371 matches found
EUVD-2026-65352
The extension's frontend detail-view document lookup does not apply the current site's siteHash filter or frontend user access filter, unlike the regular search path. A visitor who can obtain or guess a valid Solr document id can retrieve documents through this lookup without the same access...
CVE-2026-72691
An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTERKEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud function. The function skips its isAuthenticated check whenever an...
MINI-RQ38-PHV8-J899
Bulletin has no description...
MINI-R224-823J-74F2
Bulletin has no description...
ECHO-6F24-CDD7-9E3E
Bulletin has no description...
MINI-9G2Q-554G-GF39
Bulletin has no description...
MINI-4HR8-C2M5-6945
Bulletin has no description...
MINI-8RQG-VHVG-WQ2V
Bulletin has no description...
MINI-PF9M-W6HG-9M75
Bulletin has no description...
CGA-JJJX-R7M6-9WGP
Bulletin has no description...
MINI-F3Q5-7XGG-G49M
Bulletin has no description...
MINI-GX44-PMRG-J57V
Bulletin has no description...
CVE-2026-54022 Open WebUI: Any authenticated user can read other users' private notes via Socket.IO
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the ydoc:document:join Socket.IO handler checks note ownership only when the documentid starts with note: colon. However, the YdocManager storage layer normalizes all document IDs b...
MINI-PVQV-W7RC-6V25
Bulletin has no description...
MINI-X2FW-P82Q-V99H
Bulletin has no description...
MINI-2RVP-J9JF-M7CM
Bulletin has no description...
MINI-JG53-6PQM-2VW8
Bulletin has no description...
MINI-689W-955V-2J3X
Bulletin has no description...