via the $nor operator. When sanitizeFilter is enabled, Mongoose wraps quer...
EUVD-2026-30009
Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell tmsh arp and ndp commands, and in BIG-IP iControl REST. These vulnerabilities may allow an authenticated attacker to view adjacent network information. Note: Software versions which have reached End of Technical...
EUVD-2026-29884
ChurchCRM is an open-source church management system. From 7.2.0 to 7.2.2, The fix for CVE-2026-4058 is incomplete. The hardening commit was merged and then silently stripped from src/api/routes/public/public-user.php by an unrelated PR before any 7.2.x tag was cut. Every shipped 7.2.x release...
EUVD-2026-29830
PowerSYSTEM Center email notification service is affected by a CRLF injection vulnerability when using SMTPS communication...
EUVD-2026-29626
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...
EUVD-2026-29445
Insecure generation of credentials in the local SAT Technical Support access functionality of the Ingecon Sun EMS Board. The vulnerability arose because the secret access credentials were not based on a secure cryptographic scheme, but rather on a weak hashing algorithm, which could allow an...
EUVD-2026-28822
Russh is a Rust SSH client & server library. Prior to version 0.60.1, a pre-authentication denial-of-service vulnerability exists in the server's keyboard-interactive authentication handler. A malicious client can crash any russh-based server that implements keyboard-interactive auth e.g., for...
EUVD-2026-28323
The WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the unscheduledoriginalfiledeletion function in all versions up to, and including, 4.5.2 Th...
EUVD-2026-27864
A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results. Cisco has addressed this vulnerability in Cisco Slido and no customer action is needed. This vulnerability existed...
EUVD-2026-27830
A weakness has been identified in FlowiseAI Flowise up to 3.0.12. Affected by this vulnerability is an unknown functionality of the component User Controller Handler. This manipulation of the argument userId/organizationId/workspaceId/email causes authorization bypass. The attack may be initiated...
EUVD-2026-26902
mutt before 2.3.2 has an infinite loop in dataobjecttostream in crypt-gpgme.c...
EUVD-2026-26801
A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1STRINGdata in the library nova/lib/www/scep.p of the component SCEP Endpoint. The manipulation of the argument transactionID/messageType leads to out-of-bounds read. The attack may be initiated...
EUVD-2026-25825
A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution...
EUVD-2018-21816
P10 Central Management Software 1.4.13 contains a buffer overflow vulnerability in the login password field that allows local attackers to crash the application by submitting an oversized input string. Attackers can paste a 2000-byte payload into the password field and click login to trigger an...
EUVD-2026-25249
In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tlsdoencryption The -EBUSY handling in tlsdoencryption, introduced by commit 859054147318 "net: tls: handle backlogging of crypto requests", has a use-after-free due to double...
EUVD-2026-22579
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-22190
External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Versions 2.2.0 and below contain a vulnerability in runtime/template/v2/template.go where the v2 template engine removes env and expandenv from Sprig's TxtFuncMap but...
EUVD-2026-20117
The Masteriyo LMS – Online Course Builder for eLearning, LMS & Education plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in versions up to and including 2.1.7. This is due to insufficient webhook signature verification in the handlewebhook function. The...
EUVD-2026-8894
Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, moderators could export user Chat DMs via the CSV export endpoint by exploiting an overly permissive allowlist in canexportentity?. The method allowed moderators to export any entity not explicit...
EUVD-2025-205016
RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on...
EUVD-2025-199922
HTCondor Access Point before 25.3.1 allows an authenticated user to impersonate other users on the local machine by submitting a batch job. This is fixed in 24.12.14, 25.0.3, and 25.3.1. The earliest affected version is 24.7.3...
EUVD-2025-35062
In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix memory leak by freeing untracked persist buffer One internal buffer which is allocated only once per session was not being freed during session close because it was not being tracked as part of internal buffer li...
EUVD-2019-7182
Malware in sbrugna...
EUVD-2019-0720
Malware in sbrugna...
EUVD-2021-2368
Malware in sbrugna...
EUVD-2020-18370
Malware in sbrugna...
EUVD-2019-0248
Malware in sbrugna...
EUVD-2020-22531
Malware in sbrugna...
EUVD-2019-7057
Malware in sbrugna...
EUVD-2007-3197
Malware in sbrugna...
EUVD-2021-16785
Malware in sbrugna...
EUVD-2018-7738
Malware in sbrugna...
EUVD-2021-24388
Malware in sbrugna...
EUVD-2021-21417
Malware in sbrugna...
EUVD-2025-23144
Malicious code in bioql PyPI...
EUVD-2024-2335
Malicious code in bioql PyPI...
EUVD-2024-34446
Malicious code in bioql PyPI...
EUVD-2025-30405
Malicious code in bioql PyPI...
EUVD-2022-0662
Malicious code in bioql PyPI...
EUVD-2025-26335
Malicious code in bioql PyPI...
EUVD-2025-17021
Malicious code in bioql PyPI...
EUVD-2024-42717
Malicious code in bioql PyPI...
EUVD-2023-55083
Malicious code in bioql PyPI...
EUVD-2022-15824
Malicious code in bioql PyPI...
EUVD-2023-54265
Malicious code in bioql PyPI...
EUVD-2025-27990
Malicious code in bioql PyPI...
EUVD-2023-29021
Malicious code in bioql PyPI...
EUVD-2025-23157
Malicious code in bioql PyPI...