CVE-2023-27837 | CRITICAL | 9.8 | 0.0241 | 40.04 | No | No | 2023-06-13 | 2025-01-03 | euvd | TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the key parameter in the functi…TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the key parameter in the function sub_ 40A774. |
CVE-2024-6265 | CRITICAL | 9.8 | 0.024 | 40.04 | No | Yes | 2024-06-29 | 2026-04-08 | euvd, packetstorm | The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin for WordPress is vulnera…The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘uwp_sort_by’ parameter in all versions up to, and including, 1.2.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. |
CVE-2022-32224 | CRITICAL | 9.8 | 0.02386 | 40.04 | No | No | 2022-12-05 | 2026-05-11 | euvd | A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2…A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (via means like SQL injection), the ability to escalate to an RCE. |
CVE-2023-36434 | CRITICAL | 9.8 | 0.02389 | 40.04 | No | No | 2023-10-10 | 2025-04-14 | euvd | Windows IIS Server Elevation of Privilege VulnerabilityWindows IIS Server Elevation of Privilege Vulnerability |
CVE-2024-25693 | CRITICAL | 9.9 | 0.01265 | 40.04 | No | No | 2024-04-04 | 2024-08-01 | euvd | There is a path traversal in Esri Portal for ArcGIS versions <= 11.2. Successful exploitation may allow a remote, authenticated attacker to…There is a path traversal in Esri Portal for ArcGIS versions <= 11.2. Successful exploitation may allow a remote, authenticated attacker to traverse the file system to access files or execute code outside of the intended directory. |
CVE-2018-2424 | CRITICAL | 9.8 | 0.02396 | 40.04 | No | No | 2018-06-12 | 2024-08-05 | euvd | SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being ad…SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that could steal user information. Software components affected are: SAP Hana Database 1.00, 2.00; SAP UI5 1.00; SAP UI5 (Java) 7.30, 7.31, 7.40, 7,50; SAP UI 7.40, 7.50, 7.51, 7.52, and version 2.0 of SAP UI for SAP NetWeaver 7.00 |
CVE-2021-35963 | CRITICAL | 9.8 | 0.0241 | 40.04 | No | No | 2021-07-19 | 2024-09-17 | euvd | The specific parameter of upload function of the Orca HCM digital learning platform does not filter file format, which allows remote unauthe…The specific parameter of upload function of the Orca HCM digital learning platform does not filter file format, which allows remote unauthenticated attackers to upload files containing malicious script to execute RCE attacks. |
CVE-2017-12895 | CRITICAL | 9.8 | 0.02389 | 40.04 | No | No | 2017-09-14 | 2025-12-04 | euvd | The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print(). |
CVE-2023-49437 | CRITICAL | 9.8 | 0.02411 | 40.04 | No | No | 2023-12-07 | 2025-05-28 | euvd | Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlLis…Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList. |
CVE-2021-38176 | CRITICAL | 9.9 | 0.01268 | 40.04 | No | No | 2021-09-14 | 2024-08-04 | euvd | Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in…Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could completely compromise confidentiality, integrity, and availability of the system. |
CVE-2026-0072 | CRITICAL | 10.0 | 0.00122 | 40.04 | No | No | 2026-06-01 | 2026-06-01 | euvd, nvd | In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check. This could lead …In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. |
CVE-2017-12893 | CRITICAL | 9.8 | 0.02389 | 40.04 | No | No | 2017-09-14 | 2025-12-04 | euvd | The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len(). |
CVE-2017-12996 | CRITICAL | 9.8 | 0.02389 | 40.04 | No | No | 2017-09-14 | 2025-12-04 | euvd | The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print(). |
CVE-2022-41934 | CRITICAL | 9.9 | 0.01261 | 40.04 | No | No | 2022-11-23 | 2025-04-22 | euvd | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights on common…XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights on commonly accessible documents including the menu macro can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation due to improper escaping of the macro content and parameters of the menu macro. The problem has been patched in XWiki 14.6RC1, 13.10.8 and 14.4.3. The patch (commit `2fc20891`) for the document `Menu.MenuMacro` can be manually applied or a XAR archive of a patched version can be imported. The menu macro was basically unchanged since XWiki 11.6 so on XWiki 11.6 or later the patch for version of 13.10.8 (commit `59ccca24a`) can most likely be applied, on XWiki version 14.0 and later the versions in XWiki 14.6 and 14.4.3 should be appropriate. |
CVE-2017-13015 | CRITICAL | 9.8 | 0.02389 | 40.04 | No | No | 2017-09-14 | 2025-12-04 | euvd | The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print(). |
CVE-2017-12995 | CRITICAL | 9.8 | 0.02406 | 40.04 | No | No | 2017-09-14 | 2025-12-04 | euvd | The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print(). |
CVE-2017-12901 | CRITICAL | 9.8 | 0.02389 | 40.04 | No | No | 2017-09-14 | 2025-12-04 | euvd | The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print(). |
CVE-2017-13001 | CRITICAL | 9.8 | 0.02389 | 40.04 | No | No | 2017-09-14 | 2025-12-04 | euvd | The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh(). |
CVE-2017-13017 | CRITICAL | 9.8 | 0.02389 | 40.04 | No | No | 2017-09-14 | 2025-12-04 | euvd | The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print(). |
CVE-2022-24768 | CRITICAL | 9.9 | 0.0125 | 40.04 | No | No | 2022-03-23 | 2025-04-23 | euvd | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All unpatched versions of Argo CD starting with 1.0.0 are vulnerab…Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All unpatched versions of Argo CD starting with 1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to admin-level. Versions starting with 0.8.0 and 0.5.0 contain limited versions of this issue. To perform exploits, an authorized Argo CD user must have push access to an Application's source git or Helm repository or `sync` and `override` access to an Application. Once a user has that access, different exploitation levels are possible depending on their other RBAC privileges. A patch for this vulnerability has been released in Argo CD versions 2.3.2, 2.2.8, and 2.1.14. Some mitigation measures are available but do not serve as a substitute for upgrading. To avoid privilege escalation, limit who has push access to Application source repositories or `sync` + `override` access to Applications; and limit which repositories are available in projects where users have `update` access to Applications. To avoid unauthorized resource inspection/tampering, limit who has `delete`, `get`, or `action` access to Applications. |
CVE-2023-40493 | CRITICAL | 9.8 | 0.02388 | 40.04 | No | No | 2024-05-03 | 2024-09-18 | euvd | LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to ex…LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the implementation of the copySessionFolder command. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
. Was ZDI-CAN-19920. |
CVE-2020-9408 | CRITICAL | 9.9 | 0.01268 | 40.04 | No | No | 2020-03-11 | 2024-09-16 | euvd | The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server cont…The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker with write permissions to the Spotfire Library, but not "Script Author" group permission, to modify attributes of files and objects saved to the library such that the system treats them as trusted. This could allow an attacker to cause the Spotfire Web Player, Analyst clients, and TERR Service into executing arbitrary code with the privileges of the system account that started those processes. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions 10.8.0 and below and TIBCO Spotfire Server: versions 7.11.9 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.3.0, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5, and 10.3.6, versions 10.4.0, 10.5.0, 10.6.0, 10.6.1, 10.7.0, and 10.8.0. |
CVE-2020-4854 | CRITICAL | 9.8 | 0.02401 | 40.04 | No | No | 2020-11-23 | 2024-09-16 | euvd | IBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for …IBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 190454. |
CVE-2026-44523 | CRITICAL | 10.0 | 0.00124 | 40.04 | No | Yes | 2026-05-14 | 2026-05-15 | euvd, packetstorm | Note Mark is an open-source note-taking application. Prior to 0.19.4, no minimum length or entropy is enforced on the JWT_SECRET configurati…Note Mark is an open-source note-taking application. Prior to 0.19.4, no minimum length or entropy is enforced on the JWT_SECRET configuration value. The application accepts any base64-decodable secret regardless of size, including secrets as short as 1 byte. This vulnerability is fixed in 0.19.4. |
CVE-2022-2471 | CRITICAL | 9.9 | 0.01268 | 40.04 | No | No | 2022-09-15 | 2024-09-16 | euvd | Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB…Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to execute remote code on the device. This issue affects: EZVIZ CS-CV248 versions prior to 5.2.3 build 220725. EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428. EZVIZ CS-DB1C-A0-1E2W2FR versions prior to 5.3.0 build 220802. EZVIZ CS-C6N-B0-1G2WF versions prior to 5.3.0 build 220712. EZVIZ CS-C3W-A0-3H4WFRL versions prior to 5.3.5 build 220723. |
CVE-2026-50517 | CRITICAL | 9.9 | 0.01254 | 40.04 | No | No | 2026-07-24 | 2026-08-14 | euvd, nvd | Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network. |
CVE-2017-12992 | CRITICAL | 9.8 | 0.02389 | 40.04 | No | No | 2017-09-14 | 2025-12-04 | euvd | The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print(). |
CVE-2024-37091 | CRITICAL | 9.9 | 0.01243 | 40.04 | No | No | 2024-06-24 | 2026-04-28 | euvd | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in StylemixThemes Consulting Elementor Wid…Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in StylemixThemes Consulting Elementor Widgets, StylemixThemes Masterstudy Elementor Widgets allows OS Command Injection.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0; Masterstudy Elementor Widgets: from n/a through 1.2.2. |
CVE-2021-35965 | CRITICAL | 9.8 | 0.02378 | 40.03 | No | No | 2021-07-19 | 2024-09-17 | euvd | The Orca HCM digital learning platform uses a weak factory default administrator password, which is hard-coded in the source code of the web…The Orca HCM digital learning platform uses a weak factory default administrator password, which is hard-coded in the source code of the webpage in plain text, thus remote attackers can obtain administrator’s privilege without logging in. |
CVE-2024-39714 | CRITICAL | 9.9 | 0.01234 | 40.03 | No | No | 2024-09-07 | 2024-09-09 | euvd | A code injection vulnerability that permits a low-privileged user to upload arbitrary files to the server, leading to remote code execution …A code injection vulnerability that permits a low-privileged user to upload arbitrary files to the server, leading to remote code execution on VSPC server. |
CVE-2021-36088 | CRITICAL | 9.8 | 0.02384 | 40.03 | No | No | 2021-07-01 | 2024-08-04 | euvd | Fluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_parser_do).Fluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_parser_do). |
CVE-2023-3215 | HIGH | 8.8 | 0.13813 | 40.03 | No | No | 2023-06-13 | 2025-05-05 | euvd | Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a cra…Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-46364 | CRITICAL | 9.8 | 0.02371 | 40.03 | No | No | 2022-12-13 | 2025-04-22 | euvd | A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows …A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. |
CVE-2024-33789 | CRITICAL | 9.8 | 0.02383 | 40.03 | No | No | 2024-05-03 | 2024-08-02 | euvd | Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint.Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint. |
CVE-2022-2073 | CRITICAL | 9.1 | 0.10385 | 40.03 | No | No | 2022-06-29 | 2024-08-03 | euvd | Code Injection in GitHub repository getgrav/grav prior to 1.7.34.Code Injection in GitHub repository getgrav/grav prior to 1.7.34. |
CVE-2024-38944 | CRITICAL | 9.8 | 0.02368 | 40.03 | No | No | 2024-07-22 | 2024-08-02 | euvd | An issue in Intelight X-1L Traffic controller Maxtime v.1.9.6 allows a remote attacker to execute arbitrary code via the /cgi-bin/generateFo…An issue in Intelight X-1L Traffic controller Maxtime v.1.9.6 allows a remote attacker to execute arbitrary code via the /cgi-bin/generateForm.cgi?formID=142 component. |
CVE-2019-5066 | CRITICAL | 9.8 | 0.02375 | 40.03 | No | No | 2019-09-18 | 2024-08-04 | euvd | An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++. A specially c…An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can cause a dangling heap pointer, resulting in a use-after-free condition. To trigger this vulnerability, a specifically crafted PDF document needs to be processed by the target application. |
CVE-2021-40358 | CRITICAL | 9.9 | 0.01233 | 40.03 | No | No | 2021-11-09 | 2024-08-04 | euvd | A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V…A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 5). Legitimate file operations on the web server of the affected systems do not properly neutralize special elements within the pathname. An attacker could then cause the pathname to resolve to a location outside of the restricted directory on the server and read, write or delete unexpected critical files. |
CVE-2024-50483 | CRITICAL | 9.8 | 0.02366 | 40.03 | No | No | 2024-10-28 | 2026-05-11 | euvd | Authorization Bypass Through User-Controlled Key vulnerability in Tareq Hasan Meetup meetup allows Privilege Escalation.This issue affects M…Authorization Bypass Through User-Controlled Key vulnerability in Tareq Hasan Meetup meetup allows Privilege Escalation.This issue affects Meetup: from n/a through <= 0.1. |
CVE-2023-22741 | CRITICAL | 9.8 | 0.0238 | 40.03 | No | No | 2023-01-19 | 2025-03-10 | euvd | Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. In affected versions Sofia-SIP **lacks bo…Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. In affected versions Sofia-SIP **lacks both message length and attributes length checks** when it handles STUN packets, leading to controllable heap-over-flow. For example, in stun_parse_attribute(), after we get the attribute's type and length value, the length will be used directly to copy from the heap, regardless of the message's left size. Since network users control the overflowed length, and the data is written to heap chunks later, attackers may achieve remote code execution by heap grooming or other exploitation methods. The bug was introduced 16 years ago in sofia-sip 1.12.4 (plus some patches through 12/21/2006) to in tree libs with git-svn-id: http://svn.freeswitch.org/svn/freeswitch/trunk@3774 d0543943-73ff-0310-b7d9-9358b9ac24b2. Users are advised to upgrade. There are no known workarounds for this vulnerability. |
CVE-2023-49093 | CRITICAL | 9.8 | 0.02378 | 40.03 | No | No | 2023-12-04 | 2024-10-10 | euvd | HtmlUnit is a GUI-less browser for Java programs. HtmlUnit is vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker…HtmlUnit is a GUI-less browser for Java programs. HtmlUnit is vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage. This vulnerability has been patched in version 3.9.0 |
CVE-2023-29805 | CRITICAL | 9.8 | 0.0236 | 40.03 | No | No | 2023-04-14 | 2025-02-06 | euvd | WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the pro_stor_canceltrans_handler_part_19 function.WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the pro_stor_canceltrans_handler_part_19 function. |
CVE-2024-27280 | CRITICAL | 9.8 | 0.02364 | 40.03 | No | No | 2024-05-08 | 2025-11-04 | euvd | A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte …A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value. 3.0.3 is the main fixed version; however, for Ruby 3.0 users, a fixed version is stringio 3.0.1.1, and for Ruby 3.1 users, a fixed version is stringio 3.0.1.2. |
CVE-2018-6333 | CRITICAL | 9.8 | 0.02332 | 40.02 | No | No | 2018-12-31 | 2025-05-06 | euvd | The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malici…The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This issue affected Nuclide prior to v0.290.0. |
CVE-2021-25315 | CRITICAL | 9.8 | 0.02333 | 40.02 | No | No | 2021-03-03 | 2024-09-16 | euvd | CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to …CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. |
CVE-2022-36084 | CRITICAL | 9.9 | 0.012 | 40.02 | No | No | 2022-09-08 | 2025-04-23 | euvd | cruddl is software for creating a GraphQL API for a database, using the GraphQL SDL to model a schema. If cruddl starting with version 1.1.0…cruddl is software for creating a GraphQL API for a database, using the GraphQL SDL to model a schema. If cruddl starting with version 1.1.0 and prior to versions 2.7.0 and 3.0.2 is used to generate a schema that uses `@flexSearchFulltext`, users of that schema may be able to inject arbitrary AQL queries that will be forwarded to and executed by ArangoDB. Schemas that do not use `@flexSearchFulltext` are not affected. The attacker needs to have `READ` permission to at least one root entity type that has `@flexSearchFulltext` enabled. The issue has been fixed in version 3.0.2 and in version 2.7.0 of cruddl. As a workaround, users can temporarily remove `@flexSearchFulltext` from their schemas. |
CVE-2019-25441 | CRITICAL | 9.3 | 0.08054 | 40.02 | No | No | 2026-02-20 | 2026-04-07 | euvd | thesystem 1.0 contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submi…thesystem 1.0 contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the run_command endpoint. Attackers can send POST requests with shell commands in the command parameter to execute arbitrary code on the server without authentication. |
CVE-2024-49653 | CRITICAL | 9.9 | 0.01186 | 40.02 | No | No | 2024-10-23 | 2026-05-12 | euvd | Unrestricted Upload of File with Dangerous Type vulnerability in james-eggers Portfolleo portfolleo allows Upload a Web Shell to a Web Serve…Unrestricted Upload of File with Dangerous Type vulnerability in james-eggers Portfolleo portfolleo allows Upload a Web Shell to a Web Server.This issue affects Portfolleo: from n/a through <= 1.2. |
CVE-2026-50748 | CRITICAL | 9.9 | 0.01207 | 40.02 | No | No | 2026-07-02 | 2026-07-02 | euvd | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acce…A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device. |
CVE-2023-44411 | CRITICAL | 9.8 | 0.02351 | 40.02 | No | No | 2024-05-03 | 2024-09-18 | euvd | D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attacke…D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the InstallApplication class. The class contains a hard-coded password for the remotely reachable database. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-19553. |