EUVD-2026-0621

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0633

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0637

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0636

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0640

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0645

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0638

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0630

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0647

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0652

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0044

A flaw has been found in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Frontend/ViewSongs.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

EUVD-2026-0040

In the plex.tv backend for Plex Media Server PMS through 2025-12-31, a non-server device token can retrieve other tokens intended for unrelated access via clients.plex.tv/devices.xml...

EUVD-2026-0039

In Plex Media Server PMS through 1.42.2.10156, ability to access /myplex/account with a device token is not properly aligned with whether the device is currently associated with an account...

EUVD-2026-0664

An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: Hyper Data Protector 2.2.4.1 and later...

EUVD-2026-0667

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the...

EUVD-2026-0669

A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: License Center 2.0.36 and...

EUVD-2026-0670

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Q...

EUVD-2026-0657

An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the followin...

EUVD-2026-0683

An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following versions: QTS...

EUVD-2026-0686

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...