469389 matches found
EUVD-2026-15876
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Blind SQL Injection.This issue affects Miraculous Core Plugin: from n/a through 2.1.2...
EUVD-2026-15800
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in G5Theme Darna Framework darna-framework allows Reflected XSS.This issue affects Darna Framework: from n/a through = 2.9...
EUVD-2026-15413
A use-after-return vulnerability exists in the named server when handling DNS queries signed with SIG0. Using a specially-crafted DNS request, an attacker may be able to cause an ACL to improperly mismatch an IP address. In a default-allow ACL denying only specific IP addresses, this may lead to...
EUVD-2026-14620
The WP Job Portal plugin for WordPress is vulnerable to SQL Injection via the 'radius' parameter in all versions up to, and including, 2.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
EUVD-2025-208483
A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyzer 7.0.0 through 7.0.14, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.7,...
EUVD-2026-9688
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Motorix motorix allows PHP Local File Inclusion.This issue affects Motorix: from n/a through = 1.6...
EUVD-2026-9265
Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP CIPHER API: EVPaes128ccm, EVPaes192ccm, and EVPaes256ccm. Customers of AWS servic...
EUVD-2025-208211
In multiple functions of ContentProvider.java, there is a possible way for an app with read-only access to truncate files due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
EUVD-2026-8800
Svelte: XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers...
EUVD-2026-4810
Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in themrdemonized xray-monolith.This issue affects xray-monolith: before 2025.12.30...
EUVD-2026-3209
HCL AION version 2 is affected by a Cacheable HTTP Response vulnerability. This may lead to unintended storage of sensitive or dynamic content, potentially resulting in unauthorized access or information disclosure...
EUVD-2026-2421
Shopware is an open commerce platform. From 6.7.0.0 to before 6.7.6.1, a regression of CVE-2023-2017 leads to an array and array crafted PHP Closure not checked being against allow list for the map... override. This vulnerability is fixed in 6.7.6.1...
EUVD-2026-1463
wolfSSL Python module vulnerable to Improper Authentication...
EUVD-2025-205835
JD Cloud NAS routers AX1800 4.3.1.r4308 and earlier, AX3000 4.3.1.r4318 and earlier, AX6600 4.5.1.r4533 and earlier, BE6500 4.4.1.r4308 and earlier, ER1 4.5.1.r4518 and earlier, and ER2 4.5.1.r4518 and earlier contain an unauthorized remote command execution vulnerability...
EUVD-2025-204545
The Takes web framework's TkFiles take thru 2.0-SNAPSHOT fails to canonicalize HTTP request paths before resolving them against the filesystem. A remote attacker can include ../ sequences in the request path to escape the configured base directory and read arbitrary files from the host system...
EUVD-2025-75550
Malicious code in standardraccoon-smiletea npm...
EUVD-2025-35625
pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...
EUVD-2025-34251
Argo Workflow has a Zipslip Vulnerability...
EUVD-2015-4602
Malware in sbrugna...
EUVD-2016-1955
Malware in sbrugna...
EUVD-2020-2570
Malware in sbrugna...
EUVD-2020-8182
Malware in sbrugna...
EUVD-2014-0161
Malware in sbrugna...
EUVD-2021-1067
Malware in sbrugna...
EUVD-2016-9380
Malware in sbrugna...
EUVD-2020-10887
Malware in sbrugna...
EUVD-2019-9469
Malware in sbrugna...
EUVD-2021-24611
Malware in sbrugna...
EUVD-2020-20794
Malware in sbrugna...
EUVD-2019-7942
Malware in sbrugna...
EUVD-2020-29904
Malware in sbrugna...
EUVD-2018-13380
Malware in sbrugna...
EUVD-2020-18842
Malware in sbrugna...
EUVD-2019-5534
Malware in sbrugna...
EUVD-2014-2134
Malware in sbrugna...
EUVD-2021-0871
Malware in sbrugna...
EUVD-2021-2317
Malware in sbrugna...
EUVD-2021-0287
Malware in sbrugna...
EUVD-2021-2157
Malware in sbrugna...
EUVD-2021-19504
Malware in sbrugna...
EUVD-2021-1894
Malware in sbrugna...
EUVD-2018-10471
Malware in sbrugna...
EUVD-2021-11595
Malware in sbrugna...
EUVD-2021-15143
Malware in sbrugna...
EUVD-2021-25130
Malware in sbrugna...
EUVD-2025-29636
Malicious code in bioql PyPI...
EUVD-2023-43786
Malicious code in bioql PyPI...
EUVD-2022-46650
Malicious code in bioql PyPI...