41095 matches found
EUVD-2026-1573
A flaw was found in libsoup's NTLM NT LAN Manager authentication module. When NTLM authentication is enabled, a local attacker can exploit a stack-based buffer overflow vulnerability in the md4sum function. This allows the attacker to overwrite adjacent memory, which may result in arbitrary code...
EUVD-2026-1572
When using CURLOPTPINNEDPUBLICKEY option with libcurl or --pinnedpubkey with the curl tool,curl should check the public key of the server certificate to verify the peer. This check was skipped in a certain condition that would then make curl allow the connection without performing the proper chec...
EUVD-2026-1191
As the service interaction is performed without authentication, an attacker with some knowledge of the protocol could obtain information about the charger via OCPP v1.6...
EUVD-2026-1243
EUVD-2026-1243...
EUVD-2026-1228
Nokia SR Linux is vulnerable to an authentication vulnerability allowing unauthorized access to the JSON-RPC service. When exploited, an invalid validation allows JSON RPC access without providing valid authentication credentials...
EUVD-2026-1213
A command injection vulnerability in the shellexec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via supplying a crafted command string...
EUVD-2026-0961
Missing Authorization vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post and Page Builder by BoldGrid: from n/a through = 1.27.9...
EUVD-2026-0999
Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Theater for WordPress: from n/a through = 0.19...
EUVD-2026-1014
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e-plugins JobBank allows Reflected XSS.This issue affects JobBank: from n/a through 1.2.2...
EUVD-2026-0997
Arteco Web Client DVR/NVR contains a session hijacking vulnerability with insufficient session ID complexity that allows remote attackers to bypass authentication. Attackers can brute force session IDs within a specific numeric range to obtain valid sessions and access live camera streams without...
EUVD-2026-1052
Dell Secure Connect Gateway SCG 5.0 Appliance and Application, versions versions 5.26 to 5.30, contains an Execution with Unnecessary Privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
EUVD-2026-1090
The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to SQL Injection via the 'params' parameter in all versions up to, and including, 1.4.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...
EUVD-2026-0102
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0175
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0145
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0196
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0225
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0213
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...