468497 matches found
EUVD-2022-2504
Malicious code in bioql PyPI...
EUVD-2025-29711
Malicious code in bioql PyPI...
EUVD-2022-51842
Malicious code in bioql PyPI...
EUVD-2025-6997
Malicious code in bioql PyPI...
EUVD-2024-53507
Malicious code in bioql PyPI...
EUVD-2025-32054
Malicious code in bioql PyPI...
EUVD-2022-26465
Malicious code in bioql PyPI...
EUVD-2022-38189
Malicious code in bioql PyPI...
EUVD-2023-1510
Malicious code in bioql PyPI...
EUVD-2024-1857
Malicious code in bioql PyPI...
EUVD-2023-43181
Malicious code in bioql PyPI...
EUVD-2022-7123
Malicious code in bioql PyPI...
EUVD-2025-18420
Malicious code in bioql PyPI...
EUVD-2023-2055
Malicious code in bioql PyPI...
EUVD-2021-27595
Malicious code in bioql PyPI...
EUVD-2025-21396
Malicious code in bioql PyPI...
EUVD-2025-27262
Malicious code in bioql PyPI...
EUVD-2025-24243
Malicious code in bioql PyPI...
EUVD-2025-12590
Malicious code in bioql PyPI...
EUVD-2024-18415
Malicious code in bioql PyPI...
EUVD-2021-11133
The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder WordPress plugin...
EUVD-2026-51992
Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide BOLA...
EUVD-2026-82390
Frappe HR is an open-source human resources management solution HRMS. Prior to 16.7.0, an authenticated user with the HR User role can inject SQL through filters in the Salary Payments Based on Payment Mode report. In...
EUVD-2026-73889
Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...
EUVD-2026-73876
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-73708
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
EUVD-2026-72928
A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via...
EUVD-2026-71257
IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...
EUVD-2026-60316
COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array by sending a crafted UDP datagram containing more than 15 ACF-CAN messages. The avtptocan function increments its write...
EUVD-2026-59939
In the Linux kernel, the following vulnerability has been resolved: crypto: algifskcipher - force synchronous processing on trees without ctx-state The AIO/async path in skcipherrecvmsg passes the socket-wide ctx-iv directly into the skcipher request. After iosubmit the socket lock is dropped and...
EUVD-2026-58574
A vulnerability was determined in Tenda AC1206 15.03.06.23multiTD01. This vulnerability affects the function setwlguestiplist of the file /goform/WifiGuestSet of the component httpd web management interface. This manipulation of the argument shareSpeed causes stack-based buffer overflow. Remote...
EUVD-2026-56945
An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 Build 9510.1044 and earlier versions. A local attacker with the ability to interact with the service could exploit this behavior to perform unauthorized actions through the affect...
EUVD-2026-56687
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
EUVD-2026-56463
Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-56369
Integer underflow wrap or wraparound in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network...
EUVD-2026-41940
Traefik: Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth...
EUVD-2026-50947
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartShare: through 2.3.1712.1202, which is supported on Microsoft Windows 10 and earlier versions...
EUVD-2026-50204
Apache Traffic Server mishandles integers while decoding HPACK/XPACK headers, corrupting memory. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...
EUVD-2026-49046
A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-agent/plugins/platforms/simplex/adapter.py of the component SimpleX Gateway Authorization. The manipulation of the argument contactId results in improp...
EUVD-2026-46498
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...
EUVD-2026-46350
A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow an remote low-privileged user to execute arbitrary code as a privileged user on the underlying operating system...
EUVD-2026-44968
rz-libdemangle is a Rizin library for demangling symbols. Prior to 6bf56d3, the Rust demangler in src/rust/rustv0.c can perform an out-of-bounds read when the demangler structure is not yet initialized. This issue is fixed in commit 6bf56d3...
EUVD-2026-44837
A flaw has been found in H3C SecPath F1000-C8300 up to 20260522. This impacts an unknown function of the file /webui/?g=logfwnbcmailjsondata. Executing a manipulation of the argument subject can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be...
EUVD-2026-44597
A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the server's environment-configured Grafana service-account token by supplying a crafted X-Grafana-URL request header. This also enables SSRF against arbitrary internal services, including cloud...
EUVD-2026-44027
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
EUVD-2026-42154
Trueview Security camera T18161- AF v4.9.60.0 contains an authentication bypass vulnerability caused by improper password validation and the presence of hard-coded credentials in the firmware...
EUVD-2026-41610
A vulnerability has been found in DeepMyst Mysti up to 0.4.0. The affected element is the function initProjectMemory of the file src/managers/MemoryManager.ts of the component Per-Project Auto-Memory Handler. Such manipulation of the argument workspacePath leads to exposure of resource. The attac...
EUVD-2026-41452
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS SIP Proxy module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-6947. This issue affects Fireware OS 12.0 up to and...
EUVD-2026-41379
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Protect Application API endpoints...