EUVD-2020-24722

Malware in sbrugna...

EUVD-2025-20852

Malicious code in bioql PyPI...

EUVD-2021-9817

Malicious code in bioql PyPI...

EUVD-2022-27632

Malicious code in bioql PyPI...

EUVD-2022-53125

Malicious code in bioql PyPI...

EUVD-2024-39560

Malicious code in bioql PyPI...

EUVD-2024-17507

Malicious code in bioql PyPI...

EUVD-2024-41296

Malicious code in bioql PyPI...

EUVD-2022-1107

Malicious code in bioql PyPI...

EUVD-2024-2515

Malicious code in bioql PyPI...

EUVD-2022-39469

Malicious code in bioql PyPI...

EUVD-2025-6218

Malicious code in bioql PyPI...

EUVD-2022-33553

Malicious code in bioql PyPI...

EUVD-2024-52801

Malicious code in bioql PyPI...

EUVD-2024-36763

Malicious code in bioql PyPI...

EUVD-2023-0527

Malicious code in bioql PyPI...

EUVD-2025-11357

Malicious code in bioql PyPI...

EUVD-2023-58182

Malicious code in bioql PyPI...

EUVD-2023-1681

Malicious code in bioql PyPI...

EUVD-2023-0851

Malicious code in bioql PyPI...

EUVD-2025-27665

Malicious code in bioql PyPI...

EUVD-2022-6481

Malicious code in bioql PyPI...

EUVD-2023-45177

Malicious code in bioql PyPI...

EUVD-2025-10910

Malicious code in bioql PyPI...

EUVD-2025-27227

Malicious code in bioql PyPI...

EUVD-2023-1240

Malicious code in bioql PyPI...

EUVD-2023-2203

Malicious code in bioql PyPI...

EUVD-2023-34787

Malicious code in bioql PyPI...

EUVD-2022-6354

PrestaShop is an Open Source e-commerce platform. In versions from 1.6.0.10 and before 1.7.8.7 PrestaShop is subject to an SQL injection vulnerability which can be chained to call PHP's Eval function on attacker input. The problem is fixed in version 1.7.8.7. Users are advised to upgrade. Users...

EUVD-2026-44819

Anubis: Policy bypass via client controlled X-Original-URI header...

EUVD-2026-81122

A vulnerability in an API of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request ...

EUVD-2026-79511

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

EUVD-2026-78684

MCP Gateway allows easy and secure running and deployment of MCP servers. From 0.21.0 until 0.42.2, Docker MCP Gateway YAML-unmarshalled the attacker-controlled io.docker.server.metadata OCI image label into the broad catalog.Server structure for direct docker:// references and catalog snapshot...

EUVD-2026-78002

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to cause unexpected system termination...

EUVD-2026-73898

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73808

Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally...

EUVD-2026-73775

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...

EUVD-2026-73683

Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

EUVD-2026-73320

Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-70144

A vulnerability exists in NGINX JavaScript where a malformed HTTP response received by ngx.fetch can crash an NGINX worker when trusted JavaScript reads Response.statusText. Exploitation requires control or influence over the fetched HTTP response. Impact: This vulnerability may allow remote...

EUVD-2026-44820

Qinglong has an incomplete fix for CVE-2026-3965: Improper Authentication...

EUVD-2026-62480

The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...

EUVD-2026-60443

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQ...

EUVD-2026-59224

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Branch Sampling BRS and Last Branch Record LBR are mutually exclusive hardware features, and users of both are tracked via cpuc-lbrusers. When SVM is toggled on a CPU...

EUVD-2026-58476

IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in log files in IBM Storage Scale Management GUI The admin password is logged into the GUI log of IBM Storage Scale Systems Deploy and Upgrade from GUI. Secrets may be disclosed in information related ...

EUVD-2026-57871

Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.18 versions...

EUVD-2026-56459

Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-56139

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit Fields Set node. The node assigns output fields via a dot-notation path setter without restricting the field name, allowing an authenticated user to name a field after an inherited built-in method pat...

EUVD-2026-50215

Keycloak provides a way to manage identity providers and organizations through its administrative API. A flaw was discovered where an administrator with permission to manage identity providers could link a new provider to an organization without having the required permissions to manage that...

EUVD-2026-48782

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adfdisablesriov The VF2PF interrupt handler queues PF-side response work that stores a raw pointer to per-VF state struct adfaccelvfinfo. Currently, adfdisablesriov destroys per-VF...