CVE-2021-1473 | MEDIUM | 5.3 | 0.64161 | 43.66 | No | No | 2021-04-08 | 2024-11-08 | euvd | Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could exec…Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. |
CVE-2023-4596 | CRITICAL | 9.8 | 0.12749 | 43.66 | No | No | 2023-08-30 | 2026-04-08 | euvd | The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to file type validation occurring after a file has been uplo…The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to file type validation occurring after a file has been uploaded to the server in the upload_post_image() function in versions up to, and including, 1.24.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. |
CVE-2022-46689 | HIGH | 7.0 | 0.44678 | 43.64 | No | No | 2022-12-15 | 2025-04-21 | euvd | A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macO…A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges. |
CVE-2023-25610 | CRITICAL | 9.3 | 0.18334 | 43.62 | No | No | 2025-03-24 | 2025-03-24 | euvd | A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, vers…A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests. |
CVE-2026-62144 | CRITICAL | 9.1 | 0.20623 | 43.62 | No | No | 2026-07-22 | 2026-07-24 | euvd, nvd | An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated rem…An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients. |
CVE-2024-6209 | CRITICAL | 9.4 | 0.17159 | 43.61 | No | No | 2024-07-05 | 2024-12-05 | euvd | Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series
v3.08.01
; MATRIX Series
v3.08.01 allows Atta…Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series
v3.08.01
; MATRIX Series
v3.08.01 allows Attacker to access files unauthorized |
CVE-2025-50121 | CRITICAL | 9.5 | 0.1604 | 43.61 | No | No | 2025-07-11 | 2025-11-03 | euvd | A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
vulnerability exists that could cause u…A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
vulnerability exists that could cause unauthenticated remote code execution when a malicious folder is created
over the web interface HTTP when enabled. HTTP is disabled by default. |
CVE-2023-28725 | CRITICAL | 9.1 | 0.20614 | 43.61 | No | No | 2023-03-21 | 2025-02-26 | euvd | General Bytes Crypto Application Server (CAS) 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute a…General Bytes Crypto Application Server (CAS) 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standalone/deployments directory, aka BATM-4780, as exploited in the wild in March 2023. This is fixed in 20221118.48 and 20230120.44. |
CVE-2024-2863 | MEDIUM | 5.3 | 0.63999 | 43.6 | No | No | 2024-03-25 | 2024-08-01 | euvd | This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant.This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant. |
CVE-2024-6646 | MEDIUM | 6.9 | 0.45681 | 43.59 | No | No | 2024-07-10 | 2024-08-01 | euvd | A vulnerability was found in Netgear WN604 up to 20240710. It has been rated as problematic. Affected by this issue is some unknown function…A vulnerability was found in Netgear WN604 up to 20240710. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /downloadFile.php of the component Web Interface. The manipulation of the argument file with the input config leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271052. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. |
CVE-2021-25337 | MEDIUM | 4.4 | 0.02831 | 43.59 | Yes | No | 2021-03-04 | 2025-10-21 | cisa.gov, euvd | Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read…Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files. |
CVE-1999-1467 | HIGH | 10.0 | 0.10226 | 43.58 | No | No | 2001-09-12 | 2024-08-01 | euvd, nvd | Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to th…Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user. |
CVE-2022-2200 | HIGH | 8.8 | 0.23941 | 43.58 | No | No | 2022-12-22 | 2025-04-15 | euvd | If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading t…If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11. |
CVE-2025-54987 | CRITICAL | 9.4 | 0.17066 | 43.57 | No | No | 2025-08-05 | 2026-02-26 | euvd | A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious …A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture. |
CVE-2024-37080 | CRITICAL | 9.8 | 0.12478 | 43.57 | No | No | 2024-06-18 | 2026-01-24 | euvd | vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to…vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution. |
CVE-2024-29855 | CRITICAL | 9.0 | 0.21634 | 43.57 | No | No | 2024-06-11 | 2025-03-27 | euvd | Hard-coded JWT secret allows authentication bypass in Veeam Recovery OrchestratorHard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator |
CVE-2020-6627 | CRITICAL | 9.8 | 0.12453 | 43.56 | No | No | 2022-12-06 | 2025-04-23 | euvd | The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS command injection via mv_b…The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS command injection via mv_backend_launch in cirrus/application/helpers/mv_backend_helper.php by leveraging the "start" state and sending a check_device_name request. |
CVE-2020-2036 | HIGH | 8.8 | 0.2389 | 43.56 | No | No | 2020-09-09 | 2024-09-16 | euvd | A reflected cross-site scripting (XSS) vulnerability exists in the PAN-OS management web interface. A remote attacker able to convince an ad…A reflected cross-site scripting (XSS) vulnerability exists in the PAN-OS management web interface. A remote attacker able to convince an administrator with an active authenticated session on the firewall management interface to click on a crafted link to that management web interface could potentially execute arbitrary JavaScript code in the administrator's browser and perform administrative actions. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.9. |
CVE-2023-2935 | HIGH | 8.8 | 0.23855 | 43.55 | No | No | 2023-05-30 | 2025-05-05 | euvd | Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted …Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-1999-0066 | CRITICAL | 9.8 | 0.12433 | 43.55 | No | No | 1999-09-29 | 2024-08-01 | euvd, nvd | AnyForm CGI remote execution.AnyForm CGI remote execution. |
CVE-2023-41320 | HIGH | 8.1 | 0.31871 | 43.55 | No | No | 2023-09-26 | 2024-09-23 | euvd | GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk …GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. UI layout preferences management can be hijacked to lead to SQL injection. This injection can be use to takeover an administrator account. Users are advised to upgrade to version 10.0.10. There are no known workarounds for this vulnerability. |
CVE-2022-35698 | CRITICAL | 10.0 | 0.10128 | 43.54 | No | No | 2022-10-14 | 2025-04-23 | euvd | Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploita…Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution. |
CVE-2022-2488 | HIGH | 8.0 | 0.32947 | 43.53 | No | No | 2022-07-20 | 2025-04-15 | euvd | A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file …A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlist_sync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used. |
CVE-2022-20780 | CRITICAL | 9.9 | 0.11233 | 43.53 | No | No | 2022-05-04 | 2024-11-06 | euvd | Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual ma…Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the VM. For more information about these vulnerabilities, see the Details section of this advisory. |
CVE-2024-50387 | CRITICAL | 10.0 | 0.1005 | 43.52 | No | No | 2024-12-06 | 2024-12-06 | euvd | A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allo…A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to inject malicious code.
We have already fixed the vulnerability in the following version:
SMB Service 4.15.002 and later
SMB Service h4.15.002 and later |
CVE-2018-1000517 | HIGH | 8.0 | 0.32919 | 43.52 | No | No | 2018-06-26 | 2025-06-09 | euvd | BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Bu…BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Busybox wget that can result in heap buffer overflow. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in after commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e. |
CVE-2024-43491 | CRITICAL | 9.8 | 0.12282 | 43.5 | No | No | 2024-09-10 | 2026-08-10 | euvd | Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Componen…Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, version 1507 (initial version released July 2015). This means that an attacker could exploit these previously mitigated vulnerabilities on Windows 10, version 1507 (Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB) systems that have installed the Windows security update released on March 12, 2024—KB5035858 (OS Build 10240.20526) or other updates released until August 2024. All later versions of Windows 10 are not impacted by this vulnerability.
This servicing stack vulnerability is addressed by installing the September 2024 Servicing stack update (SSU KB5043936) AND the September 2024 Windows security update (KB5043083), in that order.
Note: Windows 10, version 1507 reached the end of support (EOS) on May 9, 2017 for devices running the Pro, Home, Enterprise, Education, and Enterprise IoT editions. Only Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB editions are still under support. |
CVE-2020-17117 | MEDIUM | 6.6 | 0.48871 | 43.5 | No | No | 2020-12-09 | 2026-06-09 | euvd | Microsoft Exchange Remote Code Execution VulnerabilityMicrosoft Exchange Remote Code Execution Vulnerability |
CVE-2024-32641 | CRITICAL | 9.8 | 0.12297 | 43.5 | No | No | 2025-12-03 | 2025-12-03 | euvd | Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to rem…Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to remote code execution. The vulnerability exists in the addParam function, which accepts user input via the criteria parameter. This input is subsequently evaluated by setDynamicContent, allowing an unauthenticated attacker to execute arbitrary code via the m tag. The vulnerability is patched in versions 7.2.8, 7.3.13, and 7.4.6. |
CVE-2025-30281 | CRITICAL | 9.1 | 0.20264 | 43.49 | No | No | 2025-04-08 | 2025-06-24 | euvd | ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in arbit…ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization. Exploitation of this issue does not require user interaction, and scope is changed. |
CVE-2026-30824 | HIGH | 7.7 | 0.3625 | 43.49 | No | No | 2026-03-07 | 2026-03-09 | euvd | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the NVIDIA NIM router (/ap…Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generation endpoints. This issue has been patched in version 3.0.13. |
CVE-2023-21492 | MEDIUM | 4.4 | 0.02554 | 43.49 | Yes | No | 2023-05-04 | 2025-10-21 | cisa.gov, euvd | Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR. |
CVE-2020-4448 | CRITICAL | 9.8 | 0.12224 | 43.48 | No | No | 2020-06-05 | 2024-09-16 | euvd | IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the sy…IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 181228. |
CVE-2024-27322 | HIGH | 8.8 | 0.23618 | 43.47 | No | No | 2024-04-29 | 2025-02-13 | euvd | Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not includ…Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not including 4.4.0, enabling a maliciously crafted RDS (R Data Serialization) formatted file or R package to run arbitrary code on an end user’s system when interacted with. |
CVE-2025-34077 | CRITICAL | 10.0 | 0.09903 | 43.47 | No | No | 2025-07-09 | 2026-05-15 | euvd | An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impers…An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting social_site=true and manipulating the user_id_social_site parameter, an attacker can generate a valid WordPress session cookie for any user ID, including administrators. Once authenticated, the attacker may exploit plugin upload functionality to install a malicious plugin containing arbitrary PHP code, resulting in remote code execution on the underlying server. |
CVE-2022-20777 | CRITICAL | 9.9 | 0.11067 | 43.47 | No | No | 2022-05-04 | 2024-11-06 | euvd | Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual ma…Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the VM. For more information about these vulnerabilities, see the Details section of this advisory. |
CVE-2024-29021 | CRITICAL | 9.1 | 0.20179 | 43.46 | No | No | 2024-04-18 | 2024-08-02 | euvd | Judge0 is an open-source online code execution system. The default configuration of Judge0 leaves the service vulnerable to a sandbox escape…Judge0 is an open-source online code execution system. The default configuration of Judge0 leaves the service vulnerable to a sandbox escape via Server Side Request Forgery (SSRF). This allows an attacker with sufficient access to the Judge0 API to obtain unsandboxed code execution as root on the target machine. This vulnerability is fixed in 1.13.1. |
CVE-2025-61928 | CRITICAL | 9.3 | 0.17872 | 43.46 | No | No | 2025-10-09 | 2025-10-10 | euvd | Better Auth is an authentication and authorization library for TypeScript. In versions prior to 1.3.26, unauthenticated attackers can create…Better Auth is an authentication and authorization library for TypeScript. In versions prior to 1.3.26, unauthenticated attackers can create or modify API keys for any user by passing that user's id in the request body to the `api/auth/api-key/create` route. `session?.user ?? (authRequired ? null : { id: ctx.body.userId })`. When no session exists but `userId` is present in the request body, `authRequired` becomes false and the user object is set to the attacker-controlled ID. Server-only field validation only executes when `authRequired` is true (lines 280-295), allowing attackers to set privileged fields. No additional authentication occurs before the database operation, so the malicious payload is accepted. The same pattern exists in the update endpoint. This is a critical authentication bypass enabling full an unauthenticated attacker can generate an API key for any user and immediately gain complete authenticated access. This allows the attacker to perform any action as the victim user using the api key, potentially compromise the user data and the application depending on the victim's privileges. Version 1.3.26 contains a patch for the issue. |
CVE-2025-4978 | CRITICAL | 9.3 | 0.17875 | 43.46 | No | No | 2025-05-20 | 2025-05-20 | euvd | A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of t…A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of the file /BRS_top.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure. |
CVE-2018-5379 | HIGH | 7.5 | 0.38454 | 43.46 | No | No | 2018-02-19 | 2024-09-17 | euvd | The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing clust…The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes. A successful attack could cause a denial of service or potentially allow an attacker to execute arbitrary code. |
CVE-2022-25759 | CRITICAL | 9.9 | 0.10997 | 43.45 | No | No | 2022-07-22 | 2024-09-16 | euvd | The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file containing the payload.The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file containing the payload. |
CVE-2022-24082 | CRITICAL | 9.8 | 0.12086 | 43.43 | No | No | 2022-07-19 | 2024-08-03 | euvd | If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filter…If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it may be possible to upload serialized payloads to attack the underlying system. This does not affect systems running on PegaCloud due to its design and architecture. |
CVE-2022-45362 | HIGH | 7.2 | 0.41762 | 43.42 | No | No | 2023-12-07 | 2026-04-28 | euvd | Server-Side Request Forgery (SSRF) vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payment Gateway: from n/a through 2…Server-Side Request Forgery (SSRF) vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payment Gateway: from n/a through 2.7.0. |
CVE-2021-35247 | MEDIUM | 4.3 | 0.03453 | 43.41 | Yes | No | 2022-01-07 | 2025-10-21 | cisa.gov, euvd | Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the inpu…Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as the LDAP servers ignored improper characters. To insure proper input validation is completed in all environments. SolarWinds recommends scheduling an update to the latest version of Serv-U. |
CVE-2026-1056 | CRITICAL | 9.8 | 0.12024 | 43.41 | No | No | 2026-01-28 | 2026-04-08 | euvd | The Snow Monkey Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'generat…The Snow Monkey Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'generate_user_dirpath' function in all versions up to, and including, 12.0.3. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). |
CVE-2026-21902 | CRITICAL | 9.3 | 0.17709 | 43.4 | No | No | 2026-02-25 | 2026-03-04 | euvd | An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos O…An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated, network-based attacker to execute code as root.
The On-Box Anomaly detection framework should only be reachable by other internal processes over the internal routing instance, but not over an externally exposed port. With the ability to access and manipulate the service to execute code as root a remote attacker can take complete control of the device.
Please note that this service is enabled by default as no specific configuration is required.
This issue affects Junos OS Evolved on PTX Series:
* 25.4 versions before 25.4R1-S1-EVO, 25.4R2-EVO.
This issue does not affect Junos OS Evolved versions before 25.4R1-EVO.
This issue does not affect Junos OS. |
CVE-2024-45309 | HIGH | 8.7 | 0.24531 | 43.39 | No | No | 2024-10-21 | 2024-10-21 | euvd | OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read ar…OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read arbitrary files accessible by the OneDev server process. This issue has been fixed in version 11.0.9. |
CVE-2018-4013 | CRITICAL | 10.0 | 0.09667 | 43.38 | No | No | 2018-10-19 | 2024-09-16 | euvd | An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92.…An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability. |
CVE-2021-33990 | CRITICAL | 9.8 | 0.11915 | 43.37 | No | No | 2023-04-16 | 2025-02-13 | euvd | Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. NOTE: The vendor disputes thi…Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. NOTE: The vendor disputes this issue because the exploit reference link only shows frmfolders.html is accessible and does not demonstrate how an unauthorized user can upload a file. |
CVE-1999-0006 | CRITICAL | 9.8 | 0.119 | 43.37 | No | No | 1999-09-29 | 2024-10-29 | euvd | Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command. |