468799 matches found
EUVD-2026-18945
Electron: Registry key path injection in app.setAsDefaultProtocolClient on Windows...
EUVD-2026-17636
PdfDing is a selfhosted PDF manager, viewer and editor offering a seamless user experience on multiple devices. Prior to version 1.7.1, checksharedaccessallowed validates only session existence — it does not check SharedPdf.inactive expiration / max views or SharedPdf.deleted. The Serve and...
EUVD-2026-15378
In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing struct bpfplt contains a u64 target field. Currently, the BPF JIT allocator requests an alignment of 4 bytes sizeofu32 for the JIT buffer. Because the ba...
EUVD-2026-15003
NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user could cause unsafe deserialization by providing a specially crafted input file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,...
EUVD-2026-13259
OpenClaw versions prior to 2026.3.2 contain an authentication bypass vulnerability in the /api/channels route classification due to canonicalization depth mismatch between auth-path classification and route-path canonicalization. Attackers can bypass plugin route authentication checks by submitti...
EUVD-2026-13253
OpenClaw versions prior to 2026.2.22 contain an authentication bypass vulnerability that allows clients authenticated with a shared gateway token to connect as role=node without device identity verification. Attackers can exploit this by claiming the node role during WebSocket handshake to inject...
EUVD-2026-13237
A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate revocation checks. To remediate this issue, users should upgrade to AWS-LC 1.71.0 or...
EUVD-2026-10789
MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to version 0.17.0, an unauthenticated attacker who can reach the mcp-atlassian HTTP endpoint can force the server process to make outbound HTTP requests to an arbitrary attacker-controlled URL b...
EUVD-2026-10523
A NULL Pointer Dereference vulnerability CWE-476 vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow an authenticated attacker to crash the HTTP daemon via crafted HTTP...
EUVD-2026-9361
The Mail Mint WordPress plugin before 1.19.5 does not have authorization in one of its REST API endpoint, allowing unauthenticated users to call it and retrieve the email addresses of users on the blog...
EUVD-2026-9083
Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, the redirecttotarget function in Gradio's OAuth flow accepts an unvalidated targeturl query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback...
EUVD-2026-5819
A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/setacstatus. Performing a manipulation of the argument acipaddr/acipstatus/aprandtime results in os command injection. The attack may be initiated remotely. The exploit ha...
EUVD-2026-3603
An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads a string length from untrusted GGUF metadata...
EUVD-2025-205780
Picklescan is vulnerable to RCE via missing detection when calling built-in python operator.attrgetter...
EUVD-2025-203957
nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows...
EUVD-2025-204024
Memory corruption while loading an invalid firmware in boot loader...
EUVD-2025-178264
Malicious code in joviology-mocha-cluster-redshift npm...
EUVD-2025-144428
Malicious code in hereis-manic-tauwa npm...
EUVD-2025-53006
Malicious code in notable-yellow-lungfish npm...
EUVD-2025-37324
Potential information leak in bolt protocol handshake in Neo4j Enterprise and Community editions allows attacker to obtain one byte of information from previous connections. The attacker has no control over the information leaked in server responses...
EUVD-2025-34727
HCL BigFix Modern Client Management MCM 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...
EUVD-2021-11904
Malware in sbrugna...
EUVD-2021-2213
Malware in sbrugna...
EUVD-2020-27228
Malware in sbrugna...
EUVD-2020-4557
Malware in sbrugna...
EUVD-2020-20532
Malware in sbrugna...
EUVD-2012-4895
Malware in sbrugna...
EUVD-2015-0038
Malware in sbrugna...
EUVD-2021-18822
Malware in sbrugna...
EUVD-2021-21066
Malware in sbrugna...
EUVD-2017-9775
Malware in sbrugna...
EUVD-2018-19030
Malware in sbrugna...
EUVD-2006-1890
Malware in sbrugna...
EUVD-2010-2250
Malware in sbrugna...
EUVD-2021-15332
Malware in sbrugna...
EUVD-2020-5497
Malware in sbrugna...
EUVD-2018-1054
Malware in sbrugna...
EUVD-2021-11188
Malware in sbrugna...
EUVD-2015-2521
Malware in sbrugna...
EUVD-2017-8821
Malware in sbrugna...
EUVD-2019-16399
Malware in sbrugna...
EUVD-2005-3735
Malware in sbrugna...
EUVD-2014-1989
Malware in sbrugna...
EUVD-2023-28821
Malicious code in bioql PyPI...
EUVD-2023-43187
Malicious code in bioql PyPI...
EUVD-2025-16627
Malicious code in bioql PyPI...
EUVD-2022-3520
Malicious code in bioql PyPI...
EUVD-2025-13482
Malicious code in bioql PyPI...