434811 matches found
EUVD-2025-208865
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ArtstudioWorks Brookside allows Reflected XSS.This issue affects Brookside: from n/a through 1.4...
EUVD-2026-12997
Kan is an open-source project management tool. In versions 0.5.4 and below, the /api/download/attatchment endpoint has no authentication and no URL validation. The Attachment Download endpoint accepts a user-supplied URL query parameter and passes it directly to fetch server-side, and returns the...
EUVD-2026-11206
Argo Workflows: WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode...
EUVD-2026-9791
EC-CUBE provided by EC-CUBE CO.,LTD. contains a multi-factor authentication MFA bypass vulnerability. An attacker who has obtained a valid administrator ID and password may be able to bypass two-factor authentication and gain unauthorized access to the administrative page...
EUVD-2026-9114
A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the argument qos can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...
EUVD-2026-8650
Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection, which are ultimately run as the root user. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200...
EUVD-2026-8586
A flaw has been found in libvips up to 8.18.0. The affected element is the function vipsforeignloadmatrixfileisa/vipsforeignloadmatrixheader of the file libvips/foreign/matrixload.c. Executing a manipulation can lead to memory corruption. The attack needs to be launched locally. This patch is...
EUVD-2026-5878
In the Linux kernel, the following vulnerability has been resolved: perf: sched: Fix perf crash with new isusertask helper In order to do a user space stacktrace the current task needs to be a user task that has executed in user space. It use to be possible to test if a task is a user task or not...
EUVD-2026-5804
A vulnerability was identified in cym1102 nginxWebUI up to 4.3.7. The impacted element is an unknown function of the file /adminPage/conf/check of the component Web Management Interface. Such manipulation of the argument nginxDir leads to cross site scripting. The attack can be executed remotely...
EUVD-2026-4827
Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge...
EUVD-2026-4571
The Alex User Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.0. This is due to missing nonce validation on the alexusercounterfunction function. This makes it possible for unauthenticated attackers to update the plugin settings via...
EUVD-2026-4273
SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. This command will be executed by the...
EUVD-2026-3941
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in goalthemes Vango vango allows PHP Local File Inclusion.This issue affects Vango: from n/a through = 1.3.3...
EUVD-2026-3806
The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents...
EUVD-2026-3411
Multiple reflected cross-site scripting xss vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This...
EUVD-2026-2150
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...
EUVD-2026-0893
In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in putuser loop for DSP events In the DSP event handling code, a putuser loop copies event data. When the user buffer size is not aligned to 4 bytes, it could overwrite beyond the buffer...
EUVD-2026-0685
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS...
EUVD-2024-55372
Akuvox Smart Intercom S539 contains an unauthenticated vulnerability that allows remote attackers to access live video streams by requesting the video.cgi endpoint on port 8080. Attackers can retrieve video stream data without authentication by directly accessing the specified endpoint on affecte...
EUVD-2025-179022
Malicious code in ethology-paleontology-nova-archaeoastronomy npm...
EUVD-2025-177066
Malicious code in prettier-registry-forever-prettier-plugin-markdown npm...
EUVD-2025-35861
PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function...
EUVD-2025-35594
aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client-side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary files from the client using a rogue server. It is possible to create a rogue MySQL...
EUVD-2009-0088
Malware in sbrugna...
EUVD-2020-29206
Malware in sbrugna...
EUVD-2010-2904
Malware in sbrugna...
EUVD-2020-29352
Malware in sbrugna...
EUVD-2021-23029
Malware in sbrugna...
EUVD-2021-11850
Malware in sbrugna...
EUVD-2021-11828
Malware in sbrugna...
EUVD-2021-24808
Malware in sbrugna...
EUVD-2013-4119
Malware in sbrugna...
EUVD-2019-18451
Malware in sbrugna...
EUVD-2012-6596
Malware in sbrugna...
EUVD-2010-1974
Malware in sbrugna...
EUVD-2018-18376
Malware in sbrugna...
EUVD-2021-1568
Malware in sbrugna...
EUVD-2020-14991
Malware in sbrugna...
EUVD-2021-2317
Malware in sbrugna...
EUVD-2016-7148
Malware in sbrugna...
EUVD-2017-15667
Malware in sbrugna...
EUVD-2017-17466
Malware in sbrugna...
EUVD-2021-15895
Malware in sbrugna...
EUVD-2018-0482
Malware in sbrugna...
EUVD-2021-13796
Malware in sbrugna...
EUVD-2020-29347
Malware in sbrugna...
EUVD-2018-15854
Malware in sbrugna...
EUVD-2013-3370
Malware in sbrugna...