Skip to content

Commit 2f3c846

Browse files
aboutcode-automationaboutcode-automation
committed
Sync EUVD catalog: Wed Jul 22 00:36:55 UTC 2026
Signed-off-by: AboutCode Automation <automation@aboutcode.org>
1 parent e1fa268 commit 2f3c846

1,559 files changed

Lines changed: 58280 additions & 328 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎advisories/2026/07/EUVD-2016-10909.json‎

Lines changed: 84 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,84 @@
1+
{
2+
"id": "EUVD-2016-10909",
3+
"enisaUuid": "2e9b008a-c49b-3506-a5e7-10b2ea1492bf",
4+
"description": "Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by manipulating the name parameter in a POST request to the login endpoint. Attackers can inject malicious SQL through the login form and retrieve injected query results from a subsequent session request, enabling extraction of plaintext credentials and other database content with DBA-level privileges.",
5+
"datePublished": "Jul 21, 2026, 9:32:39 PM",
6+
"dateUpdated": "Jul 21, 2026, 9:32:39 PM",
7+
"baseScore": 9.3,
8+
"baseScoreVersion": "4.0",
9+
"baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
10+
"references": "https://web.archive.org/web/20160601102456/http://www.wooyun.org/bugs/wooyun-2010-0145458\nhttps://packetstorm.news/files/id/137159\nhttps://www.linknat.com/\nhttps://www.vulncheck.com/advisories/linknat-vos3000-vos2009-sql-injection-via-login-jsp\nhttps://nvd.nist.gov/vuln/detail/CVE-2016-20096\n",
11+
"aliases": "GHSA-36f2-4m9x-c736\nCVE-2016-20096\n",
12+
"assigner": "VulnCheck",
13+
"epss": 0.0,
14+
"enisaIdProduct": [
15+
{
16+
"id": "10b5d97c-d46c-3d70-8efb-0a25eadf2e33",
17+
"product": {
18+
"name": "Linknat VOS2009",
19+
"vendor": {
20+
"name": "Kunshi Network Technology Co., Ltd."
21+
}
22+
},
23+
"product_version": "2.1.1.5"
24+
},
25+
{
26+
"id": "1bc691c5-11ab-3e85-8680-8cb94097262a",
27+
"product": {
28+
"name": "Linknat VOS3000",
29+
"vendor": {
30+
"name": "Kunshi Network Technology Co., Ltd."
31+
}
32+
},
33+
"product_version": "2.1.1.8"
34+
},
35+
{
36+
"id": "2054890f-6813-371d-b490-f0e87bcfb3dc",
37+
"product": {
38+
"name": "Linknat VOS3000",
39+
"vendor": {
40+
"name": "Kunshi Network Technology Co., Ltd."
41+
}
42+
},
43+
"product_version": "2.1.2.0"
44+
},
45+
{
46+
"id": "8acd9316-f0d9-3d8f-9ff7-e882c61d4ea2",
47+
"product": {
48+
"name": "Linknat VOS2009",
49+
"vendor": {
50+
"name": "Kunshi Network Technology Co., Ltd."
51+
}
52+
},
53+
"product_version": "2.1.2.0"
54+
},
55+
{
56+
"id": "a4fb704f-e0a5-3d3e-886c-8f6935c75a08",
57+
"product": {
58+
"name": "Linknat VOS3000",
59+
"vendor": {
60+
"name": "Kunshi Network Technology Co., Ltd."
61+
}
62+
},
63+
"product_version": "2.1.1.5"
64+
},
65+
{
66+
"id": "d35f173c-b36e-3e35-a29b-2b9bc41524fd",
67+
"product": {
68+
"name": "Linknat VOS2009",
69+
"vendor": {
70+
"name": "Kunshi Network Technology Co., Ltd."
71+
}
72+
},
73+
"product_version": "2.1.1.8"
74+
}
75+
],
76+
"enisaIdVendor": [
77+
{
78+
"id": "1115d8ab-cabb-3f12-8fc6-a3f4f647a093",
79+
"vendor": {
80+
"name": "Kunshi Network Technology Co., Ltd."
81+
}
82+
}
83+
]
84+
}

‎advisories/2026/07/EUVD-2023-60603.json‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"id": "EUVD-2023-60603",
3+
"enisaUuid": "1d3059ee-b5fd-39b5-ba4c-f14630bf66c5",
4+
"description": "HCL DevOps Plan is potentially susceptible to Cross-Site Scripting (XSS) which could allow an attacker to exploit this vulnerability if certain browser weaknesses are present.",
5+
"datePublished": "Jul 21, 2026, 4:34:15 AM",
6+
"dateUpdated": "Jul 21, 2026, 1:27:06 PM",
7+
"baseScore": 2.3,
8+
"baseScoreVersion": "4.0",
9+
"baseScoreVector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",
10+
"references": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132308\n",
11+
"aliases": "GHSA-6fqr-vpg5-q8jw\nCVE-2023-37508\n",
12+
"assigner": "HCL",
13+
"epss": 0.0,
14+
"enisaIdProduct": [
15+
{
16+
"id": "74eae4a9-a2d1-3b7f-97ac-741ecc09caba",
17+
"product": {
18+
"name": "DevOps Plan",
19+
"vendor": {
20+
"name": "IBM"
21+
}
22+
},
23+
"product_version": "<3.0.05"
24+
}
25+
],
26+
"enisaIdVendor": [
27+
{
28+
"id": "107fb63e-911b-34fb-abc5-3a97f7c36713",
29+
"vendor": {
30+
"name": "HCLSoftware"
31+
}
32+
}
33+
]
34+
}

‎advisories/2026/07/EUVD-2023-60604.json‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"id": "EUVD-2023-60604",
3+
"enisaUuid": "ec684af1-0fd7-375d-a63d-b3d64e251848",
4+
"description": "HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information revealed.",
5+
"datePublished": "Jul 21, 2026, 5:00:33 AM",
6+
"dateUpdated": "Jul 21, 2026, 5:00:33 AM",
7+
"baseScore": 6.9,
8+
"baseScoreVersion": "4.0",
9+
"baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
10+
"references": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132309\n",
11+
"aliases": "CVE-2023-37507\nGHSA-g92g-85h7-wvgv\n",
12+
"assigner": "HCL",
13+
"epss": 0.0,
14+
"enisaIdProduct": [
15+
{
16+
"id": "ace4c19f-f6d4-3e7b-8ee7-d0aa88ef8efa",
17+
"product": {
18+
"name": "DevOps Plan",
19+
"vendor": {
20+
"name": "IBM"
21+
}
22+
},
23+
"product_version": "<3.0.05"
24+
}
25+
],
26+
"enisaIdVendor": [
27+
{
28+
"id": "739e4568-9217-368b-ba99-1220744819e8",
29+
"vendor": {
30+
"name": "HCLSoftware"
31+
}
32+
}
33+
]
34+
}

‎advisories/2026/07/EUVD-2024-55688.json‎

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
{
2+
"id": "EUVD-2024-55688",
3+
"enisaUuid": "70b9eae5-976f-3ef5-b311-ddd7f650b2ad",
4+
"description": "The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EEE0 function of the file /goform/SetStaticRouteCfg.",
5+
"datePublished": "Jul 21, 2026, 12:30:28 AM",
6+
"dateUpdated": "Jul 21, 2026, 12:30:28 AM",
7+
"baseScore": 0.0,
8+
"references": "https://www.tendacn.com/download/detail-4515.html\nhttps://gitee.com/GXB0_0/iot-vul/blob/master/Tenda/TX9/20/SetStaticRouteCfg.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-51312\n",
9+
"aliases": "GHSA-c5qf-ggv6-wvmw\nCVE-2024-51312\n",
10+
"assigner": "mitre",
11+
"epss": 0.0,
12+
"enisaIdProduct": [
13+
{
14+
"id": "915400ea-e1be-304e-9135-c194ceb0669a",
15+
"product": {
16+
"name": "n/a",
17+
"vendor": {
18+
"name": "n/a"
19+
}
20+
},
21+
"product_version": "n/a"
22+
}
23+
],
24+
"enisaIdVendor": [
25+
{
26+
"id": "f998034c-aa11-38ea-b287-ce35d7e2b63d",
27+
"vendor": {
28+
"name": "n/a"
29+
}
30+
}
31+
]
32+
}

‎advisories/2026/07/EUVD-2024-55690.json‎

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
{
2+
"id": "EUVD-2024-55690",
3+
"enisaUuid": "667d2553-f738-30a5-a767-5b18fca2983d",
4+
"description": "The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_424CE0 function of the file /goform/setMacFilterCfg.",
5+
"datePublished": "Jul 21, 2026, 12:30:28 AM",
6+
"dateUpdated": "Jul 21, 2026, 12:30:28 AM",
7+
"baseScore": 0.0,
8+
"references": "https://www.tendacn.com/download/detail-4515.html\nhttps://gitee.com/GXB0_0/iot-vul/blob/master/Tenda/TX9/20/setMacFilterCfg.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-51314\n",
9+
"aliases": "GHSA-wq84-7pxg-4vqq\nCVE-2024-51314\n",
10+
"assigner": "mitre",
11+
"epss": 0.0,
12+
"enisaIdProduct": [
13+
{
14+
"id": "52c9e1c2-7880-372e-babb-e0139f03c858",
15+
"product": {
16+
"name": "n/a",
17+
"vendor": {
18+
"name": "n/a"
19+
}
20+
},
21+
"product_version": "n/a"
22+
}
23+
],
24+
"enisaIdVendor": [
25+
{
26+
"id": "e1ae048b-aba4-3282-8d2e-f3f62fd9fd10",
27+
"vendor": {
28+
"name": "n/a"
29+
}
30+
}
31+
]
32+
}

‎advisories/2026/07/EUVD-2024-55691.json‎

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
{
2+
"id": "EUVD-2024-55691",
3+
"enisaUuid": "7dc59b83-007d-3ac1-99ba-ba252af825a8",
4+
"description": "The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_425964 function of the file /goform/SetOnlineDevName",
5+
"datePublished": "Jul 21, 2026, 12:30:28 AM",
6+
"dateUpdated": "Jul 21, 2026, 12:30:28 AM",
7+
"baseScore": 0.0,
8+
"references": "https://www.tendacn.com/download/detail-4515.html\nhttps://gitee.com/GXB0_0/iot-vul/blob/master/Tenda/TX9/20/SetOnlineDevName_mac.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-51315\n",
9+
"aliases": "GHSA-3cff-m666-2q5g\nCVE-2024-51315\n",
10+
"assigner": "mitre",
11+
"epss": 0.0,
12+
"enisaIdProduct": [
13+
{
14+
"id": "ef17797f-3f43-376a-b625-14dc775f47b0",
15+
"product": {
16+
"name": "n/a",
17+
"vendor": {
18+
"name": "n/a"
19+
}
20+
},
21+
"product_version": "n/a"
22+
}
23+
],
24+
"enisaIdVendor": [
25+
{
26+
"id": "a22c915f-3a21-37e5-b9e5-9568f696e2be",
27+
"vendor": {
28+
"name": "n/a"
29+
}
30+
}
31+
]
32+
}

‎advisories/2026/07/EUVD-2024-55692.json‎

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
{
2+
"id": "EUVD-2024-55692",
3+
"enisaUuid": "86e005bf-afe4-3fab-ab19-1f351d3a3db8",
4+
"description": "The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the update_dev_name function of the file /goform/SetOnlineDevName",
5+
"datePublished": "Jul 21, 2026, 12:30:29 AM",
6+
"dateUpdated": "Jul 21, 2026, 12:30:29 AM",
7+
"baseScore": 0.0,
8+
"references": "https://www.tendacn.com/download/detail-4515.html\nhttps://gitee.com/GXB0_0/iot-vul/blob/master/Tenda/TX9/20/SetOnlineDevName_devName.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-51316\n",
9+
"aliases": "GHSA-h35h-v5xv-h5r6\nCVE-2024-51316\n",
10+
"assigner": "mitre",
11+
"epss": 0.0,
12+
"enisaIdProduct": [
13+
{
14+
"id": "28b6bbe7-8eb8-3b98-9286-fdc8495fa2a4",
15+
"product": {
16+
"name": "n/a",
17+
"vendor": {
18+
"name": "n/a"
19+
}
20+
},
21+
"product_version": "n/a"
22+
}
23+
],
24+
"enisaIdVendor": [
25+
{
26+
"id": "85d2d176-d379-3f4e-bc9a-9713c26489cc",
27+
"vendor": {
28+
"name": "n/a"
29+
}
30+
}
31+
]
32+
}

‎advisories/2026/07/EUVD-2024-55693.json‎

Lines changed: 84 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,84 @@
1+
{
2+
"id": "EUVD-2024-55693",
3+
"enisaUuid": "b9fcbcc0-9561-3d23-9431-b6908497dad1",
4+
"description": "An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /etc/apparmor.d/abstractions/nss-systemd (inherited via ) inadvertently permit strictly confined snap applications, which lack the privileged account-control interface, to interact directly with the io.systemd.Multiplexer and io.systemd.NameServiceSwitch UNIX domain sockets under /run/systemd/userdb/.\nOn systems where the systemd-userdbd service is installed and operational, the service fails to distinguish between an unconfined root user on the host system and a restricted root user running within a snap application's sandbox (such as a daemon or configuration hook). Because systemd-userdbd returns \"complete\" user records\u2014including sensitive hashed user passwords from /etc/shadow\u2014when queried by a process running as root, a compromised or malicious strictly confined snap executing code as root can successfully query the Varlink interface to retrieve all system password hashes, bypassing intended snap sandbox restrictions. This issue is mitigated by the fact that systemd-userdbd is not installed by default on standard Ubuntu deployments.",
5+
"datePublished": "Jul 21, 2026, 2:00:51 PM",
6+
"dateUpdated": "Jul 21, 2026, 2:00:51 PM",
7+
"baseScore": 5.6,
8+
"baseScoreVersion": "3.1",
9+
"baseScoreVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
10+
"references": "https://ubuntu.com/security/CVE-2024-5300\n",
11+
"aliases": "CVE-2024-5300\nGHSA-px3v-8ppp-543h\n",
12+
"assigner": "canonical",
13+
"epss": 0.0,
14+
"enisaIdProduct": [
15+
{
16+
"id": "54508976-f8e5-3f84-8b88-58269c1076ae",
17+
"product": {
18+
"name": "Ubuntu 22.04 LTS",
19+
"vendor": {
20+
"name": "Canonical"
21+
}
22+
},
23+
"product_version": "patch: 2.76+ubuntu22.04.1"
24+
},
25+
{
26+
"id": "630dc58a-0c98-3fb0-8680-7018ed962545",
27+
"product": {
28+
"name": "Ubuntu 26.04 LTS",
29+
"vendor": {
30+
"name": "Canonical"
31+
}
32+
},
33+
"product_version": "patch: 2.76+ubuntu26.04.3"
34+
},
35+
{
36+
"id": "8dd75cfe-4942-37f1-814b-60c4cfd274b0",
37+
"product": {
38+
"name": "Ubuntu 20.04 LTS",
39+
"vendor": {
40+
"name": "Canonical"
41+
}
42+
},
43+
"product_version": "patch: 2.67.1+20.04ubuntu1~esm2"
44+
},
45+
{
46+
"id": "c3406788-77a6-3f0b-ba23-8cab9cba8d75",
47+
"product": {
48+
"name": "Ubuntu 16.04 LTS",
49+
"vendor": {
50+
"name": "Canonical"
51+
}
52+
},
53+
"product_version": "patch: 2.61.4ubuntu0.16.04.1+esm3"
54+
},
55+
{
56+
"id": "d010df99-7604-32eb-bec2-d391b1a0a0a8",
57+
"product": {
58+
"name": "Ubuntu 24.04 LTS",
59+
"vendor": {
60+
"name": "Canonical"
61+
}
62+
},
63+
"product_version": "patch: 2.76+ubuntu24.04.1"
64+
},
65+
{
66+
"id": "fe0ff848-114b-317d-a3b4-a0d0acd03562",
67+
"product": {
68+
"name": "Ubuntu 18.04 LTS",
69+
"vendor": {
70+
"name": "Canonical"
71+
}
72+
},
73+
"product_version": "patch: 2.61.4ubuntu0.18.04.1+esm3"
74+
}
75+
],
76+
"enisaIdVendor": [
77+
{
78+
"id": "9f479e92-f8e0-3d4e-9129-256322b2e1de",
79+
"vendor": {
80+
"name": "Canonical"
81+
}
82+
}
83+
]
84+
}

0 commit comments

Comments
 (0)