468975 matches found
EUVD-2025-19921
Malicious code in bioql PyPI...
EUVD-2024-35466
Malicious code in bioql PyPI...
EUVD-2021-8842
Malicious code in bioql PyPI...
EUVD-2023-31858
Malicious code in bioql PyPI...
EUVD-2023-28803
Malicious code in bioql PyPI...
EUVD-2022-1052
Malicious code in bioql PyPI...
EUVD-2021-31368
Malicious code in bioql PyPI...
EUVD-2024-1212
Malicious code in bioql PyPI...
EUVD-2023-25696
Malicious code in bioql PyPI...
EUVD-2025-10546
Malicious code in bioql PyPI...
EUVD-2023-30710
Malicious code in bioql PyPI...
EUVD-2023-44308
Malicious code in bioql PyPI...
EUVD-2023-0891
Malicious code in bioql PyPI...
EUVD-2023-24076
Malicious code in bioql PyPI...
EUVD-2023-33782
Malicious code in bioql PyPI...
EUVD-2022-1591
Malicious code in bioql PyPI...
EUVD-2025-18114
Malicious code in bioql PyPI...
EUVD-2024-48483
Malicious code in bioql PyPI...
EUVD-2022-2081
Malicious code in bioql PyPI...
EUVD-2023-34988
Malicious code in bioql PyPI...
EUVD-2023-24189
Malicious code in bioql PyPI...
EUVD-2022-1366
Malicious code in bioql PyPI...
EUVD-2021-6821
Malicious code in bioql PyPI...
EUVD-2024-31296
Malicious code in bioql PyPI...
EUVD-2025-27018
Malicious code in bioql PyPI...
EUVD-2025-17796
Malicious code in bioql PyPI...
EUVD-2025-22806
Malicious code in bioql PyPI...
EUVD-2025-5077
Navidrome is an open source web-based music collection server and streamer. Starting in version 0.52.0 and prior to version 0.54.5, in certain Subsonic API endpoints, a flaw in the authentication check process allows an attacker to specify any arbitrary username that does not exist on the system,...
EUVD-2026-92809
Docling: METS-GBS archive member limit enforced after full member enumeration memory exhaustion during format detection...
EUVD-2026-92078
A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack...
EUVD-2026-92065
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28...
EUVD-2026-81323
Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled...
EUVD-2026-75010
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems...
EUVD-2026-73913
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
EUVD-2026-73774
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
EUVD-2026-73671
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...
EUVD-2026-73124
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
EUVD-2026-70702
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-69458
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script...
EUVD-2026-69138
A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A crafted CIP packet can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover...
EUVD-2026-64632
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...
EUVD-2026-63491
A vulnerability was found in elunez eladmin up to 2.7. The impacted element is the function EmailController/AliPayController/GeneratorController/GenConfigController. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been made public and could...
EUVD-2026-61341
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...
EUVD-2026-60506
The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to a denial-of-service...
EUVD-2026-60352
An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role...
EUVD-2026-59667
In the Linux kernel, the following vulnerability has been resolved: vxlan: use pskbnetworkmaypull for transmit path header pulls In vxlanxmit, arpreduce, and vxlanmdbentryskbget, pskbmaypull was being called to verify the availability of network layer headers ARP, IPv6/ND, IP/IPv6 MDB keys...
EUVD-2026-59233
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix malformed ISOEND/CONT handling Core specification Part C vol 4 sec 5.4.5 does not exclude empty ISOCONT, ISOEND packets. We currently reject them if they are last. If controller sends malformed sequence ISOSTA...
EUVD-2026-59066
In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consistency on commit failure reservemetadatasnap and releasemetadatasnap modify the superblock's heldroot directly in the blockmanager's buffer. If the subsequent metadata commit fails, th...
EUVD-2026-58639
The getgrav/grav-plugin-api plugin before 1.0.13 contains an API-key scope cap bypass in the POST /reports/twig-content/allowlist endpoint ReportsController. The endpoint enforces requirePermission'api.config.write' followed by a bare isSuperAdmin check instead of requireSuper. Because isSuperAdm...