EUVD-2026-0203

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0239

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0302

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0300

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0363

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0392

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0383

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0436

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0497

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0539

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0612

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0635

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0637

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0683

An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following versions: QTS...

EUVD-2026-0700

A vulnerability was detected in Yonyou KSOA 9.0. Affected is an unknown function of the file /kp/PrintZPYG.jsp. The manipulation of the argument zpjhid results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early...

EUVD-2025-205347

FLIR AX8 Thermal Camera 1.32.16 contains hard-coded SSH and web panel credentials that cannot be changed through normal camera operations. Attackers can exploit these persistent credentials to gain unauthorized shell access and login to multiple camera interfaces using predefined username and...

EUVD-2025-205035

Not used...

EUVD-2025-204815

A flaw has been found in Tenda WH450 1.0.0.18. The affected element is an unknown function of the file /goform/Natlimit of the component HTTP Request Handler. This manipulation of the argument page causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...

EUVD-2025-204827

Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the...

EUVD-2025-204802

A reflected Cross-Site Scripting XSS vulnerability has been identified in TechStore version 1.0. The username endpoint reflects the id query parameter directly into the HTML response without output encoding or sanitization, allowing execution of arbitrary JavaScript code in a victim’s browser...