68305 matches found
MINI-5845-8R5X-9W95
Bulletin has no description...
CVE-2026-11499
creationtimestamp| type| source ---|---|--- 2026-06-07 13:51:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116709147982329600 2026-06-08 09:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnrcywmxxc2m 2026-06-08 09:00:41+00:00| seen|...
CVE-2026-11143
A heap buffer overflow flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501674219...
CVE-2026-10895
An use after free flaw was found in the Ozone component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513454018...
MINI-C3C6-G79H-FJ4F
Bulletin has no description...
MINI-GJXJ-H56F-QQX7
Bulletin has no description...
MINI-4X6Q-HG5M-JV27
Bulletin has no description...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the UpdateSourceInventory and UpdateAgentStatus handlers due to insufficient validation of the sourceid claim in JSON Web Tokens against the requested source ID. An attacker can gain...
Chanjet CRM SQL injection vulnerability
Chanjet CRM is a customer relationship management system developed by Chanjet Corporation. Version 1.0 of Chanjet CRM has a SQL injection vulnerability. This vulnerability stems from incorrect handling of the parameter gblOrgID in the HTTP GET Request Handler component...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the UpdateSourceInventory and UpdateAgentStatus handlers due to insufficient validation of the sourceid claim in JSON Web Tokens against the requested source ID. An attacker can gain...
GHSA-7P85-W9PX-JPJP
creationtimestamp| type| source ---|---|--- 2026-06-06 23:55:29+00:00| seen| https://gist.github.com/vladko312/39507beaa58eacf3b62e6a6e6cd69128 2026-10-17 21:57:30+00:00| seen| https://gist.github.com/vladko312/d61b950f168c791db4786b83dc7a81e6...
CVE-2026-11438
A vulnerability has been found in theonedev onedev up to 15.0.5. Affected by this vulnerability is an unknown functionality of the file /projects. The manipulation of the argument project.forkedFromId leads to improper authorization. The attack is possible to be carried out remotely. Upgrading to...
CVE-2026-11439
A vulnerability was found in theonedev onedev up to 15.0.5. Affected by this issue is some unknown functionality of the file /projects/ of the component Parent Project Handler. The manipulation of the argument project.parentId results in improper authorization. The attack may be performed from...
CVE-2026-11439 theonedev Parent Project projects improper authorization
A vulnerability was found in theonedev onedev up to 15.0.5. Affected by this issue is some unknown functionality of the file /projects/ of the component Parent Project Handler. The manipulation of the argument project.parentId results in improper authorization. The attack may be performed from...
EUVD-2026-34974
A vulnerability was found in theonedev onedev up to 15.0.5. Affected by this issue is some unknown functionality of the file /projects/ of the component Parent Project Handler. The manipulation of the argument project.parentId results in improper authorization. The attack may be performed from...
CVE-2026-11439
The vulnerability CVE-2026-11439 affects Theonedev Onedev up to version 15.0.5 in the Parent Project Handler, specifically the /projects/ function where manipulating the argument project.parentId leads to improper authorization. The attack may be executed remotely. A fix is available in version 1...
CVE-2026-11439 theonedev Parent Project projects improper authorization
A vulnerability was found in theonedev onedev up to 15.0.5. Affected by this issue is some unknown functionality of the file /projects/ of the component Parent Project Handler. The manipulation of the argument project.parentId results in improper authorization. The attack may be performed from...
MINI-W8G8-74GH-4P5R
Bulletin has no description...