CVE-2024-32964 | CRITICAL | 9.0 | 0.52683 | 54.44 | No | No | 2024-05-10 | 2024-08-02 | euvd | Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Prior to 0.150.6, l…Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Prior to 0.150.6, lobe-chat had an unauthorized Server-Side Request Forgery vulnerability in the /api/proxy endpoint. An attacker can construct malicious requests to cause Server-Side Request Forgery without logging in, attack intranet services, and leak sensitive information. |
CVE-2025-27920 | HIGH | 7.2 | 0.01796 | 54.43 | Yes | No | 2025-05-19 | 2025-05-19 | cisa.gov, euvd | Srimax Output Messenger contains a directory traversal vulnerability that allows an attacker to access sensitive files outside the intended …Srimax Output Messenger contains a directory traversal vulnerability that allows an attacker to access sensitive files outside the intended directory, potentially leading to configuration leakage or arbitrary file access. |
CVE-2024-7694 | HIGH | 7.2 | 0.01807 | 54.43 | Yes | No | 2026-02-17 | 2026-02-17 | cisa.gov, euvd | TeamT5 ThreatSonar Anti-Ransomware contains an unrestricted upload of file with dangerous type vulnerability. ThreatSonar Anti-Ransomware do…TeamT5 ThreatSonar Anti-Ransomware contains an unrestricted upload of file with dangerous type vulnerability. ThreatSonar Anti-Ransomware does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system commands on the server. |
CVE-2025-30065 | CRITICAL | 10.0 | 0.41231 | 54.43 | No | No | 2025-04-01 | 2026-02-26 | euvd | Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code
Users…Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code
Users are recommended to upgrade to version 1.15.1, which fixes the issue. |
CVE-2021-25487 | HIGH | 7.3 | 0.00635 | 54.42 | Yes | No | 2023-06-29 | 2023-06-29 | cisa.gov, euvd | Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a…Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer. |
CVE-2024-42640 | CRITICAL | 9.8 | 0.43464 | 54.41 | No | No | 2024-10-11 | 2024-10-15 | euvd | angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerabi…angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of previously uploaded content and enables the attacker to achieve code execution on the server. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. |
CVE-2024-3080 | CRITICAL | 9.8 | 0.43456 | 54.41 | No | No | 2024-06-14 | 2024-08-01 | euvd | Certain ASUS router models have authentication bypass vulnerability, allowing unauthenticated remote attackers to log in the device.Certain ASUS router models have authentication bypass vulnerability, allowing unauthenticated remote attackers to log in the device. |
CVE-2025-49132 | CRITICAL | 10.0 | 0.41137 | 54.4 | No | Yes | 2025-06-20 | 2025-06-20 | euvd, packetstorm | Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale an…Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the ability to execute arbitrary code it could be used to gain access to the Panel's server, read credentials from the Panel's config, extract sensitive information from the database, access files of servers managed by the panel, etc. This issue has been patched in version 1.11.11. There are no software workarounds for this vulnerability, but use of an external Web Application Firewall (WAF) could help mitigate this attack. |
CVE-2018-5378 | HIGH | 7.1 | 0.742 | 54.37 | No | No | 2018-02-19 | 2024-09-16 | euvd | The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute le…The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid. Arbitrary data from the bgpd process may be sent over the network to a peer and/or bgpd may crash. |
CVE-2019-0703 | MEDIUM | 6.5 | 0.0964 | 54.37 | Yes | No | 2022-05-23 | 2022-05-23 | cisa.gov, euvd | An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to informat…An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server. |
CVE-2025-52665 | CRITICAL | 10.0 | 0.40972 | 54.34 | No | No | 2025-10-30 | 2025-10-31 | euvd | A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, t…A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, that exposed a management API without proper authentication. This vulnerability was introduced in Version 3.3.22 and was fixed in Version 4.0.21 and later.
Affected Products:
UniFi Access Application (Version 3.3.22 through 3.4.31).
Mitigation:
Update your UniFi Access Application to Version 4.0.21 or later. |
CVE-2025-68615 | CRITICAL | 9.8 | 0.43262 | 54.34 | No | No | 2025-12-22 | 2026-05-01 | euvd | net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp s…net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2. |
CVE-2024-26594 | CRITICAL | 9.1 | 0.51248 | 54.34 | No | No | 2024-02-23 | 2026-08-05 | euvd, nvd | In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate mech token in session setup
If client send invalid mec…In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate mech token in session setup
If client send invalid mech token in session setup request, ksmbd
validate and make the error if it is invalid. |
CVE-2019-11478 | MEDIUM | 5.3 | 0.94686 | 54.34 | No | No | 2019-06-18 | 2024-09-16 | euvd | Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when han…Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e. |
CVE-2023-38171 | HIGH | 7.5 | 0.69494 | 54.32 | No | No | 2023-10-10 | 2025-04-14 | euvd | Microsoft QUIC Denial of Service VulnerabilityMicrosoft QUIC Denial of Service Vulnerability |
CVE-2026-2043 | HIGH | 7.2 | 0.72908 | 54.32 | No | No | 2026-02-20 | 2026-02-26 | euvd | Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote att…Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required to exploit this vulnerability.
The specific flaw exists within the esensors_websensor_configwizard_func method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28249. |
CVE-2021-28639 | HIGH | 7.8 | 0.66052 | 54.32 | No | No | 2021-08-20 | 2024-09-16 | euvd | Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Us…Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
CVE-2024-27292 | HIGH | 7.5 | 0.69486 | 54.32 | No | No | 2024-02-29 | 2024-08-02 | euvd | Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access …Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the master branch. |
CVE-2024-30080 | CRITICAL | 9.8 | 0.43145 | 54.3 | No | No | 2024-06-11 | 2026-07-21 | euvd | Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-2862 | CRITICAL | 9.1 | 0.51001 | 54.25 | No | No | 2024-03-25 | 2024-08-28 | euvd | This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant.This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant. |
CVE-2022-23307 | HIGH | 8.8 | 0.54411 | 54.24 | No | No | 2022-01-18 | 2026-05-27 | euvd | CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apa…CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists. |
CVE-2024-45387 | CRITICAL | 9.9 | 0.41841 | 54.24 | No | No | 2024-12-23 | 2024-12-24 | euvd | An SQL injection vulnerability in Traffic Ops in Apache Traffic Control <= 8.0.1, >= 8.0.0 allows a privileged user with role "admin", "fede…An SQL injection vulnerability in Traffic Ops in Apache Traffic Control <= 8.0.1, >= 8.0.0 allows a privileged user with role "admin", "federation", "operations", "portal", or "steering" to execute arbitrary SQL against the database by sending a specially-crafted PUT request.
Users are recommended to upgrade to version Apache Traffic Control 8.0.2 if you run an affected version of Traffic Ops. |
CVE-2021-27272 | HIGH | 7.1 | 0.73766 | 54.22 | No | No | 2021-03-29 | 2024-08-03 | euvd | This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System …This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the ReportTemplateController class. When parsing the path parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-12123. |
CVE-2023-49231 | CRITICAL | 9.8 | 0.42898 | 54.21 | No | No | 2024-03-29 | 2024-10-28 | euvd | An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to receive an administra…An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to receive an administrative API token. |
CVE-2025-21391 | HIGH | 7.1 | 0.02258 | 54.19 | Yes | No | 2025-02-11 | 2025-02-11 | cisa.gov, euvd | Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow …Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable. |
CVE-2023-2986 | CRITICAL | 9.8 | 0.42814 | 54.18 | No | No | 2023-06-08 | 2026-04-08 | euvd | The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.14.2…The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.14.2. This is due to insufficient encryption on the user being supplied during the abandoned cart link decode through the plugin. This allows unauthenticated attackers to log in as users who have abandoned the cart, who are typically customers. Further security hardening was introduced in version 5.15.1 that ensures sites are no longer vulnerable through historical check-out links, and additional hardening was introduced in version 5.15.2 that ensured null key values wouldn't permit the authentication bypass. |
CVE-2023-2564 | CRITICAL | 10.0 | 0.40516 | 54.18 | No | No | 2023-05-07 | 2025-01-29 | euvd | OS Command Injection in GitHub repository sbs20/scanservjs prior to v2.27.0.OS Command Injection in GitHub repository sbs20/scanservjs prior to v2.27.0. |
CVE-2022-42233 | CRITICAL | 9.8 | 0.42704 | 54.15 | No | No | 2022-10-20 | 2025-05-08 | euvd | Tenda 11N with firmware version V5.07.33_cn suffers from an Authentication Bypass vulnerability.Tenda 11N with firmware version V5.07.33_cn suffers from an Authentication Bypass vulnerability. |
CVE-2022-4060 | CRITICAL | 9.8 | 0.42723 | 54.15 | No | No | 2023-01-16 | 2025-04-04 | euvd | The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any…The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it. |
CVE-2024-25735 | CRITICAL | 9.1 | 0.50622 | 54.12 | No | No | 2024-03-27 | 2025-11-04 | euvd | An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP /devi…An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP /device/config GET request. |
CVE-2022-2234 | CRITICAL | 9.9 | 0.41466 | 54.11 | No | No | 2022-08-24 | 2025-04-16 | euvd | An authenticated mySCADA myPRO 8.26.0 user may be able to modify parameters to run commands directly in the operating system.An authenticated mySCADA myPRO 8.26.0 user may be able to modify parameters to run commands directly in the operating system. |
CVE-2023-21768 | HIGH | 7.8 | 0.65417 | 54.1 | No | No | 2023-01-10 | 2025-01-01 | euvd | Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2022-35710 | CRITICAL | 9.8 | 0.42577 | 54.1 | No | No | 2022-10-14 | 2025-04-23 | euvd | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability tha…Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server. |
CVE-2023-44352 | MEDIUM | 6.1 | 0.84811 | 54.08 | No | No | 2023-11-17 | 2024-10-29 | euvd | Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerabilit…Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. |
CVE-2025-0111 | HIGH | 7.1 | 0.01927 | 54.07 | Yes | No | 2025-02-20 | 2025-02-20 | cisa.gov, euvd | Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated …Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user. |
CVE-2018-4021 | HIGH | 7.2 | 0.7221 | 54.07 | No | No | 2018-12-03 | 2024-09-17 | euvd | An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POS…An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated POST requests to the administration web interface. Command injection is possible in the `powerd_battery_mode` POST parameter. |
CVE-2026-56164 | MEDIUM | 5.3 | 0.22439 | 54.05 | Yes | Yes | 2026-07-14 | 2026-08-07 | cisa.gov, euvd, github | Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a net…Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. |
CVE-2021-39837 | HIGH | 7.8 | 0.65249 | 54.04 | No | No | 2021-09-29 | 2024-09-16 | euvd | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use…Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm deleteItemAt action that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
CVE-2023-36460 | CRITICAL | 10.0 | 0.4011 | 54.04 | No | No | 2023-07-06 | 2025-02-13 | euvd | Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 3.5.0 and prior to versions 3.5.9, 4.0.5, an…Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 3.5.0 and prior to versions 3.5.9, 4.0.5, and 4.1.3, attackers using carefully crafted media files can cause Mastodon's media processing code to create arbitrary files at any location. This allows attackers to create and overwrite any file Mastodon has access to, allowing Denial of Service and arbitrary Remote Code Execution. Versions 3.5.9, 4.0.5, and 4.1.3 contain a patch for this issue. |
CVE-2021-39839 | HIGH | 7.8 | 0.65249 | 54.04 | No | No | 2021-09-29 | 2024-09-16 | euvd | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use…Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm getItem action that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
CVE-2021-39838 | HIGH | 7.8 | 0.65249 | 54.04 | No | No | 2021-09-29 | 2024-09-16 | euvd | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use…Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm buttonGetCaption action that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
CVE-2022-21919 | HIGH | 7.0 | 0.0295 | 54.03 | Yes | No | 2022-04-25 | 2022-04-25 | cisa.gov, euvd | Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation. |
CVE-2021-41379 | MEDIUM | 5.5 | 0.20099 | 54.03 | Yes | No | 2022-03-03 | 2022-03-03 | cisa.gov, euvd | Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation. |
CVE-2009-2494 | CRITICAL | 9.8 | 0.42329 | 54.02 | No | No | 2009-08-12 | 2025-01-21 | euvd | The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 …The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via vectors related to erroneous free operations after reading a variant from a stream and deleting this variant, aka "ATL Object Type Mismatch Vulnerability." |
CVE-2018-4233 | HIGH | 8.8 | 0.53772 | 54.02 | No | No | 2018-06-08 | 2024-08-05 | euvd | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windo…An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. |
CVE-2025-22226 | HIGH | 7.1 | 0.01735 | 54.01 | Yes | No | 2025-03-04 | 2025-03-04 | cisa.gov, euvd | VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful exploi…VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful exploitation allows an attacker with administrative privileges to a virtual machine to leak memory from the vmx process. |
CVE-2012-3363 | CRITICAL | 9.1 | 0.50248 | 53.99 | No | No | 2013-02-13 | 2025-01-16 | euvd | Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows re…Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack. |
CVE-2009-1936 | CRITICAL | 9.8 | 0.42223 | 53.98 | No | No | 2009-06-05 | 2025-01-21 | euvd | _functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows re…_functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass a protection mechanism to conduct remote file inclusion and directory traversal attacks, execute arbitrary PHP code, or read arbitrary files via the GLOBALS[prefix] parameter, a different vector than CVE-2003-1500. |
CVE-2018-13383 | MEDIUM | 4.3 | 0.33647 | 53.98 | Yes | No | 2022-01-10 | 2022-01-10 | cisa.gov, euvd | A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users.A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users. |
CVE-2023-28662 | CRITICAL | 9.8 | 0.42186 | 53.97 | No | No | 2023-03-22 | 2025-02-25 | euvd | The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerabilit…The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgv_doajax_voucher_pdf_save_func action. |