Lucene search
+L

433049 matches found

EUVD
EUVD
•added 2026/08/10 10:21 a.m.•7 views

EUVD-2026-55247

TLS hostname verification issue in Apache Ranger Client Code in versions = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...

7.5CVSS5.2AI score0.00392EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 10:20 a.m.•6 views

EUVD-2026-55246

Logs contain replayable JWT tokens in Apache Ranger versions = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...

6.5CVSS5.1AI score0.0028EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 10:20 a.m.•7 views

EUVD-2026-55245

UnixAuth lacks brute-force protection in Apache Ranger versions = 2.8.0. Note: UnixAuth is NOT a recommended option for production deployments. Users are recommended to upgrade to version 2.9.0, which fixes this issue...

7.3CVSS5.1AI score0.00299EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 10:7 a.m.•6 views

EUVD-2026-55261

Cross-Site Request Forgery CSRF vulnerability in WP Umbrella allows Cross Site Request Forgery. This issue affects WP Umbrella: from 2.24.2 through 2.26.2...

5.4CVSS5.2AI score0.00099EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 9:53 a.m.•11 views

EUVD-2026-55159

Joomla Extension - fabrikar.com - Remote code execution in Fabrik 4.6.7 - An unauthenticated attacker could execute arbitrary code by using the ajaxcalc feature of the calc plugin...

10CVSS6.2AI score0.006EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/08/10 9:38 a.m.•12 views

EUVD-2026-55158

A flaw was found in 389 Directory Server. The CleanAllRUV and Abort CleanAllRUV replication-maintenance extended operations perform no authorization check, allowing an unauthenticated remote attacker to invoke them when nsslapd-allow-anonymous-access is enabled the default, or any authenticated...

6.5CVSS5.3AI score0.00416EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 9:25 a.m.•7 views

EUVD-2026-55157

Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError. Thi...

5.3AI score0.00565EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 8:13 a.m.•9 views

EUVD-2026-55118

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot...

6.9CVSS7.4AI score0.0039EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 8:8 a.m.•14 views

EUVD-2026-55117

Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered...

4.8CVSS7.3AI score0.00165EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 8:4 a.m.•10 views

EUVD-2026-55116

DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot...

6.9CVSS7.3AI score0.00325EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 8:1 a.m.•10 views

EUVD-2026-55115

The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected product may allow to obtain the password of the root account...

5.1CVSS7.4AI score0.00204EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 8:0 a.m.•10 views

EUVD-2026-55114

DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data via a man-in-the-middle attack, and communication contents may be altered...

8.1CVSS7.3AI score0.00329EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 8:0 a.m.•9 views

EUVD-2026-55113

DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A man-in-the-middle attack may allow to obtain and/or alter communications of the affected products. As a result, arbitrary code may be executed with the administrative privilege...

4.8CVSS7.6AI score0.00151EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 7:59 a.m.•9 views

EUVD-2026-55112

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be leveraged to log in to the affected products...

8.8CVSS7.3AI score0.00508EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 7:59 a.m.•9 views

EUVD-2026-55111

DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs and activity logs stored on the affected products may be retrieved...

6.5CVSS7.4AI score0.00203EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 7:58 a.m.•8 views

EUVD-2026-55110

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor map and log information stored on the affected products may be retrieved...

8.7CVSS7.4AI score0.00432EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 7:44 a.m.•7 views

EUVD-2026-55109

Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information...

6.9CVSS5.2AI score0.00091EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:44 a.m.•8 views

EUVD-2026-55108

Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

6.8CVSS5.2AI score0.00153EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:44 a.m.•8 views

EUVD-2026-55107

Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...

6.9CVSS5.2AI score0.00137EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:43 a.m.•7 views

EUVD-2026-55106

Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability...

5.1CVSS5.2AI score0.00091EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:43 a.m.•8 views

EUVD-2026-55105

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

6.9CVSS5.1AI score0.00105EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:43 a.m.•10 views

EUVD-2026-55104

Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data...

7CVSS5.2AI score0.00065EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:43 a.m.•10 views

EUVD-2026-55103

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...

4.7CVSS5.2AI score0.00097EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:43 a.m.•8 views

EUVD-2026-55102

Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...

6.9CVSS5.2AI score0.00105EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:42 a.m.•9 views

EUVD-2026-55101

Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...

6.9CVSS5.2AI score0.00105EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:42 a.m.•9 views

EUVD-2026-55100

Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to access sensitive information...

5.3CVSS5.3AI score0.0036EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:42 a.m.•8 views

EUVD-2026-55099

Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege...

7.2CVSS5.6AI score0.00103EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:42 a.m.•8 views

EUVD-2026-55098

Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity...

5.2CVSS5.2AI score0.00155EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:42 a.m.•8 views

EUVD-2026-55097

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

5.1CVSS5.2AI score0.00119EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:41 a.m.•7 views

EUVD-2026-55096

Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

5.1CVSS5.2AI score0.00111EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:41 a.m.•9 views

EUVD-2026-55095

Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information...

5.1CVSS5AI score0.00145EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:41 a.m.•10 views

EUVD-2026-55094

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

5.1CVSS5.2AI score0.00111EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:41 a.m.•7 views

EUVD-2026-55093

Stack-based buffer overflow in librilsem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code...

8.4CVSS5.9AI score0.00127EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:41 a.m.•9 views

EUVD-2026-55092

Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

5.1CVSS5.2AI score0.00119EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:41 a.m.•8 views

EUVD-2026-55091

Improper input validation in libcodec2secflacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

5.1CVSS5.2AI score0.00119EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:40 a.m.•9 views

EUVD-2026-55090

Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

4.8CVSS5.2AI score0.00106EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:40 a.m.•6 views

EUVD-2026-55089

Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability...

7CVSS5.2AI score0.00113EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:40 a.m.•7 views

EUVD-2026-55088

Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function...

6.8CVSS5AI score0.00155EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:40 a.m.•8 views

EUVD-2026-55087

Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data...

4.8CVSS5.2AI score0.00103EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:40 a.m.•6 views

EUVD-2026-55086

Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability...

6CVSS5.3AI score0.00332EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:39 a.m.•7 views

EUVD-2026-55085

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles...

6.7CVSS5AI score0.00154EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:39 a.m.•7 views

EUVD-2026-55084

Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege...

6.9CVSS5.2AI score0.00113EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:39 a.m.•7 views

EUVD-2026-55083

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege...

6.9CVSS5.2AI score0.00119EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:10 a.m.•7 views

EUVD-2026-55082

Cybozu Garoon contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of a user logged in to the product...

6.8CVSS6.4AI score0.00316EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 7:9 a.m.•8 views

EUVD-2026-55081

Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may allow an attacker who can access the affected product to log in to the management console. As a result, the attacker may perform any operations available from...

8.8CVSS8AI score0.00398EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 6:29 a.m.•10 views

EUVD-2026-55002

A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in keras/src/saving/savinglib.py does not validate the shape or size of datasets, leading...

5.5CVSS5.3AI score0.00128EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 6:0 a.m.•10 views

EUVD-2026-55000

The Duplicate Post WordPress plugin before 1.5.5 does not perform per-object authorisation checks in its bulk copy and delete operations, allowing any user whose role an administrator has granted Duplicate Post WordPress plugin before 1.5.5 access to permanently delete arbitrary posts on the site...

5.5AI score0.00232EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 6:0 a.m.•9 views

EUVD-2026-55001

The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its accepted-types setting is left empty, which its own documentation advertises as accepting all files, allowing unauthenticated attackers to upload arbitrary files and achieve remot...

6.3AI score0.00462EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 6:0 a.m.•9 views

EUVD-2026-54999

All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by ?vdl= on any aiovgvideos post public/video.php, AIOVGPublicVideo::downloadvideo, which reads the post's mp4 meta value and streams that URL's response back to the requester...

5.3AI score0.00162EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 6:0 a.m.•9 views

EUVD-2026-54996

The FoodBoxBooker WordPress plugin before 1.0.8 does not verify that the user account being updated belongs to the user making the request, allowing authenticated users, with Subscriber-level access and above, to modify the profile details of arbitrary users, including administrators...

5.4AI score0.00152EPSS
SaveExploits0References1
Total number of security vulnerabilities433049