199 matches found
EUVD-2026-1781
A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially...
EUVD-2026-1175
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Wikimedia Foundation MediaWiki - CSS extension allows Path Traversal.This issue affects MediaWiki - CSS extension: 1.44, 1.43, 1.39...
EUVD-2026-1203
The absence of permissions control for the user XXX allows the current configuration in the sudoers file to escalate privileges without any restrictions...
EUVD-2026-1225
Kieback&Peter Neutrino-GLT product is used for building management. It's web component "SM70 PHWEB" is vulnerable to shell command injection via login form. The injected commands would execute with low privileges. The vulnerability has been fixed in version 9.40.02...
EUVD-2026-1223
Missing Authorization vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Plus Addons for Elementor Pro: from n/a before 6.3.7...
EUVD-2026-1261
Missing Authorization vulnerability in ThemeHunk Oneline Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Oneline Lite: from n/a through 6.6...
EUVD-2026-1336
The Premmerce WooCommerce Customers Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'moneyspentfrom', 'moneyspentto', 'registeredfrom', and 'registeredto' parameters in all versions up to, and including, 1.1.14 due to insufficient input sanitization and output...
EUVD-2026-0992
Missing Authorization vulnerability in bdthemes Ultimate Store Kit Elementor Addons ultimate-store-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Store Kit Elementor Addons: from n/a through = 2.9.4...
EUVD-2026-1069
The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the taxopressaiaddpostterm function in all versions up to, and including, 3.41.0. This makes it possible for authenticat...
EUVD-2026-1087
The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'deletesingleticketcallback' and 'changeticketstatuscallback' functions in all versions up to, and including, 1.2.6. This makes it...
EUVD-2026-0889
In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl8180initrxring In rtl8180initrxring, memory is allocated for skb packets and DMA allocations in a loop. When an allocation fails, the previously successful allocations are not freed...
EUVD-2026-0050
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0062
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0269
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0270
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0297
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0287
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0334
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...