CVE-2023-3765 | CRITICAL | 10.0 | 0.6755 | 63.64 | No | No | 2023-07-19 | 2024-10-24 | euvd | Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. |
CVE-2025-26633 | HIGH | 7.0 | 0.30391 | 63.64 | Yes | No | 2025-03-11 | 2026-08-05 | cisa.gov, euvd, nvd | Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally. |
CVE-2022-21145 | CRITICAL | 9.1 | 0.77778 | 63.62 | No | No | 2022-04-14 | 2025-04-15 | euvd | A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-c…A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability. |
CVE-2023-26801 | CRITICAL | 9.8 | 0.69663 | 63.58 | No | No | 2023-03-26 | 2025-05-05 | euvd | LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a com…LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/set_LimitClient_cfg. |
CVE-2024-43441 | CRITICAL | 9.8 | 0.69651 | 63.58 | No | No | 2024-12-24 | 2024-12-31 | euvd | Authentication Bypass by Assumed-Immutable Data vulnerability in Apache HugeGraph-Server.
This issue affects Apache HugeGraph-Server: from …Authentication Bypass by Assumed-Immutable Data vulnerability in Apache HugeGraph-Server.
This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.5.0.
Users are recommended to upgrade to version 1.5.0, which fixes the issue. |
CVE-2023-22463 | CRITICAL | 9.8 | 0.69667 | 63.58 | No | No | 2023-01-04 | 2025-03-10 | euvd | KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwt…KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys for all online projects. This means that an attacker can forge any jwt token to take over the administrator account of any online project. Furthermore, they may use the administrator to take over the k8s cluster of the target enterprise. `session.go`, the use of hard-coded JwtSigKey, allows an attacker to use this value to forge jwt tokens arbitrarily. The JwtSigKey is confidential and should not be hard-coded in the code. The vulnerability has been fixed in 1.6.3. In the patch, JWT key is specified in app.yml. If the user leaves it blank, a random key will be used. There are no workarounds aside from upgrading. |
CVE-2012-1854 | HIGH | 7.8 | 0.21028 | 63.56 | Yes | No | 2012-07-10 | 2026-04-14 | cisa.gov, euvd | Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basi…Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Visual Basic for Applications Insecure Library Loading Vulnerability," as exploited in the wild in July 2012. |
CVE-2021-44207 | HIGH | 8.1 | 0.17578 | 63.55 | Yes | No | 2021-12-21 | 2025-10-21 | cisa.gov, euvd | Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials. |
CVE-2024-9537 | CRITICAL | 9.3 | 0.03826 | 63.54 | Yes | No | 2024-10-18 | 2025-10-21 | cisa.gov, euvd | ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1…ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x. |
CVE-2023-23529 | HIGH | 8.8 | 0.09502 | 63.53 | Yes | No | 2023-02-27 | 2025-10-21 | cisa.gov, euvd | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1…A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. |
CVE-2025-9377 | HIGH | 8.6 | 0.11788 | 63.53 | Yes | No | 2025-08-29 | 2026-02-26 | cisa.gov, euvd | The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841…The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9.
This issue affects Archer C7(EU) V2: before 241108 and TL-WR841N/ND(MS) V9: before 241108.
Both products have reached the status of EOL (end-of-life).
It's recommending to
purchase the new
product to ensure better performance and security. If replacement is not
an option in the short term, please use the second reference link to
download and install the patch(es). |
CVE-2018-8653 | HIGH | 7.5 | 0.24305 | 63.51 | Yes | No | 2018-12-20 | 2025-10-21 | cisa.gov, euvd | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip…A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8643. |
CVE-2019-17444 | CRITICAL | 9.8 | 0.69445 | 63.51 | No | No | 2020-10-12 | 2024-09-16 | euvd | Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them. This ma…Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. This issue affects Jfrog Artifactory versions prior to 6.17.0. |
CVE-2026-22719 | HIGH | 8.1 | 0.17424 | 63.5 | Yes | No | 2026-02-25 | 2026-04-14 | cisa.gov, euvd | VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbit…VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migration is in progress.
To remediate CVE-2026-22719, apply the patches listed in the 'Fixed Version' column of the ' Response Matrix https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ' in VMSA-2026-0001
Workarounds for CVE-2026-22719 are documented in the 'Workarounds' column of the ' Response Matrix https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ' in VMSA-2026-0001 |
CVE-2016-2183 | HIGH | 7.5 | 0.95707 | 63.5 | No | No | 2016-09-01 | 2026-05-29 | euvd | The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of appr…The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack. |
CVE-2021-21206 | HIGH | 8.8 | 0.09401 | 63.49 | Yes | No | 2021-04-26 | 2025-10-21 | cisa.gov, euvd | Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a craft…Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2023-42917 | HIGH | 8.8 | 0.0937 | 63.48 | Yes | No | 2023-11-30 | 2025-10-21 | cisa.gov, euvd | A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.…A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1. |
CVE-2023-2917 | CRITICAL | 9.8 | 0.69364 | 63.48 | No | No | 2023-08-17 | 2024-10-08 | euvd | The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability. Due to an improper input validati…The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability. Due to an improper input validation, a path traversal vulnerability exists, via the filename field, when the ThinManager processes a certain function. If exploited, an unauthenticated remote attacker can upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed. A malicious user could exploit this vulnerability by sending a crafted synchronization protocol message and potentially gain remote code execution abilities. |
CVE-2021-23758 | HIGH | 8.1 | 0.88768 | 63.47 | No | No | 2021-12-03 | 2024-09-17 | euvd | All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary…All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution. |
CVE-2025-4009 | CRITICAL | 9.3 | 0.74956 | 63.43 | No | No | 2025-05-28 | 2025-09-12 | euvd | The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interf…The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product
features, setup network switching, and register license among other features. The application has been developed in PHP with the webEASY SDK, also named ‘ewb’ by Evertz.
This web interface has two endpoints that are vulnerable to arbitrary command injection (CVE-2025-4009, CVE-2025-10364) and the authentication mechanism has a flaw leading to authentication bypass (CVE-2025-10365).
CVE-2025-4009 covers the command injection in feature-transfer-import.php
CVE-2025-10364 covers the command injection in feature-transfer-export.php
Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.
This level of access could lead to serious business impact such as the interruption of media streaming, modification of media being streamed, alteration of closed captions being generated, among others. |
CVE-2020-1040 | CRITICAL | 9.0 | 0.06903 | 63.42 | Yes | No | 2020-07-14 | 2025-10-21 | cisa.gov, euvd | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authentica…A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043. |
CVE-2016-3309 | HIGH | 7.8 | 0.20625 | 63.42 | Yes | No | 2016-08-09 | 2025-10-21 | cisa.gov, euvd | The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 …The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3310, and CVE-2016-3311. |
CVE-2024-44308 | HIGH | 8.8 | 0.09186 | 63.42 | Yes | No | 2024-11-19 | 2026-04-02 | cisa.gov, euvd | The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1…The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems. |
CVE-2021-26829 | MEDIUM | 5.4 | 0.4805 | 63.42 | Yes | No | 2021-06-11 | 2025-12-02 | cisa.gov, euvd | OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm.OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm. |
CVE-2021-22017 | MEDIUM | 5.3 | 0.49177 | 63.41 | Yes | No | 2021-09-23 | 2025-10-21 | cisa.gov, euvd | Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with net…Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed. |
CVE-2025-6558 | HIGH | 8.8 | 0.09185 | 63.41 | Yes | No | 2025-07-15 | 2026-02-26 | cisa.gov, euvd | Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentiall…Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
CVE-2019-17571 | CRITICAL | 9.8 | 0.6906 | 63.37 | No | No | 2019-12-20 | 2026-05-28 | euvd | Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely exe…Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17. |
CVE-2024-27983 | HIGH | 8.2 | 0.87211 | 63.32 | No | No | 2024-04-09 | 2025-11-04 | euvd | An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 f…An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is possible to leave some data in nghttp2 memory after reset when headers with HTTP/2 CONTINUATION frame are sent to the server and then a TCP connection is abruptly closed by the client triggering the Http2Session destructor while header frames are still being processed (and stored in memory) causing a race condition. |
CVE-2021-30563 | HIGH | 8.8 | 0.08928 | 63.32 | Yes | No | 2021-08-03 | 2025-10-21 | cisa.gov, euvd | Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted …Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2014-9163 | HIGH | 7.8 | 0.20356 | 63.32 | Yes | No | 2014-12-10 | 2025-11-17 | cisa.gov, euvd | Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.…Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014. |
CVE-2023-3368 | CRITICAL | 9.8 | 0.68897 | 63.31 | No | No | 2023-11-28 | 2025-06-03 | euvd | Command injection in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to obtain re…Command injection in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. This is a bypass of CVE-2023-34960. |
CVE-2021-34621 | CRITICAL | 9.8 | 0.68862 | 63.3 | No | No | 2021-07-07 | 2024-10-15 | euvd | A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin…A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it possible for users to register on sites as an administrator. This issue affects versions 3.0.0 - 3.1.3. . |
CVE-2021-31956 | HIGH | 7.8 | 0.20268 | 63.29 | Yes | No | 2021-06-08 | 2026-01-12 | cisa.gov, euvd | Windows NTFS Elevation of Privilege VulnerabilityWindows NTFS Elevation of Privilege Vulnerability |
CVE-2016-4171 | HIGH | 7.8 | 0.20211 | 63.27 | Yes | No | 2016-06-16 | 2025-11-17 | cisa.gov, euvd | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors…Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016. |
CVE-2025-43529 | HIGH | 8.8 | 0.0877 | 63.27 | Yes | Yes | 2025-12-17 | 2026-04-02 | cisa.gov, euvd, github | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS …A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report. |
CVE-2023-29084 | HIGH | 7.2 | 0.98388 | 63.24 | No | No | 2023-04-13 | 2025-02-07 | euvd | Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings.Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings. |
CVE-2018-19943 | HIGH | 8.0 | 0.17705 | 63.2 | Yes | No | 2020-10-28 | 2025-10-21 | cisa.gov, euvd | If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these is…If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in the following QTS versions. QTS 4.4.2.1270 build 20200410 and later QTS 4.4.1.1261 build 20200330 and later QTS 4.3.6.1263 build 20200330 and later QTS 4.3.4.1282 build 20200408 and later QTS 4.3.3.1252 build 20200409 and later QTS 4.2.6 build 20200421 and later |
CVE-2022-4223 | HIGH | 8.8 | 0.79933 | 63.18 | No | No | 2022-12-13 | 2025-04-14 | euvd | The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external PostgreSQL utilities suc…The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external PostgreSQL utilities such as pg_dump and pg_restore. The utility is executed by the server to determine what PostgreSQL version it is from. Versions of pgAdmin prior to 6.17 failed to properly secure this API, which could allow an unauthenticated user to call it with a path of their choosing, such as a UNC path to a server they control on a Windows machine. This would cause an appropriately named executable in the target path to be executed by the pgAdmin server. |
CVE-2022-42856 | HIGH | 8.8 | 0.08523 | 63.18 | Yes | No | 2022-12-15 | 2025-10-21 | cisa.gov, euvd | A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15…A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1.. |
CVE-2021-36948 | HIGH | 7.8 | 0.1991 | 63.17 | Yes | No | 2021-08-12 | 2025-10-21 | cisa.gov, euvd | Windows Update Medic Service Elevation of Privilege VulnerabilityWindows Update Medic Service Elevation of Privilege Vulnerability |
CVE-2021-27137 | HIGH | 8.1 | 0.16488 | 63.17 | Yes | No | 2026-07-16 | 2026-07-22 | cisa.gov, euvd, nvd | An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unau…An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a request that would overflow an internal fixed buffer. Exploitation requires the DD-WRT user to enable UPnP (which is off by default, and only listens on internal interfaces by default). This occurs in ssdp_msearch (reachable by an M-SEARCH request). |
CVE-2023-46214 | HIGH | 8.0 | 0.89066 | 63.17 | No | No | 2023-11-16 | 2025-12-16 | euvd | In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformatio…In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that users supply. This means that an attacker can upload malicious XSLT which can result in remote code execution on the Splunk Enterprise instance. |
CVE-2025-8875 | CRITICAL | 9.4 | 0.01588 | 63.16 | Yes | No | 2025-08-14 | 2025-10-21 | cisa.gov, euvd | Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025…Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1. |
CVE-2017-13089 | HIGH | 8.8 | 0.79855 | 63.15 | No | No | 2017-10-27 | 2024-09-17 | euvd | The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked …The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to skip the chunk in pieces of 512 bytes by using the MIN() macro, but ends up passing the negative chunk length to connect.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument. |
CVE-2021-42362 | HIGH | 8.8 | 0.79823 | 63.14 | No | No | 2021-11-17 | 2024-09-16 | euvd | The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in…The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/src/Image.php file which makes it possible for attackers with contributor level access and above to upload malicious files that can be used to obtain remote code execution, in versions up to and including 5.3.2. |
CVE-2024-31309 | HIGH | 7.5 | 0.94615 | 63.12 | No | No | 2024-04-10 | 2025-11-04 | euvd | HTTP/2 CONTINUATION DoS attack can cause Apache Traffic Server to consume more resources on the server. Version from 8.0.0 through 8.1.9, f…HTTP/2 CONTINUATION DoS attack can cause Apache Traffic Server to consume more resources on the server. Version from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.3 are affected.
Users can set a new setting (proxy.config.http2.max_continuation_frames_per_minute) to limit the number of CONTINUATION frames per minute. ATS does have a fixed amount of memory a request can use and ATS adheres to these limits in previous releases.
Users are recommended to upgrade to versions 8.1.10 or 9.2.4 which fixes the issue. |
CVE-2025-61932 | CRITICAL | 9.3 | 0.02628 | 63.12 | Yes | No | 2025-10-20 | 2026-02-26 | cisa.gov, euvd | Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, …Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets. |
CVE-2020-27131 | HIGH | 8.1 | 0.87719 | 63.1 | No | No | 2020-11-17 | 2024-11-13 | euvd | Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote …Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. These vulnerabilities are due to insecure deserialization of user-supplied content by the affected software. An attacker could exploit these vulnerabilities by sending a malicious serialized Java object to a specific listener on an affected system. A successful exploit could allow the attacker to execute arbitrary commands on the device with the privileges of NT AUTHORITY\SYSTEM on the Windows target host. Cisco has not released software updates that address these vulnerabilities. |
CVE-2024-28000 | CRITICAL | 9.8 | 0.68266 | 63.09 | No | Yes | 2024-08-21 | 2026-04-29 | euvd, github | Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: f…Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a through <= 6.3.0.1. |
CVE-2026-45498 | MEDIUM | 4.0 | 0.63076 | 63.08 | Yes | No | 2026-05-20 | 2026-06-19 | cisa.gov, euvd, nvd | Microsoft Defender Denial of Service VulnerabilityMicrosoft Defender Denial of Service Vulnerability |