@EUVD_Bot@mastodon.social

EUVD Bot @EUVD_Bot@mastodon.social · Aug 03, 2026

🚨 EUVD-2026-52288 📊 Score: 8.7/10 (CVSS v3.1) 📦 Product: luci 🏢 Vendor: OpenWRT 📅 Updated: 2026-08-03 📝 OpenWrt luci-app-bmx7 before commit 5890760a454dad2cb00389dba2cdc5e779e0ffdd contains a path traversal vulnerability in the bmx7-info CGI script that allows unauthenticated attackers to read files outside the configured runtimeDir. Attackers can supply director... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-52288 #cybersecurity #infosec #euvd #cve #vulnerability

euvd.enisa.europa.eu

EUVD

European Vulnerability Database

0

1

0

EUVD Bot @EUVD_Bot@mastodon.social · Jul 30, 2026

🚨 EUVD-2026-50712 📊 Score: 4.3/10 (CVSS v3.1) 📦 Product: Chrome 🏢 Vendor: Google 📅 Updated: 2026-07-30 📝 Inappropriate implementation in GPU in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-50712 #cybersecurity #infosec #euvd #cve #vulnerability

euvd.enisa.europa.eu

EUVD

European Vulnerability Database

0

EUVD Bot @EUVD_Bot@mastodon.social · Jul 27, 2026

🚨 EUVD-2026-49394 📊 Score: n/a 📦 Product: Plack::App::Prerender 🏢 Vendor: RRWO 📅 Updated: 2026-07-27 📝 Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in call. When the rewrite base is a plain string, the REQUEST_URI is appended to it, with no check that the path starts with a forward ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-49394 #cybersecurity #infosec #euvd #cve #vulnerability

0

1

0

EUVD Bot @EUVD_Bot@mastodon.social · Jul 25, 2026

🚨 EUVD-2026-48767 📊 Score: n/a 📦 Product: Catalyst::View::Wkhtmltopdf 🏢 Vendor: RRWO 📅 Updated: 2026-07-25 📝 Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options. Options are passed directly to the wkhtmltopdf command without sanitization. Any web application that passes user-controlled options su... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-48767 #cybersecurity #infosec #euvd #cve #vulnerability

0

1

0

EUVD Bot @EUVD_Bot@mastodon.social · Jul 22, 2026

🚨 EUVD-2026-47011 📊 Score: 9.1/10 (CVSS v3.1) 📦 Product: AIT-Core, AIT-Core 🏢 Vendor: NASA-AMMOS 📅 Published: 2026-07-21 | Updated: 2026-07-22 📝 The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instruments for Surface and Space (BLISS)) is a Python-based software suite developed to handle Ground Data System (GDS), Electronic Ground Support Equipment (E... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-47011 #cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Jul 19, 2026

🚨 EUVD-2026-45461 📊 Score: n/a 📦 Product: Linux, Linux, Linux (+11 more) 🏢 Vendor: Linux 📅 Updated: 2026-07-19 📝 In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_client_walk() error path When p9_client_walk() is called with clone set to false, fid aliases oldfid. If the walk subsequently fails after the request ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-45461 #cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Jul 15, 2026

🚨 EUVD-2026-44693 📊 Score: 8.3/10 (CVSS v3.1) 📦 Product: vaultwarden 🏢 Vendor: dani-garcia 📅 Updated: 2026-07-15 📝 Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's SSO authorization flow did not bind the OAuth state parameter accepted by /connect/authorize to the initiating browser session, allowed attacker-controlled P... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44693 #cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Jun 30, 2026

🚨 EUVD-2026-40345 📊 Score: 10.0/10 (CVSS v3.1) 📦 Product: ColdFusion 🏢 Vendor: Adobe 📅 Updated: 2026-06-30 📝 ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40345 #cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 17, 2026

🚨 EUVD-2026-23462

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: firebird, firebird, firebird
🏢 Vendor: FirebirdSQL
📅 Updated: 2026-04-17

📝 Firebird is an open-source relational database management system. In versions prior to 6.0.0, 5.0.4, 4.0.7 and 3.0.14, when processing an op_slice network packet, the server passes an unprepared structure containing a null pointer to...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-23462

#cybersecurity #infosec #euvd #cve #vulnerability

1

0

3

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21876

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: Vehicle Showroom Management System
🏢 Vendor: code-projects
📅 Updated: 2026-04-13

📝 A weakness has been identified in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unknown code of the file /util/Login_check.php. Executing a manipulation of the argument ID can lead to sql in...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21876

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21872

📊 Score: 5.1/10 (CVSS v3.1)
📦 Product: Samsung Camera
🏢 Vendor: Samsung Mobile
📅 Updated: 2026-04-13

📝 Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. User interaction is required for triggering this vulnerability.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21872

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21875

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: Lost and Found Thing Management
🏢 Vendor: code-projects
📅 Updated: 2026-04-13

📝 A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0. This affects an unknown part of the file /addcat.php. Performing a manipulation of the argument cata results in sql injection. The attack ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21875

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21856

📊 Score: 4.7/10 (CVSS v3.1)
📦 Product: Samsung Mobile Devices
🏢 Vendor: Samsung Mobile
📅 Updated: 2026-04-13

📝 Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21856

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21873

📊 Score: 5.1/10 (CVSS v3.1)
📦 Product: Escargot
🏢 Vendor: Samsung Open Source
📅 Updated: 2026-04-13

📝 Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21873

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21858

📊 Score: 4.4/10 (CVSS v3.1)
📦 Product: Samsung Mobile Devices
🏢 Vendor: Samsung Mobile
📅 Updated: 2026-04-13

📝 Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21858

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21860

📊 Score: 5.1/10 (CVSS v3.1)
📦 Product: Samsung Mobile Devices
🏢 Vendor: Samsung Mobile
📅 Updated: 2026-04-13

📝 Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21860

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21862

📊 Score: 4.1/10 (CVSS v3.1)
📦 Product: Samsung Mobile Devices
🏢 Vendor: Samsung Mobile
📅 Updated: 2026-04-13

📝 Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21862

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21864

📊 Score: 6.6/10 (CVSS v3.1)
📦 Product: Samsung Mobile Devices
🏢 Vendor: Samsung Mobile
📅 Updated: 2026-04-13

📝 Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21864

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21866

📊 Score: 5.4/10 (CVSS v3.1)
📦 Product: Samsung Mobile Devices
🏢 Vendor: Samsung Mobile
📅 Updated: 2026-04-13

📝 Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21866

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21870

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: Galaxy Wearable
🏢 Vendor: Samsung Mobile
📅 Updated: 2026-04-13

📝 Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21870

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21868

📊 Score: 6.8/10 (CVSS v3.1)
📦 Product: Samsung Mobile Devices
🏢 Vendor: Samsung Mobile
📅 Updated: 2026-04-13

📝 External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create file with system privilege.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21868

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21874

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: Lost and Found Thing Management
🏢 Vendor: code-projects
📅 Updated: 2026-04-13

📝 A vulnerability was identified in code-projects Lost and Found Thing Management 1.0. Affected by this issue is some unknown functionality of the file /catageory.php. Such manipulation of the argument cat leads to sql injection. ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21874

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21851

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: N300RH
🏢 Vendor: Totolink
📅 Updated: 2026-04-13

📝 A flaw has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setUpgradeUboot of the file upgrade.so. This manipulation of the argument FileName causes os command injection. The attack is possible to be carried out remotely. The expl...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21851

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21852

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Simple ChatBox
🏢 Vendor: code-projects
📅 Updated: 2026-04-13

📝 A vulnerability has been found in code-projects Simple ChatBox up to 1.0. Affected by this vulnerability is an unknown functionality of the file /chatbox/insert.php of the component Endpoint. Such manipulation of the argument msg leads to cross ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21852

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21848

📊 Score: 8.4/10 (CVSS v3.1)
📦 Product: TOSRFEC.SYS, DRFEC.SYS
🏢 Vendor: Dynabook Inc.
📅 Updated: 2026-04-13

📝 Bluetooth ACPI Drivers provided by Dynabook Inc. contain a stack-based buffer overflow vulnerability. An attacker may execute arbitrary code by modifying certain registry values.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21848

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21853

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: Simple ChatBox
🏢 Vendor: code-projects
📅 Updated: 2026-04-13

📝 A vulnerability was found in code-projects Simple ChatBox 1.0. Affected by this issue is the function SimpleChatbox_PHP of the file chatbox.sql of the component Endpoint. Performing a manipulation results in file and directory information exposu...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21853

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21854

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: Simple ChatBox
🏢 Vendor: code-projects
📅 Updated: 2026-04-13

📝 A vulnerability was determined in code-projects Simple ChatBox up to 1.0. This affects an unknown part of the file /chatbox/insert.php of the component Endpoint. Executing a manipulation of the argument msg can lead to sql injection. It is possi...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21854

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21850

📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Escargot
🏢 Vendor: Samsung Open Source
📅 Updated: 2026-04-13

📝 Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21850

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Apr 13, 2026

🚨 EUVD-2026-21855

📊 Score: 5.1/10 (CVSS v3.1)
📦 Product: Company Visitor Management System
🏢 Vendor: PHPGurukul
📅 Updated: 2026-04-13

📝 A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0. This impacts an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scriptin...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21855

#cybersecurity #infosec #euvd #cve #vulnerability

0

EUVD Bot @EUVD_Bot@mastodon.social · Mar 31, 2026

🚨 EUVD-2026-17478

📊 Score: 5.4/10 (CVSS v3.1)
📦 Product: Zscaler Client Connector, Zscaler Client Connector
🏢 Vendor: Zscaler
📅 Updated: 2026-03-31

📝 An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-17478

#cybersecurity #infosec #euvd #cve #vulnerability

1

0

2

0

EUVD Bot @EUVD_Bot@mastodon.social · Mar 31, 2026

🚨 EUVD-2026-17476

📊 Score: 4.7/10 (CVSS v3.1)
📦 Product: Claude Desktop - Windows
🏢 Vendor: Anthropic
📅 Updated: 2026-03-31

📝 Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking. The installer loads DLLs (e.g., profapi.dll) from it...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-17476

#cybersecurity #infosec #euvd #cve #vulnerability

1

0

2

0

EUVD Bot @EUVD_Bot@mastodon.social · Mar 17, 2026

🚨 EUVD-2026-12574

📊 Score: 9.0/10 (CVSS v3.1)
📦 Product: ScreenConnect
🏢 Vendor: ConnectWise
📅 Updated: 2026-03-17

📝 A condition in ScreenConnect may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12574

#cybersecurity #infosec #euvd #cve #vulnerability

1

0

1

0

EUVD Bot

Posts

EUVD

EUVD

Remote instance