33657 matches found
EUVD-2026-77074
CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic...
EUVD-2026-76745
A deployment mode intended to expose only read access to stored data proxies a set of application programming interface routes without restricting which request methods are allowed. One such route accepts a request that creates or overwrites a stored record, including an attacker-chosen identifie...
EUVD-2026-76746
A routing rule selects between two different authentication mechanisms for the same downstream service based on the value of a client-supplied request header, rather than on any property the client cannot control. An authenticated user in possession of a shared service credential can set this...
EUVD-2026-76748
An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...
EUVD-2026-76200
Unauthenticated Sensitive Data Exposure in bbPress = 2.6.14 versions...
EUVD-2026-76209
Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...
EUVD-2026-76210
Contributor Cross Site Scripting XSS in Bold Page Builder = 5.9.9 versions...
EUVD-2026-76211
Editor SQL Injection in Sky Addons for Elementor = 3.8.4 versions...
EUVD-2026-76213
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
EUVD-2026-76131
CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality...
EUVD-2026-75904
strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser...
EUVD-2026-75535
Unauthenticated Cross Site Scripting XSS in WPAdverts = 2.3.3 versions...
EUVD-2026-75534
Unauthenticated Cross Site Scripting XSS in WPCS = 1.3.2 versions...
EUVD-2026-75533
Unauthenticated Privilege Escalation in SiteSkite = 2.1.5 versions...
EUVD-2026-75531
Subscriber Remote Code Execution RCE in RepairBuddy = 4.1224 versions...
EUVD-2026-75532
Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore & Migration = 2.4.2 versions...
EUVD-2026-75526
Unauthenticated Cross Site Scripting XSS in Page Visits Counter Lite = 1.2.3 versions...
EUVD-2026-75515
Subscriber Cross Site Scripting XSS in WP Docs = 2.3.1 versions...