CVE-2024-33512 | CRITICAL | 9.8 | 0.14617 | 44.32 | No | No | 2024-05-01 | 2024-08-02 | euvd | There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated rem…There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system. |
CVE-2025-34035 | CRITICAL | 10.0 | 0.12334 | 44.32 | No | No | 2025-06-24 | 2026-04-07 | euvd | An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. The usbinteract.cgi script fails …An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. The usbinteract.cgi script fails to properly sanitize user input passed to the path parameter, allowing unauthenticated remote attackers to inject arbitrary shell commands. The injected commands are executed with root privileges, leading to full system compromise. Exploitation evidence was observed by the Shadowserver Foundation on 2024-12-05 UTC. |
CVE-2026-8181 | CRITICAL | 9.8 | 0.14608 | 44.31 | No | No | 2026-05-14 | 2026-05-14 | euvd | The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authenticat…The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1.1. This is due to incorrect return-value handling in the `is_mainwp_authenticated()` function when validating application passwords from the Authorization header. This makes it possible for unauthenticated attackers, with knowledge of an administrator username, to impersonate that administrator for the duration of the request by supplying any random Basic Authentication password achieving privilege escalation. |
CVE-2024-33511 | CRITICAL | 9.8 | 0.14559 | 44.3 | No | No | 2024-05-01 | 2024-08-02 | euvd | There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execut…There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system. |
CVE-2025-2605 | CRITICAL | 9.9 | 0.13412 | 44.29 | No | No | 2025-05-02 | 2025-05-17 | euvd | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Honeywell MB-Secure allows Privi…Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Honeywell MB-Secure allows Privilege Abuse. This issue affects MB-Secure: from V11.04 before V12.53 and MB-Secure PRO from V01.06 before V03.09.Honeywell also recommends updating to the most recent version of this product. |
CVE-2024-39225 | CRITICAL | 9.8 | 0.1453 | 44.29 | No | No | 2024-08-06 | 2024-08-15 | euvd | GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16,…GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain a remote code execution (RCE) vulnerability. |
CVE-2025-25291 | CRITICAL | 9.3 | 0.2026 | 44.29 | No | No | 2025-03-12 | 2025-11-03 | euvd | ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found…ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently; the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 fix the issue. |
CVE-2023-20894 | HIGH | 8.1 | 0.33945 | 44.28 | No | No | 2023-06-22 | 2025-02-13 | euvd | The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with…The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bound write by sending a specially crafted packet leading to memory corruption. |
CVE-2021-3958 | CRITICAL | 9.8 | 0.14501 | 44.28 | No | No | 2021-11-16 | 2024-09-17 | euvd | Improper Handling of Parameters vulnerability in Ipack Automation Systems Ipack SCADA Software allows : Blind SQL Injection.This issue affec…Improper Handling of Parameters vulnerability in Ipack Automation Systems Ipack SCADA Software allows : Blind SQL Injection.This issue affects Ipack SCADA Software: from unspecified before 1.1.0. |
CVE-2023-27293 | MEDIUM | 6.1 | 0.56768 | 44.27 | No | No | 2023-02-28 | 2025-03-21 | euvd | Improper neutralization of input during web page generation allows an unauthenticated attacker to submit malicious Javascript as the answer …Improper neutralization of input during web page generation allows an unauthenticated attacker to submit malicious Javascript as the answer to a questionnaire which would then be executed when an authenticated user reviews the candidate's submission. This could be used to steal other users’ cookies and force users to make actions without their knowledge. |
CVE-2024-50320 | HIGH | 7.5 | 0.40783 | 44.27 | No | No | 2024-11-12 | 2024-11-12 | euvd | An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. |
CVE-2024-25228 | HIGH | 8.8 | 0.25887 | 44.26 | No | No | 2024-03-14 | 2025-11-04 | euvd | Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function i…Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler.class.php. |
CVE-2021-3060 | HIGH | 8.1 | 0.33875 | 44.26 | No | No | 2021-11-10 | 2024-09-16 | euvd | An OS command injection vulnerability in the Simple Certificate Enrollment Protocol (SCEP) feature of PAN-OS software allows an unauthentica…An OS command injection vulnerability in the Simple Certificate Enrollment Protocol (SCEP) feature of PAN-OS software allows an unauthenticated network-based attacker with specific knowledge of the firewall configuration to execute arbitrary code with root user privileges. The attacker must have network access to the GlobalProtect interfaces to exploit this issue. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20-h1; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14-h3; PAN-OS 9.1 versions earlier than PAN-OS 9.1.11-h2; PAN-OS 10.0 versions earlier than PAN-OS 10.0.8; PAN-OS 10.1 versions earlier than PAN-OS 10.1.3. Prisma Access customers with Prisma Access 2.1 Preferred and Prisma Access 2.1 Innovation firewalls are impacted by this issue. |
CVE-2024-6298 | CRITICAL | 9.4 | 0.1901 | 44.25 | No | No | 2024-07-05 | 2024-12-05 | euvd | Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series
v3.08.01
; MATRIX Series
v3.08.01 allows Atta…Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series
v3.08.01
; MATRIX Series
v3.08.01 allows Attacker to execute arbitrary code remotely |
CVE-2023-47253 | CRITICAL | 9.8 | 0.14422 | 44.25 | No | No | 2023-11-06 | 2025-06-12 | euvd | Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.ph…Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter. |
CVE-2025-61913 | CRITICAL | 10.0 | 0.12115 | 44.24 | No | No | 2025-10-08 | 2025-10-14 | euvd | Flowise is a drag & drop user interface to build a customized large language model flow. In versions prior to 3.0.8, WriteFileTool and ReadF…Flowise is a drag & drop user interface to build a customized large language model flow. In versions prior to 3.0.8, WriteFileTool and ReadFileTool in Flowise do not restrict file path access, allowing authenticated attackers to exploit this vulnerability to read and write arbitrary files to any path in the file system, potentially leading to remote command execution. Flowise 3.0.8 fixes this vulnerability. |
CVE-2024-57684 | CRITICAL | 9.8 | 0.1436 | 44.23 | No | No | 2025-01-16 | 2025-01-16 | euvd | An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the D…An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted POST request. |
CVE-2012-5862 | CRITICAL | 10.0 | 0.12079 | 44.23 | No | No | 2012-11-23 | 2025-07-08 | euvd | These Sinapsi devices
store hard-coded passwords in the PHP file of the device. By using the
hard-coded passwords in the device, attackers …These Sinapsi devices
store hard-coded passwords in the PHP file of the device. By using the
hard-coded passwords in the device, attackers can log into the device
with administrative privileges. This could allow the attacker to have
unauthorized access. |
CVE-2022-44792 | MEDIUM | 6.5 | 0.52054 | 44.22 | No | No | 2022-11-07 | 2025-05-05 | euvd | handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by…handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. |
CVE-2024-47908 | CRITICAL | 9.1 | 0.22331 | 44.22 | No | No | 2025-02-11 | 2026-02-26 | euvd | OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privilege…OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution. |
CVE-2022-3552 | HIGH | 7.2 | 0.44002 | 44.2 | No | No | 2022-10-17 | 2025-05-12 | euvd | Unrestricted Upload of File with Dangerous Type in GitHub repository boxbilling/boxbilling prior to 0.0.1.Unrestricted Upload of File with Dangerous Type in GitHub repository boxbilling/boxbilling prior to 0.0.1. |
CVE-2022-33174 | CRITICAL | 9.8 | 0.14285 | 44.2 | No | No | 2022-06-13 | 2024-08-03 | euvd | Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypass in the web interfa…Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface (/cgi/get_param.cgi) with the tmpToken cookie set to an empty string followed by a semicolon. This bypasses an active session authorization check. This can be then used to fetch the values of protected sys.passwd and sys.su.name fields that contain the username and password in cleartext. |
CVE-2021-22192 | CRITICAL | 9.9 | 0.13108 | 44.19 | No | No | 2021-03-24 | 2024-08-03 | euvd | An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute …An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server. |
CVE-2019-2904 | CRITICAL | 9.8 | 0.14264 | 44.19 | No | No | 2019-10-16 | 2024-10-15 | euvd | Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affec…Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper and ADF. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper and ADF. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). |
CVE-2023-33584 | CRITICAL | 9.8 | 0.14242 | 44.18 | No | No | 2023-06-21 | 2024-09-16 | euvd | Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL q…Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the username and password fields during the login process, enabling an attacker to inject malicious SQL code. |
CVE-2022-23285 | HIGH | 8.8 | 0.25628 | 44.17 | No | No | 2022-03-09 | 2025-07-08 | euvd | Remote Desktop Client Remote Code Execution VulnerabilityRemote Desktop Client Remote Code Execution Vulnerability |
CVE-2025-34117 | CRITICAL | 9.3 | 0.19921 | 44.17 | No | No | 2025-07-16 | 2026-04-07 | euvd | A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to…A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to the presence of an undocumented backdoor listener on UDP port 53413. Exact version boundaries remain undocumented. An unauthenticated remote attacker can send specially crafted UDP packets to execute arbitrary commands on the affected device. This backdoor uses a hardcoded authentication mechanism and accepts shell commands post-authentication. Some device models include a non-standard implementation of the `echo` command, which may affect exploitability. |
CVE-2022-3792 | CRITICAL | 9.8 | 0.14187 | 44.17 | No | No | 2023-01-10 | 2026-05-20 | euvd | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating s…Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection.
This issue affects GullsEye terminal operating system: from unspecified before 5.0.13. |
CVE-2013-10069 | CRITICAL | 10.0 | 0.11859 | 44.15 | No | No | 2025-08-05 | 2026-05-15 | euvd | The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS c…The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd POST parameter. A remote attacker can exploit this flaw without authentication to spawn a Telnet service on a specified port, enabling persistent interactive shell access as root. |
CVE-2024-1601 | HIGH | 7.5 | 0.40416 | 44.15 | No | No | 2024-04-16 | 2024-08-01 | euvd | An SQL injection vulnerability exists in the `delete_discussion()` function of the parisneo/lollms-webui application, allowing an attacker t…An SQL injection vulnerability exists in the `delete_discussion()` function of the parisneo/lollms-webui application, allowing an attacker to delete all discussions and message data. The vulnerability is exploitable via a crafted HTTP POST request to the `/delete_discussion` endpoint, which internally calls the vulnerable `delete_discussion()` function. By sending a specially crafted payload in the 'id' parameter, an attacker can manipulate SQL queries to delete all records from the 'discussion' and 'message' tables. This issue is due to improper neutralization of special elements used in an SQL command. |
CVE-2022-38488 | CRITICAL | 9.8 | 0.14132 | 44.15 | No | No | 2022-12-14 | 2025-04-22 | euvd | logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter.logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter. |
CVE-2025-53693 | CRITICAL | 9.8 | 0.14117 | 44.14 | No | No | 2025-09-03 | 2025-09-03 | euvd | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM…Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Cache Poisoning.This issue affects Sitecore Experience Manager (XM): from 9.0 through 9.3, from 10.0 through 10.4; Experience Platform (XP): from 9.0 through 9.3, from 10.0 through 10.4. |
CVE-2024-8529 | CRITICAL | 10.0 | 0.11831 | 44.14 | No | No | 2024-09-12 | 2026-04-08 | euvd | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_fields' parameter of the /wp-json/lp/v1…The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_fields' parameter of the /wp-json/lp/v1/courses/archive-course REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. |
CVE-2026-22844 | CRITICAL | 9.9 | 0.12965 | 44.14 | No | No | 2026-01-20 | 2026-01-20 | euvd | A Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) before version 5.2.1716.0 may allow a meeting participant to conduc…A Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) before version 5.2.1716.0 may allow a meeting participant to conduct remote code execution of the MMR via network access. |
CVE-2023-29489 | MEDIUM | 5.3 | 0.65533 | 44.14 | No | No | 2023-04-27 | 2024-08-02 | euvd | An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The…An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31. |
CVE-2025-68668 | CRITICAL | 9.9 | 0.12901 | 44.12 | No | No | 2025-12-26 | 2026-01-05 | euvd | n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass vulnerability exists in the Python …n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission to create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host system running n8n, using the same privileges as the n8n process. This issue has been patched in version 2.0.0. Workarounds for this issue involve disabling the Code Node by setting the environment variable NODES_EXCLUDE: "[\"n8n-nodes-base.code\"]", disabling Python support in the Code node by setting the environment variable N8N_PYTHON_ENABLED=false, which was introduced in n8n version 1.104.0, and configuring n8n to use the task runner based Python sandbox via the N8N_RUNNERS_ENABLED and N8N_NATIVE_PYTHON_RUNNER environment variables. |
CVE-2025-24984 | MEDIUM | 4.6 | 0.01972 | 44.09 | Yes | No | 2025-03-11 | 2026-02-26 | cisa.gov, euvd | Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical att…Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2022-26085 | CRITICAL | 9.9 | 0.12831 | 44.09 | No | No | 2022-05-12 | 2025-04-15 | euvd | An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4. A specially-crafte…An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. |
CVE-2026-25512 | CRITICAL | 9.4 | 0.18536 | 44.09 | No | No | 2026-02-04 | 2026-02-05 | euvd | Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, and 26.0.5, there is …Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, and 26.0.5, there is a remote code execution (RCE) vulnerability in Group-Office. The endpoint email/message/tnefAttachmentFromTempFile directly concatenates the user-controlled parameter tmp_file into an exec() call. By injecting shell metacharacters into tmp_file, an authenticated attacker can execute arbitrary system commands on the server. This issue has been patched in versions 6.8.150, 25.0.82, and 26.0.5. |
CVE-2019-1182 | CRITICAL | 9.8 | 0.13947 | 44.08 | No | No | 2019-08-14 | 2024-08-04 | euvd | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated atta…A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP.
The update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests. |
CVE-2025-6023 | HIGH | 7.6 | 0.39079 | 44.08 | No | No | 2025-07-18 | 2025-07-18 | euvd | An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introd…An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0.
The open redirect can be chained with path traversal vulnerabilities to achieve XSS.
Fixed in versions 12.0.2+security-01, 11.6.3+security-01, 11.5.6+security-01, 11.4.6+security-01 and 11.3.8+security-01 |
CVE-2024-50339 | CRITICAL | 9.3 | 0.19621 | 44.07 | No | No | 2024-12-11 | 2024-12-11 | euvd | GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.17, an unauthenticated user can…GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.17, an unauthenticated user can retrieve all the sessions IDs and use them to steal any valid session. Version 10.0.17 contains a patch for this issue. |
CVE-2021-26897 | CRITICAL | 9.8 | 0.13912 | 44.07 | No | No | 2021-03-11 | 2024-08-03 | euvd | Windows DNS Server Remote Code Execution VulnerabilityWindows DNS Server Remote Code Execution Vulnerability |
CVE-2025-21400 | HIGH | 8.0 | 0.34488 | 44.07 | No | No | 2025-02-11 | 2026-02-13 | euvd | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2026-23734 | CRITICAL | 9.3 | 0.19559 | 44.05 | No | No | 2026-05-20 | 2026-05-26 | euvd, nvd | XWiki Platform is a generic wiki platform. Versions prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17 allow access to read configuration f…XWiki Platform is a generic wiki platform. Versions prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17 allow access to read configuration files by using URLs such as http://localhost:8080/bin/ssx/Main/WebHome?resource=/../../WEB-INF/xwiki.cfg&minify=false, leading to Path Traversal. The vulnerability is can be exploited via resources parameter the ssx and jsx endpoints by using leading slashes. This issue has been patched in 18.1.0-rc-1, 17.10.3, 17.4.9, 16.10.17. |
CVE-2023-34563 | CRITICAL | 9.8 | 0.13855 | 44.05 | No | No | 2023-06-20 | 2024-12-09 | euvd | netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication.netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication. |
CVE-2023-23560 | CRITICAL | 9.8 | 0.13866 | 44.05 | No | No | 2023-01-23 | 2025-04-02 | euvd | In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation. |
CVE-2023-36017 | HIGH | 8.8 | 0.25289 | 44.05 | No | No | 2023-11-14 | 2025-10-08 | euvd | Windows Scripting Engine Memory Corruption VulnerabilityWindows Scripting Engine Memory Corruption Vulnerability |
CVE-2023-20036 | CRITICAL | 9.9 | 0.1272 | 44.05 | No | No | 2024-11-15 | 2024-11-15 | euvd | A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative p…A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the underlying operating system of an affected device.
This vulnerability is due to improper input validation when uploading a Device Pack. An attacker could exploit this vulnerability by altering the request that is sent when uploading a Device Pack. A successful exploit could allow the attacker to execute arbitrary commands as NT AUTHORITY\SYSTEM on the underlying operating system of an affected device.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. |
CVE-2026-35029 | HIGH | 8.7 | 0.26409 | 44.04 | No | Yes | 2026-04-06 | 2026-07-15 | euvd, packetstorm | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/update endpoint does not …LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/update endpoint does not enforce admin role authorization. A user who is already authenticated into the platform can then use this endpoint to modify proxy configuration and environment variables, register custom pass-through endpoint handlers pointing to attacker-controlled Python code, achieving remote code execution, read arbitrary server files by setting UI_LOGO_PATH and fetching via /get_image, and take over other privileged accounts by overwriting UI_USERNAME and UI_PASSWORD environment variables. Fixed in v1.83.0. |