CVE-2026-40957

creationtimestamp| type| source ---|---|--- 2026-07-15 22:00:31+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpptv4aip2e...

CVE-2026-33444

creationtimestamp| type| source ---|---|--- 2026-07-15 22:00:25+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpptpescz2n...

EUVD-2026-44665

DoS vulnerability in the vibration service. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-44656

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-44001

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

EUVD-2026-43662

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6...

EUVD-2026-43268

Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...

EUVD-2026-43088

vulnerability in Drupal Commerce guest registration allows . This issue affects Commerce guest registration versions:...

EUVD-2026-43092

vulnerability in Drupal Composer allows . This issue affects Composer versions:...

EUVD-2026-42836

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache IoTDB. The pipe processor reads a fully qualified Java class name and instantiates it using Class.forName.newInstance without any validation or allowlisting. This issue affects Apache IoTDB:...

EUVD-2026-40932

DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability...

EUVD-2026-40150

A vulnerability was identified in seladb PcapPlusPlus 25.05. This affects the function pcpp::TelnetLayer::getSubCommand of the file Packet++/src/TelnetLayer.cpp of the component Telnet Subnegotiation Packet Handler. The manipulation leads to heap-based buffer overflow. The attack can be initiated...

EUVD-2026-31689

Hackney has SSRF allowlist bypass in hackneyurl:normalize/2 via percent-encoded host...

EUVD-2025-210351

Contributor Broken Access Control in Forget About Shortcode Buttons = 2.1.3 versions...

EUVD-2025-210360

Contributor Cross Site Scripting XSS in Image Carousel = 1.0.0.41 versions...

EUVD-2026-39393

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal APIExperts Square for WooCommerce allows Retrieve Embedded Sensitive Data. This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.3...

EUVD-2026-38005

In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration...

EUVD-2026-37149

OpenClaw: Active Memory write scope could mutate global config...

EUVD-2026-37166

OpenClaw: Host environment sanitizer missed two Node.js control variables...

EUVD-2026-37784

libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2transportread that fails to enforce upper bounds on packetlength field. Remote attackers can send crafted SSH packets with excessively large packetlength values to corrupt heap memory and achieve...