434531 matches found
EUVD-2023-12128
Malicious code in bioql PyPI...
EUVD-2023-0257
Malicious code in bioql PyPI...
EUVD-2023-58949
Malicious code in bioql PyPI...
EUVD-2022-7153
Malicious code in bioql PyPI...
EUVD-2022-53125
Malicious code in bioql PyPI...
EUVD-2025-19688
Malicious code in bioql PyPI...
EUVD-2025-16792
Malicious code in bioql PyPI...
EUVD-2023-43811
Malicious code in bioql PyPI...
EUVD-2021-7118
Malicious code in bioql PyPI...
EUVD-2025-23667
Malicious code in bioql PyPI...
EUVD-2023-26794
Malicious code in bioql PyPI...
EUVD-2023-0554
Malicious code in bioql PyPI...
EUVD-2025-24169
Malicious code in bioql PyPI...
EUVD-2025-28840
Malicious code in bioql PyPI...
EUVD-2025-14170
Malicious code in bioql PyPI...
EUVD-2023-33843
Malicious code in bioql PyPI...
EUVD-2022-35207
Malicious code in bioql PyPI...
EUVD-2023-34054
Malicious code in bioql PyPI...
EUVD-2024-0728
Malicious code in bioql PyPI...
EUVD-2023-2414
Malicious code in bioql PyPI...
EUVD-2025-27623
Malicious code in bioql PyPI...
EUVD-2019-19374
The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function. This vulnerability allows unauthenticated attackers to execute arbitrary commands on the host operating system...
EUVD-2024-23467
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...
EUVD-2025-210652
Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...
EUVD-2026-51337
OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator's browser session by injecting HTML markup into agent transcript messages processed through the sessions API. Attackers can cra...
EUVD-2026-50947
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartShare: through 2.3.1712.1202, which is supported on Microsoft Windows 10 and earlier versions...
EUVD-2026-43723
Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync...
EUVD-2026-49881
tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a Transfer-Encoding header with any value, including non-chunked codings, which causes the library to unconditionally apply chunk-decoding and discard...
EUVD-2026-49792
Pivotick fails to sanitize attacker-controlled SVG markup supplied through the per-node style.svgIcon property before inserting it into the document. When rendering a graph node, the vulnerable code assigns the SVG icon markup directly to the innerHTML property of a live SVG element. An attacker...
EUVD-2026-49031
In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bounds against transfer length nvmetauthreply accesses the variable-length rval array using attacker-controlled hl hash length and dhvlen DH value length fields without verifying they fi...
EUVD-2026-48551
Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user...
EUVD-2026-48534
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. The...
EUVD-2026-47451
Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite component: RDBMS and UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Call Center...
EUVD-2026-47442
Vulnerability in the Oracle HRMS Japanese product of Oracle E-Business Suite component: Oracle Payroll Japanese. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle HRMS...
EUVD-2026-42305
node-tar: Decompression/parse DoS via unlimited input...
EUVD-2026-42301
js-yaml: YAML merge-key chains can force quadratic CPU consumption...
EUVD-2026-45828
In the Linux kernel, the following vulnerability has been resolved: platform/x86: uniwill-laptop: Do not enable the charging limit even when forced It seems that on some older models 2020 the battery charging limit can permanently damage the battery. Prevent users from enabling this feature thru...
EUVD-2026-45749
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: clear chan-ident on ECRED reconfiguration success l2capecredreconfrsp returns early on success without clearing chan-ident. Every other L2CAP response handler l2capecredconnrsp, l2capleconnectrsp, l2capconfigrsp...
EUVD-2026-45498
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid publish check in mt76staadd Since mt7925macstaadd publishes wcid, add publish check in mt76staadd to avoid reinitializing the wcid-polllist. Found dev-stapolllist corruption when using mt7925 and 7.1-rc4...
EUVD-2026-45142
The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.8.4. This is due to due to a missing capability check on the 'aiomaticcallgoogleaifunction' function. This makes ...
EUVD-2026-45039
SALTO ProAccess Space software using the tenancy feature / logical partition is vulnerable to a privilege escalation attack that could allow an authorized attacker to access any space managed by the affected product...
EUVD-2026-44988
AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...
EUVD-2026-44979
A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode...
EUVD-2026-44889
The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the frtoken function in all versions up to, and including, 7.3.1.4. This makes it possible for...
EUVD-2026-44663
Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-44527
CAI Content Credentials is affected by a Server-Side Request Forgery SSRF vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access o...
EUVD-2026-44562
Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
EUVD-2026-44108
Heap-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code with a physical attack...