Lucene search
+L

452125 matches found

EUVD
EUVD
•added 2026/09/17 1:45 p.m.•11 views

EUVD-2026-81583

vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code util.getCallSites, a programmatic stack-introspection API that returns the host process's full call stack, including absolute file paths, function names, and line numbers for vm2 bridge internals and...

6.9CVSS5.9AI score0.00372EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/17 1:43 p.m.•10 views

EUVD-2026-81582

ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or terminate href attributes to execute arbitrary scripts in the...

6.1CVSS6.1AI score0.00393EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/17 1:43 p.m.•10 views

EUVD-2026-81581

SGLang through 0.5.19 in prefill/decode disaggregation mode contains an unauthenticated PUT /route endpoint on the prefill bootstrap service that allows attackers to poison the KV transfer routing table. Attackers can supply arbitrary rankip and rankport values to redirect decode workers to...

8.8CVSS5.9AI score0.00468EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/17 1:43 p.m.•10 views

EUVD-2026-81580

InternLM LMDeploy through 0.17.0 contains a reachable assertion vulnerability in the DistServe decode migration loop that allows unauthenticated attackers to terminate the inference engine. Attackers can submit a migrationrequest with an empty remoteblockids list to trigger an AssertionError that...

8.7CVSS5.8AI score0.00704EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/17 1:43 p.m.•9 views

EUVD-2026-81579

HUBzero CMS through 2.2.32 contains a path traversal vulnerability in project file upload handlers that allows authenticated project members to write arbitrary files outside the project repository. Attackers can supply traversal sequences in upload parameters to write files to attacker-chosen pat...

8.8CVSS6.2AI score0.0082EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/09/17 1:40 p.m.•13 views

EUVD-2026-81578

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery CSRF vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

5.4CVSS6AI score0.00205EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:27 p.m.•14 views

EUVD-2026-81523

google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested STARTGROUP wire bytes to any Node.js service that calls the generated deserializeBinary API, causing a RangeError: Maximum call stack size...

8.7CVSS5.8AI score0.00277EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:26 p.m.•13 views

EUVD-2026-81522

The password reset funcionality is vulnerable to unauthorized account modification due to improper validation of the userid parameter. An attacker can manipulate this predictable numeric identifier to reset passwords for arbitrary users without proving account ownership...

8.8CVSS5.9AI score0.00295EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•11 views

EUVD-2026-81521

Unauthenticated Cross Site Scripting XSS in WP Inventory Manager = 2.5.4 versions...

7.1CVSS5.7AI score0.00251EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•9 views

EUVD-2026-81520

Unauthenticated Broken Access Control in BerqWP = 4.1.15 versions...

5.3CVSS5.7AI score0.00294EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•13 views

EUVD-2026-81519

Unauthenticated Cross Site Request Forgery CSRF in Xagio SEO = 7.1.0.43 versions...

8.8CVSS5.7AI score0.00201EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•12 views

EUVD-2026-81518

Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•14 views

EUVD-2026-81517

Unauthenticated Broken Access Control in User Registration = 5.2.7 versions...

5.3CVSS5.7AI score0.00313EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•8 views

EUVD-2026-81516

Unauthenticated Cross Site Request Forgery CSRF in PublishPress Series = 3.1.3 versions...

5.4CVSS5.7AI score0.00138EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•16 views

EUVD-2026-81515

Unauthenticated Broken Access Control in Booking Calendar = 11.7 versions...

5.3CVSS5.7AI score0.00294EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•9 views

EUVD-2026-81513

Contributor Insecure Direct Object References IDOR in Cooked = 1.16.0 versions...

5.4CVSS5.7AI score0.00287EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•12 views

EUVD-2026-81514

Contributor Broken Access Control in Simple Membership = 4.8.2 versions...

5.3CVSS5.7AI score0.00294EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•11 views

EUVD-2026-81512

Unauthenticated Broken Access Control in Easy Invoice = 2.3.8 versions...

5.3CVSS5.7AI score0.00313EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•13 views

EUVD-2026-81511

Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•14 views

EUVD-2026-81510

Administrator SQL Injection in PublishPress Series = 3.1.3 versions...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•17 views

EUVD-2026-81509

Shop manager SQL Injection in WP-Lister Lite for eBay = 3.8.11 versions...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•10 views

EUVD-2026-81507

Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•16 views

EUVD-2026-81508

Editor SQL Injection in SKT Addons for Elementor = 4.0 versions...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•15 views

EUVD-2026-81506

Administrator SQL Injection in WPMasterToolKit = 2.22.0 versions...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•11 views

EUVD-2026-81505

Administrator SQL Injection in Newsletters = 4.18 versions...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•15 views

EUVD-2026-81504

Administrator SQL Injection in WP Maps = 4.9.9 versions...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•13 views

EUVD-2026-81503

Contributor Cross Site Scripting XSS in PublishPress Series = 3.1.3 versions...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•10 views

EUVD-2026-81502

Contributor Server Side Request Forgery SSRF in Unlimited Elements For Elementor Free Widgets, Addons, Templates = 2.0.19 versions...

6.4CVSS5.8AI score0.0023EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•13 views

EUVD-2026-81501

Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...

8.5CVSS5.8AI score0.00357EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•12 views

EUVD-2026-81500

Contributor Cross Site Scripting XSS in JetElements For Elementor = 2.9.2.1 versions...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•10 views

EUVD-2026-81499

Contributor Cross Site Scripting XSS in PropertyHive = 2.2.6 versions...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•13 views

EUVD-2026-81498

Contributor Cross Site Scripting XSS in JetSearch = 3.6.3 versions...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•13 views

EUVD-2026-81496

Unauthenticated Insecure Direct Object References IDOR in King Addons for Elementor = 51.1.81 versions...

5.3CVSS5.7AI score0.00294EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•12 views

EUVD-2026-81497

Contributor Cross Site Scripting XSS in JetBlocks For Elementor = 1.5.2 versions...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•11 views

EUVD-2026-81495

Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•9 views

EUVD-2026-81493

Contributor Cross Site Scripting XSS in JetBlog = 2.4.10 versions...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•12 views

EUVD-2026-81494

Contributor Cross Site Scripting XSS in JetTabs = 2.3.3.1 versions...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•12 views

EUVD-2026-81492

Unauthenticated Cross Site Request Forgery CSRF in Asset CleanUp: Page Speed Booster = 1.4.0.5 versions...

7.1CVSS5.7AI score0.00128EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•13 views

EUVD-2026-81491

Unauthenticated Broken Authentication in Headless Single Sign On = 1.7.0 versions...

9.8CVSS5.7AI score0.00606EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•11 views

EUVD-2026-81490

Unauthenticated Remote Code Execution RCE in Migratico Lite = 2.6.8 versions...

10CVSS5.8AI score0.0086EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•16 views

EUVD-2026-81489

Unauthenticated Broken Authentication in EduAdmin Booking = 5.4.2 versions...

9.8CVSS5.7AI score0.00606EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•17 views

EUVD-2026-81488

Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.21 versions...

7.1CVSS5.7AI score0.00251EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:09 p.m.•15 views

EUVD-2026-81487

Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an unconfirmed user to obtain a session, defeating a mandatory email confirmation requirement. AshAuthentication.Strategy.Password.Actions.checkuser/2 decides whether the attribute named by...

9.1CVSS5.9AI score0.00768EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/17 1:09 p.m.•17 views

EUVD-2026-81486

Insufficient Session Expiration vulnerability in team-alembic AshAuthentication and AshAuthentication Phoenix allows a revoked session to remain fully authenticated. A resource configured with sessionidentifier :jti and requiretokenpresenceforauthentication? disabled stores its session value as :...

9.1CVSS5.9AI score0.00908EPSS
SaveExploits0References10
EUVD
EUVD
•added 2026/09/17 1:09 p.m.•11 views

EUVD-2026-81485

Use of HTTP Request With Sensitive Query String vulnerability in team-alembic AshAuthenticationPhoenix allows someone able to read access logs, proxy logs or browser history to recover a single-use sign-in token and authenticate as its owner. After a successful password sign-in,...

7.2CVSS5.9AI score0.00211EPSS
SaveExploits0References10
EUVD
EUVD
•added 2026/09/17 1:09 p.m.•10 views

EUVD-2026-81484

Improper Authentication vulnerability in team-alembic AshAuthentication allows an attacker holding a sign-in token for one authenticated resource to be signed in as a user of a different resource. AshAuthentication.Strategy.Password.SignInWithTokenPreparation.extractprimarykeysfromsubject/2 parse...

7.6CVSS5.8AI score0.00637EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/17 1:09 p.m.•14 views

EUVD-2026-81483

Improper Verification of Cryptographic Signature vulnerability in team-alembic AshAuthentication allows a caller of the token revocation action to neutralise a revocation or write arbitrary rows into the token resource. AshAuthentication.TokenResource.RevokeTokenChange.change/3 reads the :token...

6.9CVSS6AI score0.00441EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/17 1:09 p.m.•11 views

EUVD-2026-81482

Improper Output Neutralization for Logs vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to forge application log entries by submitting a password reset identity containing newlines or control characters...

6.3CVSS5.9AI score0.00737EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/17 1:09 p.m.•11 views

EUVD-2026-81481

Insufficient Session Expiration vulnerability in team-alembic AshAuthentication allows an attacker who obtains a victim's OAuth2 state value to replay the callback and sign that victim into an attacker-controlled account. AshAuthentication.Strategy.OAuth2.Plug.callback/2 clears the stored...

2.3CVSS5.8AI score0.00607EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/17 1:09 p.m.•15 views

EUVD-2026-81480

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in team-alembic AshAuthentication allows an attacker holding a leaked magic link to replay its single-use token and authenticate as the target subject. A magic link configured with singleusetoken?, which is the default, is meant to be...

9.1CVSS5.8AI score0.0056EPSS
SaveExploits0References6
Total number of security vulnerabilities452125