CVE-2021-41163 | CRITICAL | 10.0 | 0.19812 | 46.93 | No | No | 2021-10-20 | 2024-08-04 | euvd | Discourse is an open source platform for community discussion. In affected versions maliciously crafted requests could lead to remote code e…Discourse is an open source platform for community discussion. In affected versions maliciously crafted requests could lead to remote code execution. This resulted from a lack of validation in subscribe_url values. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. To workaround the issue without updating, requests with a path starting /webhooks/aws path could be blocked at an upstream proxy. |
CVE-2023-28126 | MEDIUM | 5.9 | 0.66659 | 46.93 | No | No | 2023-05-09 | 2025-01-29 | euvd | An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploitin…An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser method or can exploit the Race Condition in the authentication message. |
CVE-2022-48194 | HIGH | 8.8 | 0.33482 | 46.92 | No | No | 2022-12-30 | 2025-04-10 | euvd | TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS…TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware update because the signature check is inadequate. |
CVE-2022-37954 | HIGH | 7.8 | 0.44896 | 46.91 | No | No | 2022-09-13 | 2025-03-11 | euvd | DirectX Graphics Kernel Elevation of Privilege VulnerabilityDirectX Graphics Kernel Elevation of Privilege Vulnerability |
CVE-2023-33299 | CRITICAL | 9.6 | 0.24296 | 46.9 | No | No | 2023-06-23 | 2024-10-23 | euvd | A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions of 8.x allows attack…A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions of 8.x allows attacker to execute unauthorized code or commands via specifically crafted request on inter-server communication port. Note FortiNAC versions 8.x will not be fixed. |
CVE-2023-2479 | CRITICAL | 9.8 | 0.22014 | 46.9 | No | No | 2023-05-02 | 2025-01-30 | euvd | OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4.OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4. |
CVE-2020-4888 | MEDIUM | 6.3 | 0.61964 | 46.89 | No | No | 2021-01-28 | 2024-09-17 | euvd | IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system,…IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 190912. |
CVE-2025-4901 | MEDIUM | 5.3 | 0.73367 | 46.88 | No | No | 2025-05-18 | 2025-05-19 | euvd | A vulnerability classified as problematic was found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected by this vulnerability is the function…A vulnerability classified as problematic was found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected by this vulnerability is the function sub_41E304 of the file /H5/state_view.data of the component HTTP Endpoint. The manipulation leads to information disclosure. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. |
CVE-2023-52440 | CRITICAL | 9.8 | 0.21909 | 46.87 | No | No | 2024-02-21 | 2026-08-05 | euvd, nvd | In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()
If authbl…In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()
If authblob->SessionKey.Length is bigger than session key
size(CIFS_KEY_SIZE), slub overflow can happen in key exchange codes.
cifs_arc4_crypt copy to session key array from SessionKey from client. |
CVE-2023-48292 | CRITICAL | 9.7 | 0.22938 | 46.83 | No | No | 2023-11-20 | 2024-08-02 | euvd | The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a …The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a cross site request forgery vulnerability in the admin tool for executing shell commands on the server allows an attacker to execute arbitrary shell commands by tricking an admin into loading the URL with the shell command. A very simple possibility for an attack are comments. When the attacker can leave a comment on any page in the wiki it is sufficient to include an image with an URL like `/xwiki/bin/view/Admin/RunShellCommand?command=touch%20/tmp/attacked` in the comment. When an admin views the comment, the file `/tmp/attacked` will be created on the server. The output of the command is also vulnerable to XWiki syntax injection which offers a simple way to execute Groovy in the context of the XWiki installation and thus an even easier way to compromise the integrity and confidentiality of the whole XWiki installation. This has been patched by adding a form token check in version 4.5.1 of the admin tools. Some workarounds are available. The patch can be applied manually to the affected wiki pages. Alternatively, the document `Admin.RunShellCommand` can also be deleted if the possibility to run shell commands isn't needed. |
CVE-2025-71260 | HIGH | 8.7 | 0.3436 | 46.83 | No | No | 2026-03-19 | 2026-05-14 | euvd, nvd | BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet'…BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authenticated attackers to execute arbitrary code. Attackers can supply crafted serialized objects to the VIEWSTATE parameter to achieve remote code execution and fully compromise the application. The following hotfixes remediate the vulnerability: 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01. |
CVE-2021-31199 | MEDIUM | 5.2 | 0.02954 | 46.83 | Yes | No | 2021-06-08 | 2025-10-21 | cisa.gov, euvd | Microsoft Enhanced Cryptographic Provider Elevation of Privilege VulnerabilityMicrosoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability |
CVE-2024-9487 | CRITICAL | 9.5 | 0.25126 | 46.79 | No | No | 2024-10-10 | 2024-10-11 | euvd | An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentic…An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed resulting in unauthorized provisioning of users and access to the instance. Exploitation required the encrypted assertions feature to be enabled, and the attacker would require direct network access as well as a signed SAML response or metadata document. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.15 and was fixed in versions 3.11.16, 3.12.10, 3.13.5, and 3.14.2. This vulnerability was reported via the GitHub Bug Bounty program. |
CVE-2023-52442 | CRITICAL | 9.1 | 0.29644 | 46.78 | No | No | 2024-02-21 | 2026-08-05 | euvd, nvd | In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate session id and tree id in compound request
`smb2_get_m…In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate session id and tree id in compound request
`smb2_get_msg()` in smb2_get_ksmbd_tcon() and smb2_check_user_session()
will always return the first request smb2 header in a compound request.
if `SMB2_TREE_CONNECT_HE` is the first command in compound request, will
return 0, i.e. The tree id check is skipped.
This patch use ksmbd_req_buf_next() to get current command in compound. |
CVE-2025-32011 | CRITICAL | 9.3 | 0.27333 | 46.77 | No | No | 2025-05-01 | 2025-05-02 | euvd | KUNBUS PiCtory versions 2.5.0 through 2.11.1 have an authentication bypass vulnerability where a remote attacker can bypass authentication t…KUNBUS PiCtory versions 2.5.0 through 2.11.1 have an authentication bypass vulnerability where a remote attacker can bypass authentication to get access due to a path traversal. |
CVE-2024-45802 | HIGH | 7.5 | 0.47893 | 46.76 | No | No | 2024-10-28 | 2025-11-03 | euvd | Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resou…Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10. |
CVE-2023-0921 | MEDIUM | 4.3 | 0.84438 | 46.75 | No | No | 2023-06-06 | 2025-01-07 | euvd | A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 all…A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage. |
CVE-2012-6664 | CRITICAL | 9.1 | 0.29539 | 46.74 | No | No | 2024-06-21 | 2024-09-15 | euvd | Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow remote attackers to read…Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow remote attackers to read or write arbitrary files via a .. (dot dot) in the (1) get or (2) put commands. |
CVE-2024-39891 | MEDIUM | 5.3 | 0.01477 | 46.72 | Yes | No | 2024-07-02 | 2025-10-21 | cisa.gov, euvd | In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to…In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-number data, as exploited in the wild in June 2024. Specifically, the endpoint accepted a stream of requests containing phone numbers, and responded with information about whether each phone number was registered with Authy. (Authy accounts were not compromised, however.) |
CVE-2021-31201 | MEDIUM | 5.2 | 0.02617 | 46.72 | Yes | No | 2021-06-08 | 2025-10-21 | cisa.gov, euvd | Microsoft Enhanced Cryptographic Provider Elevation of Privilege VulnerabilityMicrosoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability |
CVE-2024-1883 | MEDIUM | 6.3 | 0.61472 | 46.72 | No | No | 2024-03-14 | 2024-09-26 | euvd | This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by cr…This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsuspecting user clicks on this malicious link, it could potentially lead to limited loss of confidentiality, integrity or availability. |
CVE-2022-4101 | CRITICAL | 9.1 | 0.29369 | 46.68 | No | No | 2023-01-16 | 2025-04-04 | euvd | The Images Optimize and Upload CF7 WordPress plugin through 2.1.4 does not validate the file to be deleted via an AJAX action available to u…The Images Optimize and Upload CF7 WordPress plugin through 2.1.4 does not validate the file to be deleted via an AJAX action available to unauthenticated users, which could allow them to delete arbitrary files on the server via path traversal attack. |
CVE-2017-3144 | MEDIUM | 5.3 | 0.72724 | 46.65 | No | No | 2019-01-16 | 2024-09-16 | euvd | A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors…A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested. |
CVE-2025-68686 | MEDIUM | 5.3 | 0.01264 | 46.64 | Yes | No | 2026-07-27 | 2026-07-27 | cisa.gov, euvd, nvd | Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticat…Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level. |
CVE-2023-21692 | CRITICAL | 9.8 | 0.21239 | 46.63 | No | No | 2023-02-14 | 2025-01-01 | euvd | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityMicrosoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
CVE-2024-32002 | CRITICAL | 9.1 | 0.29234 | 46.63 | No | No | 2024-05-14 | 2025-11-04 | euvd | Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules…Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a `.git/` directory. This allows writing a hook that will be executed while the clone operation is still running, giving the user no opportunity to inspect the code that is being executed. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. If symbolic link support is disabled in Git (e.g. via `git config --global core.symlinks false`), the described attack won't work. As always, it is best to avoid cloning repositories from untrusted sources. |
CVE-2022-3921 | CRITICAL | 9.8 | 0.21205 | 46.62 | No | No | 2022-12-12 | 2025-04-22 | euvd | The Listingo WordPress theme before 3.2.7 does not validate files to be uploaded via an AJAX action available to unauthenticated users, whic…The Listingo WordPress theme before 3.2.7 does not validate files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files and lead to RCE |
CVE-2024-42448 | CRITICAL | 9.9 | 0.20057 | 46.62 | No | No | 2024-12-11 | 2024-12-12 | euvd | From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform Rem…From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform Remote Code Execution (RCE) on the VSPC server machine. |
CVE-2023-33133 | HIGH | 7.8 | 0.44048 | 46.62 | No | No | 2023-06-13 | 2025-11-04 | euvd | Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Excel Remote Code Execution Vulnerability |
CVE-2022-25017 | CRITICAL | 9.1 | 0.29097 | 46.58 | No | No | 2022-04-01 | 2024-08-03 | euvd | Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field.Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field. |
CVE-2023-36851 | MEDIUM | 5.3 | 0.01091 | 46.58 | Yes | No | 2023-09-26 | 2025-10-21 | cisa.gov, euvd | A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-b…A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.
With a specific request to
webauth_operation.php
that doesn't require authentication, an attacker is able to upload and download arbitrary files via J-Web, leading to a loss of
integrity or confidentiality, which may allow chaining to other vulnerabilities.
This issue affects Juniper Networks Junos OS on SRX Series:
*
21.2 versions prior to 21.2R3-S8;
* 21.4
versions prior to
21.4R3-S6;
* 22.1
versions prior to
22.1R3-S5;
* 22.2
versions prior to
22.2R3-S3;
* 22.3
versions prior to
22.3R3-S2;
* 22.4 versions prior to 22,4R2-S2, 22.4R3;
* 23.2 versions prior to
23.2R1-S2, 23.2R2. |
CVE-2023-23969 | HIGH | 7.5 | 0.47381 | 46.58 | No | Yes | 2023-02-01 | 2025-03-27 | euvd, packetstorm | In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avo…In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large. |
CVE-2021-1472 | MEDIUM | 5.3 | 0.72472 | 46.57 | No | No | 2021-04-08 | 2024-11-08 | euvd | Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could exec…Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. |
CVE-2025-24514 | HIGH | 8.8 | 0.32473 | 46.57 | No | No | 2025-03-24 | 2026-02-26 | euvd | A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can b…A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.) |
CVE-2024-6366 | CRITICAL | 9.1 | 0.28993 | 46.55 | No | No | 2024-07-29 | 2024-08-01 | euvd | The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media …The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP. |
CVE-2022-35748 | HIGH | 7.5 | 0.47226 | 46.53 | No | No | 2023-05-31 | 2025-01-02 | euvd | HTTP.sys Denial of Service VulnerabilityHTTP.sys Denial of Service Vulnerability |
CVE-2024-38144 | HIGH | 8.8 | 0.32347 | 46.52 | No | No | 2024-08-13 | 2025-07-10 | euvd | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityKernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2023-26255 | HIGH | 7.5 | 0.47199 | 46.52 | No | No | 2023-02-28 | 2025-03-18 | euvd | An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By m…An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjCustomDesignConfig endpoint, it is possible to traverse and read the file system. |
CVE-2024-29671 | CRITICAL | 9.8 | 0.2091 | 46.52 | No | No | 2024-12-16 | 2024-12-17 | euvd | Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code via the POST request h…Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code via the POST request handler component. |
CVE-2020-10827 | CRITICAL | 9.8 | 0.20881 | 46.51 | No | No | 2020-03-26 | 2025-05-05 | euvd | A stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve…A stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request. |
CVE-2020-10828 | CRITICAL | 9.8 | 0.20881 | 46.51 | No | No | 2020-03-26 | 2025-05-05 | euvd | A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve…A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request. |
CVE-2022-41657 | CRITICAL | 9.8 | 0.20898 | 46.51 | No | No | 2022-10-31 | 2025-04-16 | euvd | Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be us…Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be used in file operation application programmable interfaces (APIs). This could create arbitrary files, which could be used in API operations and could ultimately result in remote code execution. |
CVE-2026-20316 | MEDIUM | 5.3 | 0.00788 | 46.48 | Yes | No | 2026-07-29 | 2026-07-29 | cisa.gov, euvd, nvd | Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerabil…Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. |
CVE-2024-5011 | HIGH | 7.5 | 0.47092 | 46.48 | No | No | 2024-06-25 | 2025-02-13 | euvd | In WhatsUp Gold versions released before 2023.1.3, an uncontrolled resource consumption vulnerability exists. A specially crafted unauthenti…In WhatsUp Gold versions released before 2023.1.3, an uncontrolled resource consumption vulnerability exists. A specially crafted unauthenticated HTTP request to the TestController Chart functionality can lead to denial of service. |
CVE-2024-47008 | HIGH | 7.5 | 0.47055 | 46.47 | No | No | 2024-10-08 | 2024-10-08 | euvd | Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information.Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information. |
CVE-2022-47938 | MEDIUM | 6.5 | 0.58461 | 46.46 | No | No | 2022-12-23 | 2025-04-15 | euvd | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS…An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2_TREE_CONNECT. |
CVE-2009-0554 | HIGH | 8.8 | 0.32169 | 46.46 | No | No | 2009-04-15 | 2025-01-21 | euvd | Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vis…Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability." |
CVE-2023-28131 | CRITICAL | 9.6 | 0.2299 | 46.45 | No | No | 2023-04-24 | 2025-02-04 | euvd | A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an application/website that confi…A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an application/website that configured the "Expo AuthSession Redirect Proxy" for social sign-in. This can be achieved once a victim clicks a malicious link. The link itself may be sent to the victim in various ways (including email, text message, an attacker-controlled website, etc). |
CVE-2022-40032 | CRITICAL | 9.8 | 0.20693 | 46.44 | No | No | 2023-02-17 | 2025-03-18 | euvd | SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attacker…SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information. |
CVE-2022-43775 | CRITICAL | 9.8 | 0.20591 | 46.41 | No | No | 2022-10-26 | 2025-05-07 | euvd | The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on…The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system. |