EUVD-2026-2934

lucy-xss-filter before commit 7c1de6d allows an attacker to induce server-side HEAD requests to arbitrary URLs when the ObjectSecurityListener or EmbedSecurityListener option is enabled and embed or object tags are used with a src attribute missing a file extension...

EUVD-2026-2968

The Booking Calendar plugin for WordPress is vulnerable to Missing Authorization leading to Sensitive Information Exposure in all versions up to, and including, 10.14.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view all booking records in the...

EUVD-2026-2985

Police Statistics Database System developed by Gotac has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attacker to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

EUVD-2026-2986

Police Statistics Database System developed by Gotac has an Arbitrary File Read vulnerability, allowing Unauthenticated remote attacker to exploit Absolute Path Traversal to download arbitrary system files...

EUVD-2026-3023

EUVD-2026-3023...

EUVD-2026-3003

EUVD-2026-3003...

EUVD-2026-3011

EUVD-2026-3011...

EUVD-2026-3004

EUVD-2026-3004...

EUVD-2026-3019

EUVD-2026-3019...

EUVD-2026-3014

EUVD-2026-3014...

EUVD-2026-3026

EUVD-2026-3026...

EUVD-2026-3001

EUVD-2026-3001...

EUVD-2026-3024

EUVD-2026-3024...

EUVD-2026-3028

EUVD-2026-3028...

EUVD-2026-3006

EUVD-2026-3006...

EUVD-2026-3042

EUVD-2026-3042...

EUVD-2026-3041

EUVD-2026-3041...

EUVD-2026-3035

EUVD-2026-3035...

EUVD-2026-3046

EUVD-2026-3046...

EUVD-2026-2800

Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 10.4.19+security-01, 11.2.10+security-01, 11.3.7+security-01, 11.4.5+security-01,...