Lucene search
+L
EuvdMost viewed

452462 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•41 views

EUVD-2025-19743

Malicious code in bioql PyPI...

3.8CVSS6.6AI score0.00139EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•41 views

EUVD-2025-18638

Malicious code in bioql PyPI...

7.5CVSS6.4AI score0.00329EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•42 views

EUVD-2022-2504

Malicious code in bioql PyPI...

4.3CVSS9.1AI score0.08882EPSS
SaveExploits0References42
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•42 views

EUVD-2024-17507

Malicious code in bioql PyPI...

6.1CVSS7AI score0.00374EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•41 views

EUVD-2023-28821

Malicious code in bioql PyPI...

8.8CVSS8.5AI score0.00713EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•41 views

EUVD-2025-20852

Malicious code in bioql PyPI...

6.5CVSS6.3AI score0.00297EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•41 views

EUVD-2023-2924

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.007EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•41 views

EUVD-2025-31305

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00273EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•41 views

EUVD-2025-18453

Malicious code in bioql PyPI...

9CVSS8.8AI score0.01012EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•41 views

EUVD-2023-43187

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.01993EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•41 views

EUVD-2025-10546

Malicious code in bioql PyPI...

6.9CVSS6.3AI score0.00305EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•41 views

EUVD-2025-16777

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.00447EPSS
SaveExploits1References4
EUVD
EUVD
•added 2022/08/01 7:30 p.m.•41 views

EUVD-2022-6354

PrestaShop is an Open Source e-commerce platform. In versions from 1.6.0.10 and before 1.7.8.7 PrestaShop is subject to an SQL injection vulnerability which can be chained to call PHP's Eval function on attacker input. The problem is fixed in version 1.7.8.7. Users are advised to upgrade. Users...

9.8CVSS9.5AI score0.06617EPSS
SaveExploits2References5
EUVD
EUVD
•added 2020/10/16 10:17 p.m.•41 views

EUVD-2020-8887

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

7.8CVSS7.7AI score0.03697EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 7:53 p.m.•40 views

EUVD-2026-38570

Ash: Private action arguments can be set by user input via string-keyed params and atomic changesets...

5.9CVSS5.7AI score0.00367EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/08 8:55 p.m.•40 views

EUVD-2026-69649

joi: Prototype pollution via a proto language key in custom messages...

3.7CVSS5.8AI score0.00389EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/28 6:48 a.m.•40 views

EUVD-2026-67488

In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsulation skb metadata is meant for passing information between XDP and TC. It lives in the skb headroom, immediately before skb-data. LWT programs cannot access the skbuff-datameta...

5.8AI score0.00553EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/16 8:20 a.m.•40 views

EUVD-2026-59939

In the Linux kernel, the following vulnerability has been resolved: crypto: algifskcipher - force synchronous processing on trees without ctx-state The AIO/async path in skcipherrecvmsg passes the socket-wide ctx-iv directly into the skcipher request. After iosubmit the socket lock is dropped and...

5.4AI score0.00194EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/08/15 5:55 a.m.•40 views

EUVD-2026-59224

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Branch Sampling BRS and Last Branch Record LBR are mutually exclusive hardware features, and users of both are tracked via cpuc-lbrusers. When SVM is toggled on a CPU...

5.5AI score0.00209EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/14 11:35 a.m.•40 views

EUVD-2026-58639

The getgrav/grav-plugin-api plugin before 1.0.13 contains an API-key scope cap bypass in the POST /reports/twig-content/allowlist endpoint ReportsController. The endpoint enforces requirePermission'api.config.write' followed by a bare isSuperAdmin check instead of requireSuper. Because isSuperAdm...

7.6CVSS5.5AI score0.00346EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/12 5:19 p.m.•40 views

EUVD-2026-57359

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

8.8CVSS5.4AI score0.00524EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 5:06 p.m.•40 views

EUVD-2026-56661

Improper link resolution before file access 'link following' in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

7.8CVSS5.1AI score0.0037EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 5:05 p.m.•40 views

EUVD-2026-56469

Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...

7.3CVSS5.1AI score0.00321EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 5:05 p.m.•40 views

EUVD-2026-56459

Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS5.3AI score0.00466EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 2:26 p.m.•40 views

EUVD-2026-56158

Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker in a MITM position to leak credentials for external SQL connections...

8.1CVSS5.5AI score0.01455EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 12:31 a.m.•40 views

EUVD-2025-210675

In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. Successful exploitation may allow access to decrypted...

8.5CVSS5.3AI score0.00198EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/06 3:11 p.m.•40 views

EUVD-2026-54093

Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote authenticated user to read, modify and delete other users' transcription content via primary keys supplied in the request body, which are...

8.8CVSS5.5AI score0.00528EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/29 7:02 p.m.•40 views

EUVD-2026-50486

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper...

4.7CVSS6.2AI score0.00286EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/24 5:04 p.m.•40 views

EUVD-2026-42631

Open WebUI: /api/v1/channels/id/members exposes full user model including sensitive credentials...

6.5CVSS5.8AI score0.00462EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/07/22 12:31 a.m.•40 views

EUVD-2026-46929

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identit...

9.1CVSS7.1AI score0.00425EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/20 7:02 a.m.•40 views

EUVD-2026-45895

Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography...

9.8CVSS5.3AI score0.00553EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/19 12:30 a.m.•40 views

EUVD-2026-45403

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /forexam.php. The manipulation of the argument day results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to...

5.1CVSS3.7AI score0.00348EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/07/18 8:57 a.m.•40 views

EUVD-2026-45366

VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, authenticated network users to perform directory traversal attacks. Affected versions: 32.1.1 fixed in 32.1.2 31.1.1 through 31.2.2 fixed in 31.2.2-2p3 30.1.1 through 30.2.6 fixed...

8.8CVSS5.2AI score0.00959EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/17 12:06 a.m.•40 views

EUVD-2026-45092

OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables. Attackers with lower-trust caller access or configured input paths can execute or persist actions beyond their intended authorization...

8.8CVSS6.2AI score0.00525EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/16 7:15 p.m.•40 views

EUVD-2026-45032

bunkerweb is an Open-source and next-generation Web Application Firewall WAF. From 1.6.2 until 1.6.12, the BunkerWeb web UI BiscuitMiddleware authorization bypass list included the /cache/ URL prefix, so routes in src/ui/app/routes/cache.py protected only by @loginrequired, including POST...

5.4CVSS6.1AI score0.0043EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/11 6:50 a.m.•40 views

EUVD-2026-43164

The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.4 via the setupSources function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

7.5CVSS6.2AI score0.02861EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/07/10 1:57 p.m.•40 views

EUVD-2026-42888

ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion...

4.8CVSS6.1AI score0.00295EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/10 12:04 a.m.•40 views

EUVD-2026-34012

Tesla vulnerable to multipart part smuggling via unescaped content-disposition values...

2.1CVSS5.9AI score0.00337EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/07/09 12:31 a.m.•40 views

EUVD-2026-42492

A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the file /editfooditems.php. The manipulation of the argument update results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the publ...

7.5CVSS6.8AI score0.00431EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/07/07 4:18 p.m.•40 views

EUVD-2025-210439

A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting XSS attack. If using a set of combined configuration to allow unescaped characters in URL with embedded Undertow and Jastow, a server might be vulnerable to improper input handling...

6.5CVSS5.9AI score0.00408EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/07/02 8:29 a.m.•40 views

EUVD-2026-41259

PIA's OIDC issuer allowlist for Jenkins tokens uses a bare string-prefix check issuer.startswith' https://ci.eclipse.org ' in isissuerknown, pia/models.py:139 instead of validating the issuer as a properly host-bounded URL. An attacker can craft an issuer such as https://[email protected]...

8.2CVSS6AI score0.00321EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/30 6:16 p.m.•40 views

EUVD-2026-36096

Fission: Cross-namespace Package read via unvalidated PackageRef in Function admission webhook...

7.7CVSS5.8AI score0.00437EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/06/30 8:55 a.m.•40 views

EUVD-2025-210369

Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authenticated attacker to upload malicious files onto the system...

7.8CVSS5.8AI score0.00162EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/29 7:42 p.m.•40 views

EUVD-2026-40201

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may exfiltrate data cross-origin...

4.3CVSS5.8AI score0.00374EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/06/29 3:23 p.m.•40 views

EUVD-2026-40127

Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an authenticated user with AI Agent read access to obtain reusable, potentially higher-privileged authentication tokens via App Tokens serialized in plaintext in job API...

6.5CVSS5.8AI score0.00438EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/29 8:06 a.m.•40 views

EUVD-2026-40053

A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be...

6.8CVSS5.7AI score0.00168EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/06/27 12:30 a.m.•40 views

EUVD-2026-39925

The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access...

9.3CVSS5.8AI score0.00569EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/06/26 9:03 p.m.•40 views

EUVD-2026-37943

deepstream is vulnerable to prototype pollution...

9.9CVSS5.8AI score0.0047EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/06/25 8:38 p.m.•40 views

EUVD-2026-39560

Certificate policy and RFC 8446 compliance concerns regarding the continued acceptance of SHA-1/MD5 in certificate processing...

2.3CVSS5.8AI score0.0011EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/06/25 12:33 a.m.•40 views

EUVD-2026-39109

Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is required to exploit this vulnerability. The specific flaw exists within ToggleState.php...

8.8CVSS7.8AI score0.01888EPSS
SaveExploits0References2
Total number of security vulnerabilities5000