33905 matches found
EUVD-2026-71103
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Stored XSS. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31...
EUVD-2026-71040
Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menulux Portal: before 20260903211448...
EUVD-2026-71039
Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data. This issue affects Menulux Portal: before 20260903211448...
EUVD-2026-70792
Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network...
EUVD-2026-70798
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-70796
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network...
EUVD-2026-57461
SiYuan: Encrypted-notebook key-derivation material and wrapped notebook keys disclosed to anonymous readers, enabling offline master-password cracking...
EUVD-2026-57466
SiYuan: Password protected tier omitted in the attribute-view/database publish filter: Reader receives rows of protected documents without the password publish mode...
EUVD-2026-70739
toml-node is a TOML parser for Node.js and the browser. Prior to 4.2.0, toml.parse uses a Peggy 5.1.0 generated recursive-descent parser in lib/parser.js whose peg$parsevalue, peg$parsearray, and peg$parseinlinetableentry functions recurse through nested arrays and inline tables without a depth...
EUVD-2026-70663
Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
EUVD-2026-70557
Server-Side Request Forgery SSRF vulnerability in SEOPress allows Server Side Request Forgery. This issue affects SEOPress: from n/a through 10.1...
EUVD-2026-70566
Unauthenticated Cross Site Scripting XSS in Quick Event Manager = 9.17 versions...
EUVD-2026-70567
Unauthenticated Broken Access Control in Quick Event Manager = 9.17 versions...
EUVD-2026-70560
Subscriber Privilege Escalation in Bricksforge = 3.1.8.8 versions...
EUVD-2026-70570
Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.27 versions...
EUVD-2026-70581
Unauthenticated Cross Site Scripting XSS in RTMKit = 2.1.5 versions...
EUVD-2026-70586
Subscriber Privilege Escalation in WCFM Membership = 2.11.11 versions...
EUVD-2026-70588
Unauthenticated Broken Access Control in WPFunnels = 3.12.13 versions...