33904 matches found
EUVD-2026-76213
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
EUVD-2026-76131
CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality...
EUVD-2026-75904
strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser...
EUVD-2026-75535
Unauthenticated Cross Site Scripting XSS in WPAdverts = 2.3.3 versions...
EUVD-2026-75534
Unauthenticated Cross Site Scripting XSS in WPCS = 1.3.2 versions...
EUVD-2026-75533
Unauthenticated Privilege Escalation in SiteSkite = 2.1.5 versions...
EUVD-2026-75532
Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore & Migration = 2.4.2 versions...
EUVD-2026-75531
Subscriber Remote Code Execution RCE in RepairBuddy = 4.1224 versions...
EUVD-2026-75526
Unauthenticated Cross Site Scripting XSS in Page Visits Counter Lite = 1.2.3 versions...
EUVD-2026-75515
Subscriber Cross Site Scripting XSS in WP Docs = 2.3.1 versions...
EUVD-2026-75514
Subscriber Arbitrary File Download in Youzify = 1.3.7 versions...
EUVD-2026-75511
Unauthenticated Content Injection in Simple Cloudflare Turnstile = 1.42.1 versions...
EUVD-2026-75512
Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile = 1.42.1 versions...
EUVD-2026-75405
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...
EUVD-2026-75404
Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
EUVD-2026-75231
BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization bypass through user-controlled key. If this vulnerability is exploited, the content of the page may be altered by an attacker who can log in to the product may be caused...
EUVD-2026-75124
A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...
EUVD-2026-75097
CWE-88: Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters...