CVE-2025-65041 | CRITICAL | 10.0 | 0.00733 | 40.26 | No | No | 2025-12-18 | 2026-04-16 | euvd | Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network. |
CVE-2024-11186 | CRITICAL | 10.0 | 0.00751 | 40.26 | No | No | 2025-05-08 | 2025-05-08 | euvd | On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions…On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-premise. It does not impact CloudVision as-a-Service. |
CVE-2025-22609 | CRITICAL | 10.0 | 0.00736 | 40.26 | No | No | 2025-01-24 | 2025-02-12 | euvd | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the mis…Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization allows any authenticated user to attach any existing private key on a coolify instance to his own server. If the server configuration of IP / domain, port (most likely 22) and user (root) matches with the victim's server configuration, then the attacker can use the `Terminal` feature and execute arbitrary commands on the victim's server. Version 4.0.0-beta.361 fixes the issue. |
CVE-2023-2138 | CRITICAL | 10.0 | 0.0074 | 40.26 | No | No | 2023-04-18 | 2025-02-05 | euvd | Use of Hard-coded Credentials in GitHub repository nuxtlabs/github-module prior to 1.6.2.Use of Hard-coded Credentials in GitHub repository nuxtlabs/github-module prior to 1.6.2. |
CVE-2021-1965 | CRITICAL | 9.8 | 0.03016 | 40.26 | No | No | 2021-07-13 | 2024-08-03 | euvd | Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdrago…Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking |
CVE-2025-61945 | CRITICAL | 10.0 | 0.00742 | 40.26 | No | No | 2025-11-04 | 2025-11-05 | euvd | Radiometrics VizAir is vulnerable to any remote attacker via access to the admin panel of the VizAir system without authentication. Once ins…Radiometrics VizAir is vulnerable to any remote attacker via access to the admin panel of the VizAir system without authentication. Once inside, the attacker can modify critical weather parameters such as wind shear alerts, inversion depth, and CAPE values, which are essential for accurate weather forecasting and flight safety. This unauthorized access could result in the disabling of vital alerts, causing hazardous conditions for aircraft, and manipulating runway assignments, which could result in mid-air conflicts or runway incursions. |
CVE-2024-53822 | CRITICAL | 10.0 | 0.0075 | 40.26 | No | No | 2024-12-09 | 2026-04-28 | euvd | Unrestricted Upload of File with Dangerous Type vulnerability in Genetech Pie Register Premium.This issue affects Pie Register Premium: from…Unrestricted Upload of File with Dangerous Type vulnerability in Genetech Pie Register Premium.This issue affects Pie Register Premium: from n/a before 3.8.3.3. |
CVE-2024-36858 | CRITICAL | 9.8 | 0.03035 | 40.26 | No | No | 2024-06-04 | 2025-02-13 | euvd | An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via …An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file. |
CVE-2025-63216 | CRITICAL | 10.0 | 0.00743 | 40.26 | No | No | 2025-11-18 | 2025-11-19 | euvd | The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers …The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices. |
CVE-2026-11420 | CRITICAL | 10.0 | 0.00709 | 40.25 | No | No | 2026-06-05 | 2026-06-05 | euvd, nvd | Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise Server allow an unauthenticated network at…Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise Server allow an unauthenticated network attacker to write arbitrary files to any writable location on the server filesystem and to read package archive files from the server. No authentication, session, or credentials are required.
Because content-controlled files can be written to web-accessible directories, or used to overwrite application binaries or configuration files, exploitation can be escalated to remote code execution in the context of the service account, and can disclose deployment package contents. Altium 365 cloud deployments are not affected, as the Network Installation Service is not part of the cloud offering. |
CVE-2022-44621 | CRITICAL | 9.8 | 0.0299 | 40.25 | No | No | 2022-12-30 | 2025-04-11 | euvd | Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request.Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request. |
CVE-2021-23390 | CRITICAL | 9.8 | 0.02987 | 40.25 | No | No | 2021-07-12 | 2024-09-17 | euvd | The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions. |
CVE-2020-11011 | CRITICAL | 9.9 | 0.0187 | 40.25 | No | No | 2020-04-22 | 2024-08-04 | euvd | In Phproject before version 1.7.8, there's a vulnerability which allows users with access to file uploads to execute arbitrary code. This is…In Phproject before version 1.7.8, there's a vulnerability which allows users with access to file uploads to execute arbitrary code. This is patched in version 1.7.8. |
CVE-2024-24830 | CRITICAL | 10.0 | 0.00716 | 40.25 | No | No | 2024-02-08 | 2025-08-27 | euvd | OpenObserve is a observability platform built specifically for logs, metrics, traces, analytics, designed to work at petabyte scale. A vulne…OpenObserve is a observability platform built specifically for logs, metrics, traces, analytics, designed to work at petabyte scale. A vulnerability has been identified in the "/api/{org_id}/users" endpoint. This vulnerability allows any authenticated regular user ('member') to add new users with elevated privileges, including the 'root' role, to an organization. This issue circumvents the intended security controls for role assignments. The vulnerability resides in the user creation process, where the payload does not validate the user roles. A regular user can manipulate the payload to assign root-level privileges. This vulnerability leads to Unauthorized Privilege Escalation and significantly compromises the application's role-based access control system. It allows unauthorized control over application resources and poses a risk to data security. All users, particularly those in administrative roles, are impacted. This issue has been addressed in release version 0.8.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. |
CVE-2024-39251 | CRITICAL | 10.0 | 0.00724 | 40.25 | No | No | 2024-07-01 | 2025-03-13 | euvd | An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitive…An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitive information, execute arbitrary code, or escalate privileges via sending crafted IOCTL requests. |
CVE-2026-32186 | CRITICAL | 10.0 | 0.00705 | 40.25 | No | No | 2026-04-03 | 2026-08-14 | euvd, nvd | Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network. |
CVE-2025-70974 | CRITICAL | 10.0 | 0.00702 | 40.25 | No | No | 2026-01-09 | 2026-07-15 | euvd | Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java…Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class, there may be calls to certain public methods of that class. Depending on the behavior of those methods, there may be JNDI injection with an attacker-supplied payload located elsewhere in that JSON document. This was exploited in the wild in 2023 through 2025. NOTE: this issue exists because of an incomplete fix for CVE-2017-18349. Also, a later bypass is covered by CVE-2022-25845. |
CVE-2024-32599 | CRITICAL | 10.0 | 0.00701 | 40.25 | No | No | 2024-04-18 | 2026-04-28 | euvd | Improper Control of Generation of Code ('Code Injection') vulnerability in Deepak anand WP Dummy Content Generator wp-dummy-content-generato…Improper Control of Generation of Code ('Code Injection') vulnerability in Deepak anand WP Dummy Content Generator wp-dummy-content-generator.This issue affects WP Dummy Content Generator: from n/a through <= 3.2.1. |
CVE-2026-33107 | CRITICAL | 10.0 | 0.00705 | 40.25 | No | No | 2026-04-02 | 2026-08-14 | euvd, nvd | Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network. |
CVE-2020-28464 | CRITICAL | 9.8 | 0.02996 | 40.25 | No | No | 2021-01-04 | 2024-09-17 | euvd | This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machi…This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine. |
CVE-2026-58231 | CRITICAL | 10.0 | 0.00726 | 40.25 | No | No | 2026-08-11 | 2026-08-12 | euvd, nvd | SAP Commerce Cloud allows an unauthenticated
attacker to abuse a default authentication client and submit specially crafted
input to certain…SAP Commerce Cloud allows an unauthenticated
attacker to abuse a default authentication client and submit specially crafted
input to certain functions lacking sufficient validation. Successful
exploitation could enable arbitrary code execution and compromise internal
components, resulting in high impact on confidentiality, integrity, and
availability of the application. |
CVE-2022-25767 | CRITICAL | 9.8 | 0.02993 | 40.25 | No | No | 2022-05-01 | 2024-09-16 | euvd | All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database ser…All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets. |
CVE-2025-64093 | CRITICAL | 10.0 | 0.00724 | 40.25 | No | No | 2026-01-09 | 2026-01-09 | euvd | Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary commands into the hostname of the device.Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary commands into the hostname of the device. |
CVE-2025-63224 | CRITICAL | 10.0 | 0.00726 | 40.25 | No | No | 2025-11-19 | 2025-11-19 | euvd | The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers c…The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices. |
CVE-2026-46840 | CRITICAL | 10.0 | 0.00725 | 40.25 | No | No | 2026-05-28 | 2026-05-29 | euvd, nvd | Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easil…Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data Services. While the vulnerability is in Oracle REST Data Services, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle REST Data Services. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). |
CVE-2026-44181 | CRITICAL | 10.0 | 0.00701 | 40.25 | No | No | 2026-07-16 | 2026-07-17 | euvd, nvd | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Sw…Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. In versions 2.0.0rc2 and above, prior to 3.3.0, the environment variables (KERNEL_XXX) used during the rendering of the Kubernetes manifest are vulnerable to Server Side Template Injection (SSTI). By including Jinja2 template expressions it is possible to execution Python code and OS Commands in the Enterprise Gateway service. The code can use or steal the Kubernetes service account token, which can steal Kubernetes secrets and be used to fully compromise the Kubernetes cluster by scheduling a privileged pod or a pod with a hostPath volume mount. This issue has been fixed in version 3.3.0. |
CVE-2021-43928 | CRITICAL | 9.9 | 0.01865 | 40.25 | No | No | 2022-02-07 | 2024-09-17 | euvd | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in mail sending and receiving compo…Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in mail sending and receiving component in Synology Mail Station before 20211105-10315 allows remote authenticated users to execute arbitrary commands via unspecified vectors. |
CVE-2019-15260 | CRITICAL | 9.8 | 0.02994 | 40.25 | No | No | 2019-10-16 | 2024-11-19 | euvd | A vulnerability in Cisco Aironet Access Points (APs) Software could allow an unauthenticated, remote attacker to gain unauthorized access to…A vulnerability in Cisco Aironet Access Points (APs) Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The vulnerability is due to insufficient access control for certain URLs on an affected device. An attacker could exploit this vulnerability by requesting specific URLs from an affected AP. An exploit could allow the attacker to gain access to the device with elevated privileges. While the attacker would not be granted access to all possible configuration options, it could allow the attacker to view sensitive information and replace some options with values of their choosing, including wireless network configuration. It would also allow the attacker to disable the AP, creating a denial of service (DoS) condition for clients associated with the AP. |
CVE-2018-3876 | CRITICAL | 9.9 | 0.01871 | 40.25 | No | No | 2018-09-21 | 2024-09-16 | euvd | An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ET…An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 64 bytes. An attacker can send an arbitrarily long "bucket" value in order to exploit this vulnerability. |
CVE-2025-30911 | CRITICAL | 9.9 | 0.01867 | 40.25 | No | No | 2025-04-01 | 2026-04-28 | euvd | Improper Control of Generation of Code ('Code Injection') vulnerability in Rometheme RTMKit rometheme-for-elementor allows Command Injection…Improper Control of Generation of Code ('Code Injection') vulnerability in Rometheme RTMKit rometheme-for-elementor allows Command Injection.This issue affects RTMKit: from n/a through <= 1.5.4. |
CVE-2025-59503 | CRITICAL | 10.0 | 0.00716 | 40.25 | No | No | 2025-10-23 | 2026-02-26 | euvd | Server-side request forgery (ssrf) in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network.Server-side request forgery (ssrf) in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network. |
CVE-2023-33190 | CRITICAL | 10.0 | 0.00712 | 40.25 | No | No | 2023-06-29 | 2024-11-06 | euvd | Sealos is an open source cloud operating system distribution based on the Kubernetes kernel. In versions of Sealos prior to 4.2.1-rc4 an imp…Sealos is an open source cloud operating system distribution based on the Kubernetes kernel. In versions of Sealos prior to 4.2.1-rc4 an improper configuration of role based access control (RBAC) permissions resulted in an attacker being able to obtain cluster control permissions, which could control the entire cluster deployed with Sealos, as well as hundreds of pods and other resources within the cluster. This issue has been addressed in version 4.2.1-rc4. Users are advised to upgrade. There are no known workarounds for this vulnerability. |
CVE-2026-42589 | CRITICAL | 9.8 | 0.03013 | 40.25 | No | Yes | 2026-05-14 | 2026-05-14 | euvd, packetstorm | Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg's /forms/pdfengines/metadata/write HTTP endpoint accep…Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg's /forms/pdfengines/metadata/write HTTP endpoint accepts a JSON metadata object and passes its keys directly to ExifTool via the go-exiftool library. No validation is performed on key characters. A \n embedded in a JSON key splits the ExifTool stdin stream into a new argument line, allowing an attacker to inject arbitrary ExifTool flags — including -if, which evaluates Perl expressions. This achieves unauthenticated OS command execution in a single HTTP request. The response is HTTP 200 with a valid PDF, making the attack transparent to basic monitoring. This vulnerability is fixed in 8.31.0. |
CVE-2023-49772 | CRITICAL | 10.0 | 0.00727 | 40.25 | No | No | 2023-12-20 | 2026-04-28 | euvd | Deserialization of Untrusted Data vulnerability in Phpbits Creative Studio Genesis Simple Love.This issue affects Genesis Simple Love: from …Deserialization of Untrusted Data vulnerability in Phpbits Creative Studio Genesis Simple Love.This issue affects Genesis Simple Love: from n/a through 2.0. |
CVE-2020-8974 | CRITICAL | 10.0 | 0.00715 | 40.25 | No | No | 2022-10-17 | 2025-05-13 | euvd | In ZGR TPS200 NG 2.00 firmware version and 1.01 hardware version, the firmware upload process does not perform any type of restriction. This…In ZGR TPS200 NG 2.00 firmware version and 1.01 hardware version, the firmware upload process does not perform any type of restriction. This allows an attacker to modify it and re-upload it via web with malicious modifications, rendering the device unusable. |
CVE-2023-41917 | CRITICAL | 10.0 | 0.00711 | 40.25 | No | No | 2024-07-02 | 2024-08-02 | euvd | Inadequate input validation exposes the system to potential remote code execution (RCE) risks. Attackers can exploit this vulnerability by a…Inadequate input validation exposes the system to potential remote code execution (RCE) risks. Attackers can exploit this vulnerability by appending shell commands to the Speed-Measurement feature, enabling unauthorized code execution. |
CVE-2025-61956 | CRITICAL | 10.0 | 0.00701 | 40.25 | No | No | 2025-11-04 | 2025-11-04 | euvd | Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Atta…Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control (ATC) and pilots. Additionally, manipulated meteorological data could mislead forecasters and ATC, causing inaccurate flight planning. |
CVE-2022-36231 | CRITICAL | 9.8 | 0.03014 | 40.25 | No | No | 2023-02-23 | 2025-03-13 | euvd | pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3.pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3. |
CVE-2023-29522 | CRITICAL | 9.9 | 0.01864 | 40.25 | No | No | 2023-04-18 | 2025-02-06 | euvd | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execu…XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write access to all wiki contents. The attack works by opening a non-existing page with a name crafted to contain a dangerous payload. This issue has been patched in XWiki 14.4.8, 14.10.3 and 15.0RC1. Users are advised to upgrade. There are no known workarounds for this vulnerability. |
CVE-2025-64075 | CRITICAL | 10.0 | 0.00703 | 40.25 | No | No | 2026-02-11 | 2026-02-11 | euvd | A path traversal vulnerability in the check_token function of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows remote attackers to …A path traversal vulnerability in the check_token function of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows remote attackers to bypass authentication and perform administrative actions by supplying a crafted session cookie value. |
CVE-2026-33105 | CRITICAL | 10.0 | 0.0072 | 40.25 | No | No | 2026-04-02 | 2026-08-14 | euvd, nvd | Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network. |
CVE-2024-30224 | CRITICAL | 10.0 | 0.00725 | 40.25 | No | No | 2024-03-28 | 2026-04-28 | euvd | Deserialization of Untrusted Data vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.2.Deserialization of Untrusted Data vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.2. |
CVE-2023-49773 | CRITICAL | 10.0 | 0.00727 | 40.25 | No | No | 2023-12-20 | 2026-04-28 | euvd | Deserialization of Untrusted Data vulnerability in Tim Brattberg BCorp Shortcodes.This issue affects BCorp Shortcodes: from n/a through 0.23…Deserialization of Untrusted Data vulnerability in Tim Brattberg BCorp Shortcodes.This issue affects BCorp Shortcodes: from n/a through 0.23. |
CVE-2026-33054 | CRITICAL | 10.0 | 0.00713 | 40.25 | No | No | 2026-03-20 | 2026-03-20 | euvd | Mesop is a Python-based UI framework that allows users to build web applications. Versions 1.2.2 and below contain a Path Traversal vulnerab…Mesop is a Python-based UI framework that allows users to build web applications. Versions 1.2.2 and below contain a Path Traversal vulnerability that allows any user supplying an untrusted state_token through the UI stream payload to arbitrarily target files on the disk under the standard file-based runtime backend. This can result in application denial of service (via crash loops when reading non-msgpack target files as configurations), or arbitrary file manipulation. This vulnerability heavily exposes systems hosted utilizing FileStateSessionBackend. Unauthorized malicious actors could interact with arbitrary payloads overwriting or explicitly removing underlying service resources natively outside the application bounds. This issue has been fixed in version 1.2.3. |
CVE-2026-62825 | CRITICAL | 10.0 | 0.00708 | 40.25 | No | No | 2026-07-24 | 2026-08-14 | euvd, nvd | Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network. |
CVE-2021-4368 | CRITICAL | 9.9 | 0.01853 | 40.25 | No | No | 2023-06-07 | 2026-04-08 | euvd | The Frontend File Manager plugin for WordPress is vulnerable to Authenticated Settings Change in versions up to, and including, 18.2. This i…The Frontend File Manager plugin for WordPress is vulnerable to Authenticated Settings Change in versions up to, and including, 18.2. This is due to lacking capability checks and a security nonce, all on the wpfm_save_settings AJAX action. This makes it possible for subscriber-level attackers to edit the plugin settings, such as the allowed upload file types. This can lead to remote code execution through other vulnerabilities. |
CVE-2021-33796 | CRITICAL | 10.0 | 0.00713 | 40.25 | No | No | 2023-07-07 | 2024-11-12 | euvd | In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service.In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service. |
CVE-2023-31273 | CRITICAL | 10.0 | 0.00728 | 40.25 | No | No | 2023-11-14 | 2024-08-30 | euvd | Protection mechanism failure in some Intel DCM software before version 5.2 may allow an unauthenticated user to potentially enable escalatio…Protection mechanism failure in some Intel DCM software before version 5.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
CVE-2025-41240 | CRITICAL | 10.0 | 0.00702 | 40.25 | No | No | 2025-07-24 | 2026-02-26 | euvd | Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path (/opt/bitnami/*/secrets) that is located within the web server d…Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path (/opt/bitnami/*/secrets) that is located within the web server document root.
In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets by accessing specific URLs if the application is exposed externally. The issue affects deployments using the default value of usePasswordFiles=true, which mounts secrets as files into the container filesystem. |
CVE-2026-39337 | CRITICAL | 10.0 | 0.00715 | 40.25 | No | No | 2026-04-07 | 2026-04-07 | euvd | ChurchCRM is an open-source church management system. Prior to 7.1.0, critical pre-authentication remote code execution vulnerability in Chu…ChurchCRM is an open-source church management system. Prior to 7.1.0, critical pre-authentication remote code execution vulnerability in ChurchCRM's setup wizard allows unauthenticated attackers to inject arbitrary PHP code during the initial installation process, leading to complete server compromise. The "$dbPassword" variable is not sanitized. This vulnerability exists due to an incomplete fix for CVE-2025-62521. This vulnerability is fixed in 7.1.0. |