EUVD-2026-1298

The Awesome Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to incorrect authorization in the room-single.php shortcode handler in all versions up to, and including, 1.0. This is due to the plugin relying solely on nonce verification without capability...

EUVD-2026-1019

iDS6 DSSPro Digital Signage System 6.2 contains an improper access control vulnerability that allows authenticated users to elevate privileges through console JavaScript functions. Attackers can create users, modify roles and permissions, and potentially achieve full application takeover by...

EUVD-2026-1060

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10149879; Issue ID: MSV-4658...

EUVD-2026-0150

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0216

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0251

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0253

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0391

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0443

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0438

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0452

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0510

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0579

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0635

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0656

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0679

An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessin...

EUVD-2026-0725

EUVD-2026-0725...

EUVD-2025-205348

FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability in the ExportConfig REST API that allows attackers to download sensitive configuration files. Attackers can exploit the getConfigExportFile.cgi endpoint to retrieve system configurations, potentially enabling authenticati...

EUVD-2025-204365

An issue was discovered in Open5GS 2.7.5-49-g465e90f, when processing a PFCP Session Establishment Request type=50, the UPF crashes with a reachable assertion in lib/pfcp/context.c ogspfcpobjectteidhashset if the CreatePDR?PDI?F-TEID has CH=1 and the F-TEID address-family flags IPv4/IPv6 do not...

EUVD-2025-204383

Missing Authorization vulnerability in Sparkle WP Sparkle FSE allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sparkle FSE: from n/a through 1.0.9...