EUVD-2026-70586

Subscriber Privilege Escalation in WCFM Membership = 2.11.11 versions...

EUVD-2026-70588

Unauthenticated Broken Access Control in WPFunnels = 3.12.13 versions...

EUVD-2026-70591

Unauthenticated Broken Access Control in Timetics = 1.0.61 versions...

EUVD-2026-70592

Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...

EUVD-2026-70593

Unauthenticated Cross Site Scripting XSS in Calculation For Contact Form 7 = 1.0 versions...

EUVD-2026-70562

Unauthenticated Cross Site Scripting XSS in Under Construction = 5.82 versions...

EUVD-2026-70595

Subscriber Cross Site Scripting XSS in Product Variations Swatches for WooCommerce = 1.1.18 versions...

EUVD-2026-70366

Authorization bypass through user-controlled key issue exists in ShizenBox2 edge-app. If exploited, an attacker who can log in to the product may change the other user's password...

EUVD-2021-34870

HDD password plaintext is stored in a UEFI variable...

EUVD-2026-61221

fastify vulnerable to schema validation bypass via root primitive coercion mismatch...

EUVD-2026-70010

Vulnerability in Drupal Screenshot. This issue affects Screenshot versions:...

EUVD-2026-70009

Vulnerability in Drupal Screenshot. This issue affects Screenshot versions:...

EUVD-2026-69944

Missing Authorization vulnerability in DimaFreund Rentsyst allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Rentsyst: from n/a through 2.1.2...

EUVD-2026-69941

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

EUVD-2026-69926

Unauthenticated Privilege Escalation in Authorizer = 3.15.1 versions...

EUVD-2026-69921

Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.4 versions...

EUVD-2026-69641

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providi...

EUVD-2026-69632

A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result in the execution of arbitrary commands with root privileges...

EUVD-2026-69615

An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system...

EUVD-2024-55741

A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to JSON files that can be reached without authentication. If exploited, a threat actor could view customer data...