EUVD-2026-0862

A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file handgunner-administrator/prod.php. Performing a manipulation of the argument cat results in cross site scripting. The attack is possible to be carried out...

CVE

...

EUVD-2026-0524

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2025-206118

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

CVE-2023-54202

In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix race condition UAF in i915perfaddconfigioctl Userspace can guess the id value and try to race oaconfig object creation with config remove, resulting in a use-after-free if we dereference the object after unlocking t...

DEBIAN-CVE-2023-54010

In the Linux kernel, the following vulnerability has been resolved: ACPICA: ACPICA: check null return of ACPIALLOCATEZEROED in acpidbdisplayobjects ACPICA commit 0d5f467d6a0ba852ea3aad68663cbcbd43300fd4 ACPIALLOCATEZEROED may fails, objectinfo might be null and will cause null pointer dereference...

CVE-2025-67907

CVE-2025-67907 is a reservation duplicate of CVE-2025-67906. The linked details for CVE-2025-67906 describe a Cross-Site Scripting (XSS) vulnerability in MISP before 2.5.28, exposed via app/View/Elements/Workflows/executionPath.ctp in the workflow execution path. No exploit specifics are provided...

BELL-CVE-2025-40271

Bulletin has no description...

CVE-2023-53836

A use-after-free vulnerability was found in the BPF sockmap implementation in the Linux kernel. A race condition exists between the skpsockbacklog processing and userspace consumption of socket buffers. When userspace calls recvmsg and consumes an skb, it can free the buffer via consumeskb while...

CVE-2025-63055

creationtimestamp| type| source ---|---|--- 2025-12-09 15:31:50+00:00| seen| https://gist.github.com/Darkcrai86/a66405a5adba3b40dad0ebc3040f5345...

CVE-2025-14271

CVE-2025-14271 is rejected/not used per the Initial Description.

EUVD-2025-146119

Malicious code in ahmadfaiz npm...

EUVD-2025-89279

Malicious code in putri-tempe55-miaww npm...

EUVD-2025-54735

Malicious code in dynamic-yellow-koala npm...

EUVD-2025-43020

Malicious code in iwan-brengkes8-sumpek npm...

CVE-2025-64173

CVE-2025-64173 affects Apollo Router Core (Rust) in versions 1.61.11 and earlier and 2.0.0-alpha.0 through 2.8.1-rc.0. The vulnerability stems from incorrect handling of access control directives on interface types/fields and their implementing object types/fields, causing unauthenticated queries...

EUVD-2025-37804

Not used...

CVE-2025-62480

...

CVE-2025-62476

...

CVE-2025-61754

The CVE-2025-61754 entry affects Oracle BI Publisher (Web Service API) within Oracle Analytics. Affected versions are 7.6.0.0.0 and 8.2.0.0.0. The vulnerability is exploitable over HTTP by a low-privilege attacker with network access, potentially leading to unauthorized access to Oracle BI Publis...