452687 matches found
EUVD-2026-8863
Improper Validation of Specified Quantity in Input CWE-1284 in Kibana can allow an authenticated attacker with view-only privileges to cause a Denial of Service via Input Data Manipulation CAPEC-153. An attacker can send a specially crafted, malformed payload causing excessive resource consumptio...
EUVD-2026-8770
mcp-server-git : Path traversal in gitadd allows staging files outside repository boundaries...
EUVD-2026-8586
A flaw has been found in libvips up to 8.18.0. The affected element is the function vipsforeignloadmatrixfileisa/vipsforeignloadmatrixheader of the file libvips/foreign/matrixload.c. Executing a manipulation can lead to memory corruption. The attack needs to be launched locally. This patch is...
EUVD-2026-4273
SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. This command will be executed by the...
EUVD-2026-3349
Fleet is open source device management software. A broken access control issue in versions prior to 4.78.3, 4.77.1, 4.76.2, 4.75.2, and 4.53.3 allowed authenticated users to access debug and profiling endpoints regardless of role. As a result, low-privilege users could view internal server...
EUVD-2026-3209
HCL AION version 2 is affected by a Cacheable HTTP Response vulnerability. This may lead to unintended storage of sensitive or dynamic content, potentially resulting in unauthorized access or information disclosure...
EUVD-2026-2150
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...
EUVD-2026-0829
An issue in realme Internet browser v.45.13.4.1 allows a remote attacker to execute arbitrary code via a crafted webpage in the built-in HeyTap/ColorOS browser...
EUVD-2025-206223
A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 December, 2025. End users do not have to take any action to mitigate the issue...
EUVD-2025-205459
FastMCP updated to MCP 1.23+ due to CVE-2025-66416...
EUVD-2023-60336
In the Linux kernel, the following vulnerability has been resolved: media: rcarfdp1: Fix refcount leak in probe and remove function rcarfcpget take reference, which should be balanced with rcarfcpput. Add missing rcarfcpput in fdp1remove and the error paths of fdp1probe to fix this. hverkuil:...
EUVD-2023-60361
In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-digi00x: prevent potential use after free This code was supposed to return an error code if initstream failed, but it instead freed dg00x-rxstream and returned success. This potentially leads to a use after free...
EUVD-2025-205015
RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on...
EUVD-2025-204609
A vulnerability was found in 1541492390c yougou-mall up to 0a771fa817c924efe52c8fe0a9a6658eee675f9f. This impacts the function Upload of the file src/main/java/per/ccm/ygmall/extra/controller/ResourceController.java. Performing manipulation results in path traversal. This product is using a rolli...
EUVD-2025-176707
Malicious code in release-it-perseus-ini-node-config npm...
EUVD-2025-37867
Malicious code in bcryptjs-node-js npm...
EUVD-2025-37623
The ViaAds plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1. This is due to missing nonce validation on the ViaAdspluginHandler function. This makes it possible for unauthenticated attackers to modify the plugin's API key and cookie...
EUVD-2022-55063
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: sm712fb: Fix crash in smtcfbwrite When the sm712fb driver writes three bytes to the framebuffer, the driver will crash: BUG: unable to handle page fault for address: ffffc90001ffffff RIP: 0010:smtcfbwrite+0x454/0x5b...
EUVD-2025-33342
Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers...
EUVD-2010-5320
Malware in sbrugna...
EUVD-2013-4119
Malware in sbrugna...
EUVD-2020-14351
Malware in sbrugna...
EUVD-2021-24808
Malware in sbrugna...
EUVD-2014-2368
Malware in sbrugna...
EUVD-2021-1810
Malware in sbrugna...
EUVD-2021-14245
Malware in sbrugna...
EUVD-2017-3704
Malware in sbrugna...
EUVD-2007-1619
Malware in sbrugna...
EUVD-2020-0273
Malware in sbrugna...
EUVD-2020-12698
Malware in sbrugna...
EUVD-2021-15895
Malware in sbrugna...
EUVD-2021-15262
Malware in sbrugna...
EUVD-2010-2904
Malware in sbrugna...
EUVD-2020-29052
Malware in sbrugna...
EUVD-2021-18759
Malware in sbrugna...
EUVD-2021-2430
Malware in sbrugna...
EUVD-2019-9714
Malware in sbrugna...
EUVD-2021-0587
Malware in sbrugna...
EUVD-2021-11088
Malware in sbrugna...
EUVD-2020-8236
Malware in sbrugna...
EUVD-2021-1560
Malware in sbrugna...
EUVD-2014-7554
Malware in sbrugna...
EUVD-2012-4340
Malware in sbrugna...
EUVD-2017-8840
Malware in sbrugna...
EUVD-2016-1997
Malware in sbrugna...
EUVD-2020-5638
Malware in sbrugna...
EUVD-2016-6446
Malware in sbrugna...
EUVD-2021-0425
Malware in sbrugna...