EUVD-2026-3002

EUVD-2026-3002...

EUVD-2026-3008

EUVD-2026-3008...

EUVD-2026-3013

EUVD-2026-3013...

EUVD-2026-3033

EUVD-2026-3033...

EUVD-2026-2999

EUVD-2026-2999...

EUVD-2026-3010

EUVD-2026-3010...

EUVD-2026-2997

EUVD-2026-2997...

EUVD-2026-3040

EUVD-2026-3040...

EUVD-2026-3046

EUVD-2026-3046...

EUVD-2026-3043

EUVD-2026-3043...

EUVD-2026-3035

EUVD-2026-3035...

EUVD-2026-3044

EUVD-2026-3044...

EUVD-2026-3037

EUVD-2026-3037...

EUVD-2026-3034

EUVD-2026-3034...

EUVD-2026-2989

The Process Optimization application suite leverages connection channels/protocols that by-default are not encrypted and could become subject to hijacking or data leakage in certain man-in-the-middle or passive inspection scenarios...

EUVD-2026-2992

The vulnerability, if exploited, could allow an authenticated miscreant Process Optimization Designer User to embed OLE objects into graphics, and escalate their privileges to the identity of a victim user who subsequently interacts with the graphical elements...

EUVD-2026-2995

The vulnerability, if exploited, could allow an authenticated miscreant OS Standard User to tamper with Process Optimization project files, embed code, and escalate their privileges to the identity of a victim user who subsequently interacts with the project files...

EUVD-2026-2996

The vulnerability, if exploited, could allow an authenticated miscreant OS Standard User to trick Process Optimization services into loading arbitrary code and escalate privileges to OS System, potentially resulting in complete compromise of the Model Application Server...

EUVD-2026-2905

In the portal in LemonLDAP::NG before 2.21.0, cross-site scripting XSS allows remote attackers to inject arbitrary web script or HTML into the login page via the tab parameter, for Choice authentication...

EUVD-2026-2873

An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personaldata endpoint exposes full sensitive user information even after logout because proper cache-control is missing. Using the browser back button restores all personal data, allowing unauthorized users on the same device to...