434743 matches found
EUVD-2022-52311
Malicious code in bioql PyPI...
EUVD-2022-42645
Malicious code in bioql PyPI...
EUVD-2024-37625
Malicious code in bioql PyPI...
EUVD-2024-26765
Malicious code in bioql PyPI...
EUVD-2022-31814
Malicious code in bioql PyPI...
EUVD-2025-24799
Malicious code in bioql PyPI...
EUVD-2022-43158
Malicious code in bioql PyPI...
EUVD-2025-19427
Malicious code in bioql PyPI...
EUVD-2024-27251
Malicious code in bioql PyPI...
EUVD-2024-36995
Malicious code in bioql PyPI...
EUVD-2023-58181
Malicious code in bioql PyPI...
EUVD-2025-28005
Malicious code in bioql PyPI...
EUVD-2025-30468
Malicious code in bioql PyPI...
EUVD-2025-25177
Malicious code in bioql PyPI...
EUVD-2022-4315
Malicious code in bioql PyPI...
EUVD-2023-12347
Malicious code in bioql PyPI...
EUVD-2025-14451
Malicious code in bioql PyPI...
EUVD-2022-44370
Malicious code in bioql PyPI...
EUVD-2025-30275
Malicious code in bioql PyPI...
EUVD-2022-4025
Malicious code in bioql PyPI...
EUVD-2025-6063
Malicious code in bioql PyPI...
EUVD-2025-30509
Malicious code in bioql PyPI...
EUVD-2023-44433
Malicious code in bioql PyPI...
EUVD-2025-18966
An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. The usbinteract.cgi script fails to properly sanitize user input passed to the path parameter, allowing unauthenticated remote attackers to inject arbitrary shell commands. The injected...
EUVD-2023-41815
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Creative Solutions Contact Form Generator plugin = 2.5.5 versions...
EUVD-2020-8137
An issue was discovered in Acronis Cyber Backup before 12.5 Build 16342. Some API endpoints on port 9877 under /api/ams/ accept an additional custom Shard header. The value of this header is afterwards used in a separate web request issued by the application itself. This can be abused to conduct...
EUVD-2026-56702
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-56625
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...
EUVD-2026-56463
Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-56459
Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-41940
Traefik: Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth...
EUVD-2026-42631
Open WebUI: /api/v1/channels/id/members exposes full user model including sensitive credentials...
EUVD-2026-42629
Open WebUI: Cross-user model-list exposure via static cache key in getallmodels aiocache key= vs keybuilder= misuse...
EUVD-2026-48310
Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer. A remote, unauthenticated attacker could exploit HTTP/2 flow-control by setting SETTINGSINITIALWINDOWSIZE to 0 or withholding WINDOWUPDATE frames, causing the server to buffer complete response bodies ...
EUVD-2026-46929
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identit...
EUVD-2026-46414
FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the selectForm helper in fogpage.class.php renders labels using raw, unescaped user input. An unauthenticated attacker who knows any registered host's MAC address...
EUVD-2026-42577
body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement...
EUVD-2026-45248
Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.6, DNSIncoming.logexceptiondebug and the four QuietLogger exception-dedup methods stored an unbounded seenlogs dictionary keyed by attacker-influenced IncomingDecodeError messages, retaining sys.excinfo...
EUVD-2026-44868
In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path In ipappenddata, when the paged-allocation branch is taken, alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen; pagedlen = datalen - transhdrlen;...
EUVD-2026-44561
Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed...
EUVD-2026-43941
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...
EUVD-2026-42867
SQL Injection vulnerability in elixir-ecto postgrex allows an attacker who can influence a LISTEN channel name to inject SQL into the reconnect replay query, causing a denial of service of the notification connection. Postgrex.Notifications sanitizes channel names with quotechannel/1, which doubl...
EUVD-2026-34013
Tesla vulnerable to atom exhaustion via untrusted URL scheme...
EUVD-2026-42701
An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS.Micro-BFD session flaps generate respective up/down events which are queued by PFEMAN for...
EUVD-2026-42340
Horde Virtual File System VFS API before 3.0.1 contains an OS command injection vulnerability in the HordeVfsSmb driver where the escapeShellCommand method fails to sanitize command substitution sequences, allowing authenticated attackers to inject arbitrary shell commands through user-controlled...
EUVD-2026-41660
A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function QueuePushReqStreamObserver.initEggroll of the file java/osx/osx-broker/src/main/java/org/fedai/osx/broker/grpc/QueuePushReqStreamObserver.java of the component OSX Broker. Such manipulation of the argument...
EUVD-2026-41588
Improper input validation in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
EUVD-2026-41452
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS SIP Proxy module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-6947. This issue affects Fireware OS 12.0 up to and...