Euvd - Page 7 of Euvd Most Viewed Vulnerabilities List

Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud SaaS version. If a remote attacker sends a specially crafted request to the product's web service, arbitrary code may be executed when the product is configured to run pop3wallpasswd wi...

9.8CVSS6.2AI score0.00472EPSS

Exploits0References3

EUVD•added 2026/05/12 6:30 p.m.•33 views

EUVD-2026-29603

Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00314EPSS

Exploits0References2

EUVD•added 2026/05/12 12:32 p.m.•33 views

EUVD-2026-29443

The FastBots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

4.4CVSS6AI score0.00195EPSS

Exploits0References6

EUVD•added 2026/05/12 12:32 p.m.•33 views

EUVD-2026-29445

Insecure generation of credentials in the local SAT Technical Support access functionality of the Ingecon Sun EMS Board. The vulnerability arose because the secret access credentials were not based on a secure cryptographic scheme, but rather on a weak hashing algorithm, which could allow an...

9.2CVSS5.8AI score0.00152EPSS

Exploits0References3

EUVD•added 2026/05/11 12:32 p.m.•33 views

EUVD-2026-29049

ATutor is vulnerable to Reflected XSS in /install/install.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. Product is no longer actively supported. Maintainers of this project were notified early...

5.1CVSS6AI score0.00391EPSS

Exploits0References3

EUVD•added 2026/05/11 12:31 a.m.•33 views

EUVD-2026-29009

A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue is some unknown functionality of the file /inventory/salessave. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the...

4.8CVSS4.2AI score0.00253EPSS

Exploits0References5

EUVD•added 2026/05/10 3:31 p.m.•33 views

EUVD-2021-34808

WordPress GetPaid Plugin 2.4.6 contains an HTML injection vulnerability that allows authenticated attackers to inject arbitrary HTML code by exploiting the Help Text field in payment forms. Attackers can inject malicious HTML including image tags and scripts into the Help Text field during paymen...

5.4CVSS6AI score0.00169EPSS

Exploits0References4

EUVD•added 2026/05/07 3:55 a.m.•33 views

EUVD-2026-28245

When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentially exposing secrets from unintended GCP projects. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 inclusive; upgrade to 3.1.14 or greater...

7.5CVSS5.8AI score0.00435EPSS

Exploits0References1

EUVD•added 2026/05/06 12:30 p.m.•33 views

EUVD-2026-27815

In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - fix packet extraction from stream When processing TCP stream data in ovpntcprecv, we receive large cloned skbs from strprcv that may contain multiple coalesced packets. The current implementation has two bugs: 1. Head...

5.7AI score0.00451EPSS

Exploits0References4

EUVD•added 2026/05/04 6:27 p.m.•33 views

EUVD-2026-27096

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /chat WebSocket endpoint used by the Chat Trigger node's Hosted Chat feature did not verify that an incoming connection was authorized to interact with the target execution. An unauthenticated...

6.3CVSS6AI score0.00383EPSS

Exploits1References1

EUVD•added 2026/05/04 5:41 a.m.•33 views

EUVD-2026-26895

mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest...

3.7CVSS5.8AI score0.00162EPSS

Exploits0References1

EUVD•added 2026/05/03 12:57 a.m.•33 views

EUVD-2026-26806

Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An...

5.8AI score0.00378EPSS

Exploits0References2

EUVD•added 2026/05/02 3:36 a.m.•33 views

EUVD-2026-26732

The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 5.6.0. This is due to missing authorization validation in the uploadavatar function, which accepts an attacker-controlled...

5.3CVSS5.9AI score0.00306EPSS

Exploits0References10

EUVD•added 2026/04/21 9:31 p.m.•33 views

EUVD-2026-24461

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

2.3CVSS5.7AI score0.0011EPSS

Exploits1References2

EUVD•added 2025/12/19 8:14 p.m.•33 views

EUVD-2025-204614

FastAPI Users allows users to quickly add a registration and authentication system to their FastAPI project. Prior to version 15.0.2, the OAuth login state tokens are completely stateless and carry no per-request entropy or any data that could link them to the session that initiated the OAuth flo...

5.9CVSS6.4AI score0.00222EPSS

Exploits1References5

EUVD•added 2025/11/30 6:30 a.m.•33 views

EUVD-2025-199922

HTCondor Access Point before 25.3.1 allows an authenticated user to impersonate other users on the local machine by submitting a batch job. This is fixed in 24.12.14, 25.0.3, and 25.3.1. The earliest affected version is 24.7.3...

4.2CVSS5.9AI score0.00087EPSS

Exploits0References2

EUVD•added 2025/10/14 7:30 p.m.•33 views

EUVD-2025-34454

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions prior to 16.0.92 for FreePBX 16 and versions prior to 17.0.6 for FreePBX 17, the Endpoint Manager module contains authenticated SQL injection vulnerabilities affecting multiple parameters in the...

8.6CVSS7.8AI score0.3896EPSS

Exploits6References1

EUVD•added 2025/10/07 12:30 a.m.•33 views

EUVD-2019-7057

Malware in sbrugna...

4.3CVSS4.5AI score0.00948EPSS

Exploits0References3

EUVD•added 2025/10/07 12:30 a.m.•33 views

EUVD-2021-24216

Malware in sbrugna...

5.3CVSS5.6AI score0.01249EPSS

Exploits0References3