#euvd — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #euvd, aggregated by home.social.
-
🚨 EUVD-2026-33030
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Kibana, Kibana, Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28📝 Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user can send a specially crafted compressed request payload that is processed prior to authorization ch...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33030
-
🚨 EUVD-2026-33031
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Kibana, Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28📝 Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated low-privileged user can cause Kibana to consume exponentially increasing amounts of memory by submitting a speci...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33031
-
🚨 EUVD-2026-33032
📊 Score: 7.7/10 (CVSS v3.1)
📦 Product: Kibana, Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28📝 Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuring a Webhook connector with a crafted target, an attacker can cause Kib...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33032
-
🚨 EUVD-2026-33033
📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: Kibana, Kibana, Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28📝 Improper Input Validation (CWE-20) in the Kibana Fleet agent policy management feature can lead to privilege escalation. An authenticated user with Fleet management privileges can manipulate agent policy configuration by injecting values into ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33033
-
🚨 EUVD-2026-33034
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28📝 Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with viewer-level access can submit a request containing an oversized input value to an analytics collections manag...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33034
-
🚨 EUVD-2026-33035
📊 Score: 6.3/10 (CVSS v3.1)
📦 Product: Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28📝 Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress control...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33035
-
🚨 EUVD-2026-33036
📊 Score: 9.8/10 (CVSS v3.1)
📦 Product: Oracle Hospitality OPERA 5 Property Services, Oracle Hospitality OPERA 5 Property Services, Oracle Hospitality OPERA 5 Property Services (+2 more)
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33036
-
🚨 EUVD-2026-33037
📊 Score: 7.9/10 (CVSS v3.1)
📦 Product: Oracle REST Data Services
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33037
-
🚨 EUVD-2026-33038
📊 Score: 8.1/10 (CVSS v3.1)
📦 Product: Oracle REST Data Services
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Or...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33038
-
🚨 EUVD-2026-33039
📊 Score: 9.9/10 (CVSS v3.1)
📦 Product: Oracle REST Data Services
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Or...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33039
-
🚨 EUVD-2026-33040
📊 Score: 9.8/10 (CVSS v3.1)
📦 Product: Oracle Payments
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33040
-
🚨 EUVD-2026-33041
📊 Score: 7.4/10 (CVSS v3.1)
📦 Product: Oracle Payments
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with netwo...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33041
-
🚨 EUVD-2026-33042
📊 Score: 9.1/10 (CVSS v3.1)
📦 Product: Oracle Internet Procurement Connector
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerabilit...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33042
-
🚨 EUVD-2026-33043
📊 Score: 8.5/10 (CVSS v3.1)
📦 Product: Oracle Financials Common Modules
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33043
-
🚨 EUVD-2026-33044
📊 Score: 7.7/10 (CVSS v3.1)
📦 Product: Oracle Financials Common Modules
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33044
-
🚨 EUVD-2026-33045
📊 Score: 9.9/10 (CVSS v3.1)
📦 Product: Oracle iAssets
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle iAssets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33045
-
🚨 EUVD-2026-33046
📊 Score: 7.7/10 (CVSS v3.1)
📦 Product: Oracle Public Sector Financials (International)
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Supported versions that are affected are 12.2.6-12.2.15. Easily exploitabl...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33046
-
🚨 EUVD-2026-33047
📊 Score: 9.9/10 (CVSS v3.1)
📦 Product: Oracle Universal Work Queue
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerabilit...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33047
-
🚨 EUVD-2026-33048
📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: Oracle Payroll
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33048
-
🚨 EUVD-2026-33049
📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: Oracle Payroll
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33049
-
🚨 EUVD-2026-33050
📊 Score: 8.1/10 (CVSS v3.1)
📦 Product: Oracle Payroll
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33050
-
🚨 EUVD-2026-33051
📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Oracle REST Data Services
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromi...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33051
-
🚨 EUVD-2026-33052
📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Oracle REST Data Services
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromi...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33052
-
🚨 EUVD-2026-33013
📊 Score: 9.0/10 (CVSS v3.1)
📦 Product: Oracle Database Server
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compro...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33013
-
🚨 EUVD-2026-33015
📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Oracle Database Server
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromi...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33015
-
🚨 EUVD-2026-33014
📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Oracle Database Server
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromi...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33014
-
📊 EUVD Daily CVSS Summary
🟡 Average Score: 6.96/10 (Medium)
📈 Vulnerabilities: 397
⬇️ Min: 2.7 | ⬆️ Max: 10.0📅 Date: 2026-05-27
-
📊 EUVD Daily CVSS Summary
🟡 Average Score: 6.74/10 (Medium)
📈 Vulnerabilities: 286
⬇️ Min: 1.8 | ⬆️ Max: 10.0📅 Date: 2026-05-26
-
🚨 EUVD-2026-32007
📊 Score: 8.3/10 (CVSS v3.1)
📦 Product: velocity.js
🏢 Vendor: shepherdwind
📅 Updated: 2026-05-26📝 Velocity.js is a JavaScript implementation of the Apache Velocity template engine. In 2.1.5 and earlier, a prototype pollution vulnerability was discovered in velocityjs. This issue occurs during the processing of #set directives in Velocity templat...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32007
-
📊 EUVD Daily CVSS Summary
🟡 Average Score: 6.9/10 (Medium)
📈 Vulnerabilities: 161
⬇️ Min: 2.1 | ⬆️ Max: 9.3📅 Date: 2026-05-25
-
📊 EUVD Daily CVSS Summary
🟡 Average Score: 6.42/10 (Medium)
📈 Vulnerabilities: 288
⬇️ Min: 2.3 | ⬆️ Max: 9.8📅 Date: 2026-05-24
-
🚨 EUVD-2026-31622
📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Employee Management System
🏢 Vendor: code-projects
📅 Updated: 2026-05-25📝 A vulnerability was detected in code-projects Employee Management System 1.0. Affected is an unknown function of the file /myprofileup.php. Performing a manipulation of the argument ID results in cross site scripting. The attack is p...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31622
-
🚨 EUVD-2026-31621
📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Employee Management System
🏢 Vendor: code-projects
📅 Updated: 2026-05-25📝 A flaw has been found in code-projects Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /changepassemp.php. Executing a manipulation of the argument ID can lead to cross site scri...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31621
-
🚨 EUVD-2026-31620
📊 Score: 8.5/10 (CVSS v3.1)
📦 Product: Aterm CM51FD, Aterm MR51FN
🏢 Vendor: NEC Platforms, Ltd.
📅 Updated: 2026-05-25📝 An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31620
-
🚨 EUVD-2026-31623
📊 Score: 4.8/10 (CVSS v3.1)
📦 Product: Aterm WX4200D5, Aterm WX7800T8, Aterm WX11000T12 (+6 more)
🏢 Vendor: NEC Platforms, Ltd.
📅 Updated: 2026-05-25📝 A cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the web browser of a user accessing the web management interface via adjacent network.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31623
-
🚨 EUVD-2026-31626
📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Employee Management System
🏢 Vendor: code-projects
📅 Updated: 2026-05-25📝 A vulnerability has been found in code-projects Employee Management System 1.0. Affected by this issue is some unknown functionality of the file /empproject.php. The manipulation of the argument ID leads to cross site scripting. It i...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31626
-
🚨 EUVD-2026-31625
📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: KLiK SocialMediaWebsite
📅 Updated: 2026-05-25📝 A vulnerability was found in KLiK SocialMediaWebsite 1.0. This affects an unknown part of the component HTTP GET Request Parameter Handler. The manipulation results in injection. It is possible to launch the attack remotely. The exploit has been made public an...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31625
-
🚨 EUVD-2026-31624
📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: KLiK SocialMediaWebsite
📅 Updated: 2026-05-25📝 A vulnerability was determined in KLiK SocialMediaWebsite 1.0. This vulnerability affects the function uniqid of the file upload.inc.php of the component File Handler. This manipulation causes unrestricted upload. The attack can be initiated remotely. The expl...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31624
-
🚨 EUVD-2026-31616
📊 Score: 5.1/10 (CVSS v3.1)
📦 Product: Indian Invoicing System, Indian Invoicing System
🏢 Vendor: SourceCodester
📅 Updated: 2026-05-25📝 A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0. The impacted element is an unknown function of the file /Invoicing/add_order.php of the component Invoice Template Re...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31616
-
🚨 EUVD-2026-31618
📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Employee Management System
🏢 Vendor: code-projects
📅 Updated: 2026-05-25📝 A weakness has been identified in code-projects Employee Management System 1.0. This affects an unknown function of the file /eloginwel.php. This manipulation of the argument ID causes cross site scripting. Remote exploitation of the...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31618
-
🚨 EUVD-2026-31619
📊 Score: 8.5/10 (CVSS v3.1)
📦 Product: NitrorSense V3
🏢 Vendor: Acer
📅 Updated: 2026-05-25📝 NitroSense 3.x before 3.01.3052 contains Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing any authenticat...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31619
-
🚨 EUVD-2026-31617
📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Employee Management System
🏢 Vendor: code-projects
📅 Updated: 2026-05-25📝 A security vulnerability has been detected in code-projects Employee Management System 1.0. This impacts an unknown function of the file /myprofile.php. Such manipulation of the argument ID leads to cross site scripting. The attack c...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31617
-
🚨 EUVD-2024-23947
📊 Score: 5.5/10 (CVSS v3.1)
📦 Product: Linux, Linux, Linux (+24 more)
🏢 Vendor: Linux
📅 Published: 2024-04-03 | Updated: 2026-05-23📝 In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix potential bug in end_buffer_async_write
According to a syzbot report, end_buffer_async_write(), which handles the
completion of blo...🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-23947
-
🚨 EUVD-2024-23957
📊 Score: n/a
📦 Product: Linux, Linux, Linux (+18 more)
🏢 Vendor: Linux
📅 Published: 2024-04-03 | Updated: 2026-05-23📝 In the Linux kernel, the following vulnerability has been resolved:
crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
The SEV platform device can be shutdown with a null psp_master,
e.g., using DEBUG...🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-23957
-
🚨 EUVD-2024-23968
📊 Score: n/a
📦 Product: Linux, Linux, Linux (+16 more)
🏢 Vendor: Linux
📅 Published: 2024-04-03 | Updated: 2026-05-23📝 In the Linux kernel, the following vulnerability has been resolved:
parisc: Fix random data corruption from exception handler
The current exception handler implementation, which assists when accessing
user space memory, may ex...🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-23968
-
🚨 EUVD-2024-23974
📊 Score: 4.4/10 (CVSS v3.1)
📦 Product: Linux, Linux, Linux (+14 more)
🏢 Vendor: Linux
📅 Published: 2024-04-03 | Updated: 2026-05-23📝 In the Linux kernel, the following vulnerability has been resolved:
powerpc/kasan: Fix addr error caused by page alignment
In kasan_init_region, when k_start is not page aligned, at the begin of
for loop, k_cur ...🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-23974
-
🚨 EUVD-2024-23977
📊 Score: n/a
📦 Product: Linux, Linux, Linux (+14 more)
🏢 Vendor: Linux
📅 Published: 2024-04-03 | Updated: 2026-05-23📝 In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend
In current scenario if Plug-out and Plug-In performed continuously
there could be a cha...🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-23977
-
🚨 EUVD-2021-33862
📊 Score: n/a
📦 Product: Linux, Linux, Linux (+6 more)
🏢 Vendor: Linux
📅 Published: 2024-04-10 | Updated: 2026-05-23📝 In the Linux kernel, the following vulnerability has been resolved:
hugetlb, userfaultfd: fix reservation restore on userfaultfd error
Currently in the is_continue case in hugetlb_mcopy_atomic_pte(), if we
bail out using "goto ...🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-33862
-
🚨 EUVD-2021-33840
📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Linux, Linux, Linux (+12 more)
🏢 Vendor: Linux
📅 Published: 2024-04-10 | Updated: 2026-05-23📝 In the Linux kernel, the following vulnerability has been resolved:
scsi: core: sysfs: Fix hang when device state is set via sysfs
This fixes a regression added with:
commit f0f82e2476f6 ("scsi: core: Fix capac...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-33840
-
🚨 EUVD-2021-33843
📊 Score: n/a
📦 Product: Linux, Linux, Linux (+8 more)
🏢 Vendor: Linux
📅 Published: 2024-04-10 | Updated: 2026-05-23📝 In the Linux kernel, the following vulnerability has been resolved:
spi: fix use-after-free of the add_lock mutex
Commit 6098475d4cb4 ("spi: Fix deadlock when adding SPI controllers on
SPI buses") introduced a per-controller mu...🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-33843