33648 matches found
EUVD-2026-57461
SiYuan: Encrypted-notebook key-derivation material and wrapped notebook keys disclosed to anonymous readers, enabling offline master-password cracking...
EUVD-2026-57466
SiYuan: Password protected tier omitted in the attribute-view/database publish filter: Reader receives rows of protected documents without the password publish mode...
EUVD-2026-70739
toml-node is a TOML parser for Node.js and the browser. Prior to 4.2.0, toml.parse uses a Peggy 5.1.0 generated recursive-descent parser in lib/parser.js whose peg$parsevalue, peg$parsearray, and peg$parseinlinetableentry functions recurse through nested arrays and inline tables without a depth...
EUVD-2026-70663
Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
EUVD-2026-70557
Server-Side Request Forgery SSRF vulnerability in SEOPress allows Server Side Request Forgery. This issue affects SEOPress: from n/a through 10.1...
EUVD-2026-70566
Unauthenticated Cross Site Scripting XSS in Quick Event Manager = 9.17 versions...
EUVD-2026-70567
Unauthenticated Broken Access Control in Quick Event Manager = 9.17 versions...
EUVD-2026-70560
Subscriber Privilege Escalation in Bricksforge = 3.1.8.8 versions...
EUVD-2026-70570
Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.27 versions...
EUVD-2026-70581
Unauthenticated Cross Site Scripting XSS in RTMKit = 2.1.5 versions...
EUVD-2026-70586
Subscriber Privilege Escalation in WCFM Membership = 2.11.11 versions...
EUVD-2026-70588
Unauthenticated Broken Access Control in WPFunnels = 3.12.13 versions...
EUVD-2026-70591
Unauthenticated Broken Access Control in Timetics = 1.0.61 versions...
EUVD-2026-70592
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
EUVD-2026-70593
Unauthenticated Cross Site Scripting XSS in Calculation For Contact Form 7 = 1.0 versions...
EUVD-2026-70562
Unauthenticated Cross Site Scripting XSS in Under Construction = 5.82 versions...
EUVD-2026-70595
Subscriber Cross Site Scripting XSS in Product Variations Swatches for WooCommerce = 1.1.18 versions...
EUVD-2026-70366
Authorization bypass through user-controlled key issue exists in ShizenBox2 edge-app. If exploited, an attacker who can log in to the product may change the other user's password...