CVE-2024-4884 | CRITICAL | 9.8 | 0.24306 | 47.71 | No | No | 2024-06-25 | 2024-08-01 | euvd | In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The Apm.…In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The Apm.UI.Areas.APM.Controllers.CommunityController
allows execution of commands with iisapppool\nmconsole privileges. |
CVE-2025-47646 | CRITICAL | 9.8 | 0.24308 | 47.71 | No | No | 2025-05-23 | 2026-04-29 | euvd | Weak Password Recovery Mechanism for Forgotten Password vulnerability in Gilblas Ngunte Possi PSW Front-end Login & Registration psw-login-a…Weak Password Recovery Mechanism for Forgotten Password vulnerability in Gilblas Ngunte Possi PSW Front-end Login & Registration psw-login-and-registration allows Password Recovery Exploitation.This issue affects PSW Front-end Login & Registration: from n/a through <= 1.13. |
CVE-2021-2396 | HIGH | 8.8 | 0.35713 | 47.7 | No | No | 2021-07-20 | 2024-09-26 | euvd | Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). Supported versions that ar…Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in takeover of Oracle BI Publisher. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). |
CVE-2025-24991 | MEDIUM | 5.5 | 0.01995 | 47.7 | Yes | No | 2025-03-11 | 2026-02-26 | cisa.gov, euvd | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
CVE-2026-48319 | CRITICAL | 9.1 | 0.3229 | 47.7 | No | No | 2026-07-14 | 2026-07-21 | euvd, nvd | ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result …ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. |
CVE-2022-4230 | HIGH | 8.8 | 0.35679 | 47.69 | No | No | 2023-01-23 | 2025-04-02 | euvd | The WP Statistics WordPress plugin before 13.2.9 does not escape a parameter, which could allow authenticated users to perform SQL Injection…The WP Statistics WordPress plugin before 13.2.9 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks. By default, the affected feature is available to users with the manage_options capability (admin+), however the plugin has a settings to allow low privilege users to access it as well. |
CVE-2026-1492 | CRITICAL | 9.8 | 0.24229 | 47.68 | No | Yes | 2026-03-03 | 2026-04-08 | euvd, packetstorm | The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plu…The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to improper privilege management in all versions up to, and including, 5.1.2. This is due to the plugin accepting a user-supplied role during membership registration without properly enforcing a server-side allowlist. This makes it possible for unauthenticated attackers to create administrator accounts by supplying a role value during membership registration. |
CVE-2023-36584 | MEDIUM | 5.4 | 0.03055 | 47.67 | Yes | No | 2023-10-10 | 2026-01-12 | cisa.gov, euvd | Windows Mark of the Web Security Feature Bypass VulnerabilityWindows Mark of the Web Security Feature Bypass Vulnerability |
CVE-2025-34143 | CRITICAL | 9.3 | 0.29857 | 47.65 | No | No | 2025-07-22 | 2026-05-15 | euvd | An authentication bypass vulnerability exists in ETQ Reliance on the CG (legacy) platform. The application allowed login as the privileged i…An authentication bypass vulnerability exists in ETQ Reliance on the CG (legacy) platform. The application allowed login as the privileged internal SYSTEM user by manipulating the username field. The SYSTEM account does not require a password, enabling attackers with network access to the login page to obtain elevated access. Once authenticated, an attacker could achieve remote code execution by modifying Jython scripts within the application. This issue was resolved by introducing stricter validation logic to exclude internal accounts from public authentication workflows in version MP-4583. |
CVE-2021-29490 | MEDIUM | 5.8 | 0.69856 | 47.65 | No | No | 2021-05-05 | 2024-08-03 | euvd | Jellyfin is a free software media system that provides media from a dedicated server to end-user devices via multiple apps. Verions prior to…Jellyfin is a free software media system that provides media from a dedicated server to end-user devices via multiple apps. Verions prior to 10.7.3 vulnerable to unauthenticated Server-Side Request Forgery (SSRF) attacks via the imageUrl parameter. This issue potentially exposes both internal and external HTTP servers or other resources available via HTTP `GET` that are visible from the Jellyfin server. The vulnerability is patched in version 10.7.3. As a workaround, disable external access to the API endpoints `/Items/*/RemoteImages/Download`, `/Items/RemoteSearch/Image` and `/Images/Remote` via reverse proxy, or limit to known-friendly IPs. |
CVE-2023-27363 | HIGH | 7.8 | 0.46994 | 47.65 | No | No | 2024-05-03 | 2024-08-02 | euvd | Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e…Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the exportXFAData method. The application exposes a JavaScript interface that allows writing arbitrary files. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-19697. |
CVE-2021-43858 | HIGH | 8.8 | 0.35462 | 47.61 | No | No | 2021-12-27 | 2024-08-04 | euvd | MinIO is a Kubernetes native application for cloud storage. Prior to version `RELEASE.2021-12-27T07-23-18Z`, a malicious client can hand-cra…MinIO is a Kubernetes native application for cloud storage. Prior to version `RELEASE.2021-12-27T07-23-18Z`, a malicious client can hand-craft an HTTP API call that allows for updating policy for a user and gaining higher privileges. The patch in version `RELEASE.2021-12-27T07-23-18Z` changes the accepted request body type and removes the ability to apply policy changes through this API. There is a workaround for this vulnerability: Changing passwords can be disabled by adding an explicit `Deny` rule to disable the API for users. |
CVE-2019-1636 | HIGH | 7.8 | 0.46891 | 47.61 | No | No | 2019-01-23 | 2024-11-20 | euvd | A vulnerability in the Cisco Webex Teams client, formerly Cisco Spark, could allow an attacker to execute arbitrary commands on a targeted s…A vulnerability in the Cisco Webex Teams client, formerly Cisco Spark, could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI that is defined in Windows operating systems. An attacker could exploit this vulnerability by convincing a targeted user to follow a malicious link. Successful exploitation could cause the application to load libraries from the directory targeted by the URI link. The attacker could use this behavior to execute arbitrary commands on the system with the privileges of the targeted user if the attacker can place a crafted library in a directory that is accessible to the vulnerable system. |
CVE-2024-25830 | CRITICAL | 9.8 | 0.2403 | 47.61 | No | No | 2024-02-28 | 2024-08-13 | euvd | F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remote…F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remote attacker can exploit this, by sending a URI that contains the path of the configuration file. A successful exploit could allow the attacker to extract the root and admin password. |
CVE-2022-4606 | HIGH | 8.8 | 0.35435 | 47.6 | No | No | 2022-12-18 | 2025-04-14 | euvd | PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3.PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3. |
CVE-2023-34600 | CRITICAL | 9.8 | 0.23996 | 47.6 | No | No | 2023-06-20 | 2024-12-09 | euvd | Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection.Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection. |
CVE-2025-1097 | HIGH | 8.8 | 0.35381 | 47.58 | No | No | 2025-03-24 | 2026-02-26 | euvd | A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotat…A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.) |
CVE-2023-25135 | CRITICAL | 9.8 | 0.23926 | 47.57 | No | No | 2023-02-03 | 2025-03-26 | euvd | vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers dese…vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verify_serialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions are 5.6.7 PL1, 5.6.8 PL1, and 5.6.9 PL1. |
CVE-2026-45484 | HIGH | 8.8 | 0.35216 | 47.53 | No | No | 2026-06-09 | 2026-07-28 | euvd, nvd | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2025-40596 | HIGH | 7.3 | 0.52274 | 47.5 | No | No | 2025-07-23 | 2026-02-26 | euvd | A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Se…A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution. |
CVE-2024-9061 | HIGH | 7.3 | 0.5228 | 47.5 | No | No | 2024-10-16 | 2026-04-08 | euvd | The The WP Popup Builder – Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via…The The WP Popup Builder – Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via the wp_ajax_nopriv_shortcode_Api_Add AJAX action in all versions up to, and including, 1.3.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. NOTE: This vulnerability was partially fixed in version 1.3.5 with a nonce check, which effectively prevented access to the affected function. However, version 1.3.6 incorporates the correct authorization check to prevent unauthorized access. |
CVE-2021-28640 | HIGH | 7.3 | 0.52299 | 47.5 | No | No | 2021-08-20 | 2024-09-17 | euvd | Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Us…Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Use-after-free vulnerability. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
CVE-2024-23624 | CRITICAL | 9.6 | 0.25988 | 47.5 | No | No | 2024-01-25 | 2025-06-17 | euvd | A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vul…A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root. |
CVE-2024-23118 | HIGH | 7.2 | 0.53411 | 47.49 | No | No | 2024-04-01 | 2024-08-21 | euvd | Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute …Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability.
The specific flaw exists within the updateContactHostCommands function. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-22298. |
CVE-2020-24437 | HIGH | 7.8 | 0.46549 | 47.49 | No | No | 2020-11-05 | 2024-09-16 | euvd | Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use…Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
CVE-2026-32746 | CRITICAL | 9.8 | 0.23674 | 47.49 | No | Yes | 2026-03-13 | 2026-03-23 | euvd, github | telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_…telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full. |
CVE-2013-3894 | HIGH | 8.1 | 0.43101 | 47.49 | No | No | 2013-10-09 | 2025-01-16 | euvd | The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,…The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a crafted CMAP table in a TrueType font (TTF) file, aka "TrueType Font CMAP Table Vulnerability." |
CVE-2024-23116 | HIGH | 7.2 | 0.53411 | 47.49 | No | No | 2024-04-01 | 2024-08-12 | euvd | Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar…Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability.
The specific flaw exists within the updateLCARelation function. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-22296. |
CVE-2024-23117 | HIGH | 7.2 | 0.53411 | 47.49 | No | No | 2024-04-01 | 2024-08-29 | euvd | Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu…Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability.
The specific flaw exists within the updateContactServiceCommands function. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-22297. |
CVE-2024-4325 | HIGH | 8.6 | 0.37366 | 47.48 | No | No | 2024-06-06 | 2024-08-01 | euvd | A Server-Side Request Forgery (SSRF) vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the `/queue/join` end…A Server-Side Request Forgery (SSRF) vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the `/queue/join` endpoint and the `save_url_to_cache` function. The vulnerability arises when the `path` value, obtained from the user and expected to be a URL, is used to make an HTTP request without sufficient validation checks. This flaw allows an attacker to send crafted requests that could lead to unauthorized access to the local network or the AWS metadata endpoint, thereby compromising the security of internal servers. |
CVE-2023-4211 | MEDIUM | 5.5 | 0.01361 | 47.48 | Yes | No | 2023-10-01 | 2025-10-21 | cisa.gov, euvd | A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. |
CVE-2022-41049 | MEDIUM | 5.4 | 0.02482 | 47.47 | Yes | No | 2022-11-14 | 2022-11-14 | cisa.gov, euvd | Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and avail…Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features. |
CVE-2024-27747 | CRITICAL | 9.8 | 0.23581 | 47.45 | No | No | 2024-03-01 | 2024-08-29 | euvd | File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the …File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component. |
CVE-2022-28171 | HIGH | 7.5 | 0.49858 | 47.45 | No | No | 2022-06-27 | 2024-09-16 | euvd | The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient inpu…The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious commands to the affected device. |
CVE-2025-52688 | CRITICAL | 9.8 | 0.23568 | 47.45 | No | No | 2025-07-16 | 2025-07-16 | euvd | Successful exploitation of the vulnerability could allow an attacker to inject commands with root privileges on the access point, potentiall…Successful exploitation of the vulnerability could allow an attacker to inject commands with root privileges on the access point, potentially leading to the loss of confidentiality, integrity, availability, and full control of the access point. |
CVE-2025-30208 | MEDIUM | 5.3 | 0.74998 | 47.45 | No | No | 2025-03-24 | 2025-03-24 | euvd | Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. `@fs` d…Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. `@fs` denies access to files outside of Vite serving allow list. Adding `?raw??` or `?import&raw??` to the URL bypasses this limitation and returns the file content if it exists. This bypass exists because trailing separators such as `?` are removed in several places, but are not accounted for in query string regexes. The contents of arbitrary files can be returned to the browser. Only apps explicitly exposing the Vite dev server to the network (using `--host` or `server.host` config option) are affected. Versions 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10 fix the issue. |
CVE-2025-54261 | CRITICAL | 10.0 | 0.21258 | 47.44 | No | No | 2025-09-09 | 2025-10-08 | euvd | ColdFusion versions 2025.3, 2023.15, 2021.21 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Pa…ColdFusion versions 2025.3, 2023.15, 2021.21 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary code execution by an attacker. The victim must have optional configurations enabled. Scope is changed. |
CVE-2022-1058 | HIGH | 7.2 | 0.53177 | 47.41 | No | No | 2022-03-24 | 2024-08-02 | euvd | Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5. |
CVE-2022-45551 | CRITICAL | 9.8 | 0.23457 | 47.41 | No | No | 2023-03-03 | 2026-07-09 | euvd | An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privileges via WGET command t…An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privileges via WGET command to the Network Diagnosis endpoint. |
CVE-2022-22674 | MEDIUM | 5.5 | 0.01133 | 47.4 | Yes | No | 2022-05-26 | 2025-10-21 | cisa.gov, euvd | An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This iss…An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory. |
CVE-2023-32714 | HIGH | 8.1 | 0.42824 | 47.39 | No | No | 2023-06-01 | 2025-02-28 | euvd | In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a p…In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be used to read and write to restricted areas of the Splunk installation directory. |
CVE-2024-12209 | CRITICAL | 9.8 | 0.23364 | 47.38 | No | No | 2024-12-08 | 2026-04-08 | euvd | The WP Umbrella: Update Backup Restore & Monitoring plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and in…The WP Umbrella: Update Backup Restore & Monitoring plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.17.0 via the 'filename' parameter of the 'umbrella-restore' action. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. |
CVE-2022-40005 | HIGH | 8.8 | 0.34785 | 47.37 | No | No | 2022-12-25 | 2025-04-14 | euvd | Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 …Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTracert URIs for ping and traceroute. |
CVE-2025-34067 | CRITICAL | 10.0 | 0.21031 | 47.36 | No | No | 2025-07-02 | 2026-07-14 | euvd | An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Pl…An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable version of the Fastjson library. The endpoint /bic/ssoService/v1/applyCT deserializes untrusted user input, allowing an attacker to trigger Fastjson's auto-type feature to load arbitrary Java classes. By referencing a malicious class via an LDAP URL, an attacker can achieve remote code execution on the underlying system. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC. |
CVE-2026-6875 | CRITICAL | 9.5 | 0.26734 | 47.36 | No | No | 2026-07-13 | 2026-07-14 | euvd | ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could e…ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow platform.
ServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners.
Further, the vulnerability is addressed in the listed patches and family releases, which have been made available to hosted and self-hosted customers, as well as partners. We are not currently aware of exploitation against ServiceNow instances.
We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so. |
CVE-2021-3177 | CRITICAL | 9.8 | 0.23293 | 47.35 | No | No | 2021-01-19 | 2025-12-18 | euvd | Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Pyth…Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely. |
CVE-2026-3854 | HIGH | 8.7 | 0.35858 | 47.35 | No | Yes | 2026-03-10 | 2026-04-29 | euvd, github, packetstorm | An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push a…An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly sanitized before being included in internal service headers. Because the internal header format used a delimiter character that could also appear in user input, an attacker could inject additional metadata fields through crafted push option values. This vulnerability was reported via the GitHub Bug Bounty program and has been fixed in GitHub Enterprise Server versions 3.14.25, 3.15.20, 3.16.16, 3.17.13, 3.18.7 and 3.19.4. |
CVE-2022-39214 | CRITICAL | 9.6 | 0.25573 | 47.35 | No | No | 2023-03-14 | 2025-02-25 | euvd | Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user who can log in on iTop…Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user who can log in on iTop is able to take over any account just by knowing the account's username. This issue is fixed in versions 2.7.8 and 3.0.2-1. |
CVE-2021-2391 | HIGH | 8.8 | 0.34677 | 47.34 | No | No | 2021-07-20 | 2024-09-26 | euvd | Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Scheduler). Supported versions that are affected ar…Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Scheduler). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in takeover of Oracle BI Publisher. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). |
CVE-2024-39914 | CRITICAL | 9.8 | 0.23237 | 47.33 | No | No | 2024-07-12 | 2024-08-02 | euvd | FOG is a cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.34, packages/web/lib/fog/reportmaker.class.php in FOG was…FOG is a cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.34, packages/web/lib/fog/reportmaker.class.php in FOG was affected by a command injection via the filename parameter to /fog/management/export.php. This vulnerability is fixed in 1.5.10.34. |