EUVD-2026-0702

A vulnerability was found in LigeroSmart up to 6.1.24. This affects an unknown part of the component Environment Variable Handler. Performing manipulation of the argument REQUESTURI results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could b...

EUVD-2026-0704

A vulnerability has been found in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file /worksheet/workedit.jsp. Such manipulation of the argument Report leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may b...

EUVD-2026-0699

A flaw has been found in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/workupdate.jsp. This manipulation of the argument Report causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. The vend...

EUVD-2026-0701

A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This vulnerability affects the function downloadShowFile of the file /file/downloadShowFile.action of the component com.yeqifu.sys.controller.FileController. The manipulation of the argument path...

EUVD-2026-0717

A vulnerability has been found in EmpireSoft EmpireCMS up to 8.0. Impacted is the function CheckSaveTranFiletype of the file e/class/connect.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The...

EUVD-2026-0721

The Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission – WP User Frontend plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'FrontendFormAjax::submitpost' function in all versions up to,...

EUVD-2026-0720

A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/agentworksadd.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit is now publ...

EUVD-2026-0718

A weakness has been identified in Open5GS up to 2.7.6. Affected by this issue is the function sgwcs5chandlecreatesessionresponse of the file src/sgwc/s5c-handler.c of the component GTPv2-C Flow Handler. Executing manipulation can lead to denial of service. The attack needs to be launched locally...

EUVD-2026-0021

Malicious code in rules-deployer npm...

EUVD-2025-206117

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206116

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206111

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206109

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206119

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206113

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206108

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206114

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206106

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206126

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206131

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...