CVE-2008-0081 | CRITICAL | 9.8 | 0.57908 | 59.47 | No | No | 2008-01-16 | 2025-01-17 | euvd | Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote att…Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka "Macro Validation Vulnerability," a different vulnerability than CVE-2007-3490. |
CVE-2020-27130 | CRITICAL | 9.1 | 0.65907 | 59.47 | No | No | 2020-11-17 | 2024-11-13 | euvd | A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulne…A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within requests to an affected device. An attacker could exploit this vulnerability by sending a crafted request to the affected device. A successful exploit could allow the attacker to download arbitrary files from the affected device. |
CVE-2010-2965 | CRITICAL | 9.8 | 0.57816 | 59.44 | No | No | 2010-08-04 | 2026-05-28 | euvd | The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with f…The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185, a related issue to CVE-2005-3804. |
CVE-2026-0740 | CRITICAL | 9.8 | 0.57807 | 59.43 | No | Yes | 2026-04-07 | 2026-04-08 | euvd, packetstorm | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'NF_F…The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'NF_FU_AJAX_Controllers_Uploads::handle_upload' function in all versions up to, and including, 3.3.26. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Note: The vulnerability was partially patched in version 3.3.25 and fully patched in version 3.3.27. |
CVE-2022-3265 | HIGH | 7.3 | 0.86326 | 59.41 | No | No | 2022-11-09 | 2025-05-01 | euvd | A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prio…A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. It was possible to exploit a vulnerability in setting the labels colour feature which could lead to a stored XSS that allowed attackers to perform arbitrary actions on behalf of victims at client side. |
CVE-2015-2291 | HIGH | 7.8 | 0.09011 | 59.35 | Yes | No | 2023-02-10 | 2023-02-10 | cisa.gov, euvd, nvd | Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-ser…Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS). |
CVE-2016-9563 | MEDIUM | 6.5 | 0.23805 | 59.33 | Yes | No | 2021-11-03 | 2021-11-03 | cisa.gov, euvd | SAP NetWeaver Application Server Java Platforms contains an unspecified vulnerability in BC-BMT-BPM-DSK which allows remote, authenticated u…SAP NetWeaver Application Server Java Platforms contains an unspecified vulnerability in BC-BMT-BPM-DSK which allows remote, authenticated users to conduct XML External Entity (XXE) attacks. |
CVE-2026-20045 | HIGH | 8.2 | 0.04307 | 59.31 | Yes | Yes | 2026-01-21 | 2026-01-21 | cisa.gov, euvd, packetstorm | Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco U…Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance contain a code injection vulnerability that could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root. |
CVE-2021-34995 | HIGH | 8.8 | 0.68864 | 59.3 | No | No | 2022-01-13 | 2024-08-04 | euvd | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although auth…This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the DownloadCenterUploadHandler class. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this vulnerability to execute code in the context of NETWORK SERVICE. Was ZDI-CAN-13756. |
CVE-2022-44635 | HIGH | 8.8 | 0.68802 | 59.28 | No | No | 2022-11-29 | 2025-04-25 | euvd | Apache Fineract allowed an authenticated user to perform remote code execution due to a path traversal vulnerability in a file upload compon…Apache Fineract allowed an authenticated user to perform remote code execution due to a path traversal vulnerability in a file upload component of Apache Fineract, allowing an attacker to run remote code. This issue affects Apache Fineract version 1.8.0 and prior versions. We recommend users to upgrade to 1.8.1. |
CVE-2025-40554 | CRITICAL | 9.8 | 0.57314 | 59.26 | No | No | 2026-01-28 | 2026-02-26 | euvd | SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker t…SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk. |
CVE-2026-18577 | HIGH | 8.2 | 0.04103 | 59.24 | Yes | Yes | 2026-08-03 | 2026-08-03 | cisa.gov, euvd, github, nvd | N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover …N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-central. This vulnerability is the result of an incomplete patch for CVE-2026-18556. |
CVE-2023-50719 | HIGH | 7.5 | 0.83548 | 59.24 | No | No | 2023-12-15 | 2024-10-08 | euvd | XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based…XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the password hashes of all users to anyone with view right on the respective user profiles. By default, all user profiles are public. This vulnerability also affects any configurations used by extensions that contain passwords like API keys that are viewable for the attacker. Normally, such passwords aren't accessible but this vulnerability would disclose them as plain text. This has been patched in XWiki 14.10.15, 15.5.2 and 15.7RC1. There are no known workarounds for this vulnerability. |
CVE-2026-58644 | HIGH | 8.0 | 0.06372 | 59.23 | Yes | Yes | 2026-07-17 | 2026-07-17 | cisa.gov, cnvd, euvd, github | Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, and Microsoft SharePoint Server Subscription Edition are ente…Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, and Microsoft SharePoint Server Subscription Edition are enterprise-level content management and collaboration platforms. A remote code execution vulnerability exists in Microsoft Office SharePoint. The vulnerability results from improper deserialization of untrusted data. An attacker can exploit this vulnerability to execute arbitrary code over the network. |
CVE-2010-4398 | HIGH | 7.8 | 0.08661 | 59.23 | Yes | No | 2022-03-28 | 2022-03-28 | cisa.gov, euvd | Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges,…Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature. |
CVE-2020-6113 | HIGH | 8.8 | 0.6862 | 59.22 | No | No | 2020-09-17 | 2024-08-04 | euvd | An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updating…An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updating its cross-reference table. When processing an object stream from a PDF document, the application will perform a calculation in order to allocate memory for the list of indirect objects. Due to an error when calculating this size, an integer overflow may occur which can result in an undersized buffer being allocated. Later when initializing this buffer, the application can write outside its bounds which can cause a memory corruption that can lead to code execution. A specially crafted document can be delivered to a victim in order to trigger this vulnerability. |
CVE-2016-3298 | MEDIUM | 6.5 | 0.23478 | 59.22 | Yes | No | 2022-05-24 | 2022-05-24 | cisa.gov, euvd | An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker w…An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk. |
CVE-2019-1388 | HIGH | 7.8 | 0.08589 | 59.21 | Yes | Yes | 2023-04-07 | 2023-04-07 | cisa.gov, euvd, github | Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated conte…Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated context. |
CVE-2020-16952 | HIGH | 8.6 | 0.70894 | 59.21 | No | No | 2020-10-16 | 2024-08-04 | euvd | <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application…<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.</p>
<p>Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint.</p>
<p>The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.</p> |
CVE-2019-5029 | CRITICAL | 9.8 | 0.5715 | 59.2 | No | No | 2019-11-13 | 2024-08-04 | euvd | An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.7.1. Arbitrary shell …An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.7.1. Arbitrary shell commands surrounded by backticks or $() can be inserted into the editor and will be executed by the Exhibitor process when it launches ZooKeeper. An attacker can execute any command as the user running the Exhibitor process. |
CVE-2019-9512 | HIGH | 7.5 | 0.83433 | 59.2 | No | No | 2019-08-13 | 2024-08-04 | euvd | Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to…Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both. |
CVE-2022-23748 | HIGH | 7.8 | 0.08533 | 59.19 | Yes | No | 2025-02-06 | 2025-02-06 | cisa.gov, euvd | Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker…Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code. |
CVE-2021-2400 | HIGH | 7.5 | 0.83298 | 59.15 | No | No | 2021-07-20 | 2024-09-26 | euvd | Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). Supported versions that ar…Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). |
CVE-2024-22319 | HIGH | 8.1 | 0.764 | 59.14 | No | No | 2024-02-02 | 2024-08-01 | euvd | IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, 8.11.1 and 8.12.0.1 is susceptible to remote code execution attac…IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, 8.11.1 and 8.12.0.1 is susceptible to remote code execution attack via JNDI injection when passing an unchecked argument to a certain API. IBM X-Force ID: 279145. |
CVE-2013-2597 | HIGH | 8.4 | 0.01516 | 59.13 | Yes | No | 2022-09-15 | 2022-09-15 | cisa.gov, euvd | The Code Aurora audio calibration database (acdb) audio driver contains a stack-based buffer overflow vulnerability that allows for privileg…The Code Aurora audio calibration database (acdb) audio driver contains a stack-based buffer overflow vulnerability that allows for privilege escalation. Code Aurora is used in third-party products such as Qualcomm and Android. |
CVE-2021-28310 | HIGH | 7.8 | 0.0833 | 59.12 | Yes | No | 2021-11-03 | 2021-11-03 | cisa.gov, euvd | Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation. |
CVE-2022-48323 | CRITICAL | 9.8 | 0.56787 | 59.08 | No | No | 2023-02-13 | 2025-03-21 | euvd | Sunlogin Sunflower Simplified (aka Sunflower Simple and Personal) 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthen…Sunlogin Sunflower Simplified (aka Sunflower Simple and Personal) 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the pathname of the powershell.exe program. |
CVE-2021-21243 | CRITICAL | 10.0 | 0.54494 | 59.07 | No | No | 2021-01-15 | 2024-08-03 | euvd | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, a Kubernetes REST endpoint exposes two methods that deserialize unt…OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, a Kubernetes REST endpoint exposes two methods that deserialize untrusted data from the request body. These endpoints do not enforce any authentication or authorization checks. This issue may lead to pre-auth RCE. This issue was fixed in 4.0.3 by not using deserialization at KubernetesResource side. |
CVE-2024-49113 | HIGH | 7.5 | 0.82992 | 59.05 | No | No | 2024-12-10 | 2026-06-09 | euvd | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityWindows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
CVE-2024-24994 | HIGH | 8.8 | 0.68104 | 59.04 | No | No | 2024-04-19 | 2024-08-01 | euvd | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary…A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. |
CVE-2024-23535 | HIGH | 8.8 | 0.68104 | 59.04 | No | No | 2024-04-19 | 2025-12-16 | euvd | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary…A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. |
CVE-2023-4220 | HIGH | 8.1 | 0.76084 | 59.03 | No | No | 2023-11-28 | 2024-08-02 | euvd | Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.…Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell. |
CVE-2023-6933 | HIGH | 8.8 | 0.68047 | 59.02 | No | No | 2024-02-05 | 2026-04-08 | euvd | The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deseria…The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. |
CVE-2023-6989 | CRITICAL | 9.8 | 0.56567 | 59.0 | No | No | 2024-02-05 | 2026-04-08 | euvd | The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all v…The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the render_action_template parameter. This makes it possible for unauthenticated attacker to include and execute PHP files on the server, allowing the execution of any PHP code in those files. |
CVE-2023-46262 | HIGH | 7.5 | 0.82846 | 59.0 | No | No | 2023-12-19 | 2024-08-02 | euvd | An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF) in Ivanti Avalanche R…An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF) in Ivanti Avalanche Remote Control server. |
CVE-2021-1905 | HIGH | 8.4 | 0.0115 | 59.0 | Yes | No | 2021-11-03 | 2021-11-03 | cisa.gov, euvd | Multiple Qualcomm Chipsets contain a use after free vulnerability due to improper handling of memory mapping of multiple processes simultane…Multiple Qualcomm Chipsets contain a use after free vulnerability due to improper handling of memory mapping of multiple processes simultaneously. |
CVE-2019-9514 | HIGH | 7.5 | 0.82813 | 58.98 | No | No | 2019-08-13 | 2024-08-04 | euvd | Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of stre…Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both. |
CVE-2026-32201 | MEDIUM | 6.5 | 0.22772 | 58.97 | Yes | No | 2026-04-14 | 2026-04-14 | cisa.gov, cnvd, euvd | Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing ove…Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network. |
CVE-2023-0386 | HIGH | 7.8 | 0.0788 | 58.96 | Yes | Yes | 2025-06-17 | 2025-06-17 | cisa.gov, euvd, github, packetstorm | Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with cap…Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system. |
CVE-2025-41244 | HIGH | 7.8 | 0.0788 | 58.96 | Yes | No | 2025-10-30 | 2025-10-30 | cisa.gov, euvd | Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with…Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM. |
CVE-2022-41142 | HIGH | 7.2 | 0.86144 | 58.95 | No | No | 2023-01-26 | 2025-04-01 | euvd | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to explo…This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to configure poller resources. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to escalate privileges to the level of an administrator. Was ZDI-CAN-18304. |
CVE-2023-28341 | MEDIUM | 6.1 | 0.98701 | 58.95 | No | No | 2023-04-11 | 2025-02-10 | euvd | Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to in…Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page. |
CVE-2020-2038 | HIGH | 7.2 | 0.86086 | 58.93 | No | No | 2020-09-09 | 2024-09-16 | euvd | An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS co…An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 9.0 versions earlier than 9.0.10; PAN-OS 9.1 versions earlier than 9.1.4; PAN-OS 10.0 versions earlier than 10.0.1. |
CVE-2025-23209 | HIGH | 8.1 | 0.04356 | 58.92 | Yes | No | 2025-02-20 | 2025-02-20 | cisa.gov, euvd | Craft CMS contains a code injection vulnerability caused by improper validation of the database backup path, ultimately enabling remote code…Craft CMS contains a code injection vulnerability caused by improper validation of the database backup path, ultimately enabling remote code execution. |
CVE-2022-23521 | CRITICAL | 9.8 | 0.56334 | 58.92 | No | No | 2023-01-17 | 2025-02-13 | euvd | Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be de…Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a `.gitattributes` file to the repository, which contains a set of file patterns and the attributes that should be set for paths matching this pattern. When parsing gitattributes, multiple integer overflows can occur when there is a huge number of path patterns, a huge number of attributes for a single pattern, or when the declared attribute names are huge. These overflows can be triggered via a crafted `.gitattributes` file that may be part of the commit history. Git silently splits lines longer than 2KB when parsing gitattributes from a file, but not when parsing them from the index. Consequentially, the failure mode depends on whether the file exists in the working tree, the index or both. This integer overflow can result in arbitrary heap reads and writes, which may result in remote code execution. The problem has been patched in the versions published on 2023-01-17, going back to v2.30.7. Users are advised to upgrade. There are no known workarounds for this issue. |
CVE-2025-34152 | CRITICAL | 9.4 | 0.60875 | 58.91 | No | No | 2025-08-07 | 2025-12-01 | euvd | An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time'…An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes. |
CVE-2023-33107 | HIGH | 8.4 | 0.00892 | 58.91 | Yes | No | 2023-12-05 | 2023-12-05 | cisa.gov, euvd | Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtu…Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. |
CVE-2023-33106 | HIGH | 8.4 | 0.00847 | 58.9 | Yes | No | 2023-12-05 | 2023-12-05 | cisa.gov, euvd | Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting …Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. |
CVE-2025-3102 | HIGH | 8.1 | 0.7568 | 58.89 | No | No | 2025-04-10 | 2026-04-08 | euvd | The SureTriggers: All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative ac…The SureTriggers: All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secret_key' value in the 'autheticate_user' function in all versions up to, and including, 1.0.78. This makes it possible for unauthenticated attackers to create administrator accounts on the target website when the plugin is installed and activated but not configured with an API key. |
CVE-2020-0683 | HIGH | 7.8 | 0.07667 | 58.88 | Yes | No | 2021-11-03 | 2021-11-03 | cisa.gov, euvd | Microsoft Windows Installer contains a privilege escalation vulnerability when MSI packages process symbolic links, which allows attackers t…Microsoft Windows Installer contains a privilege escalation vulnerability when MSI packages process symbolic links, which allows attackers to bypass access restrictions to add or remove files. |