EUVD-2026-0363

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0392

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0383

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0436

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0497

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0539

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0612

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0635

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0637

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0683

An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following versions: QTS...

EUVD-2026-0700

A vulnerability was detected in Yonyou KSOA 9.0. Affected is an unknown function of the file /kp/PrintZPYG.jsp. The manipulation of the argument zpjhid results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early...

EUVD-2025-205347

FLIR AX8 Thermal Camera 1.32.16 contains hard-coded SSH and web panel credentials that cannot be changed through normal camera operations. Attackers can exploit these persistent credentials to gain unauthorized shell access and login to multiple camera interfaces using predefined username and...

EUVD-2025-205035

Not used...

EUVD-2025-204815

A flaw has been found in Tenda WH450 1.0.0.18. The affected element is an unknown function of the file /goform/Natlimit of the component HTTP Request Handler. This manipulation of the argument page causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...

EUVD-2025-204827

Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the...

EUVD-2025-204857

Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the switchstatus function...

EUVD-2025-204802

A reflected Cross-Site Scripting XSS vulnerability has been identified in TechStore version 1.0. The username endpoint reflects the id query parameter directly into the HTML response without output encoding or sanitization, allowing execution of arbitrary JavaScript code in a victim’s browser...

EUVD-2025-204723

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Add support for Van Gogh SoC The ROG Xbox Ally non-X SoC features a similar architecture to the Steam Deck. While the Steam Deck supports S3 s2idle causes a crash, this support was dropped by the Xbox Ally...

EUVD-2025-204674

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HappyDevs TempTool allows Retrieve Embedded Sensitive Data.This issue affects TempTool: from n/a through 1.3.1...

EUVD-2025-204291

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability affects Firefox for iOS 144.0...