CVE-2022-46887 | CRITICAL | 9.8 | 0.19374 | 45.98 | No | No | 2023-01-19 | 2025-04-03 | euvd | Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL commands via the conuser[] …Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL commands via the conuser[] parameter in takeconfirm.php; the delcheater parameter in cheaterbox.php; or the usernw parameter in nowarn.php. |
CVE-2022-40471 | CRITICAL | 9.8 | 0.19373 | 45.98 | No | No | 2022-10-31 | 2025-05-06 | euvd | Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture uploa…Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload functionality in users.php |
CVE-2024-21318 | HIGH | 8.8 | 0.30801 | 45.98 | No | No | 2024-01-09 | 2025-05-03 | euvd | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2025-43984 | CRITICAL | 9.8 | 0.19302 | 45.96 | No | No | 2025-08-14 | 2025-08-15 | euvd | An issue was discovered on KuWFi GC111 devices (Hardware Version: CPE-LM321_V3.2, Software Version: GC111-GL-LM321_V3.0_20191211). They are …An issue was discovered on KuWFi GC111 devices (Hardware Version: CPE-LM321_V3.2, Software Version: GC111-GL-LM321_V3.0_20191211). They are vulnerable to unauthenticated /goform/goform_set_cmd_process requests. A crafted POST request, using the SSID parameter, allows remote attackers to execute arbitrary OS commands with root privileges. |
CVE-2021-26877 | CRITICAL | 9.8 | 0.19274 | 45.95 | No | No | 2021-03-11 | 2024-08-03 | euvd | Windows DNS Server Remote Code Execution VulnerabilityWindows DNS Server Remote Code Execution Vulnerability |
CVE-2026-8732 | CRITICAL | 9.8 | 0.19272 | 45.95 | No | No | 2026-05-29 | 2026-05-29 | euvd, nvd | The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and inc…The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmp_temp_access_ajax AJAX action being registered with wp_ajax_nopriv_ and protected only by a nonce check using the fc-call-nonce nonce, which is publicly embedded into every frontend page via wp_localize_script as the nonce field of the wpgmp_local JavaScript object, rendering the check ineffective as an access control mechanism. This makes it possible for unauthenticated attackers to invoke the wpgmp_temp_access_support handler with check_temp=false, which unconditionally creates a new WordPress user with the hardcoded role of administrator via wp_insert_user() and returns a magic login URL that, when visited, calls wp_set_auth_cookie() to fully authenticate the attacker as the newly created administrator, resulting in complete site takeover. |
CVE-2024-31750 | CRITICAL | 9.8 | 0.1927 | 45.94 | No | No | 2024-04-18 | 2024-08-02 | euvd | SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter.SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter. |
CVE-2025-41115 | CRITICAL | 10.0 | 0.16905 | 45.92 | No | Yes | 2025-11-21 | 2026-07-29 | euvd, packetstorm | SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Gra…SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management.
In Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user identity handling allows a malicious or compromised SCIM client to provision a user with a numeric externalId, which in turn could allow to override internal user IDs and lead to impersonation or privilege escalation.
This vulnerability applies only if all of the following conditions are met:
- `enableSCIM` feature flag set to true
- `user_sync_enabled` config option in the `[auth.scim]` block set to true |
CVE-2024-32501 | CRITICAL | 9.8 | 0.19187 | 45.92 | No | No | 2024-08-23 | 2024-08-27 | euvd | A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13,…A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23. |
CVE-2024-8068 | MEDIUM | 5.1 | 0.01399 | 45.89 | Yes | No | 2024-11-12 | 2025-10-21 | cisa.gov, euvd | Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Wind…Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain |
CVE-2022-0666 | HIGH | 7.6 | 0.44259 | 45.89 | No | No | 2022-02-18 | 2024-08-02 | euvd | CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber pri…CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11. |
CVE-2022-43931 | CRITICAL | 10.0 | 0.16841 | 45.89 | No | No | 2023-01-03 | 2025-04-10 | euvd | Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4.4-0635 allows remote…Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4.4-0635 allows remote attackers to execute arbitrary commands via unspecified vectors. |
CVE-2024-25850 | CRITICAL | 9.8 | 0.19074 | 45.88 | No | No | 2024-02-22 | 2024-08-22 | euvd | Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameterNetis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameter |
CVE-2021-33551 | HIGH | 7.2 | 0.48811 | 45.88 | No | No | 2021-09-13 | 2024-09-16 | euvd | Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to …Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code. |
CVE-2021-33552 | HIGH | 7.2 | 0.48811 | 45.88 | No | No | 2021-09-13 | 2024-09-17 | euvd | Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to …Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code. |
CVE-2021-33553 | HIGH | 7.2 | 0.48811 | 45.88 | No | No | 2021-09-13 | 2024-09-16 | euvd | Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to …Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code. |
CVE-2021-3064 | CRITICAL | 9.8 | 0.19087 | 45.88 | No | No | 2021-11-10 | 2024-09-17 | euvd | A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated n…A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges. The attacker must have network access to the GlobalProtect interface to exploit this issue. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.17. Prisma Access customers are not impacted by this issue. |
CVE-2021-1531 | HIGH | 8.8 | 0.30492 | 45.87 | No | No | 2021-05-22 | 2024-11-08 | euvd | A vulnerability in the web UI of Cisco Modeling Labs could allow an authenticated, remote attacker to execute arbitrary commands with the pr…A vulnerability in the web UI of Cisco Modeling Labs could allow an authenticated, remote attacker to execute arbitrary commands with the privileges of the web application on the underlying operating system of an affected Cisco Modeling Labs server. This vulnerability is due to insufficient validation of user-supplied input to the web UI. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected server. A successful exploit could allow the attacker to execute arbitrary commands with the privileges of the web application, virl2, on the underlying operating system of the affected server. To exploit this vulnerability, the attacker must have valid user credentials on the web UI. |
CVE-2024-50599 | MEDIUM | 6.1 | 0.61321 | 45.86 | No | No | 2024-11-07 | 2024-11-08 | euvd | A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Zimbra Collaboration Suite (ZCS) 8.8.15, affecting one of the we…A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Zimbra Collaboration Suite (ZCS) 8.8.15, affecting one of the webmail calendar endpoints. This arises from improper handling of user-supplied input, allowing an attacker to inject malicious code that is reflected back in the HTML response. |
CVE-2018-4020 | HIGH | 7.2 | 0.48721 | 45.85 | No | No | 2018-12-03 | 2024-09-16 | euvd | An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POS…An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated POST requests to the administration web interface. Command injection is possible in the `powerd_ac_mode` POST parameter parameter. |
CVE-2018-4019 | HIGH | 7.2 | 0.48721 | 45.85 | No | No | 2018-12-03 | 2024-09-17 | euvd | An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POS…An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated POST requests to the administration web interface. Command injection is possible in the `powerd_normal_mode` parameter. |
CVE-2022-3900 | CRITICAL | 9.8 | 0.18966 | 45.84 | No | No | 2022-12-12 | 2025-04-22 | euvd | The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipe_args parameter before unserializing it in t…The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipe_args parameter before unserializing it in the cooked_loadmore action, allowing an unauthenticated attacker to trigger a PHP Object injection vulnerability. |
CVE-2026-33626 | HIGH | 7.5 | 0.4525 | 45.84 | No | No | 2026-04-20 | 2026-04-21 | euvd | LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions prior to 0.12.3 have a Server-Side Request For…LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions prior to 0.12.3 have a Server-Side Request Forgery (SSRF) vulnerability in LMDeploy's vision-language module. The `load_image()` function in `lmdeploy/vl/utils.py` fetches arbitrary URLs without validating internal/private IP addresses, allowing attackers to access cloud metadata services, internal networks, and sensitive resources. Version 0.12.3 patches the issue. |
CVE-2025-5961 | HIGH | 7.2 | 0.48659 | 45.83 | No | No | 2025-07-03 | 2026-04-08 | euvd | The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file…The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpvivid_upload_import_files' function in all versions up to, and including, 0.9.116. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. NOTE: Uploaded files are only accessible on WordPress instances running on the NGINX web server as the existing .htaccess within the target file upload folder prevents access on Apache servers. |
CVE-2025-3833 | HIGH | 8.1 | 0.38367 | 45.83 | No | No | 2025-05-14 | 2025-05-14 | euvd | Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports.Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports. |
CVE-2022-1366 | CRITICAL | 9.8 | 0.18915 | 45.82 | No | No | 2022-05-02 | 2025-04-16 | euvd | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx. This al…Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. |
CVE-2022-1378 | CRITICAL | 9.8 | 0.18915 | 45.82 | No | No | 2022-05-02 | 2025-04-16 | euvd | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx. This …Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. |
CVE-2022-1367 | CRITICAL | 9.8 | 0.18915 | 45.82 | No | No | 2022-05-02 | 2025-04-16 | euvd | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx. This all…Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. |
CVE-2022-43634 | CRITICAL | 9.8 | 0.18903 | 45.82 | No | No | 2023-03-29 | 2025-02-12 | euvd | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required t…This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646. |
CVE-2014-0784 | HIGH | 8.3 | 0.36035 | 45.81 | No | No | 2014-03-14 | 2025-09-25 | euvd | Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary cod…Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet. |
CVE-2022-2998 | HIGH | 8.8 | 0.30265 | 45.79 | No | No | 2022-09-26 | 2025-05-21 | euvd | Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in …Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specific UI interaction to potentially exploit heap corruption via a crafted HTML page. |
CVE-2024-53674 | HIGH | 7.3 | 0.47387 | 45.79 | No | No | 2024-11-26 | 2024-11-27 | euvd | An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain…An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases. |
CVE-2023-23368 | CRITICAL | 9.8 | 0.18833 | 45.79 | No | No | 2023-11-03 | 2025-02-27 | euvd | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability co…An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.0.1.2376 build 20230421 and later
QTS 4.5.4.2374 build 20230416 and later
QuTS hero h5.0.1.2376 build 20230421 and later
QuTS hero h4.5.4.2374 build 20230417 and later
QuTScloud c5.0.1.2374 and later |
CVE-2024-41110 | CRITICAL | 10.0 | 0.16496 | 45.77 | No | No | 2024-07-24 | 2024-10-13 | euvd | Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versio…Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.
Using a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.
A security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.
Docker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.
docker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege. |
CVE-1999-0095 | HIGH | 10.0 | 0.16446 | 45.76 | No | No | 1999-09-29 | 2024-08-01 | euvd, nvd | The debug command in Sendmail is enabled, allowing attackers to execute commands as root.The debug command in Sendmail is enabled, allowing attackers to execute commands as root. |
CVE-2024-1676 | CRITICAL | 9.8 | 0.18696 | 45.74 | No | No | 2024-02-21 | 2025-02-13 | euvd | Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a craf…Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low) |
CVE-2025-4322 | CRITICAL | 9.8 | 0.18673 | 45.74 | No | No | 2025-05-20 | 2026-04-08 | euvd | The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This…The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user passwords, including those of administrators, and leverage that to gain access to their account. |
CVE-2020-2733 | CRITICAL | 9.8 | 0.18645 | 45.73 | No | No | 2020-04-15 | 2024-09-30 | euvd | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics). The supported vers…Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). |
CVE-2025-23121 | CRITICAL | 9.9 | 0.17527 | 45.73 | No | No | 2025-06-18 | 2025-06-23 | euvd | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain userA vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user |
CVE-2022-23253 | MEDIUM | 6.5 | 0.56376 | 45.73 | No | No | 2022-03-09 | 2025-07-08 | euvd | Windows Point-to-Point Tunneling Protocol Denial of Service VulnerabilityWindows Point-to-Point Tunneling Protocol Denial of Service Vulnerability |
CVE-2023-36050 | HIGH | 8.0 | 0.392 | 45.72 | No | No | 2023-11-14 | 2025-10-08 | euvd | Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server Spoofing Vulnerability |
CVE-2023-37474 | HIGH | 7.5 | 0.4492 | 45.72 | No | No | 2023-07-14 | 2025-02-13 | euvd | Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the `.cpr` subfolder.…Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the `.cpr` subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This issue has been addressed in commit `043e3c7d` which has been included in release 1.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability. |
CVE-2021-31181 | HIGH | 8.8 | 0.30045 | 45.72 | No | No | 2021-05-11 | 2025-02-28 | euvd | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Remote Code Execution Vulnerability |
CVE-2023-49237 | CRITICAL | 9.8 | 0.18596 | 45.71 | No | No | 2024-01-09 | 2025-06-20 | euvd | An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system function is used by dav…An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system function is used by davinci to unpack language packs without strict filtering of URL strings. |
CVE-1999-0233 | HIGH | 10.0 | 0.16272 | 45.7 | No | No | 2000-01-18 | 2024-08-01 | euvd, nvd | IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files. |
CVE-2021-43803 | HIGH | 7.5 | 0.44824 | 45.69 | No | No | 2021-12-09 | 2024-08-04 | euvd | Next.js is a React framework. In versions of Next.js prior to 12.0.5 or 11.1.3, invalid or malformed URLs could lead to a server crash. In o…Next.js is a React framework. In versions of Next.js prior to 12.0.5 or 11.1.3, invalid or malformed URLs could lead to a server crash. In order to be affected by this issue, the deployment must use Next.js versions above 11.1.0 and below 12.0.5, Node.js above 15.0.0, and next start or a custom server. Deployments on Vercel are not affected, along with similar environments where invalid requests are filtered before reaching Next.js. Versions 12.0.5 and 11.1.3 contain patches for this issue. |
CVE-2022-44666 | HIGH | 7.8 | 0.41372 | 45.68 | No | No | 2022-12-13 | 2025-08-27 | euvd | Windows Contacts Remote Code Execution VulnerabilityWindows Contacts Remote Code Execution Vulnerability |
CVE-2024-39932 | CRITICAL | 9.9 | 0.17315 | 45.66 | No | No | 2024-07-04 | 2024-08-02 | euvd | Gogs through 0.13.0 allows argument injection during the previewing of changes.Gogs through 0.13.0 allows argument injection during the previewing of changes. |
CVE-2025-55346 | CRITICAL | 9.8 | 0.18448 | 45.66 | No | No | 2025-08-14 | 2025-08-14 | euvd | User-controlled input flows to an unsafe implementation of a dynamic Function constructor, allowing network attackers to run arbitrary unsan…User-controlled input flows to an unsafe implementation of a dynamic Function constructor, allowing network attackers to run arbitrary unsandboxed JS code in the context of the host, by sending a simple POST request. |
CVE-2025-27590 | CRITICAL | 9.0 | 0.27573 | 45.65 | No | No | 2025-03-03 | 2025-03-04 | euvd | In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux us…In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web. |