33494 matches found
EUVD-2026-70593
Unauthenticated Cross Site Scripting XSS in Calculation For Contact Form 7 = 1.0 versions...
EUVD-2026-70562
Unauthenticated Cross Site Scripting XSS in Under Construction = 5.82 versions...
EUVD-2026-70595
Subscriber Cross Site Scripting XSS in Product Variations Swatches for WooCommerce = 1.1.18 versions...
EUVD-2026-70366
Authorization bypass through user-controlled key issue exists in ShizenBox2 edge-app. If exploited, an attacker who can log in to the product may change the other user's password...
EUVD-2021-34870
HDD password plaintext is stored in a UEFI variable...
EUVD-2026-61221
fastify vulnerable to schema validation bypass via root primitive coercion mismatch...
EUVD-2026-70010
Vulnerability in Drupal Screenshot. This issue affects Screenshot versions:...
EUVD-2026-70009
Vulnerability in Drupal Screenshot. This issue affects Screenshot versions:...
EUVD-2026-69944
Missing Authorization vulnerability in DimaFreund Rentsyst allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Rentsyst: from n/a through 2.1.2...
EUVD-2026-69941
Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...
EUVD-2026-69926
Unauthenticated Privilege Escalation in Authorizer = 3.15.1 versions...
EUVD-2026-69921
Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.4 versions...
EUVD-2026-69641
A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providi...
EUVD-2026-69632
A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result in the execution of arbitrary commands with root privileges...
EUVD-2026-69615
An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system...
EUVD-2024-55741
A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to JSON files that can be reached without authentication. If exploited, a threat actor could view customer data...
EUVD-2026-69284
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection. This issue affects Talassoft Industrial Management Software: from V.4 before V.16...
EUVD-2026-69137
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to a user account by performing an arbitrary number of authentication attempts when redirect handling is disabled...
EUVD-2026-69132
CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause execution of Linux Operating system commands when a system back up is restored that has been maliciously modified...