33906 matches found
EUVD-2026-61043
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType value in an untrusted system.describe response and passes it through JSONUtil.tryFill,...
EUVD-2026-61013
The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also us...
EUVD-2026-60949
Copyparty is a portable file server. Prior to 1.20.17, copyparty volumes with the dk or dks directory-key flag combined with the fk or fka file-key flag can convert a valid file key into a directory key, granting read access to the containing folder even though both features are disabled by defau...
EUVD-2026-60940
Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with Insufficient Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...
EUVD-2026-60818
Editor PHP Object Injection in TaxoPress = 3.51.0 versions...
EUVD-2026-60816
Unauthenticated Sensitive Data Exposure in Shortcodes and extra features for Phlox theme = 2.17.22 versions...
EUVD-2026-60812
Contributor Broken Access Control in RomethemeForm For Elementor = 1.2.6 versions...
EUVD-2026-60810
Unauthenticated Arbitrary File Upload in Masteriyo - LMS = 2.3.2 versions...
EUVD-2026-60809
Subscriber Broken Authentication in User Registration = 5.2.6 versions...
EUVD-2026-60804
Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions...
EUVD-2026-60776
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
EUVD-2026-60775
Customer SQL Injection in License Manager for WooCommerce = 3.0.18 versions...
EUVD-2026-60770
Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...
EUVD-2026-60936
Subscriber Privilege Escalation in MasterStudy LMS = 3.7.41 versions...
EUVD-2026-60932
Unauthenticated Cross Site Scripting XSS in Templately = 3.7.1 versions...
EUVD-2026-60931
Unauthenticated Broken Access Control in MultiVendorX = 5.0.14 versions...
EUVD-2026-60929
Contributor Cross Site Scripting XSS in Table Of Contents Block = 1.5.0 versions...
EUVD-2026-60926
Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...