434897 matches found
EUVD-2026-1717
fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluidsynthmonopoly.c, that can be triggered when loading an invalid midi file...
EUVD-2026-1475
NiceGUI is a Python-based UI framework. From versions 2.22.0 to 3.4.1, an unsafe implementation in the pushstate event listener used by ui.subpages allows an attacker to manipulate the fragment identifier of the URL, which they can do despite being cross-site, using an iframe. This issue has been...
EUVD-2026-1209
A stored Cross-Site Scripting XSS vulnerability exists in Perch CMS version 3.2. An authenticated attacker with administrative privileges can inject malicious JavaScript code into the “Help button url” setting within the admin panel. The injected payload is stored and executed when any...
EUVD-2026-1060
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10149879; Issue ID: MSV-4658...
EUVD-2026-0978
Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63...
EUVD-2026-0873
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in jwsthemes FreeAgent allows PHP Local File Inclusion.This issue affects FreeAgent: from n/a through 2.1.2...
EUVD-2026-0046
In the plex.tv backend for Plex Media Server PMS through 2025-12-31, a non-server device token can retrieve share tokens intended for unrelated access via a sharedservers endpoint...
EUVD-2025-206012
Insertion of Sensitive Information Into Sent Data vulnerability in Razvan Stanga Varnish/Nginx Proxy Caching allows Retrieve Embedded Sensitive Data.This issue affects Varnish/Nginx Proxy Caching: from n/a through 1.8.3...
EUVD-2025-205688
A vulnerability has been found in Tenda CH22 up to 1.0.0.1. Affected by this vulnerability is the function fromDhcpListClient of the file /goform/DhcpListClient. Such manipulation of the argument LISTLEN leads to denial of service. The attack may be launched remotely. The exploit has been disclos...
EUVD-2025-205215
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF on kernel BO VA nodes If the MMU is down, panthorvmunmaprange might return an error. We expect the page table to be updated still, and if the MMU is blocked, the rest of the GPU should be blocked too, so no...
EUVD-2025-205179
In the Linux kernel, the following vulnerability has been resolved: HSI: ssiprotocol: fix potential resource leak in ssippnopen ssippnopen claims the HSI client's port with hsiclaimport. When hsiregisterportevent gets some error and returns a negetive value, the HSI client's port should be releas...
EUVD-2025-202754
A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...
EUVD-2025-177241
Malicious code in perturbation-css-loader-loopback-uninstall npm...
EUVD-2025-180050
Malicious code in biosignature-quasar-galaxy-charon npm...
EUVD-2025-176452
Malicious code in seismology-enceladus-comet-singularity npm...
EUVD-2025-177732
Malicious code in mutation-augmentedreality-archaeoastronomy-neutronstar npm...
EUVD-2025-38069
Authentication Bypass Using an Alternate Path or Channel vulnerability in Elated-Themes Search & Go search-and-go allows Password Recovery Exploitation.This issue affects Search & Go: from n/a through = 2.7...
EUVD-2025-37758
The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution formerly WooLentor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the 'loadtemplate' function. This makes it possible for unauthenticated...
EUVD-2025-37623
The ViaAds plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1. This is due to missing nonce validation on the ViaAdspluginHandler function. This makes it possible for unauthenticated attackers to modify the plugin's API key and cookie...
EUVD-2025-35382
Insertion of Sensitive Information Into Sent Data vulnerability in Blockspare Blockspare blockspare allows Retrieve Embedded Sensitive Data.This issue affects Blockspare: from n/a through = 3.2.13.2...
EUVD-2025-35324
The Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'proversionactivationcode' parameter in all versions up to, and including, 3.0.10 due to insufficient inp...
EUVD-2025-34743
There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a Denial of Service over a long period.This issue affects Qt from 5.15.0 through 6.8.3, from 6.9.0 before 6.9.2...
EUVD-2025-31856
A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP Request Handler. The manipulation of the argument mitssidindex leads to stack-based buffer overflow. The attack may be...
EUVD-2020-6230
Malware in sbrugna...
EUVD-2017-8864
Malware in sbrugna...
EUVD-2021-11352
Malware in sbrugna...
EUVD-2019-6583
Malware in sbrugna...
EUVD-2018-0814
Malware in sbrugna...
EUVD-2020-7104
Malware in sbrugna...
EUVD-2020-22885
Malware in sbrugna...
EUVD-2017-8972
Malware in sbrugna...
EUVD-2014-2368
Malware in sbrugna...
EUVD-2021-14000
Malware in sbrugna...
EUVD-2017-7034
Malware in sbrugna...
EUVD-2021-0391
Malware in sbrugna...
EUVD-2021-11779
Malware in sbrugna...
EUVD-2017-8127
Malware in sbrugna...
EUVD-2018-12978
Malware in sbrugna...
EUVD-2020-3196
Malware in sbrugna...
EUVD-2017-8821
Malware in sbrugna...
EUVD-2013-2110
Malware in sbrugna...
EUVD-2020-4777
Malware in sbrugna...
EUVD-2014-3713
Malware in sbrugna...
EUVD-2013-3694
Malware in sbrugna...
EUVD-2012-5952
Malware in sbrugna...
EUVD-2018-0337
Malware in sbrugna...
EUVD-2019-16177
Malware in sbrugna...
EUVD-2020-0155
Malware in sbrugna...