452442 matches found
EUVD-2026-23262
SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/managepark.php...
EUVD-2026-20894
HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This vulnerability, CVE-2026-4660, is fixed in go-getter v1.8.6. This vulnerability does not affect the go-getter/v2 branch and package...
EUVD-2026-20117
The Masteriyo LMS – Online Course Builder for eLearning, LMS & Education plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in versions up to and including 2.1.7. This is due to insufficient webhook signature verification in the handlewebhook function. The...
EUVD-2026-19962
Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application...
EUVD-2026-18903
Kestra is an open-source, event-driven orchestration platform. Prior to version 1.3.7, Kestra default docker-compose deployment contains a SQL Injection vulnerability that leads to Remote Code Execution RCE in the following endpoint "GET /api/v1/main/flows/search". Once a user is authenticated,...
EUVD-2026-17277
The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4. This is due to a REST API endpoint registered at /wp-json/gravitysmtp/v1/tests/mock-data with a permissioncallback that unconditionally returns true, allowing any...
EUVD-2026-14913
Vikunja Allows Disabled/Locked User Accounts to Authenticate via API Tokens, CalDAV, and OpenID Connect...
EUVD-2026-14940
Craft CMS may expose private assets through anonymous "generate transform" calls via transform URL...
EUVD-2026-11367
StudioCMS S3 Storage Manager Authorization Bypass via Missing await on Async Auth Check...
EUVD-2026-10500
An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges...
EUVD-2026-10350
A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...
EUVD-2026-3529
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
EUVD-2025-177349
Malicious code in paleontology-luminescence-less-hermes npm...
EUVD-2025-179991
Malicious code in bootstrap-kastra-event-scripts npm...
EUVD-2025-53006
Malicious code in notable-yellow-lungfish npm...
EUVD-2025-34919
DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC URL injection vulnerability exists in the DB2 and MongoDB data source configuration handlers. In the DB2 data source handler, when the extraParams field is empty, the HOSTNAME, PORT, and DATABASE...
EUVD-2021-24388
Malware in sbrugna...
EUVD-2021-24216
Malware in sbrugna...
EUVD-2015-7199
Malware in sbrugna...
EUVD-2017-9320
Malware in sbrugna...
EUVD-2021-10024
Malware in sbrugna...
EUVD-2015-1953
Malware in sbrugna...
EUVD-2022-4110
Malicious code in bioql PyPI...
EUVD-2025-20854
Malicious code in bioql PyPI...
EUVD-2025-6218
Malicious code in bioql PyPI...
EUVD-2025-22763
Malicious code in bioql PyPI...
EUVD-2022-0961
Malicious code in bioql PyPI...
EUVD-2023-52819
Malicious code in bioql PyPI...
EUVD-2022-33553
Malicious code in bioql PyPI...
EUVD-2023-2203
Malicious code in bioql PyPI...
EUVD-2021-9817
Malicious code in bioql PyPI...
EUVD-2023-12553
Malicious code in bioql PyPI...
EUVD-2024-2853
Malicious code in bioql PyPI...
EUVD-2025-20841
Malicious code in bioql PyPI...
EUVD-2022-52727
Malicious code in bioql PyPI...
EUVD-2024-48866
Malicious code in bioql PyPI...
EUVD-2023-34343
Malicious code in bioql PyPI...
EUVD-2025-24180
Malicious code in bioql PyPI...
EUVD-2022-51021
Malicious code in bioql PyPI...
EUVD-2023-33782
Malicious code in bioql PyPI...
EUVD-2022-15824
Malicious code in bioql PyPI...
EUVD-2025-29711
Malicious code in bioql PyPI...
EUVD-2022-1412
Malicious code in bioql PyPI...
EUVD-2026-38488
Language Servers for AWS Vulnerable to Arbitrary Code Execution...
EUVD-2026-44813
9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding...
EUVD-2026-42929
9router: Image prefetch DNS rebinding allows SSRF to internal services...
EUVD-2026-69704
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...
EUVD-2026-63880
Inappropriate Encoding for Output Context vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, Cross-site Scripting. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2,...
EUVD-2026-60506
The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to a denial-of-service...
EUVD-2026-59066
In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consistency on commit failure reservemetadatasnap and releasemetadatasnap modify the superblock's heldroot directly in the blockmanager's buffer. If the subsequent metadata commit fails, th...