EUVD-2026-0952

Missing Authorization vulnerability in Fahad Mahmood RSS Feed Widget rss-feed-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RSS Feed Widget: from n/a through = 3.0.2...

EUVD-2026-1019

iDS6 DSSPro Digital Signage System 6.2 contains an improper access control vulnerability that allows authenticated users to elevate privileges through console JavaScript functions. Attackers can create users, modify roles and permissions, and potentially achieve full application takeover by...

EUVD-2026-0967

In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10274607; Issue ID: MSV-5049...

EUVD-2026-0888

In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a filesystem is being automounted, it needs to preserve the user-set superblock mount options, such as the "ro" flag...

CVE-2025-64119

creationtimestamp| type| source ---|---|--- 2026-01-02 21:43:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbhugzidru2y 2026-01-03 00:08:40+00:00| published-proof-of-concept| Telegram/DFhOoz2ba5lY6tfZKWDQmHfJO-BCe0MWUTSMMxzWfmXNHIA 2026-01-03 00:08:49+00:00| seen|...

EUVD-2026-0057

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0111

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0206

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0289

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0316

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0309

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0338

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0431

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0424

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0522

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0574

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0594

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

WordPress Cooked plugin <= 1.11.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ch1mk in WordPress Plugin Cooked versions = 1.11.3...

Exploit for CVE-2025-14847

CVE-2...

CVE-2023-54277

The CVE-2023-54277 entry concerns the Linux kernel udlfb fbdev driver. The root cause described in the provided sources is an endpoint type check failure for a USB bulk-OUT endpoint, leading to issues when the endpoint is not of the expected type (e.g., EDID reads failing and “BOGUS urb xfer” mes...