33407 matches found
EUVD-2026-61109
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits. A successful exploit might lead to denial of service...
EUVD-2026-61133
MobSF is a mobile application security testing tool used. Prior to 4.5.1, getbrowsableactivities in mobsf/StaticAnalyzer/views/android/manifestanalysis.py validates only an Android manifest android:host value with validhost before appending a separately supplied android:port to the URL fetched by...
EUVD-2026-61043
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType value in an untrusted system.describe response and passes it through JSONUtil.tryFill,...
EUVD-2026-61013
The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also us...
EUVD-2026-60949
Copyparty is a portable file server. Prior to 1.20.17, copyparty volumes with the dk or dks directory-key flag combined with the fk or fka file-key flag can convert a valid file key into a directory key, granting read access to the containing folder even though both features are disabled by defau...
EUVD-2026-60940
Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with Insufficient Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...
EUVD-2026-60818
Editor PHP Object Injection in TaxoPress = 3.51.0 versions...
EUVD-2026-60816
Unauthenticated Sensitive Data Exposure in Shortcodes and extra features for Phlox theme = 2.17.22 versions...
EUVD-2026-60812
Contributor Broken Access Control in RomethemeForm For Elementor = 1.2.6 versions...
EUVD-2026-60810
Unauthenticated Arbitrary File Upload in Masteriyo - LMS = 2.3.2 versions...
EUVD-2026-60809
Subscriber Broken Authentication in User Registration = 5.2.6 versions...
EUVD-2026-60804
Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions...
EUVD-2026-60776
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
EUVD-2026-60775
Customer SQL Injection in License Manager for WooCommerce = 3.0.18 versions...
EUVD-2026-60770
Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...
EUVD-2026-60936
Subscriber Privilege Escalation in MasterStudy LMS = 3.7.41 versions...
EUVD-2026-60932
Unauthenticated Cross Site Scripting XSS in Templately = 3.7.1 versions...
EUVD-2026-60931
Unauthenticated Broken Access Control in MultiVendorX = 5.0.14 versions...