EUVD-2026-0637

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0634

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0656

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0651

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0649

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0655

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0647

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0652

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0650

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0648

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0653

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0044

A flaw has been found in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Frontend/ViewSongs.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

EUVD-2026-0049

A vulnerability was detected in code-projects Content Management System 1.0. The affected element is an unknown function of the file /pages.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used...

EUVD-2026-0046

In the plex.tv backend for Plex Media Server PMS through 2025-12-31, a non-server device token can retrieve share tokens intended for unrelated access via a sharedservers endpoint...

EUVD-2026-0040

In the plex.tv backend for Plex Media Server PMS through 2025-12-31, a non-server device token can retrieve other tokens intended for unrelated access via clients.plex.tv/devices.xml...

EUVD-2026-0039

In Plex Media Server PMS through 1.42.2.10156, ability to access /myplex/account with a device token is not properly aligned with whether the device is currently associated with an account...

EUVD-2026-0047

Plex Media Server PMS through 1.42.2.10156 allows retrieval of a permanent access token via a /myplex/account call with a transient access token...

EUVD-2026-0037

A security vulnerability has been detected in code-projects Content Management System 1.0. Impacted is an unknown function of the file /admin/editposts.php. The manipulation of the argument image leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit has been...

EUVD-2026-0664

An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: Hyper Data Protector 2.2.4.1 and later...

EUVD-2026-0662

An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read or modify files or directories. We have already fixed the vulnerability in the following version:...