Lucene search
+L

453076 matches found

EUVD
EUVD
•added 2026/09/22 5:40 p.m.•10 views

EUVD-2026-84665

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation o...

9.9CVSS6.9AI score0.00526EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 5:40 p.m.•9 views

EUVD-2026-84663

Adobe Campaign Classic ACC is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user...

9.9CVSS5.9AI score0.00818EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 5:40 p.m.•10 views

EUVD-2026-84662

Adobe Campaign Classic ACC is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the...

8.5CVSS6.9AI score0.0046EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 5:40 p.m.•8 views

EUVD-2026-84661

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to...

9.1CVSS6.8AI score0.00991EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 5:39 p.m.•10 views

EUVD-2026-84660

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS6.9AI score0.01248EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 5:39 p.m.•7 views

EUVD-2026-84659

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

10CVSS6.9AI score0.01166EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 5:39 p.m.•8 views

EUVD-2026-84658

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS6.9AI score0.01248EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 5:39 p.m.•7 views

EUVD-2026-84657

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS6.9AI score0.01248EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 5:39 p.m.•10 views

EUVD-2026-84655

Adobe Campaign Classic ACC is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user...

9.6CVSS5.9AI score0.00351EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 5:39 p.m.•12 views

EUVD-2026-84656

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthoriz...

9.1CVSS5.9AI score0.00553EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 5:39 p.m.•9 views

EUVD-2026-84654

Adobe Campaign Classic ACC is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require...

9.9CVSS6.9AI score0.00531EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 5:39 p.m.•8 views

EUVD-2026-84652

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

9.1CVSS6.9AI score0.01038EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 5:39 p.m.•7 views

EUVD-2026-84653

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS6.9AI score0.01248EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 5:39 p.m.•7 views

EUVD-2026-84651

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...

9.9CVSS6.9AI score0.00427EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 5:39 p.m.•9 views

EUVD-2026-84650

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, uploadattachment in src/mcpatlassian/confluence/attachments.py accepts a caller-controlled filepath and opens the selected server-local file without restricting it to the workspace. A...

7.7CVSS5.8AI score0.00327EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/09/22 5:36 p.m.•11 views

EUVD-2026-84649

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, validateurlforssrf has a backslash authority confusion because it interprets the authority differently from the Requests connection layer in the header-based Jira and Confluence URL...

8.8CVSS5.8AI score0.00324EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/09/22 5:16 p.m.•14 views

EUVD-2026-84577

The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When set to true, it replaces the version comparator from "update must be newer" to "update must be different." Because the default permission set grants allow-check...

6.8CVSS5.9AI score0.00449EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 5:15 p.m.•8 views

EUVD-2026-84576

A vulnerability was found in dgtlmoon changedetection.io up to 50389b07. This vulnerability affects the function addwatchuisnapshot of the file changedetectionio/blueprint/addwatchui/init.py of the component Preview Endpoint. Performing a manipulation of the argument url results in server-side...

7.5CVSS6.6AI score0.00511EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/22 5:15 p.m.•12 views

EUVD-2026-84575

Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature verification path can accept a modified GUP.exe file whose embedded certificate metadata remains present even though its Authenticode digest is invalid. An attacker who can replace ...

7.3CVSS6.3AI score0.00124EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 5:14 p.m.•7 views

EUVD-2026-84574

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the NPPMSAVESESSION handler in PowerEditor/src/NppBigSwitch.cpp converts lParam to a sessionInfo pointer and dereferences its nbFile, files, and sessionFilePathName members without checking for null. A process running at the...

5.5CVSS5.6AI score0.00162EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 5:13 p.m.•7 views

EUVD-2026-84573

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the file selected by the user. When an attacker places a command script whose name is the selected text-file path with .cmd...

7.8CVSS6AI score0.00213EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 5:12 p.m.•8 views

EUVD-2026-84572

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in NppParameters::writeSession in PowerEditor/src/Parameters.cpp because it copies a session path derived from -settingsDir= into backupPathNameMAXPATH with unbounded wcscpy and...

7.8CVSS6.1AI score0.00228EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 5:11 p.m.•10 views

EUVD-2026-84571

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ incompletely enforces shortcuts.xml HMAC validation because WMMACRODLGRUNMACRO, the Run a Macro Multiple Times entry point, calls macroPlayback without the validation used by command. A tampered shortcuts.xml macro...

6.7CVSS5.9AI score0.00136EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 5:08 p.m.•8 views

EUVD-2026-84570

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in PluginsManager::loadPluginFromPath in PowerEditor/src/MISC/PluginsManager/PluginsManager.cpp because the plugin-supplied GetLexerCount result controls a loop that writes to...

8.6CVSS6.6AI score0.00224EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/22 5:07 p.m.•8 views

EUVD-2026-84569

MikroTik RouterOS before 7.25beta4 contains an improper input validation vulnerability in the labelled-VPN NLRI iterators of the routing service that allows an unauthenticated on-path attacker to crash the BGP service by sending a malformed MPREACHNLRI UPDATE message with a prefix-length value...

8.7CVSS5.9AI score0.00488EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/22 5:07 p.m.•27 views

EUVD-2026-84568

Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate privileges and perform AWS API operations that their own IAM identity is explicitly denied, via invocation of a Lambda...

8.1CVSS5.8AI score0.00252EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/22 5:06 p.m.•9 views

EUVD-2026-84567

Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent MSI repair launches powershell.exe and wevtutil.exe as elevated interactive processes in the initiating user's desktop session. A low-privileged local user who triggers repair can interact with or...

7CVSS6.2AI score0.00139EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 5:05 p.m.•9 views

EUVD-2026-84566

Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized CHART SLOT value that str2ullencoded passes to pluginsdrrdsetcacheputtoslot in src/plugins.d/pluginsdinternals.h. The accepted slot drives reallocz to request an approximately 16 GiB...

6.5CVSS5.8AI score0.00548EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 5:04 p.m.•10 views

EUVD-2026-84565

Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Agent MSI repair, powershell.exe runs as SYSTEM without -NoProfile and loads %USERPROFILE%\Documents\WindowsPowerShell\Microsoft.PowerShellprofile.ps1 from the low-privileged user who initiated repai...

7.8CVSS6AI score0.00156EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 5:01 p.m.•12 views

EUVD-2026-84564

Netdata is an open source observability tool. Prior to 2.10.4, the setuid-root ndsudo helper command fail2ban-client-status-socket in src/collectors/utils/ndsudo.c accepts a caller-controlled --socketpath from the low-privileged netdata service account. The account can direct root fail2ban-client...

8.4CVSS6.1AI score0.0032EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 5:00 p.m.•7 views

EUVD-2026-84563

Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized DIMENSION SLOT value that str2ullencoded passes to pluginsdrrddimputtoslot in src/plugins.d/pluginsdinternals.h without an upper bound. prdarraycreate in...

6.5CVSS5.9AI score0.00371EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 4:56 p.m.•8 views

EUVD-2026-84562

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/webapiv3.c with HTTPACLNOCHECK and HTTPACCESSANONYMOUSDATA, causing unauthenticated PUT requests handled by src/web/api/v3/apiv3settings.c to bypass operator-configured allo...

6.5CVSS5.8AI score0.00357EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 4:54 p.m.•8 views

EUVD-2026-84561

Netdata is an open source observability tool. Prior to 2.11.0, Netdata's unauthenticated WebSocket server negotiates permessage-deflate before authentication, and src/web/websocket/websocket-compression.c allows websocketclientdecompressmessage to grow decompressed output toward...

7.5CVSS5.8AI score0.00742EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 4:51 p.m.•9 views

EUVD-2026-84560

A heap out-of-bounds write vulnerability was found in the Linux kernel's RPC-over-RDMA server reply path in net/sunrpc/xprtrdma/svcrdmasendto.c. When a crafted RPC-over-RDMA client sends a large NFS READ request with an empty Write list and no Reply chunk, the server linearizes the entire...

8.8CVSS6.4AI score0.00471EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/22 4:50 p.m.•7 views

EUVD-2026-84559

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. Prior to 4.15.2, the safe Axios request interceptor in packages/service/common/api/axios.ts validates a hostname with isInternalAddress before a later HTTP connection performs an independent DNS lookup,...

6.3CVSS5.8AI score0.00285EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 4:50 p.m.•10 views

EUVD-2026-84558

A stack-based buffer overflow in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid ATSECURE programs. When such a program's DTRPATH or DTRUNPATH begins with $ORIGIN and is followed by NUL or '/' t...

3.6CVSS6.1AI score0.00129EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/22 4:48 p.m.•10 views

EUVD-2026-84557

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST/fuzz payload path in pkg/fuzz/parts.go can evaluate substituted runtime data more than once, creating a second evaluation pass that allows response content captured by an internal: true extractor...

5.3CVSS5.8AI score0.0041EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 4:47 p.m.•10 views

EUVD-2026-84556

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading branch does not apply the unsigned code-template signature check before accepting a template that contains both a fuzzing: block and an unsigned code: block. When an operator...

4.7CVSS6AI score0.00181EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 4:44 p.m.•13 views

EUVD-2026-84555

An unauthenticated attacker can make getpagetemplate page-template resolution include a chosen readable local .php file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE...

8.1CVSS7.9AI score0.19756EPSS
SaveExploits29References1
EUVD
EUVD
•added 2026/09/22 4:41 p.m.•12 views

EUVD-2026-84554

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the workflow template loading path does not enforce the -file capability gate when resolving file: protocol templates referenced by a workflow. An untrusted unsigned workflow can therefore load a...

5.5CVSS5.8AI score0.00166EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 4:27 p.m.•9 views

EUVD-2026-84553

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the nuclei/mysql JavaScript library does not enforce the local-file sandbox when a JavaScript template supplies the allowAllFiles MySQL DSN option. An untrusted javascript: template scanning an...

5.3CVSS6AI score0.00401EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 4:24 p.m.•7 views

EUVD-2026-84552

Sentry is an error tracking and performance monitoring tool. From 23.11.0 until 26.7.0, Sentry instances with the relocation feature enabled unsafely deserialize a legacy database field while importing a user-supplied relocation archive. An authenticated user can craft an archive that causes...

7.7CVSS6.3AI score0.00605EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 4:21 p.m.•11 views

EUVD-2026-84550

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, lightragwebui/src/components/retrieval/ChatMessage.tsx renders answer and thinking content with react-markdown, rehypeRaw, and skipHtml=false without an HTML sanitizer. An attacker who can add a document can store r...

6.1CVSS5.9AI score0.00246EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 4:20 p.m.•8 views

EUVD-2026-84549

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, validatedaddresses in lightrag/parser/markdown/parser.py evaluates the literal resolved address with ipaddress.isglobal without consistently classifying an IPv4 address embedded in an IPv6 transition wrapper. A call...

7.1CVSS5.8AI score0.00217EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/22 4:18 p.m.•10 views

EUVD-2026-84548

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the POST /login endpoint in lightrag/api/lightragserver.py does not impose a rate limit, account lockout, delay, or counter for failed authentication attempts. A network attacker can submit password guesses at full...

9.1CVSS5.8AI score0.00355EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 4:17 p.m.•8 views

EUVD-2026-84547

An HTTP endpoint intended for provisioning enterprise and reseller organisations is reachable without any session. The authentication middleware is bound only to an explicit list of controllers, and the enterprise controller is not on that list, so no authentication runs for these routes. The...

7.1CVSS5.8AI score0.00263EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 4:16 p.m.•9 views

EUVD-2026-84546

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, verifypassword in lightrag/api/passwords.py compares plaintext AUTHACCOUNTS password values with Python's == operator. The comparison can return after the first mismatching byte, creating response-time differences...

5.9CVSS5.8AI score0.00359EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 4:13 p.m.•10 views

EUVD-2026-84545

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the LightRAG API server returns raw Python exception text from error handlers in documentroutes.py, graphroutes.py, queryroutes.py, ollamaapi.py, and lightragserver.py. The detail=stre, detail=strexc, and equivalent...

5.3CVSS5.8AI score0.00386EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/22 4:11 p.m.•8 views

EUVD-2026-84544

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy organization members without Git provider access can retrieve plaintext provider credentials through github.one, gitlab.one, gitea.one, and bitbucket.one because those protected procedures return full provider...

9.6CVSS5.8AI score0.00487EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 4:11 p.m.•8 views

EUVD-2026-84543

Postiz generates security-sensitive credentials using Math.random instead of a cryptographically secure source. The same helper is used for OAuth access tokens, authorization codes, client secrets, organization API keys, and PKCE verifiers, meaning these credentials depend entirely on V8’s...

9.1CVSS5.8AI score0.00522EPSS
SaveExploits0References4
Total number of security vulnerabilities453076