Skip to content

Commit 2059ef8

Browse files
aboutcode-automationaboutcode-automation
committed
Sync EUVD catalog: Sat Jul 11 00:36:56 UTC 2026
Signed-off-by: AboutCode Automation <automation@aboutcode.org>
1 parent ae285a7 commit 2059ef8

372 files changed

Lines changed: 14466 additions & 20 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎advisories/2026/05/EUVD-2026-29860.json‎

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
{
2+
"id": "EUVD-2026-29860",
3+
"enisaUuid": "8d95147e-317a-35e6-a7ac-7b14a2841f85",
4+
"description": "Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. From 4.3.0 to before 4.10.22, 3.10.6, and 3.8.14, TimeConverterRegistrar caches DateTimeFormatter instances in an unbounded ConcurrentHashMap<String, DateTimeFormatter> whose key is derived from the @Format annotation pattern concatenated with the locale from the HTTP Accept-Language header. Because Locale.forLanguageTag() accepts arbitrary BCP 47 private-use extensions (en-x-a001, en-x-a002, \u2026), an unauthenticated attacker can generate an unlimited number of unique cache keys by sending requests with novel locale tags, growing the cache until heap memory is exhausted and the JVM crashes. This vulnerability is fixed in 4.10.22, 3.10.6, and 3.8.14.",
5+
"datePublished": "May 12, 2026, 9:20:45 PM",
6+
"dateUpdated": "Jul 10, 2026, 12:08:24 AM",
7+
"baseScore": 7.5,
8+
"baseScoreVersion": "3.1",
9+
"baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
10+
"references": "https://github.com/micronaut-projects/micronaut-core/security/advisories/GHSA-8hjv-92q9-g4xj\nhttps://github.com/micronaut-projects/micronaut-core/commit/48f05ae8dc4157816fe0050c5cf730be7d44f8b3\nhttps://github.com/micronaut-projects/micronaut-core/commit/c2048ab740c2efdfe227813f203176e0ef93f892\nhttps://github.com/micronaut-projects/micronaut-core/commit/c6ca8782de7338732e887d090f38c9e941bcb284\nhttps://github.com/micronaut-projects/micronaut-core/releases/tag/v3.10.6\nhttps://github.com/micronaut-projects/micronaut-core/releases/tag/v3.8.14\nhttps://github.com/micronaut-projects/micronaut-core/releases/tag/v4.10.22\n",
11+
"aliases": "GHSA-8hjv-92q9-g4xj\nCVE-2026-44241\n",
12+
"assigner": "GitHub_M",
13+
"epss": 0.41,
14+
"enisaIdProduct": [
15+
{
16+
"id": "676d5c1e-a7dc-3156-9f83-53fdafff29c7",
17+
"product": {
18+
"name": "micronaut-core",
19+
"vendor": {
20+
"name": "micronaut-projects"
21+
}
22+
},
23+
"product_version": "4.3.0, < 4.10.22"
24+
},
25+
{
26+
"id": "822ae1b3-2638-3ec3-b38e-6895f5eafec6",
27+
"product": {
28+
"name": "micronaut-core",
29+
"vendor": {
30+
"name": "micronaut-projects"
31+
}
32+
},
33+
"product_version": "< 3.8.14"
34+
},
35+
{
36+
"id": "b0eae8db-8788-3914-823b-1fffba803b90",
37+
"product": {
38+
"name": "micronaut-core",
39+
"vendor": {
40+
"name": "micronaut-projects"
41+
}
42+
},
43+
"product_version": "3.10.0, < 3.10.6"
44+
}
45+
],
46+
"enisaIdVendor": [
47+
{
48+
"id": "045fdbfd-242e-30a2-9455-4bb70be6fc54",
49+
"vendor": {
50+
"name": "micronaut-projects"
51+
}
52+
}
53+
]
54+
}

‎advisories/2026/06/EUVD-2026-40173.json‎

Lines changed: 23 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,14 +3,32 @@
33
"enisaUuid": "9752cb34-4157-3c53-af8b-32421d31ad42",
44
"description": "A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.",
55
"datePublished": "Jun 29, 2026, 6:44:24 PM",
6-
"dateUpdated": "Jun 29, 2026, 7:33:29 PM",
6+
"dateUpdated": "Jul 10, 2026, 12:32:23 AM",
77
"baseScore": 6.2,
88
"baseScoreVersion": "3.1",
99
"baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
10-
"references": "https://access.redhat.com/security/cve/CVE-2026-13757\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2494556\n",
10+
"references": "https://access.redhat.com/errata/RHSA-2026:37469\nhttps://access.redhat.com/security/cve/CVE-2026-13757\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2494556\n",
1111
"aliases": "GHSA-p2wm-69qx-x25w\nCVE-2026-13757\n",
1212
"assigner": "redhat",
13-
"epss": 0.0,
14-
"enisaIdProduct": [],
15-
"enisaIdVendor": []
13+
"epss": 0.11,
14+
"enisaIdProduct": [
15+
{
16+
"id": "257d7739-7367-31bb-b0cf-c1994807ce23",
17+
"product": {
18+
"name": "Red Hat Hardened Images",
19+
"vendor": {
20+
"name": "Red Hat"
21+
}
22+
},
23+
"product_version": "patch: 0.26.2-1.2.hum1"
24+
}
25+
],
26+
"enisaIdVendor": [
27+
{
28+
"id": "a1d64a63-620b-3edb-9344-41618a8bf8e7",
29+
"vendor": {
30+
"name": "Red Hat"
31+
}
32+
}
33+
]
1634
}

‎advisories/2026/07/EUVD-2025-210450.json‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"id": "EUVD-2025-210450",
3+
"enisaUuid": "d854a4c1-0f0e-3cad-b7a7-091da58c6f1a",
4+
"description": "The Happyforms \u2013 Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.26.12 via the happyforms_get_form_partial() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.",
5+
"datePublished": "Jul 10, 2026, 7:48:44 AM",
6+
"dateUpdated": "Jul 10, 2026, 10:07:52 AM",
7+
"baseScore": 6.6,
8+
"baseScoreVersion": "3.1",
9+
"baseScoreVector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
10+
"references": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e31119ab-963d-48a4-9948-0a0dce761918?source=cve\nhttps://plugins.svn.wordpress.org/happyforms/trunk/core/classes/class-wp-customize-form-manager.php\nhttps://plugins.svn.wordpress.org/happyforms/trunk/core/helpers/helper-form-templates.php\nhttps://plugins.trac.wordpress.org/changeset?reponame=&old=3494912%40happyforms&new=3494912%40happyforms\n",
11+
"aliases": "GHSA-f6q8-jxw9-8mhj\nCVE-2025-11977\n",
12+
"assigner": "Wordfence",
13+
"epss": 0.0,
14+
"enisaIdProduct": [
15+
{
16+
"id": "6f1c23c6-2fcd-3196-9d57-29dac8e7d360",
17+
"product": {
18+
"name": "Happyforms \u2013 Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms",
19+
"vendor": {
20+
"name": "Happyforms"
21+
}
22+
},
23+
"product_version": "0 \u22641.26.12"
24+
}
25+
],
26+
"enisaIdVendor": [
27+
{
28+
"id": "a6aec752-87e1-3e41-9295-21b3c7ae0826",
29+
"vendor": {
30+
"name": "Happyforms"
31+
}
32+
}
33+
]
34+
}

‎advisories/2026/07/EUVD-2025-210451.json‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"id": "EUVD-2025-210451",
3+
"enisaUuid": "b3083532-6880-3520-9845-c8e6a91a9511",
4+
"description": "An unauthenticated path traversal vulnerability exists in the web management interface of WTI (Wireless Technology, Inc.) version 3.5.0.r 2024/05/24 00:00:00. An unauthenticated attacker can craft malicious HTTP requests containing traversal sequences to access files outside of the intended web root directory. This may allow disclosure of sensitive system files and configuration data",
5+
"datePublished": "Jul 10, 2026, 6:32:19 PM",
6+
"dateUpdated": "Jul 10, 2026, 6:32:19 PM",
7+
"baseScore": 7.5,
8+
"baseScoreVersion": "3.1",
9+
"baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
10+
"references": "https://github.com/LPO26/Path-Traversal-via-Web-Interface-on-WTI-Devices/blob/main/CVE%20Summary\nhttps://github.com/LPO26/Path-Traversal-via-Web-Interface-on-WTI-Devices/tree/main\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-70796\n",
11+
"aliases": "CVE-2025-70796\nGHSA-v6x3-78p8-29hj\n",
12+
"assigner": "mitre",
13+
"epss": 0.0,
14+
"enisaIdProduct": [
15+
{
16+
"id": "e23f3b22-aec3-368d-9099-6b07b12fc814",
17+
"product": {
18+
"name": "n/a",
19+
"vendor": {
20+
"name": "n/a"
21+
}
22+
},
23+
"product_version": "n/a"
24+
}
25+
],
26+
"enisaIdVendor": [
27+
{
28+
"id": "824e4a6d-d551-35d6-a4e8-201e3536ffd9",
29+
"vendor": {
30+
"name": "n/a"
31+
}
32+
}
33+
]
34+
}

‎advisories/2026/07/EUVD-2025-210452.json‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"id": "EUVD-2025-210452",
3+
"enisaUuid": "a2888f2d-0e90-3deb-8b3e-982362efa5bc",
4+
"description": "HestiaCP before 1.9.5 contains an authenticated OS command injection vulnerability that allows low-privilege authenticated users to execute arbitrary commands as root by injecting a single-quote character into unvalidated DNS record types. Attackers can exploit insufficient input validation in is_dns_record_format_valid() combined with unsafe eval-based parsing in update_domain_zone() to prematurely close a variable assignment string and achieve full root code execution on the underlying host in a single DNS record creation step.",
5+
"datePublished": "Jul 10, 2026, 5:50:33 PM",
6+
"dateUpdated": "Jul 10, 2026, 5:50:33 PM",
7+
"baseScore": 8.7,
8+
"baseScoreVersion": "4.0",
9+
"baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
10+
"references": "https://github.com/hestiacp/hestiacp/releases/tag/1.9.5\nhttps://github.com/hestiacp/hestiacp/pull/5197\nhttps://github.com/hestiacp/hestiacp/commit/a74babb739aa92e52b12d6ef52b6b9428ffbbb67\nhttps://www.vulncheck.com/advisories/hestiacp-authenticated-os-command-injection-via-dns-record-management\n",
11+
"aliases": "GHSA-5c2f-7vp3-pm3x\nCVE-2025-30007\n",
12+
"assigner": "VulnCheck",
13+
"epss": 0.0,
14+
"enisaIdProduct": [
15+
{
16+
"id": "b44a3c11-015f-3388-9e86-64d87150ca9f",
17+
"product": {
18+
"name": "hestiacp",
19+
"vendor": {
20+
"name": "hestiacp"
21+
}
22+
},
23+
"product_version": "0 <1.9.5"
24+
}
25+
],
26+
"enisaIdVendor": [
27+
{
28+
"id": "67bdad71-8fcb-3b13-ade1-ca95aa135a3f",
29+
"vendor": {
30+
"name": "hestiacp"
31+
}
32+
}
33+
]
34+
}

‎advisories/2026/07/EUVD-2025-210453.json‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"id": "EUVD-2025-210453",
3+
"enisaUuid": "723d1264-a14b-3ac1-a7e9-6239d7209c22",
4+
"description": "HestiaCP before 1.9.5 contains a stored cross-site scripting vulnerability that allows authenticated low-privilege users to inject arbitrary HTML by creating a DNS record with a double-quote followed by a script payload in the value field. The application fails to apply htmlspecialchars() encoding to the DNS record value field rendered into the data-sort-value HTML attribute in list_dns_rec.php, allowing the payload to execute in the browser of any user who views the DNS record list, including administrators.",
5+
"datePublished": "Jul 10, 2026, 5:51:07 PM",
6+
"dateUpdated": "Jul 10, 2026, 8:30:38 PM",
7+
"baseScore": 5.1,
8+
"baseScoreVersion": "4.0",
9+
"baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N",
10+
"references": "https://github.com/hestiacp/hestiacp/releases/tag/1.9.5\nhttps://github.com/hestiacp/hestiacp/pull/5196\nhttps://github.com/hestiacp/hestiacp/commit/07dda18ef0087ea981ff84d4d5757774cf2124b0\nhttps://www.vulncheck.com/advisories/hestiacp-stored-xss-via-dns-record-management-interface\n",
11+
"aliases": "CVE-2025-30008\nGHSA-w2cw-hx5v-f37r\n",
12+
"assigner": "VulnCheck",
13+
"epss": 0.0,
14+
"enisaIdProduct": [
15+
{
16+
"id": "2ddfd2eb-c866-34d7-93b9-90a34ed98c85",
17+
"product": {
18+
"name": "hestiacp",
19+
"vendor": {
20+
"name": "hestiacp"
21+
}
22+
},
23+
"product_version": "0 <1.9.5"
24+
}
25+
],
26+
"enisaIdVendor": [
27+
{
28+
"id": "42bec112-5bc4-36c4-a086-558781918573",
29+
"vendor": {
30+
"name": "hestiacp"
31+
}
32+
}
33+
]
34+
}

‎advisories/2026/07/EUVD-2026-34067.json‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"id": "EUVD-2026-34067",
3+
"enisaUuid": "d5e5f838-237b-35b7-866c-b4aeb7fd13c1",
4+
"description": "morgan vulnerable to Log Forging via unneutralized control characters in :remote-user",
5+
"datePublished": "Jul 10, 2026, 2:32:15 PM",
6+
"dateUpdated": "Jul 10, 2026, 2:32:15 PM",
7+
"baseScore": 5.3,
8+
"baseScoreVersion": "3.1",
9+
"baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
10+
"references": "https://github.com/expressjs/morgan/security/advisories/GHSA-4vj7-5mj6-jm8m\nhttps://cna.openjsf.org/security-advisories.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5078\n",
11+
"aliases": "GHSA-4vj7-5mj6-jm8m\nCVE-2026-5078\n",
12+
"assigner": "openjs",
13+
"epss": 0.25,
14+
"enisaIdProduct": [
15+
{
16+
"id": "a6f283ea-a912-3ab7-b39a-c43e38f6b9fc",
17+
"product": {
18+
"name": "morgan",
19+
"vendor": {
20+
"name": "n/a"
21+
}
22+
},
23+
"product_version": "1.2.0 \u22641.10.1"
24+
}
25+
],
26+
"enisaIdVendor": [
27+
{
28+
"id": "3d0f98fc-9c8f-39ec-b918-58e8748de07f",
29+
"vendor": {
30+
"name": "morgan"
31+
}
32+
}
33+
]
34+
}

‎advisories/2026/07/EUVD-2026-39122.json‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"id": "EUVD-2026-39122",
3+
"enisaUuid": "3c212716-8f77-3cc8-b97a-9d79a5ac43a2",
4+
"description": "SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file\u2500read), Incomplete fix of CVE-2026-41894 ",
5+
"datePublished": "Jul 10, 2026, 7:25:04 PM",
6+
"dateUpdated": "Jul 10, 2026, 7:25:04 PM",
7+
"baseScore": 7.5,
8+
"baseScoreVersion": "3.1",
9+
"baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
10+
"references": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-p4m3-mgmm-c664\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-54066\n",
11+
"aliases": "CVE-2026-54066\nGHSA-p4m3-mgmm-c664\n",
12+
"assigner": "GitHub_M",
13+
"epss": 1.89,
14+
"enisaIdProduct": [
15+
{
16+
"id": "e3bdcf50-2f78-3844-b740-fa03c9bfdacb",
17+
"product": {
18+
"name": "SiYuan",
19+
"vendor": {
20+
"name": "siyuan-note"
21+
}
22+
},
23+
"product_version": "< 3.7.0"
24+
}
25+
],
26+
"enisaIdVendor": [
27+
{
28+
"id": "b69a1b37-637c-3be3-bd4f-ea9b66f4e840",
29+
"vendor": {
30+
"name": "siyuan-note"
31+
}
32+
}
33+
]
34+
}

‎advisories/2026/07/EUVD-2026-39123.json‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"id": "EUVD-2026-39123",
3+
"enisaUuid": "00460c9b-7f34-31cf-b5d6-37a1f52926da",
4+
"description": "SiYuan: Stored XSS to RCE via CSS-snippet <style> breakout in renderSnippet()",
5+
"datePublished": "Jul 10, 2026, 7:25:09 PM",
6+
"dateUpdated": "Jul 10, 2026, 7:25:09 PM",
7+
"baseScore": 9.9,
8+
"baseScoreVersion": "3.1",
9+
"baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
10+
"references": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-mvjr-vv3c-w4qv\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-54067\n",
11+
"aliases": "GHSA-mvjr-vv3c-w4qv\nCVE-2026-54067\n",
12+
"assigner": "GitHub_M",
13+
"epss": 0.31,
14+
"enisaIdProduct": [
15+
{
16+
"id": "59b77447-2b59-3fce-9314-c7a058363056",
17+
"product": {
18+
"name": "SiYuan",
19+
"vendor": {
20+
"name": "siyuan-note"
21+
}
22+
},
23+
"product_version": "< 3.7.0"
24+
}
25+
],
26+
"enisaIdVendor": [
27+
{
28+
"id": "c69029cd-656e-3c00-853b-1465e14043d3",
29+
"vendor": {
30+
"name": "siyuan-note"
31+
}
32+
}
33+
]
34+
}

‎advisories/2026/07/EUVD-2026-39124.json‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"id": "EUVD-2026-39124",
3+
"enisaUuid": "54737c43-404e-3811-beee-3b9e08278579",
4+
"description": "SiYuan: Unauthenticated SQLite Data Exfiltration via Template Injection in /api/icon/getDynamicIcon",
5+
"datePublished": "Jul 10, 2026, 7:26:00 PM",
6+
"dateUpdated": "Jul 10, 2026, 7:26:00 PM",
7+
"baseScore": 5.9,
8+
"baseScoreVersion": "3.1",
9+
"baseScoreVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
10+
"references": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-gcm7-57gf-953c\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-54068\n",
11+
"aliases": "CVE-2026-54068\nGHSA-gcm7-57gf-953c\n",
12+
"assigner": "GitHub_M",
13+
"epss": 0.24,
14+
"enisaIdProduct": [
15+
{
16+
"id": "402cfcb5-c580-335d-81fd-8b0610ba0121",
17+
"product": {
18+
"name": "SiYuan",
19+
"vendor": {
20+
"name": "siyuan-note"
21+
}
22+
},
23+
"product_version": "< 3.7.0"
24+
}
25+
],
26+
"enisaIdVendor": [
27+
{
28+
"id": "4ccaf576-f8e1-378d-b728-b0a4ed1baa0e",
29+
"vendor": {
30+
"name": "siyuan-note"
31+
}
32+
}
33+
]
34+
}

0 commit comments

Comments
 (0)