Lucene search
+L

453386 matches found

EUVD
EUVD
•added 2026/09/24 6:00 a.m.•9 views

EUVD-2026-85800

The Post Grid WordPress plugin before 7.9.5 does not limit an expansion of the WordPress allowed-HTML list to its own markup and applies it site-wide, allowing users with the Contributor role and above to store iframe, style and input elements that are normally stripped from their content, leadin...

3.5CVSS5.8AI score0.00142EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 6:00 a.m.•8 views

EUVD-2026-85799

The Masteriyo LMS WordPress plugin before 3.4.2 does not restrict access to quiz answer keys, allowing any authenticated user, such as a student, to retrieve the correct answers for any quiz on the site, including quizzes in courses they are not enrolled in. The redaction that hides them is appli...

4.3CVSS5.8AI score0.00176EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 6:00 a.m.•10 views

EUVD-2026-85798

The Masteriyo LMS WordPress plugin before 3.4.2 does not verify that the user making the request owns the course-progress records being returned, allowing any authenticated user, such as a self-registered subscriber, to read another user's learning activity. The ownership check it applies is...

4.3CVSS5.6AI score0.00162EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 6:00 a.m.•8 views

EUVD-2026-85797

The 10Web Booster WordPress plugin before 2.34.0 does not restrict access to the routine which issues the shared secret that authenticates its cloud connection, disclosing that secret to unauthenticated visitors and letting them delete it repeatedly, preventing an administrator from completing a...

6.5CVSS5.8AI score0.00227EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 6:00 a.m.•10 views

EUVD-2026-85796

The wpForo Forum WordPress plugin before 3.1.6 does not restrict which classes may be instantiated when it deserializes a user-supplied profile field value, allowing authenticated users with Subscriber-level access and above to inject a PHP Object. No POP chain is present in the wpForo Forum...

7.5CVSS6.1AI score0.00313EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 6:00 a.m.•8 views

EUVD-2026-85795

The CMB2 WordPress plugin before 2.13.0 does not perform any capability check on one of its AJAX actions, allowing users with a role as low as Subscriber to create arbitrary WordPress options and corrupt existing ones, which can break core site settings and take the site offline. Exploitation...

6.8CVSS5.7AI score0.00178EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 6:00 a.m.•10 views

EUVD-2026-85794

The WPForms WordPress plugin before 2.0.2 does not verify that a Stripe payment object supplied during a public form submission belongs to it before acting on it, allowing unauthenticated users to trigger a full refund and an immediate subscription cancellation against payments created by other...

6.8CVSS5.6AI score0.00181EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 5:47 a.m.•11 views

EUVD-2026-85793

A flaw was found in the user update mechanism of the Keycloak Admin REST API. When Fine-Grained Admin Permissions are enabled, the system fails to check for specific password reset authorizations during a general user profile update. This allows a delegated administrator, who should be restricted...

6.6CVSS5.7AI score0.00237EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 5:47 a.m.•12 views

EUVD-2026-85792

A flaw was found in the Level of Authentication enforcement mechanism of Keycloak, an identity and access management solution. The issue occurs when a client specifically requires a higher security level for a user who already has an active session at a lower level. Due to a logic error in how...

4.2CVSS5.6AI score0.00167EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 5:17 a.m.•12 views

EUVD-2026-85791

A vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insufficient sanitization and access restrictions within the embedded execution engine. An authenticated user with administrative access to the management interface can supply a malicious script that...

7.5CVSS5.9AI score0.00311EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 3:30 a.m.•11 views

EUVD-2026-85790

Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...

6.5CVSS5.9AI score0.00112EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 3:30 a.m.•9 views

EUVD-2026-85789

A vulnerability was detected in yhx070424 ShopXO up to 2.2.7. Affected by this vulnerability is an unknown functionality of the file config/ueditor.php of the component Ueditor Upload Interface. The manipulation of the argument pathtype results in path traversal. It is possible to launch the atta...

7.5CVSS6.7AI score0.00424EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/24 3:17 a.m.•12 views

EUVD-2026-85784

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf...

8.6CVSS6AI score0.00313EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 3:15 a.m.•10 views

EUVD-2026-85783

A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the component goform Handler. Executing a manipulation of the argument submit-url can lead to open redirect. The attack may be launched remotely. The exploit has been published and may be used...

5.3CVSS5.1AI score0.00336EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 3:08 a.m.•11 views

EUVD-2026-85782

mammoth aka mammoth.js before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document. Converting a crafted .docx file allows an attacker to add arbitrary properties to Object.prototype. In 1.11.0 through 1.12.1, applications that convert further documents in the...

8.4CVSS5.9AI score0.00355EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 3:00 a.m.•13 views

EUVD-2026-85781

A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnelsetparams of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peerhostname leads to out-of-bounds write. The attack may be initiated remotely...

10CVSS8AI score0.00653EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/24 2:45 a.m.•12 views

EUVD-2026-85780

A security flaw has been discovered in MantisZip up to 0.4.5. Affected by this issue is the function Path.Combine of the file MainWindow.UI.cs of the component Preview. The manipulation results in path traversal. It is possible to launch the attack remotely. The exploit has been released to the...

7.5CVSS6AI score0.00335EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 2:30 a.m.•11 views

EUVD-2026-85779

A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. The manipulation leads to improper...

6.9CVSS5.4AI score0.00286EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 2:25 a.m.•13 views

EUVD-2026-85786

In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempURL signature only covers the method, expiry, and path, and thus the list of disallowed headers is the only defense against a signed PUT request changing what the request does. A...

5.3CVSS5.8AI score0.00235EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 2:15 a.m.•10 views

EUVD-2026-85785

A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Executing a manipulation can lead to improper authorization. The attac...

6.9CVSS5.3AI score0.00286EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 2:00 a.m.•10 views

EUVD-2026-85772

A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Performing a manipulation of the argument ID results in improper...

6.9CVSS5.4AI score0.00286EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 1:53 a.m.•10 views

EUVD-2026-85773

SigNoz versions from v0.98.0 up to but not including v0.143.0, when configured to use the opaque session tokenizer which was not the default before v0.143.0, do not revoke a user's existing login sessions when the user's password is reset with a reset token UpdatePasswordByResetPasswordToken,...

7.6CVSS5.7AI score0.0035EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/24 1:53 a.m.•10 views

EUVD-2026-85774

SigNoz from v0.8.0 before v0.143.0 defaults the JWT tokenizer signing secret tokenizer::jwt::secret, set via SIGNOZTOKENIZERJWTSECRET or the deprecated SIGNOZJWTSECRET to an empty string, and Config.Validate does not reject the empty value, so a deployment that does not configure a secret starts ...

9.2CVSS5.7AI score0.00406EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 1:45 a.m.•10 views

EUVD-2026-85775

A vulnerability was identified in huanzi-qch base-admin up to 52816b760cd53244989fd664bbb2b3d4edbfdbf1. This issue affects the function Save of the file base-admin-master\src\main\java\cn\huanzi\qch\baseadmin\common\controller\CommonController.java of the component Add User Handler. The...

5.1CVSS3.6AI score0.00191EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 1:30 a.m.•9 views

EUVD-2026-85776

A vulnerability was identified in java110 MicroCommunity up to 2.0. Affected is the function QueryServiceSMOImpl.fallBack of the file BusinessApi.java of the component fallBack API Endpoint. Such manipulation of the argument fallBackSql leads to sql injection. The attack may be launched remotely...

7.5CVSS6.9AI score0.00254EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 1:27 a.m.•12 views

EUVD-2026-85777

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.3. The 5.0.3 patch introduced a wphash/hashequals signature gate on the pt-paytium-user-data field, but left a second filter — ptcfcheckoutmeta,...

9.8CVSS5.8AI score0.00392EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/09/24 1:15 a.m.•9 views

EUVD-2026-85778

A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.admserver.php?r=adm/userselector/getData of the component Multi-User-Selector AJAX Endpoint. This manipulation of the argument Name causes sql...

6.5CVSS6.3AI score0.002EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/24 1:00 a.m.•11 views

EUVD-2026-85761

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.320181106 Build 107. This affects the function loadCfg of the file /ini/syscfg.txt of the component Configuration File Download. The manipulation results in information disclosure. The attack can be launched...

6.9CVSS5.7AI score0.00286EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 12:45 a.m.•12 views

EUVD-2026-85760

A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the component Login Page. This manipulation of the argument $SERVER'HTTPREFERER' causes open redirect. The attack is possible to be...

5.3CVSS4.9AI score0.0025EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•11 views

EUVD-2026-85737

A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/uploadjson.php of the component KindEditor Upload Interface. This manipulation of the argument imgFile causes cross site scripting. The attack may be initiated remotely. The explo...

5.3CVSS3.8AI score0.00263EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•10 views

EUVD-2026-85751

A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegment of the component RPC Path Handler. This manipulation of the argument clientid/segmentid causes authorization bypass. Remote exploitation of the attack is possible. The exploit...

7.5CVSS5.2AI score0.00292EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•15 views

EUVD-2026-85736

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a...

9.9CVSS8.6AI score0.00356EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•10 views

EUVD-2026-85749

A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function setSync of the file /ajax/addproject.php. Such manipulation of the argument connsettings leads to sql injection. The attack may be launched remotely. Th...

7.5CVSS5.4AI score0.00254EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•9 views

EUVD-2026-85734

GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to access sensitive CI/CD variable values from debug-mode job traces through the Duo AI...

7.7CVSS5.7AI score0.00209EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•10 views

EUVD-2026-85730

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when...

9.9CVSS8.6AI score0.0055EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•12 views

EUVD-2026-85731

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race condition, the MCP search tool's shared state handling could have caused search results to be returned under an incorrect user context...

3.1CVSS5.7AI score0.00136EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•9 views

EUVD-2026-85726

A vulnerability was identified in Fast FAC1900R 201908272.0.2. The impacted element is the function getaliasname of the component uhttpd. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and might be used. The vendo...

6.5CVSS5.9AI score0.00242EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•11 views

EUVD-2026-85750

Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative switch CLI commands and issue container management instructions. This could allow an attacker to alter Fibre Channel fabric switch...

8.6CVSS6.4AI score0.00605EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•11 views

EUVD-2026-85735

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to spoof merge request authorship and attribute content to arbitrary existing users on t...

4.3CVSS5.8AI score0.00109EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•10 views

EUVD-2026-85729

A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.addListener of the file static/background/index.js of the component External Message Handler. The manipulation of the argument...

5.3CVSS5.3AI score0.00259EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•11 views

EUVD-2026-85732

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with an MCP-scoped token to perform actions beyond the intended scope of that token due ...

5.4CVSS5.7AI score0.00137EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•8 views

EUVD-2026-85733

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to bypass admin-configured AI tool governance controls for...

4.3CVSS5.6AI score0.00166EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•8 views

EUVD-2026-85709

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to OS command injection...

8.8CVSS6.6AI score0.00984EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•10 views

EUVD-2026-85674

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

7.5CVSS5.6AI score0.00254EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•12 views

EUVD-2026-85707

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments...

7.7CVSS5.8AI score0.00228EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•12 views

EUVD-2026-85727

Microsoft Outlook Remote Code Execution Vulnerability...

8.8CVSS5.8AI score0.00442EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•11 views

EUVD-2026-85675

A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This manipulation of the argument username/password causes sql injection. The attack is possible to be carried out remotely. The exploit...

7.5CVSS5.5AI score0.00254EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•13 views

EUVD-2026-85704

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and re-import workflow. The vulnerability exists because the exporter writes CSV cells using fputcsv with a NUL byte \0 as...

8.8CVSS5.7AI score0.00333EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•9 views

EUVD-2026-85703

The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.5. This is due to the verifylogin function in app/Login.php containing a missing return statement in the signature verification failure branch — when Signature::verify2...

8.1CVSS5.6AI score0.00635EPSS
SaveExploits1References7
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•11 views

EUVD-2026-85710

A vulnerability has been found in Abdurrab5 online-makeup-store. Affected is the function confirmloggedin/confirmuser of the file functions.php of the component Admin Handler. Such manipulation of the argument adminid leads to missing authorization. The attack may be performed from remote. The...

7.5CVSS5.2AI score0.00284EPSS
SaveExploits0References6
Total number of security vulnerabilities453386