EUVD-2026-0701

A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This vulnerability affects the function downloadShowFile of the file /file/downloadShowFile.action of the component com.yeqifu.sys.controller.FileController. The manipulation of the argument path...

EUVD-2026-0717

A vulnerability has been found in EmpireSoft EmpireCMS up to 8.0. Impacted is the function CheckSaveTranFiletype of the file e/class/connect.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The...

EUVD-2026-0721

The Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission – WP User Frontend plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'FrontendFormAjax::submitpost' function in all versions up to,...

EUVD-2026-0720

A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/agentworksadd.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit is now publ...

EUVD-2026-0718

A weakness has been identified in Open5GS up to 2.7.6. Affected by this issue is the function sgwcs5chandlecreatesessionresponse of the file src/sgwc/s5c-handler.c of the component GTPv2-C Flow Handler. Executing manipulation can lead to denial of service. The attack needs to be launched locally...

EUVD-2026-0021

Malicious code in rules-deployer npm...

EUVD-2025-206116

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206117

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206109

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206111

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206119

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206113

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206114

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206108

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206126

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206131

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206106

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206122

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206130

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-205979

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in janhenckens Dashboard Beacon allows Stored XSS.This issue affects Dashboard Beacon: from n/a through 1.2.0...