CVE-2022-43775 | CRITICAL | 9.8 | 0.20591 | 46.41 | No | No | 2022-10-26 | 2025-05-07 | euvd | The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on…The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system. |
CVE-2025-59536 | HIGH | 8.7 | 0.33166 | 46.41 | No | No | 2025-10-03 | 2025-10-03 | euvd | Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog im…Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires a user to start Claude Code in an untrusted directory. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version. This issue is fixed in version 1.0.111. |
CVE-2022-4067 | LOW | 3.4 | 0.93712 | 46.4 | No | No | 2022-11-20 | 2025-04-28 | euvd | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0. |
CVE-2024-12849 | HIGH | 7.5 | 0.46858 | 46.4 | No | No | 2025-01-07 | 2026-04-08 | euvd | The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via …The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wp_ajax_nopriv_elvwp_log_download AJAX action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. |
CVE-2024-23625 | CRITICAL | 9.6 | 0.22836 | 46.39 | No | No | 2024-01-25 | 2025-05-29 | euvd | A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can e…A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root. |
CVE-2023-45498 | CRITICAL | 9.8 | 0.20477 | 46.37 | No | No | 2023-10-27 | 2025-06-12 | euvd | VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability.VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability. |
CVE-2024-4901 | HIGH | 8.7 | 0.33017 | 46.36 | No | No | 2024-06-26 | 2024-09-17 | euvd | An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and …An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, where a stored XSS vulnerability could be imported from a project with malicious commit notes. |
CVE-2025-2005 | CRITICAL | 9.8 | 0.20411 | 46.34 | No | No | 2025-04-02 | 2026-04-08 | euvd | The Front End Users plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the file uploads fie…The Front End Users plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the file uploads field of the registration form in all versions up to, and including, 3.2.32. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. |
CVE-2024-44334 | HIGH | 8.8 | 0.31751 | 46.31 | No | No | 2024-09-09 | 2024-09-09 | euvd | D-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400…D-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400G+V2 v24.04.18D1 are vulnerable to Remote Command Execution due to insufficient parameter filtering in the CGI handling function of upgrade_filter.asp. |
CVE-2021-39327 | MEDIUM | 5.3 | 0.71688 | 46.29 | No | No | 2021-09-17 | 2025-03-31 | euvd | The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly ac…The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible ~/db_backup_log.txt file which grants attackers the full path of the site, in addition to the path of database backup files. This affects versions up to, and including, 5.1. |
CVE-2019-15980 | HIGH | 7.2 | 0.4996 | 46.29 | No | No | 2020-01-06 | 2024-11-15 | euvd | Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM…Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DCNM application. For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one. |
CVE-2023-31689 | CRITICAL | 9.8 | 0.2022 | 46.28 | No | No | 2023-05-22 | 2025-01-28 | euvd | In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish par…In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish parameter and the textAreaCode parameter. It can write arbitrary strings into custom file names and upload any files, and write malicious code to execute scripts to trigger command execution. |
CVE-2024-22651 | CRITICAL | 9.8 | 0.20188 | 46.27 | No | No | 2024-01-24 | 2024-09-10 | euvd | There is a command injection vulnerability in the ssdpcgi_main function of cgibin binary in D-Link DIR-815 router firmware v1.04.There is a command injection vulnerability in the ssdpcgi_main function of cgibin binary in D-Link DIR-815 router firmware v1.04. |
CVE-2022-4069 | LOW | 3.4 | 0.93343 | 46.27 | No | No | 2022-11-20 | 2025-04-24 | euvd | Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0. |
CVE-2024-39309 | CRITICAL | 9.8 | 0.20171 | 46.26 | No | No | 2024-07-01 | 2024-08-02 | euvd | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. A vulnerability in versions prior to…Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. A vulnerability in versions prior to 6.5.7 and 7.1.0 allows SQL injection when Parse Server is configured to use the PostgreSQL database. The algorithm to detect SQL injection has been improved in versions 6.5.7 and 7.1.0. No known workarounds are available. |
CVE-2022-45711 | CRITICAL | 9.8 | 0.20185 | 46.26 | No | No | 2022-12-23 | 2025-04-15 | euvd | IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckT…IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function. |
CVE-2023-5684 | MEDIUM | 4.7 | 0.78438 | 46.25 | No | No | 2023-10-21 | 2024-09-12 | euvd | A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231012. It has been declared as critical. Affected by this vulner…A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231012. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /importexport.php. The manipulation leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-243061 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. |
CVE-2024-21334 | CRITICAL | 9.8 | 0.20157 | 46.25 | No | No | 2024-03-12 | 2025-05-03 | euvd | Open Management Infrastructure (OMI) Remote Code Execution VulnerabilityOpen Management Infrastructure (OMI) Remote Code Execution Vulnerability |
CVE-2024-20356 | HIGH | 8.7 | 0.32697 | 46.24 | No | No | 2024-04-24 | 2024-08-01 | euvd | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote a…A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to elevate their privileges to root. |
CVE-2024-53375 | HIGH | 8.0 | 0.40679 | 46.24 | No | No | 2024-12-02 | 2024-12-17 | euvd | An Authenticated Remote Code Execution (RCE) vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmp_get_…An Authenticated Remote Code Execution (RCE) vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmp_get_sites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionality. |
CVE-2023-38547 | CRITICAL | 9.9 | 0.18942 | 46.23 | No | No | 2023-11-07 | 2025-03-06 | euvd | A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ONE uses to access its…A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ONE uses to access its configuration database. This may lead to remote code execution on the SQL server hosting the Veeam ONE configuration database. |
CVE-2025-2011 | HIGH | 7.5 | 0.46373 | 46.23 | No | No | 2025-05-06 | 2026-04-08 | euvd | The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up …The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. |
CVE-2024-38366 | CRITICAL | 10.0 | 0.17786 | 46.23 | No | No | 2024-07-01 | 2024-08-02 | euvd | trunk.cocoapods.org is the authentication server for the CoacoaPods dependency manager. The part of trunk which verifies whether a user has …trunk.cocoapods.org is the authentication server for the CoacoaPods dependency manager. The part of trunk which verifies whether a user has a real email address on signup used a rfc-822 library which executes a shell command to validate the email domain MX records validity. It works via an DNS MX. This lookup could be manipulated to also execute a command on the trunk server, effectively giving root access to the server and the infrastructure. This issue was patched server-side with commit 001cc3a430e75a16307f5fd6cdff1363ad2f40f3 in September 2023. This RCE triggered a full user-session reset, as an attacker could have used this method to write to any Podspec in trunk. |
CVE-2023-34747 | CRITICAL | 9.8 | 0.20046 | 46.22 | No | No | 2023-06-14 | 2025-01-06 | euvd | File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload.File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload. |
CVE-2026-5027 | HIGH | 8.8 | 0.31405 | 46.19 | No | Yes | 2026-03-27 | 2026-03-27 | euvd, packetstorm | The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the multipart form data, allowing an attacker to write fil…The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the multipart form data, allowing an attacker to write files to arbitrary locations on the filesystem using path traversal sequences ('../'). |
CVE-2022-44088 | CRITICAL | 9.8 | 0.19946 | 46.18 | No | No | 2022-11-10 | 2026-07-09 | euvd | ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component INPUT_ISDESCRIPTION.ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component INPUT_ISDESCRIPTION. |
CVE-2024-5246 | HIGH | 8.8 | 0.31305 | 46.16 | No | No | 2024-05-23 | 2024-08-01 | euvd | NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute …NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability.
The specific flaw exists within the product installer. The issue results from the use of a vulnerable version of Apache Tomcat. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-22868. |
CVE-2021-40410 | CRITICAL | 9.1 | 0.27876 | 46.16 | No | No | 2022-01-28 | 2025-04-15 | euvd | An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [4] th…An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [4] the dns_data->dns1 variable, that has the value of the dns1 parameter provided through the SetLocal API, is not validated properly. This would lead to an OS command injection. |
CVE-2024-33344 | CRITICAL | 9.8 | 0.19893 | 46.16 | No | No | 2024-04-26 | 2024-08-02 | euvd | D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of upload_firmware.cgi, which allows remote attackers to e…D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of upload_firmware.cgi, which allows remote attackers to execute arbitrary commands via shell. |
CVE-2026-1470 | CRITICAL | 9.9 | 0.18716 | 46.15 | No | No | 2026-01-27 | 2026-01-27 | euvd | n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system. Expressions supplied by auth…n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system. Expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime.
An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operations. |
CVE-2016-8705 | CRITICAL | 9.8 | 0.19854 | 46.15 | No | No | 2017-01-06 | 2024-08-06 | euvd | Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached b…Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution. |
CVE-2016-9361 | CRITICAL | 9.8 | 0.19856 | 46.15 | No | No | 2017-02-13 | 2026-06-02 | euvd | An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p…An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4. Administration passwords can be retried without authenticating. |
CVE-1999-0128 | MEDIUM | 5.0 | 0.74678 | 46.14 | No | No | 1999-09-29 | 2024-08-01 | euvd, nvd | Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death. |
CVE-2025-58443 | CRITICAL | 9.9 | 0.18687 | 46.14 | No | No | 2025-09-06 | 2025-09-08 | euvd | FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication…FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a full SQL DB without credentials. A fix is expected to be released 9/15/2025. To address this vulnerability immediately, upgrade to the latest version of either the dev-branch or working-1.6 branch. This will patch the issue for users concerned about immediate exposure. See the FOG Project documentation for step-by-step upgrade instructions: https://docs.fogproject.org/en/latest/install-fog-server#choosing-a-fog-version. |
CVE-2024-46938 | HIGH | 7.5 | 0.46063 | 46.12 | No | No | 2024-09-15 | 2024-09-17 | euvd | An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0 Initial Release thro…An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0 Initial Release through 10.4 Initial Release. An unauthenticated attacker can read arbitrary files. |
CVE-2023-24775 | CRITICAL | 9.8 | 0.19763 | 46.12 | No | No | 2023-03-07 | 2025-03-05 | euvd | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php. |
CVE-2022-35871 | HIGH | 8.1 | 0.39194 | 46.12 | No | No | 2022-07-25 | 2024-08-03 | euvd | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b202…This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentication is not required to exploit this vulnerability. The specific flaw exists within the authenticateAdSso method. The issue results from the lack of authentication prior to allowing the execution of python code. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-17206. |
CVE-2022-45365 | HIGH | 7.1 | 0.50642 | 46.12 | No | No | 2023-12-14 | 2026-04-28 | euvd | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Urošević Stock Ticker allow…Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Urošević Stock Ticker allows Reflected XSS.This issue affects Stock Ticker: from n/a through 3.23.2. |
CVE-2024-6457 | CRITICAL | 9.8 | 0.19725 | 46.1 | No | No | 2024-07-16 | 2026-04-08 | euvd | The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the ‘woof_author…The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the ‘woof_author’ parameter in all versions up to, and including, 1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. |
CVE-2023-27853 | CRITICAL | 9.8 | 0.19684 | 46.09 | No | No | 2023-03-10 | 2025-02-27 | euvd | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to …NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device. |
CVE-2024-39760 | CRITICAL | 10.0 | 0.17378 | 46.08 | No | No | 2025-01-14 | 2025-11-03 | euvd | Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A sp…Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists within the `restart_min_value` POST parameter. |
CVE-2014-0781 | CRITICAL | 9.3 | 0.25359 | 46.08 | No | No | 2014-03-14 | 2025-09-25 | euvd | Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary cod…Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP packets. |
CVE-2022-23854 | HIGH | 7.5 | 0.45957 | 46.08 | No | No | 2022-12-23 | 2025-02-13 | euvd | AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user…AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of the secure gateway web server. |
CVE-2025-20124 | CRITICAL | 9.9 | 0.18476 | 46.07 | No | No | 2025-02-05 | 2026-02-26 | euvd | A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an af…A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device.
This vulnerability is due to insecure deserialization of user-supplied Java byte streams by the affected software. An attacker could exploit this vulnerability by sending a crafted serialized Java object to an affected API. A successful exploit could allow the attacker to execute arbitrary commands on the device and elevate privileges.
Note: To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time. |
CVE-2020-8597 | CRITICAL | 9.8 | 0.19582 | 46.05 | No | No | 2020-02-03 | 2025-12-03 | euvd | eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions. |
CVE-2024-24496 | CRITICAL | 9.8 | 0.19503 | 46.03 | No | No | 2024-02-08 | 2024-08-19 | euvd | An issue in Daily Habit Tracker v.1.0 allows a remote attacker to manipulate trackers via the home.php, add-tracker.php, delete-tracker.php,…An issue in Daily Habit Tracker v.1.0 allows a remote attacker to manipulate trackers via the home.php, add-tracker.php, delete-tracker.php, update-tracker.php components. |
CVE-2021-40412 | CRITICAL | 9.1 | 0.27477 | 46.02 | No | No | 2022-01-28 | 2025-04-15 | euvd | An OScommand injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [8] the…An OScommand injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [8] the devname variable, that has the value of the name parameter provided through the SetDevName API, is not validated properly. This would lead to an OS command injection. |
CVE-1999-0113 | HIGH | 10.0 | 0.17166 | 46.01 | No | No | 1999-09-29 | 2024-08-01 | euvd, nvd | Some implementations of rlogin allow root access if given a -froot parameter.Some implementations of rlogin allow root access if given a -froot parameter. |
CVE-2023-31133 | HIGH | 7.5 | 0.45713 | 46.0 | No | No | 2023-05-08 | 2025-01-29 | euvd | Ghost is an app for new-media creators with tools to build a website, publish content, send newsletters, and offer paid subscriptions to mem…Ghost is an app for new-media creators with tools to build a website, publish content, send newsletters, and offer paid subscriptions to members. Prior to version 5.46.1, due to a lack of validation when filtering on the public API endpoints, it is possible to reveal private fields via a brute force attack.
Ghost(Pro) has already been patched. Maintainers can find no evidence that the issue was exploited on Ghost(Pro) prior to the patch being added. Self-hosters are impacted if running Ghost a version below v5.46.1. v5.46.1 contains a fix for this issue. As a workaround, add a block for requests to `/ghost/api/content/*` where the `filter` query parameter contains `password` or `email`. |
CVE-2019-10891 | CRITICAL | 9.8 | 0.19442 | 46.0 | No | No | 2019-09-06 | 2025-01-09 | euvd | An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnap_main, which calls system() without checking…An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnap_main, which calls system() without checking the parameter that can be controlled by user, and finally allows remote attackers to execute arbitrary shell commands with a special HTTP header. |