39 matches found
CVE-2026-6826
Concrete CMS 9.5.0 and below is vulnerable to unauthenticated file usage disclosure via missing permission check in the usage controller. Any unauthenticated visitor can request /ccm/system/dialogs/file/usage/fID with any file ID and receive a list of every page that references that file, includi...
CVE-2026-6826
Concrete CMS 9.5.0 and below is vulnerable to unauthenticated file usage disclosure via missing permission check in the usage controller. Any unauthenticated visitor can request /ccm/system/dialogs/file/usage/fID with any file ID and receive a list of every page that references that file,...
MINI-6826-M9FP-4M68
Bulletin has no description...
CVE-2025-58091
creationtimestamp| type| source ---|---|--- 2026-01-20 16:30:40+00:00| seen| https://infosec.place/objects/86c1cfe3-6826-4fb9-8bab-2163ea39c0ed...
CVE-2013-6826
cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrftoken parameter, which allows remote attackers to perform cross-site request forgery CSRF attacks...
CVE-2025-6826
creationtimestamp| type| source ---|---|--- 2025-06-28 21:55:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19833...
CVE-2024-6826
creationtimestamp| type| source ---|---|--- 2024-10-24 12:38:12+00:00| seen| https://t.me/cvedetector/8785...
CVE-2024-6826 Allocation of Resources Without Limits or Throttling in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 17.3.6, 17.4 before 17.4.3, and 17.5 before 17.5.1. A denial of service could occur via importing a malicious crafted XML manifest file...
GitLab 11.2 < 17.3.6 / 17.4 < 17.4.3 / 17.5 < 17.5.1 (CVE-2024-6826)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 17.3.6, 17.4 before 17.4.3, and 17.5 before 17.5.1. A denial of service could occur via importing a malicious craft...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 : mod_jk vulnerability (USN-6826-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 host has a package installed that is affected by a vulnerability as referenced in the USN-6826-1 advisory. Karl von Randow discovered that modjk was vulnerable to an authentication bypass. If the configuration did not provide...
CVE-2023-6826
creationtimestamp| type| source ---|---|--- 2024-01-11 11:56:22+00:00| seen| https://t.me/ctinow/166465...
GHSA-RW54-6826-C8J5
creationtimestamp| type| source ---|---|--- 2023-12-18 20:48:08+00:00| seen| https://t.me/ctinow/156092...
CVE-2023-6826
The E2Pdf plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'importaction' function in versions up to, and including, 1.20.25. This makes it possible for authenticated attackers with a role that the administrator previously granted access...
CVE-2023-6826
CVE-2023-6826 affects the WordPress plugin E2Pdf (Export To Pdf Tool) where versions up to and including 1.20.25 fail to validate file types in the import_action function. This allows authenticated attackers with granted plugin access to upload arbitrary files to the server, with potential remote...
CVE-2023-6826 E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload
The E2Pdf plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'importaction' function in versions up to, and including, 1.20.25. This makes it possible for authenticated attackers with a role that the administrator previously granted access...
CVE-2020-6826
Mozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs present in Firefox 74. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affec...
CVE-2020-6826
CVE-2020-6826 affects Mozilla Firefox before version 75.0. The issue stems from memory-safety bugs in Firefox 74 that could lead to memory corruption and arbitrary code execution with a remote attack surface (no user interaction required). The Arch Linux advisory ASA-202004-8 provides remediation...
[ASA-202004-8] firefox: multiple issues
Arch Linux Security Advisory ASA-202004-8 ========================================= Severity: Critical Date : 2020-04-08 CVE-ID : CVE-2020-6821 CVE-2020-6823 CVE-2020-6824 CVE-2020-6825 CVE-2020-6826 Package : firefox Type : multiple issues Remote : Yes Link :...
Ubuntu 16.04 LTS / 18.04 LTS : Firefox vulnerabilities (USN-4323-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4323-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could...
CVE-2019-6826
A CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and earlier versions, which could cause arbitrary code execution on the system running SoMachine HVAC when a malicious DLL library is loaded by the product...