Euvd - Page 49 of Euvd Most Viewed Vulnerabilities List

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection', Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Microchip TimeProvider 4100 Configuration modules allows Command Injection.This issue affects TimeProvider 4100: from 1.0 before...

8.8CVSS8.7AI score0.14609EPSS

Exploits3References2

EUVD•added 2020/10/16 10:18 p.m.•20 views

EUVD-2020-8925

A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user...

9.3CVSS7.7AI score0.03871EPSS

Exploits0References1

EUVD•added 2026/06/10 1:55 p.m.•19 views

EUVD-2026-36034

A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the /api/v1/sources/id/image-url endpoint. This flaw allows the attacker to bypass an ownership check and obtain presigned S3 URLs for Open Virtual Appliance OVA images...

9.6CVSS5.5AI score0.0028EPSS

Exploits0References3

EUVD•added 2026/06/09 6:30 p.m.•19 views

EUVD-2026-35536

Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network...

7.5CVSS5.5AI score0.00671EPSS

Exploits0References2

EUVD•added 2026/06/09 5:6 p.m.•19 views

EUVD-2026-35728

Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally...

5.5CVSS5.4AI score0.00388EPSS

Exploits0References1

EUVD•added 2026/06/09 5:6 p.m.•19 views

EUVD-2026-35724

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

7.5CVSS6.1AI score0.00473EPSS

Exploits0References1

EUVD•added 2026/06/09 5:5 p.m.•19 views

EUVD-2026-35593

Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network...

9.6CVSS5.8AI score0.00438EPSS

Exploits0References1

EUVD•added 2026/06/09 9:51 a.m.•19 views

EUVD-2026-35390

A Stored Cross-Site Scripting vulnerability in Vinna Process Monitor Version 4.0 Service Pack 1 Build 63255 allows an authenticated remote attacker with low privileges to inject malicious JavaScript code into the application. This enables attackers to steal administrative access tokens and sessio...

9.3CVSS5.6AI score0.00242EPSS

Exploits0References1

EUVD•added 2026/06/07 8:0 a.m.•19 views

EUVD-2026-34988

A weakness has been identified in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This issue affects some unknown processing of the file /base-boot/actuator of the component Boot Actuator Endpoint. Executing a manipulation can lead to information disclosure. The attack can be...

6.9CVSS5.5AI score0.00292EPSS

Exploits0References5

EUVD•added 2026/06/05 12:31 a.m.•19 views

EUVD-2026-34341

A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system. This vulnerability is due to insufficient validation of user-supplied input...

7.8CVSS6.1AI score0.25323EPSS

Exploits2References3

EUVD•added 2026/06/05 12:31 a.m.•19 views

EUVD-2026-34482

Uninitialized Use in WebML in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.0025EPSS

Exploits0References3

Total number of security vulnerabilities5000