434182 matches found
EUVD-2026-57924
Missing Authorization and Authorization Bypass Through User-Controlled Key in the product management component in Roskus Prospero Flow CRM before 5.4.7 allows authenticated users of any company to read the full sensitive data price, cost, stock, SKU, and barcode of another company's product and t...
EUVD-2026-57923
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summary bit specified, ensure that the associated GAITE then stores 0 for the guest AISB location instead of...
EUVD-2026-57922
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in ccacipher2protkey Add validation of both the actual key buffer size and token length fields in all the ccachecksectoken functions. Additionally check in ccagencipherkey for possible underflow...
EUVD-2026-57921
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests ccacipher2protkey derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length...
EUVD-2026-57920
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests ccaecc2protkey derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length excee...
EUVD-2026-57919
Issue summary: When an OpenSSL QUIC server Listener SSL object processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit. Impact summary: A remote peer that can make many Initial packets reach the serve...
EUVD-2026-57918
UNSUPPORTED WHEN ASSIGNED Deserialization of Untrusted Data vulnerability in Apache Shindig. This issue affects Apache Shindig: all versions. Users with access to the Shindig REST API can send specially-crafted requests to trigger arbitrary code execution on the server. As this project is retired...
EUVD-2026-57917
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: from n/a through 1.0.22...
EUVD-2026-57915
Unauthenticated Broken Access Control in InstaWP Connect = 0.1.3.7 versions...
EUVD-2026-57916
Unauthenticated Broken Access Control in User Registration = 5.2.6 versions...
EUVD-2026-57914
Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...
EUVD-2026-57913
Unauthenticated Broken Access Control in Revolut Gateway for WooCommerce 4.22.10 versions...
EUVD-2026-57912
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
EUVD-2026-57911
Administrator SQL Injection in MailChimp For WooCommerce 6.2 versions...
EUVD-2026-57910
Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
EUVD-2026-57909
Contributor Cross Site Scripting XSS in Featured Image from URL = 5.3.3 versions...
EUVD-2026-57908
Unauthenticated Sensitive Data Exposure in KiviCare = 4.5.1 versions...
EUVD-2026-57907
Unauthenticated Server Side Request Forgery SSRF in Gutenverse Companion = 2.5.1 versions...
EUVD-2026-57906
Unauthenticated Cross Site Scripting XSS in Smart Online Order for Clover = 1.6.1 versions...
EUVD-2026-57905
Unauthenticated Cross Site Scripting XSS in SureDash = 1.10.1 versions...
EUVD-2026-57904
Unauthenticated Cross Site Scripting XSS in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...
EUVD-2026-57903
Subscriber Broken Access Control in Motors = 1.4.113 versions...
EUVD-2026-57902
Unauthenticated Broken Access Control in Nokri = 1.6.6 versions...
EUVD-2026-57901
Unauthenticated Broken Access Control in Anti Spam and list cleaner AcyChecker = 2.0.0 versions...
EUVD-2026-57900
Customer Cross Site Scripting XSS in WpBookingly = 1.3.2 versions...
EUVD-2026-57899
Subscriber Privilege Escalation in Directories Pro = 2.0.5 versions...
EUVD-2026-57898
Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on = 2.5.1 versions...
EUVD-2026-57897
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
EUVD-2026-57896
Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...
EUVD-2026-57895
Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...
EUVD-2026-57893
Subscriber Server Side Request Forgery SSRF in Vehica Core = 1.0.104 versions...
EUVD-2026-57894
Unauthenticated Cross Site Scripting XSS in MultiParcels Shipping For WooCommerce = 1.30.36 versions...
EUVD-2026-57892
Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...
EUVD-2026-57891
Unauthenticated SQL Injection in Church Admin = 5.1.1 versions...
EUVD-2026-57890
Unauthenticated SQL Injection in Everest Backup = 2.3.12 versions...
EUVD-2026-57889
Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...
EUVD-2026-57888
Unauthenticated Broken Access Control in Arvow AI SEO Writer = 1.5.3 versions...
EUVD-2026-57887
Unauthenticated Cross Site Scripting XSS in Local Delivery Drivers for WooCommerce = 3.0.0 versions...
EUVD-2026-57885
Unauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.1.1 versions...
EUVD-2026-57886
Subscriber Cross Site Scripting XSS in FluentCommunity = 2.7.5 versions...
EUVD-2026-57884
Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...
EUVD-2026-57882
Unauthenticated Sensitive Data Exposure in iCARRY = 2.9 versions...
EUVD-2026-57883
Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...
EUVD-2026-57880
Unauthenticated Broken Access Control in SMEPay: UPI Gateway for WooCommerce = 1.0.5 versions...
EUVD-2026-57881
Unauthenticated Sensitive Data Exposure in WooCommerce Appointments = 5.3.8 versions...
EUVD-2026-57879
Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...
EUVD-2026-57877
Unauthenticated SQL Injection in RealPress = 1.1.2 versions...
EUVD-2026-57878
Unauthenticated Broken Access Control in AI for SEO = 2.4.2 versions...