CVE-2019-15752 | HIGH | 7.8 | 0.31918 | 67.37 | Yes | No | 2019-08-28 | 2025-10-21 | cisa.gov, euvd | Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.ex…Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command. |
CVE-2024-2044 | CRITICAL | 9.9 | 0.79326 | 67.36 | No | No | 2024-03-07 | 2025-02-13 | euvd | pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server…pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is running on POSIX/Linux, an authenticated attacker can upload pickle objects, deserialize them, and gain code execution. |
CVE-2022-34715 | CRITICAL | 9.8 | 0.80431 | 67.35 | No | No | 2022-08-09 | 2025-05-29 | euvd | Windows Network File System Remote Code Execution VulnerabilityWindows Network File System Remote Code Execution Vulnerability |
CVE-2011-2005 | HIGH | 7.8 | 0.31761 | 67.32 | Yes | No | 2011-10-12 | 2025-10-22 | cisa.gov, euvd | afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input …afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability." |
CVE-2023-39143 | CRITICAL | 9.8 | 0.80292 | 67.3 | No | No | 2023-08-04 | 2025-05-05 | euvd | PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. Th…PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads to remote code execution when external device integration is enabled (a very common configuration). |
CVE-2024-8503 | CRITICAL | 9.8 | 0.8023 | 67.28 | No | No | 2024-09-10 | 2025-11-04 | euvd | An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database records. By default, VIC…An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database records. By default, VICIdial stores plaintext credentials within the database. |
CVE-2023-44353 | CRITICAL | 9.8 | 0.80178 | 67.26 | No | No | 2023-11-17 | 2024-09-04 | euvd | Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability …Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. |
CVE-2018-14558 | CRITICAL | 9.8 | 0.08672 | 67.24 | Yes | No | 2018-10-30 | 2025-10-21 | cisa.gov, euvd | An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318…An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted goform/setUsbUnload request. This occurs because the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. |
CVE-2023-29525 | CRITICAL | 10.0 | 0.77752 | 67.21 | No | No | 2023-04-18 | 2025-02-05 | euvd | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Affected versions of xwiki are subj…XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Affected versions of xwiki are subject to code injection in the `since` parameter of the `/xwiki/bin/view/XWiki/Notifications/Code/LegacyNotificationAdministration` endpoint. This provides an XWiki syntax injection attack via the since-parameter, allowing privilege escalation from view to programming rights and subsequent code execution privilege. The vulnerability has been patched in XWiki 15.0-rc-1, 14.10.3, 14.4.8 and 14.10.3. Users are advised to upgrade. Users unable to upgrade may modify the page `XWiki.Notifications.Code.LegacyNotificationAdministration` to add the missing escaping. For versions < 14.6-rc-1 a workaround is to modify the file `<xwikiwebapp>/templates/distribution/eventmigration.wiki` to add the missing escaping. |
CVE-2022-38418 | CRITICAL | 9.8 | 0.80023 | 67.21 | No | No | 2022-10-14 | 2025-04-23 | euvd | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restr…Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. |
CVE-2014-8439 | HIGH | 8.8 | 0.20008 | 67.2 | Yes | No | 2014-11-25 | 2025-10-22 | cisa.gov, euvd | Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR bef…Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors. |
CVE-2024-42327 | CRITICAL | 9.9 | 0.78831 | 67.19 | No | No | 2024-11-27 | 2024-12-04 | euvd | A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vu…A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the CUser.get function which is available for every user who has API access. |
CVE-2018-19323 | CRITICAL | 9.8 | 0.08523 | 67.18 | Yes | No | 2018-12-21 | 2025-10-21 | cisa.gov, euvd | The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, …The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs). |
CVE-2023-0050 | HIGH | 8.7 | 0.9242 | 67.15 | No | No | 2023-03-09 | 2025-02-28 | euvd | An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.…An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A specially crafted Kroki diagram could lead to a stored XSS on the client side which allows attackers to perform arbitrary actions on behalf of victims. |
CVE-2021-21148 | HIGH | 8.8 | 0.19815 | 67.14 | Yes | No | 2021-02-09 | 2025-10-21 | cisa.gov, euvd | Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a cr…Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2016-1010 | HIGH | 8.8 | 0.19785 | 67.12 | Yes | No | 2016-03-12 | 2025-10-21 | cisa.gov, euvd | Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577…Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993. |
CVE-2023-38408 | CRITICAL | 9.8 | 0.797 | 67.09 | No | No | 2023-07-20 | 2024-10-15 | euvd | The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if …The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009. |
CVE-2025-32429 | CRITICAL | 9.3 | 0.8541 | 67.09 | No | No | 2025-07-24 | 2025-07-25 | euvd | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.…XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an ORDER BY value. This is fixed in versions 16.10.6 and 17.3.0-rc-1. |
CVE-2025-48827 | CRITICAL | 10.0 | 0.77374 | 67.08 | No | No | 2025-05-27 | 2025-05-27 | euvd | vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running…vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or later, as demonstrated by the /api.php?method=protectedMethod pattern, as exploited in the wild in May 2025. |
CVE-2026-41089 | CRITICAL | 9.8 | 0.79622 | 67.07 | No | Yes | 2026-05-12 | 2026-06-19 | euvd, github | Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. |
CVE-2023-2948 | HIGH | 8.3 | 0.96731 | 67.06 | No | No | 2023-05-28 | 2025-01-14 | euvd | Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.1.Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.1. |
CVE-2025-27363 | HIGH | 8.1 | 0.27553 | 67.04 | Yes | No | 2025-03-11 | 2026-04-19 | cisa.gov, euvd | An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse…An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild. |
CVE-2017-0210 | HIGH | 8.8 | 0.19522 | 67.03 | Yes | No | 2017-04-12 | 2025-10-21 | cisa.gov, euvd | An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an …An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability." |
CVE-2026-48558 | CRITICAL | 9.5 | 0.11484 | 67.02 | Yes | No | 2026-06-12 | 2026-07-14 | cisa.gov, euvd | SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication …SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic signature. In a vulnerable configuration, a remote, unauthenticated attacker can submit a forged token containing arbitrary identity claims to obtain a fully authenticated technician session. In some configurations, this may also allow bypass of multi-factor authentication. No user interaction is required. |
CVE-2019-11634 | CRITICAL | 9.8 | 0.08026 | 67.01 | Yes | No | 2019-05-22 | 2025-10-21 | cisa.gov, euvd | Citrix Workspace App before 1904 for Windows has Incorrect Access Control.Citrix Workspace App before 1904 for Windows has Incorrect Access Control. |
CVE-2024-36104 | CRITICAL | 9.1 | 0.87415 | 67.0 | No | Yes | 2024-06-04 | 2025-02-13 | euvd, github | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBi…Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14.
Users are recommended to upgrade to version 18.12.14, which fixes the issue. |
CVE-2022-20700 | CRITICAL | 10.0 | 0.05655 | 66.98 | Yes | No | 2022-02-10 | 2025-10-21 | cisa.gov, euvd | Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the foll…Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory. |
CVE-2021-1870 | CRITICAL | 9.8 | 0.07921 | 66.97 | Yes | No | 2021-04-02 | 2025-10-21 | cisa.gov, euvd | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Securi…A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.. |
CVE-2019-11001 | HIGH | 7.2 | 0.37542 | 66.94 | Yes | No | 2019-04-08 | 2025-10-21 | cisa.gov, euvd | On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" function…On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality to inject and run OS commands as root, as demonstrated by shell metacharacters in the addr1 field. |
CVE-2023-22621 | CRITICAL | 10.0 | 0.76825 | 66.89 | No | No | 2023-04-19 | 2025-11-07 | euvd | Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitrary code on the serve…Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitrary code on the server. A remote attacker with access to the Strapi admin panel can inject a crafted payload that executes code on the server into an email template that bypasses the validation checks that should prevent code execution. |
CVE-2023-37450 | HIGH | 8.8 | 0.1895 | 66.83 | Yes | No | 2023-07-26 | 2025-10-21 | cisa.gov, euvd | The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5,…The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. |
CVE-2024-6387 | HIGH | 8.0 | 0.99506 | 66.83 | No | No | 2024-07-01 | 2024-07-03 | cnvd, euvd | OpenSSH is a set of secure networking utilities based on the Secure Shell (SSH) protocol, which provides encryption capabilities to ensure p…OpenSSH is a set of secure networking utilities based on the Secure Shell (SSH) protocol, which provides encryption capabilities to ensure privacy and secure file transfers, making it an essential tool for remote server management and secure data communication. OpenSSH remote code execution vulnerability allows an unauthenticated attacker to execute arbitrary code as root on a Linux system. |
CVE-2023-34992 | CRITICAL | 9.7 | 0.80061 | 66.82 | No | No | 2023-10-10 | 2026-01-14 | euvd | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to e…A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized code or commands via crafted API requests. |
CVE-2025-31125 | MEDIUM | 5.3 | 0.58801 | 66.78 | Yes | No | 2025-03-31 | 2026-01-23 | cisa.gov, euvd | Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or ?raw?import. Only app…Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected. This vulnerability is fixed in 6.2.4, 6.1.3, 6.0.13, 5.4.16, and 4.5.11. |
CVE-2016-7892 | HIGH | 8.8 | 0.18786 | 66.78 | Yes | No | 2016-12-15 | 2025-10-21 | cisa.gov, euvd | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextFie…Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution. |
CVE-2023-35150 | CRITICAL | 9.9 | 0.77654 | 66.78 | No | No | 2023-06-23 | 2024-11-29 | euvd | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 2.40m-2 and pri…XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 2.40m-2 and prior to versions 14.4.8, 14.10.4, and 15.0, any user with view rights on any document can execute code with programming rights, leading to remote code execution by crafting an url with a dangerous payload. The problem has been patched in XWiki 15.0, 14.10.4 and 14.4.8. |
CVE-2024-41710 | MEDIUM | 6.8 | 0.41646 | 66.78 | Yes | No | 2024-08-12 | 2025-10-21 | cisa.gov, euvd | A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (…A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an authenticated attacker with administrative privilege to conduct an argument injection attack, due to insufficient parameter sanitization during the boot process. A successful exploit could allow an attacker to execute arbitrary commands within the context of the system. |
CVE-2023-32563 | HIGH | 8.8 | 0.90166 | 66.76 | No | No | 2023-08-10 | 2025-02-13 | euvd | An unauthenticated attacker could achieve the code execution through a RemoteControl server.An unauthenticated attacker could achieve the code execution through a RemoteControl server. |
CVE-2024-56325 | CRITICAL | 9.8 | 0.78668 | 66.73 | No | No | 2025-04-01 | 2025-10-27 | euvd | Authentication Bypass Issue
If the path does not contain / and contain., authentication is not required.
Expected Normal Request and Respo…Authentication Bypass Issue
If the path does not contain / and contain., authentication is not required.
Expected Normal Request and Response Example
curl -X POST -H "Content-Type: application/json" -d {\"username\":\"hack2\",\"password\":\"hack\",\"component\":\"CONTROLLER\",\"role\":\"ADMIN\",\"tables\":[],\"permissions\":[],\"usernameWithComponent\":\"hack_CONTROLLER\"} http://{server_ip}:9000/users
Return: {"code":401,"error":"HTTP 401 Unauthorized"}
Malicious Request and Response Example
curl -X POST -H "Content-Type: application/json" -d '{\"username\":\"hack\",\"password\":\"hack\",\"component\":\"CONTROLLER\",\"role\":\"ADMIN\",\"tables\":[],\"permissions\":[],\"usernameWithComponent\":\"hack_CONTROLLER\"}' http://{serverip}:9000/users; http://{serverip}:9000/users; .
Return: {"users":{}}
A new user gets added bypassing authentication, enabling the user to control Pinot. |
CVE-2022-36980 | CRITICAL | 9.4 | 0.83136 | 66.7 | No | No | 2023-03-29 | 2025-02-18 | euvd | This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. Although authe…This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the EnterpriseServer service. The issue results from the lack of proper locking when performing operations during authentication. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-15528. |
CVE-2023-29524 | CRITICAL | 10.0 | 0.76297 | 66.7 | No | No | 2023-04-18 | 2025-02-05 | euvd | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute anything w…XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute anything with the right of the Scheduler Application sheet page. A user without script or programming rights, edit your user profile with the object editor and add a new object of type XWiki.SchedulerJobClass, In "Job Script", groovy code can be added and will be executed in the server context on viewing. This has been patched in XWiki 14.10.3 and 15.0 RC1. Users are advised to upgrade. There are no known workarounds for this issue. |
CVE-2022-34721 | CRITICAL | 9.8 | 0.7855 | 66.69 | No | No | 2022-09-13 | 2025-03-11 | euvd | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution VulnerabilityWindows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
CVE-2021-1871 | CRITICAL | 9.8 | 0.0712 | 66.69 | Yes | No | 2021-04-02 | 2025-10-21 | cisa.gov, euvd | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Securi…A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.. |
CVE-2019-1405 | HIGH | 7.8 | 0.2995 | 66.68 | Yes | No | 2019-11-12 | 2025-10-21 | cisa.gov, euvd | An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation…An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'. |
CVE-2019-0344 | CRITICAL | 9.8 | 0.07079 | 66.68 | Yes | No | 2019-08-14 | 2025-10-21 | cisa.gov, euvd | Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possi…Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Injection. |
CVE-2024-7965 | HIGH | 8.8 | 0.18379 | 66.63 | Yes | No | 2024-08-21 | 2025-10-21 | cisa.gov, euvd | Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption …Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-27518 | CRITICAL | 9.8 | 0.06875 | 66.61 | Yes | No | 2022-12-13 | 2025-10-21 | cisa.gov, euvd | Unauthenticated remote arbitrary code executionUnauthenticated remote arbitrary code execution |
CVE-2024-25641 | CRITICAL | 9.1 | 0.86303 | 66.61 | No | No | 2024-05-13 | 2025-11-04 | euvd | Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, an arbitrary file write vulnerability, exp…Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, an arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code on the web server. The vulnerability is located within the `import_package()` function defined into the `/lib/import.php` script. The function blindly trusts the filename and file content provided within the XML data, and writes such files into the Cacti base path (or even outside, since path traversal sequences are not filtered). This can be exploited to write or overwrite arbitrary files on the web server, leading to execution of arbitrary PHP code or other security impacts. Version 1.2.27 contains a patch for this issue. |
CVE-2024-37032 | HIGH | 8.8 | 0.89633 | 66.57 | No | No | 2024-05-31 | 2025-03-27 | euvd | Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandles…Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandles the TestGetBlobsPath test cases such as fewer than 64 hex digits, more than 64 hex digits, or an initial ../ substring. |
CVE-2019-8506 | HIGH | 8.8 | 0.18108 | 66.54 | Yes | No | 2019-12-18 | 2025-10-21 | cisa.gov, euvd | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iT…A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution. |