71 matches found
EUVD-2026-2533
The Shipping Rate By Cities plugin for WordPress is vulnerable to SQL Injection via the 'city' parameter in all versions up to, and including, 2.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
EUVD-2026-2066
Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could lead in arbitrary code execution by an attacker. Exploitation of this issue requires user interaction in that a victim...
EUVD-2026-2144
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally...
EUVD-2026-2354
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Lemonsoft WordPress add on allows Cross-Site Scripting XSS.This issue affects WordPress add on: 2025.7.1...
EUVD-2026-1745
The Menu Card plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the category parameter in all versions up to, and including, 0.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...
EUVD-2026-1799
Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path...
EUVD-2026-1563
An Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability allows local users ton perform arbitrary unmounts via smb4k mount helper...
EUVD-2026-0962
On affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these packets with certain MACsec configurations can cause longer term disruption of dataplane traffic...
EUVD-2026-1066
The Appointment Booking and Scheduling Calendar Plugin – WP Timetics plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the update and registerroutes functions in all versions up to, and including, 1.0.36. This makes it possible...
EUVD-2026-0973
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch...
EUVD-2026-0898
A flaw has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/formTaskEdit. Executing a manipulation of the argument selDateType can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used...
EUVD-2026-0063
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0268
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0302
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0292
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0314
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0335
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0397
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...