Lucene search
+L
EuvdMost viewed

434180 matches found

EUVD
EUVD
added 2026/07/10 10:51 a.m.30 views

EUVD-2026-42867

SQL Injection vulnerability in elixir-ecto postgrex allows an attacker who can influence a LISTEN channel name to inject SQL into the reconnect replay query, causing a denial of service of the notification connection. Postgrex.Notifications sanitizes channel names with quotechannel/1, which doubl...

2.1CVSS6.3AI score0.00163EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/10 12:3 a.m.30 views

EUVD-2026-34013

Tesla vulnerable to atom exhaustion via untrusted URL scheme...

8.2CVSS5.9AI score0.00301EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/07/09 12:31 a.m.30 views

EUVD-2026-42492

A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the file /editfooditems.php. The manipulation of the argument update results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the publ...

7.5CVSS6.8AI score0.00269EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/07/08 4:25 p.m.30 views

EUVD-2026-42340

Horde Virtual File System VFS API before 3.0.1 contains an OS command injection vulnerability in the HordeVfsSmb driver where the escapeShellCommand method fails to sanitize command substitution sequences, allowing authenticated attackers to inject arbitrary shell commands through user-controlled...

8.8CVSS6.2AI score0.01761EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/04 8:15 a.m.30 views

EUVD-2026-41660

A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function QueuePushReqStreamObserver.initEggroll of the file java/osx/osx-broker/src/main/java/org/fedai/osx/broker/grpc/QueuePushReqStreamObserver.java of the component OSX Broker. Such manipulation of the argument...

3.1CVSS5.1AI score0.0024EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/07/03 8:35 p.m.30 views

EUVD-2026-41588

Improper input validation in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

7.5CVSS6.1AI score0.00279EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/03 12:31 a.m.30 views

EUVD-2026-41452

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS SIP Proxy module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-6947. This issue affects Fireware OS 12.0 up to and...

4.8CVSS5.7AI score0.00476EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/02 4:0 p.m.30 views

EUVD-2026-36318

OpenClaw's browser act interactions could bypass private-network navigation checks...

7.7CVSS5.8AI score0.00247EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/02 11:15 a.m.30 views

EUVD-2026-41308

Contributor SQL Injection in iNET Webkit 1.2.4 versions...

8.5CVSS5.8AI score0.00281EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/02 11:15 a.m.30 views

EUVD-2026-41305

Contributor Local File Inclusion in SportsPress Pro = 2.7.29 versions...

7.5CVSS5.8AI score0.0027EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/01 6:53 a.m.30 views

EUVD-2026-40929

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SkyBridge MB-A100/MB-A110. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product with an administrative privilege...

8.6CVSS5.9AI score0.01367EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/01 12:34 a.m.30 views

EUVD-2026-40591

Race in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. Chromium security severity: Medium...

4.2CVSS5.8AI score0.00157EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/06/30 6:16 p.m.30 views

EUVD-2026-36096

Fission: Cross-namespace Package read via unvalidated PackageRef in Function admission webhook...

7.7CVSS5.8AI score0.00265EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/06/29 6:44 p.m.30 views

EUVD-2026-40173

A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and p11rpcmessagegetattributearrayvalue form a mutually-recursive call chain with no recursion depth limit when processing nested CKAWRAPTEMPLATE, CKAUNWRAPTEMPLATE, and CKADERIVETEMPLATE attributes...

6.2CVSS5.8AI score0.00148EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/28 1:15 p.m.30 views

EUVD-2026-39997

A security flaw has been discovered in yashpokharna2555 restaurent-management-system. This impacts an unknown function of the file loginregister.php of the component Registration Handler. Performing a manipulation of the argument Username results in cross site scripting. The attack may be initiat...

5.3CVSS4.4AI score0.00278EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/06/28 12:30 a.m.30 views

EUVD-2026-39968

The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions up to and including 23.6. This is due to a case-sensitive bypass of the wpfmdirpath parameter sanitization in the wpfmfilemetaupdate AJAX handler, where supplying WPFMDIRPATH i...

8.1CVSS5.8AI score0.00405EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/06/27 12:30 a.m.30 views

EUVD-2026-39925

The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access...

9.3CVSS5.8AI score0.00415EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/06/25 6:6 p.m.30 views

EUVD-2026-39523

libais through 0.15 VdmStream::AddLine uses an unchecked sentinel value as a vector index when processing AIS sentences with empty or out-of-range sequential message IDs. Remote attackers can crash services or vessel systems by sending crafted AIVDM sentences over VHF marine radio or IP feeds,...

8.7CVSS5.9AI score0.00339EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/25 12:33 a.m.30 views

EUVD-2026-39130

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

7.8CVSS7.6AI score0.00552EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/06/24 11:53 a.m.30 views

EUVD-2026-38748

Flowise before 3.0.13 uses bcrypt with default salt rounds of 5, providing only 32 iterations instead of the OWASP-recommended minimum of 10 rounds. Attackers can crack password hashes approximately 30 times faster with modern GPU hardware, potentially compromising all user accounts in a database...

5.6CVSS5.8AI score0.00073EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/23 6:11 p.m.30 views

EUVD-2026-38566

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.184.0, organization invitations could be accepted and declined by a user whose email matched the invitation but had not been verified. Daytona authenticates users via OIDC and...

8.4CVSS6.2AI score0.00215EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/23 4:27 p.m.30 views

EUVD-2026-38516

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.7.0, the logout button does not clear the session. The previous user stays logged in unless another user explicitly logs in. This vulnerability is fixed in 1.7.0...

6.1CVSS5.9AI score0.00189EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/06/23 3:55 p.m.30 views

EUVD-2026-38486

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted column name. When an administrator...

8.9CVSS5.9AI score0.00331EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/23 3:46 p.m.30 views

EUVD-2026-38477

n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, an authenticated user with workflow edit access could inject arbitrary JavaScript into the Chat Trigger's generated page by setting a malicious webhookId. When a logged-in user visited the chat URL, the...

7CVSS6AI score0.0021EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/23 2:48 p.m.30 views

EUVD-2025-210309

Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs...

7.1CVSS5.8AI score0.00215EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/17 5:57 p.m.30 views

EUVD-2026-37774

Hermes Agent before 0.16.0 contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation. FastAPI HTTP middleware does not execute for WebSocket upgrade requests on /api/pty, /api/ws, /api/pub, and /api/events endpoints, enabling...

8.7CVSS5.6AI score0.00592EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/06/15 9:30 p.m.30 views

EUVD-2026-36756

Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionimsonwithapn via the imsapn parameter...

5.3AI score0.01345EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/12 3:16 p.m.30 views

EUVD-2026-36484

A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trustremotecode set to true in...

9.4CVSS5.8AI score0.00342EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/12 9:12 a.m.30 views

EUVD-2026-36404

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrary File Read vulnerability, allowing privileged remote attackers to access files outside the intended directory scope...

6.9CVSS5.4AI score0.00407EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/10 6:39 a.m.30 views

EUVD-2026-35992

An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. This vulnerability could lead to broken security expectations or remote code execution...

5.3CVSS6AI score0.00317EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/10 12:31 a.m.30 views

EUVD-2026-35857

A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message. The BSON validator's handling of certain nested binary data structures permits uncontrolled mutual recursion between validation functions,...

8.7CVSS5.5AI score0.00345EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/10 12:31 a.m.30 views

EUVD-2026-35845

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this iss...

6.2CVSS5.5AI score0.00153EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/10 12:31 a.m.30 views

EUVD-2026-35850

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require...

7.5CVSS5.5AI score0.0043EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/09 11:46 p.m.30 views

EUVD-2026-35884

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, a denial-of-service vulnerability exists in the Ed25519 multisig delinearization code path. Ed25519PublicKey::delinearize in keys/src/multisig/mod.rs called...

4.3CVSS5.5AI score0.00231EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/06/09 8:59 p.m.30 views

EUVD-2026-35839

Adobe Campaign Classic ACC versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed...

10CVSS5.5AI score0.00449EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/09 6:31 p.m.30 views

EUVD-2026-35522

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

7.9CVSS5.4AI score0.00303EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/09 6:30 p.m.30 views

EUVD-2026-35683

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.4AI score0.00871EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/09 6:30 p.m.30 views

EUVD-2026-35648

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

8.4CVSS6AI score0.00364EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/09 6:30 p.m.30 views

EUVD-2026-35665

Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS5.7AI score0.00372EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/09 6:30 p.m.30 views

EUVD-2026-35487

Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim's p and g parameters, a forged q = r a small prime factor of the cofacto...

3.7CVSS5.4AI score0.00455EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/06/09 12:57 p.m.30 views

EUVD-2026-35417

A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute types with trailing semicolons during database import, causing an out-of-bounds read detectable under memory instrumentation...

1.9CVSS5.6AI score0.0016EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/06/09 8:46 a.m.30 views

EUVD-2026-35382

A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 All versions, SIMATIC WinCC Unified PC Runtime V17 All versions, SIMATIC WinCC Unified PC Runtime V18 All versions, SIMATIC WinCC Unified PC Runtime V19 All versions, SIMATIC WinCC Unified PC Runtime V20 All versions,...

8.2CVSS5.4AI score0.00057EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/09 3:51 a.m.30 views

EUVD-2026-35340

A vulnerability in Spring Expression Language SpEL evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker to invoke unintended application logic. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2....

3.7CVSS5.6AI score0.00177EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/08 12:58 p.m.30 views

EUVD-2026-35062

Routinator exits on any error when accepting incoming HTTP or RTR connections, including ones it can recover from such as running out of file descriptors. This condition can be triggered maliciously by an attacker by opening a large number of connections to the HTTP or RTR server. This only affec...

8.7CVSS5.5AI score0.00342EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/06 12:45 p.m.30 views

EUVD-2026-34968

A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The impacted element is the function setmacfilter of the file /sbin/jdcwebrpc. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

9CVSS5.9AI score0.00481EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/06/04 3:54 p.m.30 views

EUVD-2026-34296

Etsy::StatsD versions through 1.002002 for Perl allow metric injections. The metric names and values are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Note that the git repository contains an unreleased version with the...

8.2CVSS5.8AI score0.00344EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/04 1:22 p.m.30 views

EUVD-2019-20176

Joomla comjsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating custom userfield parameters. Attackers can send POST requests to the job.savejob task with path traversal sequences in the field2 parameter to delete...

7.1CVSS5.9AI score0.00327EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/06/03 6:11 p.m.30 views

EUVD-2026-34165

Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContentScripts at runtime. This script is NOT declared in manifest.json and bypasses Chrome Web Store static security review. It runs on all URLs and immediately...

5.8AI score0.00374EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/03 12:0 a.m.30 views

EUVD-2026-34154

Mercusys AC12G EU V1 with firmware AC12GEUV1200909 contains hardcoded WiFi driver credentials including a RADIUS shared secret, WPS test key, and default PSK embedded in the production firmware binary...

5.8AI score0.00137EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/03 12:0 a.m.30 views

EUVD-2026-34155

Mercusys AC12G EU V1 with firmware AC12GEUV1200909 responds to version.bind CHAOS TXT queries, disclosing the DNS resolver software version unbound 1.22.0, aiding targeted attacks against known vulnerabilities...

4.3CVSS5.8AI score0.00159EPSS
SaveExploits0References1
Total number of security vulnerabilities5000