#euvd — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #euvd, aggregated by home.social.
-
📊 EUVD Monthly CVSS Summary
🟡 Average Score: 6.41/10 (Medium)
📈 Vulnerabilities: 105
⬇️ Min: 2.3 | ⬆️ Max: 8.8📅 Period: 2026-07-19 - 2026-08-17
-
📊 EUVD Weekly CVSS Summary
🟡 Average Score: 6.41/10 (Medium)
📈 Vulnerabilities: 105
⬇️ Min: 2.3 | ⬆️ Max: 8.8📅 Period: 2026-08-09 - 2026-08-15
-
📊 EUVD Daily CVSS Summary
🟡 Average Score: 6.41/10 (Medium)
📈 Vulnerabilities: 105
⬇️ Min: 2.3 | ⬆️ Max: 8.8📅 Date: 2026-08-12
-
🚨 EUVD-2026-56930
📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: InstaWP Connect – 1-click WP Staging & Migration
🏢 Vendor: instawp
📅 Updated: 2026-08-11📝 The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 0.1.3.6 via the (top-level script) function. This is due to the pl...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56930
-
🚨 EUVD-2026-56936
📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: Vagus Nerve Stimulator
🏢 Vendor: Pulsetto
📅 Updated: 2026-08-11📝 The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (BLE) interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56936
-
🚨 EUVD-2026-56930
📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: InstaWP Connect – 1-click WP Staging & Migration
🏢 Vendor: instawp
📅 Updated: 2026-08-11📝 The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 0.1.3.6 via the (top-level script) function. This is due to the pl...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56930
-
🚨 EUVD-2026-56720
📊 Score: 5.5/10 (CVSS v3.1)
📦 Product: Microsoft Office 2019, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 (+5 more)
🏢 Vendor: Microsoft
📅 Updated: 2026-08-11📝 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56720
-
🚨 EUVD-2026-56719
📊 Score: 7.8/10 (CVSS v3.1)
📦 Product: Microsoft Office 2019, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024 (+3 more)
🏢 Vendor: Microsoft
📅 Updated: 2026-08-11📝 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56719
-
🚨 EUVD-2026-56717
📊 Score: 7.8/10 (CVSS v3.1)
📦 Product: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021 (+5 more)
🏢 Vendor: Microsoft
📅 Updated: 2026-08-11📝 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56717
-
🚨 EUVD-2026-56719
📊 Score: 7.8/10 (CVSS v3.1)
📦 Product: Microsoft Office 2019, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024 (+3 more)
🏢 Vendor: Microsoft
📅 Updated: 2026-08-11📝 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56719
-
🚨 EUVD-2026-57017
📊 Score: 5.4/10 (CVSS v3.1)
📦 Product: notepad-plus-plus
🏢 Vendor: notepad-plus-plus
📅 Updated: 2026-08-11📝 Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory `$INSTDIR` from PowerEditor/installer/nppSetup.nsi into a Power...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-57017
-
🚨 EUVD-2026-56936
📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: Vagus Nerve Stimulator
🏢 Vendor: Pulsetto
📅 Updated: 2026-08-11📝 The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (BLE) interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56936
-
🚨 EUVD-2026-56908
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: MongoDB Server, MongoDB Server, MongoDB Server
🏢 Vendor: MONGODB
📅 Updated: 2026-08-11📝 An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56908
-
🚨 EUVD-2026-57017
📊 Score: 5.4/10 (CVSS v3.1)
📦 Product: notepad-plus-plus
🏢 Vendor: notepad-plus-plus
📅 Updated: 2026-08-11📝 Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory `$INSTDIR` from PowerEditor/installer/nppSetup.nsi into a Power...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-57017
-
🚨 EUVD-2026-57017
📊 Score: 5.4/10 (CVSS v3.1)
📦 Product: notepad-plus-plus
🏢 Vendor: notepad-plus-plus
📅 Updated: 2026-08-11📝 Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory `$INSTDIR` from PowerEditor/installer/nppSetup.nsi into a Power...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-57017
-
🚨 EUVD-2026-56936
📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: Vagus Nerve Stimulator
🏢 Vendor: Pulsetto
📅 Updated: 2026-08-11📝 The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (BLE) interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56936
-
🚨 EUVD-2026-57017
📊 Score: 5.4/10 (CVSS v3.1)
📦 Product: notepad-plus-plus
🏢 Vendor: notepad-plus-plus
📅 Updated: 2026-08-11📝 Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory `$INSTDIR` from PowerEditor/installer/nppSetup.nsi into a Power...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-57017
-
🚨 EUVD-2026-56936
📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: Vagus Nerve Stimulator
🏢 Vendor: Pulsetto
📅 Updated: 2026-08-11📝 The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (BLE) interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56936
-
🚨 EUVD-2026-56908
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: MongoDB Server, MongoDB Server, MongoDB Server
🏢 Vendor: MONGODB
📅 Updated: 2026-08-11📝 An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56908
-
🚨 EUVD-2026-57017
📊 Score: 5.4/10 (CVSS v3.1)
📦 Product: notepad-plus-plus
🏢 Vendor: notepad-plus-plus
📅 Updated: 2026-08-11📝 Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory `$INSTDIR` from PowerEditor/installer/nppSetup.nsi into a Power...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-57017
-
🚨 EUVD-2026-56908
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: MongoDB Server, MongoDB Server, MongoDB Server
🏢 Vendor: MONGODB
📅 Updated: 2026-08-11📝 An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56908
-
🚨 EUVD-2026-57017
📊 Score: 5.4/10 (CVSS v3.1)
📦 Product: notepad-plus-plus
🏢 Vendor: notepad-plus-plus
📅 Updated: 2026-08-11📝 Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory `$INSTDIR` from PowerEditor/installer/nppSetup.nsi into a Power...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-57017
-
🚨 EUVD-2026-56987
📊 Score: n/a
📦 Product: Chrome
🏢 Vendor: Google
📅 Updated: 2026-08-11📝 Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56987
-
🚨 EUVD-2026-57017
📊 Score: 5.4/10 (CVSS v3.1)
📦 Product: notepad-plus-plus
🏢 Vendor: notepad-plus-plus
📅 Updated: 2026-08-11📝 Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory `$INSTDIR` from PowerEditor/installer/nppSetup.nsi into a Power...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-57017
-
🚨 EUVD-2026-56908
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: MongoDB Server, MongoDB Server, MongoDB Server
🏢 Vendor: MONGODB
📅 Updated: 2026-08-11📝 An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56908
-
🚨 EUVD-2026-57017
📊 Score: 5.4/10 (CVSS v3.1)
📦 Product: notepad-plus-plus
🏢 Vendor: notepad-plus-plus
📅 Updated: 2026-08-11📝 Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory `$INSTDIR` from PowerEditor/installer/nppSetup.nsi into a Power...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-57017
-
🚨 EUVD-2026-56936
📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: Vagus Nerve Stimulator
🏢 Vendor: Pulsetto
📅 Updated: 2026-08-11📝 The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (BLE) interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56936
-
🚨 EUVD-2026-57017
📊 Score: 5.4/10 (CVSS v3.1)
📦 Product: notepad-plus-plus
🏢 Vendor: notepad-plus-plus
📅 Updated: 2026-08-11📝 Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory `$INSTDIR` from PowerEditor/installer/nppSetup.nsi into a Power...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-57017
-
🚨 EUVD-2026-56936
📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: Vagus Nerve Stimulator
🏢 Vendor: Pulsetto
📅 Updated: 2026-08-11📝 The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (BLE) interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56936
-
🚨 EUVD-2026-56908
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: MongoDB Server, MongoDB Server, MongoDB Server
🏢 Vendor: MONGODB
📅 Updated: 2026-08-11📝 An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56908