CVE-2023-52182 | CRITICAL | 9.9 | 0.00627 | 39.82 | No | No | 2023-12-31 | 2026-04-28 | euvd | Deserialization of Untrusted Data vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder.This issue affects ARI Stream Quiz –…Deserialization of Untrusted Data vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder.This issue affects ARI Stream Quiz – WordPress Quizzes Builder: from n/a through 1.3.0. |
CVE-2021-23594 | CRITICAL | 9.8 | 0.01762 | 39.82 | No | No | 2022-01-07 | 2024-09-17 | euvd | All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector. |
CVE-2021-43361 | CRITICAL | 9.9 | 0.00618 | 39.82 | No | No | 2022-09-29 | 2025-05-20 | euvd | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MedData HBYS allows SQL Injection.This…Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MedData HBYS allows SQL Injection.This issue affects HBYS: from unspecified before 1.1. |
CVE-2025-24230 | CRITICAL | 9.8 | 0.01774 | 39.82 | No | No | 2025-03-31 | 2026-07-08 | euvd | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, ma…An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Playing a malicious audio file may lead to an unexpected app termination. |
CVE-2023-51470 | CRITICAL | 9.9 | 0.00621 | 39.82 | No | No | 2023-12-29 | 2026-04-28 | euvd | Deserialization of Untrusted Data vulnerability in Jacques Malgrange Rencontre – Dating Site.This issue affects Rencontre – Dating Site: fro…Deserialization of Untrusted Data vulnerability in Jacques Malgrange Rencontre – Dating Site.This issue affects Rencontre – Dating Site: from n/a through 3.11.1. |
CVE-2024-2599 | CRITICAL | 9.9 | 0.00623 | 39.82 | No | No | 2024-03-18 | 2024-08-12 | euvd | File upload restriction evasion vulnerability in AMSS++ version 4.31. This vulnerability could allow an authenticated user to potentially ob…File upload restriction evasion vulnerability in AMSS++ version 4.31. This vulnerability could allow an authenticated user to potentially obtain RCE through webshell, compromising the entire infrastructure. |
CVE-2024-31280 | CRITICAL | 9.9 | 0.00625 | 39.82 | No | No | 2024-04-07 | 2026-04-29 | euvd | Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from …Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.5. |
CVE-2023-34385 | CRITICAL | 9.9 | 0.00631 | 39.82 | No | No | 2023-12-20 | 2026-04-28 | euvd | Unrestricted Upload of File with Dangerous Type vulnerability in Akshay Menariya Export Import Menus.This issue affects Export Import Menus:…Unrestricted Upload of File with Dangerous Type vulnerability in Akshay Menariya Export Import Menus.This issue affects Export Import Menus: from n/a through 1.8.0. |
CVE-2023-24949 | HIGH | 7.8 | 0.24622 | 39.82 | No | No | 2023-05-09 | 2025-07-10 | euvd | Windows Kernel Elevation of Privilege VulnerabilityWindows Kernel Elevation of Privilege Vulnerability |
CVE-2026-59115 | CRITICAL | 9.9 | 0.00635 | 39.82 | No | No | 2026-08-06 | 2026-08-14 | euvd, nvd | '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network. |
CVE-2023-52219 | CRITICAL | 9.9 | 0.00621 | 39.82 | No | No | 2024-01-08 | 2026-04-28 | euvd | Deserialization of Untrusted Data vulnerability in Gecka Gecka Terms Thumbnails.This issue affects Gecka Terms Thumbnails: from n/a through …Deserialization of Untrusted Data vulnerability in Gecka Gecka Terms Thumbnails.This issue affects Gecka Terms Thumbnails: from n/a through 1.1. |
CVE-2026-59827 | CRITICAL | 9.9 | 0.00622 | 39.82 | No | Yes | 2026-07-09 | 2026-07-09 | euvd, github, packetstorm | Metabase is an open-source business intelligence and embedded analytics tool. Prior to 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4, Metabase in…Metabase is an open-source business intelligence and embedded analytics tool. Prior to 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4, Metabase instances with an H2 database connection, including the default sample database, deserialize arbitrary Java objects returned in H2 native query result columns of type OTHER without validation, allowing an authenticated user who can run native H2 queries to execute code on the Metabase server. This issue is fixed in versions 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4. |
CVE-2020-3931 | CRITICAL | 9.8 | 0.01766 | 39.82 | No | No | 2020-07-08 | 2024-09-16 | euvd | Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute arbitrary command.Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute arbitrary command. |
CVE-2024-8950 | CRITICAL | 9.9 | 0.00619 | 39.82 | No | No | 2024-12-25 | 2026-06-02 | euvd | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arne Informatics Piramit Automation al…Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection.
This issue affects Piramit Automation: before 27.09.2024. |
CVE-2023-3701 | CRITICAL | 9.9 | 0.00629 | 39.82 | No | No | 2023-10-04 | 2024-09-19 | euvd | Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated…Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files of the cloud disk platform, affecting the integrity and availability of the entire platform. |
CVE-2021-1619 | CRITICAL | 9.8 | 0.01758 | 39.82 | No | No | 2021-09-23 | 2024-11-07 | euvd | A vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS XE Software could allow an unauthenticated,…A vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass NETCONF or RESTCONF authentication and do either of the following: Install, manipulate, or delete the configuration of an affected device Cause memory corruption that results in a denial of service (DoS) on an affected device This vulnerability is due to an uninitialized variable. An attacker could exploit this vulnerability by sending a series of NETCONF or RESTCONF requests to an affected device. A successful exploit could allow the attacker to use NETCONF or RESTCONF to install, manipulate, or delete the configuration of a network device or to corrupt memory on the device, resulting a DoS. |
CVE-2021-1506 | CRITICAL | 9.8 | 0.01764 | 39.82 | No | No | 2021-05-06 | 2024-11-08 | euvd | Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain …Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application. For more information about these vulnerabilities, see the Details section of this advisory. |
CVE-2022-4498 | CRITICAL | 9.8 | 0.01781 | 39.82 | No | No | 2023-01-11 | 2025-11-04 | euvd | In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service c…In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafted packet that causes a heap overflow. This can result in either a DoS (by crashing the httpd process) or an arbitrary code execution. |
CVE-2022-28818 | MEDIUM | 6.1 | 0.44044 | 39.82 | No | No | 2022-05-12 | 2024-09-16 | euvd | ColdFusion versions CF2021U3 (and earlier) and CF2018U13 are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacke…ColdFusion versions CF2021U3 (and earlier) and CF2018U13 are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. |
CVE-2022-37897 | CRITICAL | 9.8 | 0.01767 | 39.82 | No | No | 2022-11-03 | 2025-05-02 | euvd | There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets des…There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system. |
CVE-2023-32462 | CRITICAL | 9.8 | 0.01775 | 39.82 | No | No | 2024-02-15 | 2025-04-24 | euvd | Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remote user authentication…Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remote user authentication. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands and possible system takeover. This is a critical vulnerability as it allows an attacker to cause severe damage. Dell recommends customers to upgrade at the earliest opportunity. |
CVE-2025-24211 | CRITICAL | 9.8 | 0.01774 | 39.82 | No | No | 2025-03-31 | 2026-07-09 | euvd | This issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, …This issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory. |
CVE-2022-48175 | CRITICAL | 9.8 | 0.0174 | 39.81 | No | No | 2023-01-30 | 2025-03-28 | euvd | Rukovoditel v3.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the component /rukovoditel/index.php?module=dash…Rukovoditel v3.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the component /rukovoditel/index.php?module=dashboard/ajax_request. |
CVE-2024-24332 | CRITICAL | 9.8 | 0.0173 | 39.81 | No | No | 2024-01-30 | 2025-05-30 | euvd | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFilte…TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFilterRules function. |
CVE-2022-33175 | CRITICAL | 9.8 | 0.01733 | 39.81 | No | No | 2022-06-13 | 2024-08-03 | euvd | Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 have an insecure permissions setting on the user.toke…Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 have an insecure permissions setting on the user.token field that is accessible to everyone through the /cgi/get_param.cgi HTTP API. This leads to disclosing active session ids of currently logged-in administrators. The session id can then be reused to act as the administrator, allowing reading of the cleartext password, or reconfiguring the device. |
CVE-2026-47392 | CRITICAL | 9.9 | 0.00602 | 39.81 | No | No | 2026-07-21 | 2026-07-21 | euvd, nvd | PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, `execute_…PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, `execute_code()` in `praisonaiagents/tools/python_tools.py` (v1.6.37, subprocess sandbox mode) can be fully bypassed using `print.__self__` to retrieve the real Python `builtins` module, from which `__import__` can be extracted via `vars()` and runtime string construction. This achieves arbitrary OS command execution on the host, completely defeating the sandbox. This is a novel bypass that survives all patches for CVE-2026-39888 (frame traversal), CVE-2026-34938 (str subclass), and CVE-2026-40158 (`type.__getattribute__` trampoline). PraisonAI version 4.6.40 and praisonaiagents version 1.6.40 contain an updated fix. |
CVE-2026-45499 | CRITICAL | 9.9 | 0.00608 | 39.81 | No | No | 2026-07-02 | 2026-08-14 | euvd | Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network.Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network. |
CVE-2020-1615 | CRITICAL | 9.8 | 0.01731 | 39.81 | No | No | 2020-04-08 | 2024-09-16 | euvd | The factory configuration for vMX installations, as shipped, includes default credentials for the root account. Without proper modification …The factory configuration for vMX installations, as shipped, includes default credentials for the root account. Without proper modification of these default credentials by the administrator, an attacker could exploit these credentials and access the vMX instance without authorization. This issue affects Juniper Networks Junos OS: 17.1 versions prior to 17.1R2-S11, 17.1R3-S2 on vMX; 17.2 versions prior to 17.2R3-S3 on vMX; 17.3 versions prior to 17.3R2-S5, 17.3R3-S7 on vMX; 17.4 versions prior to 17.4R2-S9, 17.4R3 on vMX; 18.1 versions prior to 18.1R3-S9 on vMX; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3 on vMX; 18.2X75 versions prior to 18.2X75-D420, 18.2X75-D60 on vMX; 18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3-S1 on vMX; 18.4 versions prior to 18.4R1-S5, 18.4R2-S3, 18.4R3 on vMX; 19.1 versions prior to 19.1R1-S4, 19.1R2, 19.1R3 on vMX; 19.2 versions prior to 19.2R1-S3, 19.2R2 on vMX; 19.3 versions prior to 19.3R1-S1, 19.3R2 on vMX. |
CVE-2023-27746 | CRITICAL | 9.8 | 0.01752 | 39.81 | No | No | 2023-04-13 | 2025-02-07 | euvd | BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force …BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force attack if the WPA2 handshake is intercepted. |
CVE-2023-51417 | CRITICAL | 9.9 | 0.00606 | 39.81 | No | No | 2023-12-29 | 2026-04-28 | euvd | Unrestricted Upload of File with Dangerous Type vulnerability in Joris van Montfort JVM Gutenberg Rich Text Icons.This issue affects JVM Gut…Unrestricted Upload of File with Dangerous Type vulnerability in Joris van Montfort JVM Gutenberg Rich Text Icons.This issue affects JVM Gutenberg Rich Text Icons: from n/a through 1.2.3. |
CVE-2023-51410 | CRITICAL | 9.9 | 0.00606 | 39.81 | No | No | 2023-12-29 | 2026-04-28 | euvd | Unrestricted Upload of File with Dangerous Type vulnerability in WPVibes WP Mail Log.This issue affects WP Mail Log: from n/a through 1.1.2.Unrestricted Upload of File with Dangerous Type vulnerability in WPVibes WP Mail Log.This issue affects WP Mail Log: from n/a through 1.1.2. |
CVE-2023-22748 | CRITICAL | 9.8 | 0.0174 | 39.81 | No | No | 2023-02-28 | 2025-03-07 | euvd | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted p…There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system. |
CVE-2022-40918 | CRITICAL | 9.8 | 0.01753 | 39.81 | No | No | 2022-12-05 | 2025-04-24 | euvd | Buffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attacker to gain remote cod…Buffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attacker to gain remote code execution as root user via a specially crafted UDP packet. Please update the Reference section to these links > http://thiscomputer.com/ > https://www.bostoncyber.org/ > https://medium.com/@meekworth/exploiting-the-lw9621-drone-camera-module-773f00081368 |
CVE-2026-27542 | CRITICAL | 9.8 | 0.01737 | 39.81 | No | No | 2026-03-19 | 2026-04-29 | euvd | Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture…Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Privilege Escalation.This issue affects Woocommerce Wholesale Lead Capture: from n/a through <= 2.0.3.1. |
CVE-2025-32897 | CRITICAL | 9.8 | 0.01743 | 39.81 | No | No | 2025-06-28 | 2026-03-30 | euvd | Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).
This security vulnerability is the same as CVE-2024-47552, bu…Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).
This security vulnerability is the same as CVE-2024-47552, but the version range described in the CVE-2024-47552 definition is too narrow.
This issue affects Apache Seata (incubating): from 2.0.0 before 2.3.0.
Severity Justification:
The Apache Seata security team assesses the severity of this vulnerability as "Low" due to stringent real-world mitigating factors. First, the vulnerability is strictly isolated to the Raft cluster mode, an optional and non-default feature introduced in v2.0.0, while most users rely on the unaffected traditional architecture. Second, Seata is an internal middleware; communication between TC and RM/TM occurs entirely within trusted internal networks. An attacker would require prior, unauthorized access to the Intranet to exploit this, making external exploitation highly improbable.
Users are recommended to upgrade to version 2.3.0, which fixes the issue. |
CVE-2026-24304 | CRITICAL | 9.9 | 0.00609 | 39.81 | No | No | 2026-01-23 | 2026-07-30 | euvd, nvd | Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network.Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network. |
CVE-2023-51421 | CRITICAL | 9.9 | 0.00594 | 39.81 | No | No | 2023-12-29 | 2026-04-28 | euvd | Unrestricted Upload of File with Dangerous Type vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affects Verge3D …Unrestricted Upload of File with Dangerous Type vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affects Verge3D Publishing and E-Commerce: from n/a through 4.5.2. |
CVE-2026-41512 | CRITICAL | 9.9 | 0.00587 | 39.81 | No | No | 2026-05-08 | 2026-05-08 | euvd | ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution…ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in `BrowserAutomation::PlaywrightService`. This issue has been patched in version 1.4.1. |
CVE-2025-11539 | CRITICAL | 9.9 | 0.00594 | 39.81 | No | No | 2025-10-09 | 2026-02-26 | euvd | Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the…Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the /render/csv endpoint lacked validation of the filePath parameter that allowed an attacker to save a shared object to an arbitrary location that is then loaded by the Chromium process.
Instances are vulnerable if:
1. The default token ("authToken") is not changed, or is known to the attacker.
2. The attacker can reach the image renderer endpoint.
This issue affects grafana-image-renderer: from 1.0.0 through 4.0.16. |
CVE-2024-21812 | CRITICAL | 9.8 | 0.01757 | 39.81 | No | No | 2024-02-20 | 2025-11-04 | euvd | An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0e…An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to an out-of-bounds write which in turn can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. |
CVE-2021-26473 | CRITICAL | 9.8 | 0.01756 | 39.81 | No | No | 2021-06-08 | 2024-09-16 | euvd | In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 the http API located at /sgwebservice_o.php action logFilePath allows an attack…In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 the http API located at /sgwebservice_o.php action logFilePath allows an attacker to write arbitrary files in the context of the web server process. These files can then be executed remotely by calling the file via the web server. |
CVE-2024-1015 | CRITICAL | 9.8 | 0.01737 | 39.81 | No | No | 2024-01-29 | 2026-07-20 | euvd | Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could send differe…Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could send different commands from the operating system to the system via the web configuration functionality of the device. |
CVE-2024-34762 | CRITICAL | 9.9 | 0.0059 | 39.81 | No | No | 2024-06-10 | 2026-04-28 | euvd | Vulnerability discovered by executing a planned security audit.
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversa…Vulnerability discovered by executing a planned security audit.
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPENGINE INC Advanced Custom Fields PRO allows PHP Local File Inclusion.This issue affects Advanced Custom Fields PRO: from n/a before 6.2.10. |
CVE-2023-22747 | CRITICAL | 9.8 | 0.0174 | 39.81 | No | No | 2023-02-28 | 2025-03-11 | euvd | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted p…There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system. |
CVE-2023-25143 | CRITICAL | 9.8 | 0.01742 | 39.81 | No | No | 2023-03-07 | 2025-03-05 | euvd | An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote c…An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state on affected products. |
CVE-2023-40400 | CRITICAL | 9.8 | 0.0175 | 39.81 | No | No | 2023-09-26 | 2025-11-04 | euvd | This issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. A remote u…This issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. A remote user may cause an unexpected app termination or arbitrary code execution. |
CVE-2025-42887 | CRITICAL | 9.9 | 0.00597 | 39.81 | No | No | 2025-11-11 | 2025-11-12 | euvd | Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enable…Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availability of the system. |
CVE-2025-34515 | CRITICAL | 9.3 | 0.07449 | 39.81 | No | No | 2025-10-16 | 2026-05-15 | euvd | Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an execution with unnecessary privileges vulnerability in sync_project.sh tha…Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an execution with unnecessary privileges vulnerability in sync_project.sh that allows an attacker to escalate privileges to root. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet. |
CVE-2023-34220 | MEDIUM | 4.6 | 0.61173 | 39.81 | No | No | 2023-05-31 | 2025-01-09 | euvd | In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possibleIn JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible |
CVE-2006-7105 | CRITICAL | 9.8 | 0.01735 | 39.81 | No | No | 2007-03-03 | 2025-01-17 | euvd | PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a…PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. NOTE: in the original disclosure, filename is used in a function definition, so this report is probably incorrect |