479033 matches found
EUVD-2026-123071
Viber for iOS through 29.4.0.24 fails to validate the logical screen width and height in received GIF headers, allowing attackers to crash the app. Attackers can send a crafted GIF with zero dimensions that triggers an uncaught NSInternalInconsistencyException, aborting the app with SIGABRT when...
EUVD-2026-123070
WWBN AVideo through 29.7.1 contains a missing authorization vulnerability in API::getapitags in plugin/API/API.php that allows registered users to access restricted video data by querying the tags API. Attackers can subscribe to a tag and query APIName=tags to obtain filenames, titles and stored...
EUVD-2026-123069
WWBN AVideo 6.5 through 29.7.1 contains an email verification bypass vulnerability in User::verifyCode in objects/user.php caused by PHP loose comparison of the recoverPass token. Registered users can reuse the installation-wide salt from their own verification link and craft a code with arbitrar...
EUVD-2026-123068
WWBN AVideo through 29.7.1 contains an improper payment verification vulnerability in plugin/PayPalYPT/ipnV2.php that credits wallets from PayPal IPNs not bound to the site's merchant account. Unauthenticated attackers can forward genuine VERIFIED recurring-payment IPNs from their own PayPal...
EUVD-2026-123067
WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user via Hybridauth social login display names. Attackers can set their X, Facebook, Yahoo or LinkedIn display name to a victim's username and withhold email,...
EUVD-2026-123066
WWBN AVideo through 29.7.1 contains a missing authorization vulnerability in Live plugin restream endpoints that allows authenticated streamers to obtain other users' stream keys by supplying arbitrary livetransmitionshistoryid values. Attackers can redeem the issued action tokens at...
EUVD-2026-123065
Directus before 12.1.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to skip permission checks by sending a failed auth message on public-mode WebSocket connections. Attackers can send an invalid token so handleAuthRequest sets accountability to null, then...
EUVD-2026-123064
Jellyfin before 12.0 contains a path traversal vulnerability in the DELETE /Library/VirtualFolders and POST /Library/VirtualFolders/Name endpoints that allows attackers to delete or move directories via unvalidated library names. Unauthenticated attackers can supply names like .. or absolute path...
EUVD-2026-123062
LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 R2004 DWG file with malicious startOffset values that cause decompress18 to wri...
EUVD-2026-123063
WriteFreely before 0.17.3 contains a stored cross-site scripting vulnerability that allows authenticated authors to inject HTML by supplying a malicious post slug via the CreatePost API. The raw slug is concatenated into an anchor by augmentReadingDestination for paid-shortcode posts, executing...
EUVD-2026-123061
1Panel-dev CordysCRM before 1.9.6 contains an authorization bypass vulnerability in CustomerContactController.get that allows authenticated users to read other users' contacts because no organization, owner or data-scope check is applied. Attackers holding ordinary contact or customer read...
EUVD-2026-123060
MQTTX desktop through 1.13.3 contains a stored cross-site scripting vulnerability that allows attackers to inject script by publishing malicious MQTT topic names or payloads rendered unescaped in tooltips. Attackers controlling a broker or publishing to subscribed topics can execute script in the...
EUVD-2026-122251
Microsoft Security Advisory CVE-2026-118745 - Visual Studio Remote Code Execution Vulnerability...
EUVD-2026-121976
Microsoft Security Advisory CVE-2026-114152 - Visual Studio Remote Code Execution Vulnerability...
EUVD-2026-121975
Microsoft Security Advisory CVE-2026-114151 - Visual Studio Remote Code Execution Vulnerability...
EUVD-2026-121981
Microsoft Security Advisory CVE-2026-114158 - Visual Studio Remote Code Execution Vulnerability...
EUVD-2026-121982
Microsoft Security Advisory CVE-2026-114159 - Visual Studio Remote Code Execution Vulnerability...
EUVD-2026-123051
A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.8 may allow an unauthenticated attacker that can reach the FGFM port to execute code or commands via crafted FGFM packets...
EUVD-2026-123058
A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permissions. An...
EUVD-2025-211286
Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor or migration agent to import a forged guest context potentially resulting in loss of confidentiality for derived guest keys...
EUVD-2026-123049
Operation on a resource after expiration or release in the AMD Secure Encrypted Virtualization SEV firmware could allow an attacker with administrative privileges to swap out a guest device without the guest's knowledge, potentially resulting in a loss of confidentiality and integrity...
EUVD-2026-123047
An out-of-bounds write in the AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to corrupt global firmware variables, potentially resulting in loss of integrity...
EUVD-2026-123050
Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization SEV firmware and exploit known vulnerabilities to decrypt memory potentially resulting in loss of confidentiality...
EUVD-2026-123046
Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to forge SEV-TIO guest request messages potentially compromising SEV-SNP guest memory integrity and confidentiality...
EUVD-2026-123048
An expression language injection has been found in the HeaderContentGuard.permit function in publication.py of the content guard in the Pulpcore package. The guard is supposed to check a value in a request header. It saves a jq filter and runs that filter against the header when a client asks for...
EUVD-2026-123054
Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Forwarded-Prefix header on regex Routes, allowing HTTP header injection and request smuggling to the upstream...
EUVD-2026-122965
The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response cached for one caller to be served to another...
EUVD-2026-123033
Chargemap contains a stored cross site scripting vulnerability. A remote, unauthenticated attacker could craft a payload in the username field of the account registration page and associate the new account with a victim's email. The attacker could send a forgotten password request to the victim,...
EUVD-2026-122966
The Basel Post Types plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.18. The vulnerability exists because a missing-quotes coding error in the defined call for SECUREAUTHSALT inside BASELAuth::getconfig causes PHP to evaluate the constant's valu...
EUVD-2026-122960
The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache key which may allow a response cached for a hostname to be served for another...
EUVD-2026-123032
Chargemap contains an open redirect vulnerability in the authentication login endpoint. A remote, unauthenticated attacker could send a crafted URL to a victim and redirect them to an attacker controlled domain. Fixed 2026-07-17...
EUVD-2026-123053
The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service Provider to be replayed to authenticate to Kong...
EUVD-2026-122956
Missing authentication for critical function vulnerability in N-able N-central allows Privilege Escalation. This issue affects N-central: before 2026.4.1...
EUVD-2025-211288
Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock SDU, potentially resulting in unauthorized debug access...
EUVD-2025-211287
Operation on a resource after expiration or release in the Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to manipulate metadata pages potentially resulting in the loss of confidentiality and integrity of guest memory...
EUVD-2024-55844
Missing Lock Bit Protection in the Northbridge IO NBIO could allow a privileged attacker to use an intentionally disabled device as part of a remapping attack potentially impacting data confidentiality, integrity, or availability...
EUVD-2026-123043
Improper preservation of consistency between independent representations of shared state in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to potentially affect cache coherency for guest context pages resulting in loss of integrity...
EUVD-2026-122993
The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than the in-memory body buffer, allowing prompts to bypass input content-safety checks...
EUVD-2026-122992
The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Authorization or Proxy-Authorization to different callers...
EUVD-2026-123031
Chargemap contains a stored cross-site scripting vulnerability that allows a remote, authenticated attacker to craft a malicious payload in the user profile page that executes when another user views the attacker's profile. Fixed 2026-07-17...
EUVD-2026-123056
The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator characters when building the cache key, allowing a remote attacker to cause a response cached for one request to be served for a different request on the same Route...
EUVD-2026-123040
Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging SEV-SNP could allow a privileged attacker to potentially overlap MMIO regions with DRAM regions resulting in loss of integrity...
EUVD-2026-123057
BeeS Software Solutions ERP before 04 September 2026 allows any low-privileged user to navigate directly to the administrative dashboard endpoint and gain access to the administrative console, including unrestricted access to institutional, employee, and student data...
EUVD-2026-123041
An off-by-one error in AMD Secure Encrypted Virtualization SEV firmware could allow an attacker with hypervisor access to corrupt the Reverse Map Table RMP table, potentially resulting in loss of guest memory integrity...
EUVD-2026-122958
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in N-able N-central allows Resource Injection. This issue affects N-central: before 26.4.1...
EUVD-2026-123017
Adobe Experience Manager is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is...
EUVD-2026-123045
Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to potentially launch a guest whose attestation report contains an ID key digest for an ID block that doesn't match the guest's measurement resulting in loss of...
EUVD-2026-123042
Authentication bypass by spoofing in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to request attestation reports for VMPL 0...
EUVD-2026-123044
Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to change the encryption bit for guest context pages potentially resulting in loss of integrity...