CVE-2024-37079 | CRITICAL | 9.8 | 0.22377 | 72.03 | Yes | No | 2024-06-18 | 2026-01-24 | cisa.gov, euvd | vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to…vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution. |
CVE-2023-37462 | CRITICAL | 10.0 | 0.91492 | 72.02 | No | No | 2023-07-14 | 2024-10-30 | euvd | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Improper escaping in the document `…XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Improper escaping in the document `SkinsCode.XWikiSkinsSheet` leads to an injection vector from view right on that document to programming rights, or in other words, it is possible to execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write access to all wiki contents. The attack works by opening a non-existing page with a name crafted to contain a dangerous payload. It is possible to check if an existing installation is vulnerable. See the linked GHSA for instructions on testing an installation. This issue has been patched in XWiki 14.4.8, 14.10.4 and 15.0-rc-1. Users are advised to upgrade. The fix commit `d9c88ddc` can also be applied manually to the impacted document `SkinsCode.XWikiSkinsSheet` and users unable to upgrade are advised to manually patch their installations. |
CVE-2024-8856 | CRITICAL | 9.8 | 0.93709 | 72.0 | No | No | 2024-11-16 | 2026-04-08 | euvd | The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation i…The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the the UploadHandler.php file and no direct file access prevention in all versions up to, and including, 1.22.21. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. |
CVE-2025-53690 | CRITICAL | 9.0 | 0.31405 | 71.99 | Yes | No | 2025-09-03 | 2026-02-26 | cisa.gov, euvd | Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection…Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0. |
CVE-2026-45247 | CRITICAL | 9.3 | 0.27546 | 71.84 | Yes | No | 2026-05-26 | 2026-06-04 | cisa.gov, euvd, nvd | Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticat…Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted call to PHP's native unserialize() function combined with gadget chains available in Magento and its dependencies to execute arbitrary code on the server. |
CVE-2014-100005 | HIGH | 8.0 | 0.42414 | 71.84 | Yes | No | 2015-01-13 | 2025-10-22 | cisa.gov, euvd | Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote atta…Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account or (2) enable remote management via a crafted configuration module to hedwig.cgi, (3) activate new configuration settings via a SETCFG,SAVE,ACTIVATE action to pigwidgeon.cgi, or (4) send a ping via a ping action to diagnostic.php. |
CVE-2024-9047 | CRITICAL | 9.8 | 0.93199 | 71.82 | No | No | 2024-10-12 | 2026-04-08 | euvd | The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfu_file_do…The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfu_file_downloader.php. This makes it possible for unauthenticated attackers to read or delete files outside of the originally intended directory. Successful exploitation requires the targeted WordPress installation to be using PHP 7.4 or earlier. |
CVE-2025-21042 | HIGH | 8.8 | 0.33067 | 71.77 | Yes | No | 2025-09-12 | 2026-02-26 | cisa.gov, euvd | Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. |
CVE-2019-15976 | CRITICAL | 9.8 | 0.92835 | 71.69 | No | No | 2020-01-06 | 2024-11-15 | euvd | Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote…Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. |
CVE-2022-21907 | CRITICAL | 9.8 | 0.9279 | 71.68 | No | Yes | 2022-01-11 | 2025-01-02 | euvd, github | HTTP Protocol Stack Remote Code Execution VulnerabilityHTTP Protocol Stack Remote Code Execution Vulnerability |
CVE-2022-31137 | CRITICAL | 10.0 | 0.90387 | 71.64 | No | No | 2022-07-08 | 2025-04-22 | euvd | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 6.1.1.0 are subject to a remote cod…Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 6.1.1.0 are subject to a remote code execution vulnerability. System commands can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file. Attackers need not be authenticated to exploit this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability. |
CVE-2026-48172 | CRITICAL | 10.0 | 0.18914 | 71.62 | Yes | Yes | 2026-05-21 | 2026-05-27 | cisa.gov, euvd, nvd, packetstorm | LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detectio…LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsonapi_func=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ 2>/dev/null in Bash. If you get no output, you have not been hit with exploitation of the vulnerability. If there is output, we recommend you examine the IP addresses in the list, determine if they are valid IP addresses, and if not, block them. To determine damage done, examine the system logs for use by the detected IP addresses. The issue is related to mishandling of Redis enable/disable features. The recommended minimum version is 2.4.7. |
CVE-2024-38094 | HIGH | 7.2 | 0.50892 | 71.61 | Yes | No | 2024-07-09 | 2026-02-10 | cisa.gov, euvd | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Remote Code Execution Vulnerability |
CVE-2022-40022 | CRITICAL | 9.8 | 0.92472 | 71.57 | No | No | 2023-02-13 | 2025-03-21 | euvd | Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability.Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability. |
CVE-2023-23488 | CRITICAL | 9.8 | 0.9246 | 71.56 | No | No | 2023-01-20 | 2025-04-03 | euvd | The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' para…The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route. |
CVE-2025-59528 | CRITICAL | 10.0 | 0.90183 | 71.56 | No | No | 2025-09-22 | 2025-09-22 | euvd | Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote c…Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses the user-provided mcpServerConfig string to build the MCP server configuration. However, during this process, it executes JavaScript code without any security validation. Specifically, inside the convertToValidJSONString function, user input is directly passed to the Function() constructor, which evaluates and executes the input as JavaScript code. Since this runs with full Node.js runtime privileges, it can access dangerous modules such as child_process and fs. This issue has been patched in version 3.0.6. |
CVE-2019-2215 | HIGH | 7.8 | 0.43823 | 71.54 | Yes | No | 2019-10-11 | 2025-10-21 | cisa.gov, euvd | A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to ex…A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095 |
CVE-2025-24054 | MEDIUM | 6.5 | 0.58616 | 71.52 | Yes | No | 2025-03-11 | 2026-02-13 | cisa.gov, euvd | External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. |
CVE-2023-3079 | HIGH | 8.8 | 0.3211 | 71.44 | Yes | No | 2023-06-05 | 2025-10-21 | cisa.gov, euvd | Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted…Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2016-3235 | HIGH | 7.8 | 0.43431 | 71.4 | Yes | No | 2016-06-16 | 2025-10-21 | cisa.gov, euvd | Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading…Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability." |
CVE-2023-36874 | HIGH | 7.8 | 0.43409 | 71.39 | Yes | Yes | 2023-07-11 | 2025-10-21 | cisa.gov, euvd, github | Windows Error Reporting Service Elevation of Privilege VulnerabilityWindows Error Reporting Service Elevation of Privilege Vulnerability |
CVE-2020-17144 | HIGH | 8.4 | 0.36514 | 71.38 | Yes | No | 2020-12-09 | 2026-06-09 | cisa.gov, euvd | Microsoft Exchange Remote Code Execution VulnerabilityMicrosoft Exchange Remote Code Execution Vulnerability |
CVE-2013-3896 | MEDIUM | 5.5 | 0.6961 | 71.36 | Yes | No | 2013-10-09 | 2025-10-22 | cisa.gov, euvd | Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote at…Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability." |
CVE-2025-68645 | HIGH | 8.8 | 0.31769 | 71.32 | Yes | No | 2025-12-22 | 2026-02-26 | cisa.gov, euvd | A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper …A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory. |
CVE-2013-7331 | MEDIUM | 6.5 | 0.58023 | 71.31 | Yes | No | 2014-02-26 | 2025-10-22 | cisa.gov, euvd | The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathna…The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild in February 2014. |
CVE-2016-3976 | HIGH | 7.5 | 0.46605 | 71.31 | Yes | No | 2016-04-07 | 2025-10-21 | cisa.gov, euvd | Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ (dot do…Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the fileName parameter to CrashFileDownloadServlet, aka SAP Security Note 2234971. |
CVE-2022-40799 | HIGH | 8.8 | 0.31719 | 71.3 | Yes | No | 2022-11-29 | 2025-10-21 | cisa.gov, euvd | Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the…Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device. |
CVE-2025-58034 | MEDIUM | 6.7 | 0.5558 | 71.25 | Yes | No | 2025-11-18 | 2026-02-26 | cisa.gov, euvd | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortin…An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands. |
CVE-2025-14611 | HIGH | 7.1 | 0.50949 | 71.23 | Yes | No | 2025-12-12 | 2026-02-26 | cisa.gov, euvd | Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. …Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. This degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication. This opens the door for future exploitation and can be leveraged with previous vulnerabilities to gain a full system compromise. |
CVE-2025-29927 | CRITICAL | 9.1 | 0.99301 | 71.16 | No | Yes | 2025-03-21 | 2025-04-08 | euvd, github | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2…Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware. If patching to a safe version is infeasible, it is recommend that you prevent external user requests which contain the x-middleware-subrequest header from reaching your Next.js application. This vulnerability is fixed in 12.3.5, 13.5.9, 14.2.25, and 15.2.3. |
CVE-2017-5070 | HIGH | 8.8 | 0.31212 | 71.12 | Yes | No | 2017-10-27 | 2025-10-21 | cisa.gov, euvd | Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote atta…Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2010-5326 | CRITICAL | 10.0 | 0.1745 | 71.11 | Yes | No | 2016-05-13 | 2025-10-21 | cisa.gov, euvd | The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows r…The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to execute arbitrary code via an HTTP or HTTPS request, as exploited in the wild in 2013 through 2016, aka a "Detour" attack. |
CVE-2025-31200 | CRITICAL | 9.8 | 0.1966 | 71.08 | Yes | No | 2025-04-16 | 2026-04-02 | cisa.gov, euvd | A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15…A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS released before iOS 18.4.1. |
CVE-2020-0787 | HIGH | 7.8 | 0.42524 | 71.08 | Yes | No | 2020-03-12 | 2025-10-21 | cisa.gov, euvd | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic l…An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'. |
CVE-2022-26871 | CRITICAL | 9.8 | 0.19633 | 71.07 | Yes | No | 2022-03-29 | 2025-10-21 | cisa.gov, euvd | An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary fil…An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution. |
CVE-2025-24085 | CRITICAL | 10.0 | 0.17323 | 71.06 | Yes | No | 2025-01-27 | 2026-04-02 | cisa.gov, euvd | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS …A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2. |
CVE-2022-26809 | CRITICAL | 9.8 | 0.9089 | 71.01 | No | No | 2022-04-15 | 2025-01-02 | euvd | Remote Procedure Call Runtime Remote Code Execution VulnerabilityRemote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2024-45216 | CRITICAL | 9.8 | 0.90852 | 71.0 | No | No | 2024-10-16 | 2024-11-08 | euvd | Improper Authentication vulnerability in Apache Solr.
Solr instances using the PKIAuthenticationPlugin, which is enabled by default when So…Improper Authentication vulnerability in Apache Solr.
Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass.
A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path.
This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing.
This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0.
Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue. |
CVE-2023-46731 | CRITICAL | 10.0 | 0.88534 | 70.99 | No | No | 2023-11-06 | 2024-09-05 | euvd | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki doesn't properly escape the s…XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki doesn't properly escape the section URL parameter that is used in the code for displaying administration sections. This allows any user with read access to the document `XWiki.AdminSheet` (by default, everyone including unauthenticated users) to execute code including Groovy code. This impacts the confidentiality, integrity and availability of the whole XWiki instance. This vulnerability has been patched in XWiki 14.10.14, 15.6 RC1 and 15.5.1. Users are advised to upgrade. Users unablr to upgrade may apply the fix in commit `fec8e0e53f9` manually. Alternatively, to protect against attacks from unauthenticated users, view right for guests can be removed from this document (it is only needed for space and wiki admins). |
CVE-2021-30657 | MEDIUM | 5.5 | 0.68531 | 70.99 | Yes | No | 2021-09-08 | 2025-10-21 | cisa.gov, euvd | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A …A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited.. |
CVE-2016-7836 | CRITICAL | 9.8 | 0.1938 | 70.98 | Yes | No | 2017-06-09 | 2025-10-21 | cisa.gov, euvd | SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with…SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program. |
CVE-2024-10914 | CRITICAL | 9.2 | 0.97432 | 70.9 | No | No | 2024-11-06 | 2024-11-24 | euvd | A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by t…A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation of the argument name leads to os command injection. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. |
CVE-2021-22175 | MEDIUM | 6.8 | 0.53372 | 70.88 | Yes | No | 2021-06-11 | 2026-02-19 | cisa.gov, euvd | When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions…When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is disabled |
CVE-2024-25600 | CRITICAL | 10.0 | 0.88234 | 70.88 | No | Yes | 2024-06-04 | 2026-04-28 | euvd, packetstorm | Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue af…Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6. |
CVE-2023-37582 | CRITICAL | 9.8 | 0.90427 | 70.85 | No | No | 2023-07-12 | 2025-04-23 | euvd | The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in…The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1.
When NameServer address are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the update configuration function on the NameServer component to execute commands as the system users that RocketMQ is running as.
It is recommended for users to upgrade their NameServer version to 5.1.2 or above for RocketMQ 5.x or 4.9.7 or above for RocketMQ 4.x to prevent these attacks. |
CVE-2023-6875 | CRITICAL | 9.8 | 0.90339 | 70.82 | No | No | 2024-01-11 | 2026-04-08 | euvd | The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to unau…The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a type juggling issue on the connect-app REST endpoint in all versions up to, and including, 2.8.7. This makes it possible for unauthenticated attackers to reset the API key used to authenticate to the mailer and view logs, including password reset emails, allowing site takeover. CVE-2023-52233 appears to be a duplicate of this issue. |
CVE-2022-21999 | HIGH | 7.8 | 0.41683 | 70.79 | Yes | No | 2022-02-09 | 2025-10-21 | cisa.gov, euvd | Windows Print Spooler Elevation of Privilege VulnerabilityWindows Print Spooler Elevation of Privilege Vulnerability |
CVE-2011-1823 | HIGH | 7.8 | 0.41634 | 70.77 | Yes | No | 2011-06-09 | 2025-10-22 | cisa.gov, euvd | The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows …The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak. |
CVE-2019-1367 | HIGH | 7.5 | 0.44999 | 70.75 | Yes | No | 2019-09-23 | 2025-10-21 | cisa.gov, euvd | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip…A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1221. |
CVE-2024-9264 | CRITICAL | 9.4 | 0.94644 | 70.73 | No | No | 2024-10-18 | 2025-03-14 | euvd | The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are i…The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being passed to `duckdb`, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or higher permission is capable of executing this attack. The `duckdb` binary must be present in Grafana's $PATH for this attack to function; by default, this binary is not installed in Grafana distributions. |