CVE-2020-7722 | CRITICAL | 9.8 | 0.01916 | 39.87 | No | No | 2020-09-01 | 2024-09-16 | euvd | All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function.All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function. |
CVE-2023-24276 | CRITICAL | 9.8 | 0.0192 | 39.87 | No | No | 2023-02-06 | 2025-03-25 | euvd | TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/del…TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules. |
CVE-2023-25915 | CRITICAL | 9.9 | 0.00777 | 39.87 | No | No | 2023-08-21 | 2025-01-09 | euvd | Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system.Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system. |
CVE-2020-7723 | CRITICAL | 9.8 | 0.01916 | 39.87 | No | No | 2020-09-01 | 2024-09-16 | euvd | All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function.All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function. |
CVE-2017-20149 | CRITICAL | 9.8 | 0.01919 | 39.87 | No | No | 2022-10-15 | 2025-05-14 | euvd | The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote an…The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote and unauthenticated user can trigger the vulnerability by sending a crafted HTTP request. An attacker can use this vulnerability to execute arbitrary code on the affected system, as exploited in the wild in mid-2017 and later. |
CVE-2020-7713 | CRITICAL | 9.8 | 0.01916 | 39.87 | No | No | 2020-09-01 | 2024-09-16 | euvd | All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor.All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor. |
CVE-2025-27429 | CRITICAL | 9.9 | 0.00775 | 39.87 | No | No | 2025-04-08 | 2026-02-26 | euvd | SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the…SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system. |
CVE-2023-23970 | CRITICAL | 9.9 | 0.00785 | 39.87 | No | No | 2023-12-20 | 2026-04-28 | euvd | Unrestricted Upload of File with Dangerous Type vulnerability in WooRockets Corsa.This issue affects Corsa: from n/a through 1.5.Unrestricted Upload of File with Dangerous Type vulnerability in WooRockets Corsa.This issue affects Corsa: from n/a through 1.5. |
CVE-2024-34833 | CRITICAL | 9.8 | 0.01923 | 39.87 | No | No | 2024-06-17 | 2024-08-05 | euvd | Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "save_settings" page. An unauthe…Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "save_settings" page. An unauthenticated attacker can leverage this functionality to upload a malicious PHP file instead. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as the user running the web server. |
CVE-2023-26978 | CRITICAL | 9.8 | 0.0192 | 39.87 | No | No | 2023-04-07 | 2025-02-12 | euvd | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting…TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIeCfg. |
CVE-2023-26848 | CRITICAL | 9.8 | 0.0192 | 39.87 | No | No | 2023-04-07 | 2025-02-12 | euvd | TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStat…TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules. |
CVE-2021-32533 | CRITICAL | 9.8 | 0.01924 | 39.87 | No | No | 2021-07-07 | 2024-09-16 | euvd | The QSAN SANOS setting page does not filter special parameters. Remote attackers can use this vulnerability to inject and execute arbitrary …The QSAN SANOS setting page does not filter special parameters. Remote attackers can use this vulnerability to inject and execute arbitrary commands without permissions. The referred vulnerability has been solved with the updated version of QSAN SANOS v2.1.0. |
CVE-2024-55875 | CRITICAL | 9.8 | 0.01918 | 39.87 | No | No | 2024-12-12 | 2026-06-09 | euvd | http4k is a functional toolkit for Kotlin HTTP applications. Prior to version 6.50.0.0, there is a potential XXE (XML External Entity Inject…http4k is a functional toolkit for Kotlin HTTP applications. Prior to version 6.50.0.0, there is a potential XXE (XML External Entity Injection) vulnerability when http4k handling malicious XML contents within requests, which might allow attackers to read local sensitive information on server, trigger Server-side Request Forgery and even execute code under some circumstances. The original fix shipped in v5.41.0.0 / v4.50.0.0 closed the documented external-entity attack class (SSRF, local-file disclosure, code execution) by setting `ACCESS_EXTERNAL_DTD=""`, `ACCESS_EXTERNAL_SCHEMA=""`, and `isExpandEntityReferences=false` on the default `DocumentBuilderFactory`. A residual gap remained: the parser still accepted documents containing `<!DOCTYPE>` declarations even though external entity resolution was blocked. This left open billion-laughs-style internal entity expansion DoS attacks against any application using `Body.xml()` or `Document.asXmlDocument()` on untrusted XML. v6.50.0.0 closes this residual by adding `disallow-doctype-decl=true` and `FEATURE_SECURE_PROCESSING=true` to `defaultXmlParsingConfig`. Any document containing a `<!DOCTYPE>` is now rejected at parse time. |
CVE-2023-24138 | CRITICAL | 9.8 | 0.0192 | 39.87 | No | No | 2023-02-03 | 2025-03-25 | euvd | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the host_time parameter in the NTPSyncWithHost …TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the host_time parameter in the NTPSyncWithHost function. |
CVE-2026-5059 | CRITICAL | 9.8 | 0.01908 | 39.87 | No | No | 2026-04-11 | 2026-04-13 | euvd | aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar…aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the handling of the allowed commands list. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the MCP server. Was ZDI-CAN-27969. |
CVE-2024-51132 | CRITICAL | 9.8 | 0.01904 | 39.87 | No | No | 2024-11-05 | 2024-11-06 | euvd | An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary …An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities. |
CVE-2020-7700 | CRITICAL | 9.8 | 0.01916 | 39.87 | No | No | 2020-08-14 | 2024-09-16 | euvd | All versions of phpjs are vulnerable to Prototype Pollution via parse_str.All versions of phpjs are vulnerable to Prototype Pollution via parse_str. |
CVE-2020-7724 | CRITICAL | 9.8 | 0.01916 | 39.87 | No | No | 2020-09-01 | 2024-09-16 | euvd | All versions of package tiny-conf are vulnerable to Prototype Pollution via the set function.All versions of package tiny-conf are vulnerable to Prototype Pollution via the set function. |
CVE-2023-24236 | CRITICAL | 9.8 | 0.0192 | 39.87 | No | No | 2023-02-16 | 2025-03-18 | euvd | TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting/de…TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDhcpRules. |
CVE-2023-22651 | CRITICAL | 9.9 | 0.00779 | 39.87 | No | No | 2023-05-04 | 2025-01-29 | euvd | Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the update logic of Rancher's admissio…Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the update logic of Rancher's admission Webhook may lead to
the misconfiguration of the Webhook. This component enforces validation
rules and security checks before resources are admitted into the
Kubernetes cluster.
The issue only affects users that upgrade from 2.6.x or 2.7.x to 2.7.2. Users that did a fresh install of 2.7.2 (and did not follow an upgrade path) are not affected. |
CVE-2024-31822 | CRITICAL | 9.8 | 0.01919 | 39.87 | No | No | 2024-04-29 | 2024-08-02 | euvd | An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary…An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the saveLanguageFiles method of the Languages.php component. |
CVE-2024-4197 | CRITICAL | 9.9 | 0.00777 | 39.87 | No | No | 2024-06-25 | 2024-08-01 | euvd | An unrestricted file upload vulnerability in Avaya IP Office was discovered that could allow remote command or code execution via the One-X …An unrestricted file upload vulnerability in Avaya IP Office was discovered that could allow remote command or code execution via the One-X component. Affected versions include all versions prior to 11.1.3.1. |
CVE-2026-47647 | CRITICAL | 9.9 | 0.00778 | 39.87 | No | No | 2026-06-18 | 2026-08-14 | cnvd, euvd | Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network. |
CVE-2022-43019 | CRITICAL | 9.8 | 0.01921 | 39.87 | No | No | 2022-10-19 | 2025-09-15 | euvd | OpenCATS v0.9.6 was discovered to contain a remote code execution (RCE) vulnerability via the getDataGridPager's ajax functionality.OpenCATS v0.9.6 was discovered to contain a remote code execution (RCE) vulnerability via the getDataGridPager's ajax functionality. |
CVE-2026-26142 | CRITICAL | 9.8 | 0.01914 | 39.87 | No | No | 2026-06-09 | 2026-08-14 | euvd, nvd | Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network. |
CVE-2020-7727 | CRITICAL | 9.8 | 0.01916 | 39.87 | No | No | 2020-09-01 | 2024-09-16 | euvd | All versions of package gedi are vulnerable to Prototype Pollution via the set function.All versions of package gedi are vulnerable to Prototype Pollution via the set function. |
CVE-2024-31820 | CRITICAL | 9.8 | 0.01919 | 39.87 | No | No | 2024-04-29 | 2024-08-02 | euvd | An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary…An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the getLangFolderForEdit method of the Languages.php component. |
CVE-2020-13572 | CRITICAL | 9.8 | 0.01917 | 39.87 | No | No | 2021-02-10 | 2024-08-04 | euvd | A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8. A specially crafte…A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8. A specially crafted malformed file can trigger a heap overflow, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. |
CVE-2024-45694 | CRITICAL | 9.8 | 0.0191 | 39.87 | No | No | 2024-09-16 | 2024-09-16 | euvd | The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthentica…The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device. |
CVE-2022-47853 | CRITICAL | 9.8 | 0.0192 | 39.87 | No | No | 2023-01-17 | 2025-04-04 | euvd | TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service. An attacker can obtain a stabl…TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service. An attacker can obtain a stable root shell through a specially constructed payload. |
CVE-2020-7718 | CRITICAL | 9.8 | 0.01916 | 39.87 | No | No | 2020-09-01 | 2024-09-16 | euvd | All versions of package gammautils are vulnerable to Prototype Pollution via the deepSet and deepMerge functions.All versions of package gammautils are vulnerable to Prototype Pollution via the deepSet and deepMerge functions. |
CVE-2023-46226 | CRITICAL | 9.8 | 0.01917 | 39.87 | No | No | 2024-01-15 | 2025-06-20 | euvd | Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2.
Users are recommended to upg…Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2.
Users are recommended to upgrade to version 1.3.0, which fixes the issue. |
CVE-2025-21307 | CRITICAL | 9.8 | 0.01909 | 39.87 | No | No | 2025-01-14 | 2026-06-09 | euvd | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityWindows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
CVE-2025-34513 | CRITICAL | 9.3 | 0.07616 | 39.87 | No | No | 2025-10-16 | 2026-05-15 | euvd | Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an OS command injection vulnerability in mbus_build_from_csv.php that allows …Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an OS command injection vulnerability in mbus_build_from_csv.php that allows an unauthenticated attacker to execute arbitrary code. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet. |
CVE-2023-27232 | CRITICAL | 9.8 | 0.0192 | 39.87 | No | No | 2023-03-28 | 2025-02-18 | euvd | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy parameter at /setting…TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy parameter at /setting/setWanIeCfg. |
CVE-2023-24160 | CRITICAL | 9.8 | 0.0192 | 39.87 | No | No | 2023-02-14 | 2025-03-20 | euvd | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg fun…TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function. |
CVE-2025-61304 | CRITICAL | 9.8 | 0.01917 | 39.87 | No | No | 2025-11-05 | 2025-11-05 | euvd | OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address.OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address. |
CVE-2025-22912 | CRITICAL | 9.8 | 0.01917 | 39.87 | No | No | 2025-01-16 | 2026-07-07 | euvd | RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept. |
CVE-2025-29384 | CRITICAL | 9.8 | 0.01907 | 39.87 | No | No | 2025-03-14 | 2025-03-19 | euvd | In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to …In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution. |
CVE-2024-31705 | CRITICAL | 9.8 | 0.01883 | 39.86 | No | No | 2024-04-29 | 2025-11-04 | euvd | An issue in Infotel Conseil GLPI v.10.X.X and after allows a remote attacker to execute arbitrary code via the insufficient validation of us…An issue in Infotel Conseil GLPI v.10.X.X and after allows a remote attacker to execute arbitrary code via the insufficient validation of user-supplied input. |
CVE-2024-24707 | CRITICAL | 9.9 | 0.00748 | 39.86 | No | No | 2024-04-03 | 2026-04-28 | euvd | Improper Control of Generation of Code ('Code Injection') vulnerability in Cwicly Builder, SL. Cwicly allows Code Injection.This issue affec…Improper Control of Generation of Code ('Code Injection') vulnerability in Cwicly Builder, SL. Cwicly allows Code Injection.This issue affects Cwicly: from n/a through 1.4.0.2. |
CVE-2024-39924 | HIGH | 8.8 | 0.13328 | 39.86 | No | No | 2024-09-13 | 2025-03-18 | euvd | An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been identified in the authentication and authori…An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been identified in the authentication and authorization process of the endpoint responsible for altering the metadata of an emergency access. It permits an attacker with granted emergency access to escalate their privileges by changing the access level and modifying the wait time. Consequently, the attacker can gain full control over the vault (when only intended to have read access) while bypassing the necessary wait period. |
CVE-2018-11574 | CRITICAL | 9.8 | 0.01899 | 39.86 | No | No | 2018-06-14 | 2025-12-03 | euvd | Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information di…Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass. This implementation is distributed as a patch for PPPD 0.91, and includes the affected eap.c and eap-tls.c files. Configurations that use the `refuse-app` option are unaffected. |
CVE-2024-4547 | CRITICAL | 9.8 | 0.01895 | 39.86 | No | No | 2024-05-06 | 2024-08-01 | euvd | A SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'RecalculateScript' message, wh…A SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'RecalculateScript' message, which is splitted into 4 fields using the '~' character as the separator. An unauthenticated remote attacker can perform SQLi via the fourth field |
CVE-2023-31090 | CRITICAL | 9.9 | 0.00757 | 39.86 | No | No | 2024-04-24 | 2026-04-28 | euvd | Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, …Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Upload a Web Shell to a Web Server.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.60. |
CVE-2021-3878 | CRITICAL | 9.8 | 0.01886 | 39.86 | No | No | 2021-10-15 | 2024-08-03 | euvd | corenlp is vulnerable to Improper Restriction of XML External Entity Referencecorenlp is vulnerable to Improper Restriction of XML External Entity Reference |
CVE-2023-30621 | CRITICAL | 9.8 | 0.01876 | 39.86 | No | No | 2023-04-21 | 2025-02-04 | euvd | Gipsy is a multi-purpose discord bot which aim to be as modular and user-friendly as possible. In versions prior to 1.3 users can run comman…Gipsy is a multi-purpose discord bot which aim to be as modular and user-friendly as possible. In versions prior to 1.3 users can run command on the host machine with sudoer permission. The `!ping` command when provided with an IP or hostname used to run a bash `ping <IP>` without verification that the IP or hostname was legitimate. This command was executed with root permissions and may lead to arbitrary command injection on the host server. Users are advised to upgrade. There are no known workarounds for this vulnerability. |
CVE-2025-46157 | CRITICAL | 9.9 | 0.00741 | 39.86 | No | No | 2025-06-18 | 2026-07-05 | euvd | An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment function in the leave reques…An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment function in the leave request form |
CVE-2023-4994 | CRITICAL | 9.9 | 0.00748 | 39.86 | No | No | 2023-09-16 | 2026-04-08 | euvd | The Allow PHP in Posts and Pages plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.0.4 via the…The Allow PHP in Posts and Pages plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.0.4 via the 'php' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to execute code on the server. |
CVE-2022-38074 | CRITICAL | 9.9 | 0.00731 | 39.86 | No | No | 2023-03-13 | 2026-04-28 | euvd | SQL Injection vulnerability in VeronaLabs WP Statistics plugin <= 13.2.10 versions.SQL Injection vulnerability in VeronaLabs WP Statistics plugin <= 13.2.10 versions. |