453137 matches found
EUVD-2022-5851
Malicious code in bioql PyPI...
EUVD-2022-3893
Malicious code in bioql PyPI...
EUVD-2024-21135
Malicious code in bioql PyPI...
EUVD-2024-54700
Malicious code in bioql PyPI...
EUVD-2023-56418
Malicious code in bioql PyPI...
EUVD-2025-24799
Malicious code in bioql PyPI...
EUVD-2023-0662
Malicious code in bioql PyPI...
EUVD-2024-1156
Malicious code in bioql PyPI...
EUVD-2025-22308
Malicious code in bioql PyPI...
EUVD-2025-14451
Malicious code in bioql PyPI...
EUVD-2023-28975
Malicious code in bioql PyPI...
EUVD-2024-2610
Malicious code in bioql PyPI...
EUVD-2025-29775
Malicious code in bioql PyPI...
EUVD-2025-30468
Malicious code in bioql PyPI...
EUVD-2024-22235
Malicious code in bioql PyPI...
EUVD-2023-43191
Malicious code in bioql PyPI...
EUVD-2024-49431
Malicious code in bioql PyPI...
EUVD-2024-54719
Malicious code in bioql PyPI...
EUVD-2024-27251
Malicious code in bioql PyPI...
EUVD-2022-3177
Malicious code in bioql PyPI...
EUVD-2025-21911
Malicious code in bioql PyPI...
EUVD-2023-44433
Malicious code in bioql PyPI...
EUVD-2022-42721
Malicious code in bioql PyPI...
EUVD-2023-2596
Malicious code in bioql PyPI...
EUVD-2021-28762
Malicious code in bioql PyPI...
EUVD-2025-30275
Malicious code in bioql PyPI...
EUVD-2025-25343
Malicious code in bioql PyPI...
EUVD-2022-55307
Malicious code in bioql PyPI...
EUVD-2022-38828
Malicious code in bioql PyPI...
EUVD-2025-29691
Malicious code in bioql PyPI...
EUVD-2022-38715
Malicious code in bioql PyPI...
EUVD-2022-4041
Malicious code in bioql PyPI...
EUVD-2023-44287
A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/servlet/document. The manipulation of the argument path leads to file inclusion. It is possible to initiate the attack remotely. The exploit has been disclose...
EUVD-2022-7617
php-mod/curl a wrapper of the PHP cURL extension before 2.3.2 allows XSS via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php...
EUVD-2026-86950
In the Linux kernel, the following vulnerability has been resolved: netfs: break unbuffered write when netfsallocsubrequest fails syzbot reported a null-ptr-deref below 1 following a fault injection in netfsallocsubrequest. 0 When netfsallocsubrequest fails, subreq is NULL. Later, netfspreparewri...
EUVD-2026-42683
@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft...
EUVD-2026-42963
ZITADEL: Missing Token Expiration exp Validation in JWT IdP Provider...
EUVD-2026-72024
RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can...
EUVD-2026-45906
SurrealDB: Custom API route lets authenticated callers override namespace/database scope via URL path...
EUVD-2026-70702
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-70135
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in the victim's BIG-IP Configuration utility we...
EUVD-2026-68212
Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message that may have shell metacharacters. This occurs in...
EUVD-2026-67870
Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource in models/DataObject/ClassDefinition/Data/Hotspotimage.php passes the field hotspots object-store column to...
EUVD-2026-63599
Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-63594
Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...
EUVD-2026-58736
An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation...
EUVD-2026-58574
A vulnerability was determined in Tenda AC1206 15.03.06.23multiTD01. This vulnerability affects the function setwlguestiplist of the file /goform/WifiGuestSet of the component httpd web management interface. This manipulation of the argument shareSpeed causes stack-based buffer overflow. Remote...
EUVD-2026-56771
Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...
EUVD-2026-56111
A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contains an out of bounds write vulnerability while parsing specially crafted DFT files. This could allow an attacker to execute code i...
EUVD-2026-52743
OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can...