171 matches found
EUVD-2026-2978
The All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /aioseo/v1/ai/credits REST route in all versions up to, and including, 4.9.2. This makes it possible for...
EUVD-2026-3024
EUVD-2026-3024...
EUVD-2026-2878
Best Practical Request Tracker RT before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used...
EUVD-2026-2824
The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in order to make it execute arbitrary JavaScript...
EUVD-2026-2429
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Facebook Pixel facebookpixel allows Stored XSS.This issue affects Facebook Pixel: from 7.X-1.0 through 7.X-1.1...
EUVD-2026-2506
In the Linux kernel, the following vulnerability has been resolved: net: hns3: add VLAN id validation before using Currently, the VLAN id may be used without validation when receive a VLAN configuration mailbox from VF. The length of vlandelfailbmap is BITSTOLONGSVLANNVID. It may cause...
EUVD-2026-2530
The WMF Mobile Redirector plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level...
EUVD-2026-2589
EUVD-2026-2589...
EUVD-2026-2606
EUVD-2026-2606...
EUVD-2026-2609
EUVD-2026-2609...
EUVD-2026-2027
Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses deterministic AES IV derivation from a passphrase. This vulnerability is fixed in 2.2...
EUVD-2026-2123
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network...
EUVD-2026-2173
Use after free in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to execute code over a network...
EUVD-2026-2131
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally...
EUVD-2026-2154
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Local Session Manager LSM allows an authorized attacker to elevate privileges locally...
EUVD-2026-2162
Improper access control in Windows Client-Side Caching CSC Service allows an authorized attacker to disclose information locally...
EUVD-2026-2156
Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack...
EUVD-2026-2198
Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...