Lucene search
+L

2883 matches found

OSV
OSV
added 2026/08/25 11:42 a.m.9 views

BIT-KEYCLOAK-2026-4630 Keycloak: keycloak: unauthorized resource access and data modification via insecure direct object reference

A flaw was found in Keycloak. An authenticated client could exploit an Insecure Direct Object Reference IDOR vulnerability in the Authorization Services Protection API endpoint. By knowing or obtaining a resource's unique identifier UUID belonging to another Resource Server within the same realm,...

6.8CVSS5.4AI score0.00304EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/25 9:17 a.m.16 views

CVE-2026-77143

The frontend topic editing flow does not verify on the server side that the requesting visitor owns the topic being modified. As a result, a visitor who knows the identifier of a topic from the public forum can submit a modified update request for that topic directly and overwrite its content,...

8.8CVSS0.00239EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/25 9:17 a.m.13 views

CVE-2026-77135

The extension's user detail view fails to verify that a requested user record matches the configured or logged-in target, allowing any visitor with access to the Detail or List plugin to retrieve another frontend user's profile data, including name, email, date of birth and address, by supplying ...

8.2CVSS0.00239EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/25 9:00 a.m.13 views

EUVD-2026-65341

The extension's user detail view fails to verify that a requested user record matches the configured or logged-in target, allowing any visitor with access to the Detail or List plugin to retrieve another frontend user's profile data, including name, email, date of birth and address, by supplying ...

8.2CVSS5.7AI score0.00239EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/25 9:00 a.m.11 views

EUVD-2026-65334

The frontend company self-service editing feature relies on a template-level visibility flag to hide the edit form for company records a visitor does not own, but the corresponding write operation does not repeat this ownership check on the server side. As a result, a visitor who knows the...

8.8CVSS5.5AI score0.00239EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/25 9:00 a.m.11 views

EUVD-2026-65333

The frontend topic editing flow does not verify on the server side that the requesting visitor owns the topic being modified. As a result, a visitor who knows the identifier of a topic from the public forum can submit a modified update request for that topic directly and overwrite its content,...

8.8CVSS5.3AI score0.00239EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/25 6:19 a.m.14 views

CVE-2026-78466

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78278. Reason: This candidate is a reservation duplicate of CVE-2026-78278. Notes: All CVE users should reference CVE-2026-78278 instead of this candidate. All references and descriptions in this candidate have been...

0.00161EPSS
SaveExploits0
CVE
CVE
added 2026/08/25 5:31 a.m.14 views

CVE-2026-78466

This CVE is marked as a rejected reservation duplicate of CVE-2026-78278 , but connected documents provide concrete technical details. The Fluent Boards Pro plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 2.0.11 , caused by missing valida...

5.4AI score0.00161EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/25 5:31 a.m.11 views

EUVD-2026-65298

The Fluent Boards Pro plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.11 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an...

4.3CVSS5.4AI score0.00161EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/25 2:16 a.m.10 views

CVE-2026-10630

The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.29 via the 'resultID' parameter due to missing validation on a user controlled key...

4.3CVSS0.00284EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/25 1:26 a.m.36 views

CVE-2026-10630 WP Courses LMS <= 3.2.29 - Insecure Direct Object Reference to Authenticated (Custom+) Sensitive Information Disclosure via 'resultID' Parameter

The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.29 via the 'resultID' parameter due to missing validation on a user controlled key...

4.3CVSS0.00284EPSS
SaveExploits0References8
CVE
CVE
added 2026/08/25 1:26 a.m.21 views

CVE-2026-10630

WP Courses LMS (WordPress plugin) is vulnerable to Insecure Direct Object Reference (IDOR) in all versions up to and including 3.2.29 . The resultID parameter in the wpcq_get_quiz_result AJAX action lacks proper ownership validation, allowing authenticated users with custom-level access or above ...

4.3CVSS5.5AI score0.00284EPSS
SaveExploits0References8
Patchstack
Patchstack
added 2026/08/25 1:26 a.m.9 views

WordPress WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin <= 3.2.29 - Insecure Direct Object Reference to Authenticated (Custom+) Sensitive Information Disclosure vulnerability

Insecure Direct Object Reference to Authenticated Custom+ Sensitive Information Disclosure vulnerability discovered by Vapour in WordPress Plugin WP Courses LMS versions = 3.2.29...

4.3CVSS5.3AI score0.00284EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/08/25 1:26 a.m.8 views

EUVD-2026-65192

The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.29 via the 'resultID' parameter due to missing validation on a user controlled key...

4.3CVSS5.5AI score0.00284EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2026/08/24 7:40 p.m.11 views

Sakai Profile Image Deletion has an IDOR

Summary The Sakai REST API endpoint DELETE /api/users/userId/profile/image does not verify that the requesting user is authorized to modify the target user's profile. Any authenticated user can delete the profile image of any other user, including administrators, by supplying a different userId i...

6.5CVSS5.7AI score0.00044EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2026/08/24 7:40 p.m.13 views

GHSA-9284-FJC3-FMMJ Sakai Profile Image Deletion has an IDOR

Summary The Sakai REST API endpoint DELETE /api/users/userId/profile/image does not verify that the requesting user is authorized to modify the target user's profile. Any authenticated user can delete the profile image of any other user, including administrators, by supplying a different userId i...

6.5CVSS5.8AI score0.00044EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/24 6:17 p.m.11 views

CVE-2026-76073

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in labelstudio/tasks/api.py declares queryset = Annotation.objects.all and provides no getqueryset override, so the default lookup retrieves any annotation by primary key. The view's...

8.8CVSS0.00283EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/24 5:55 p.m.12 views

EUVD-2026-65060

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in labelstudio/tasks/api.py declares queryset = Annotation.objects.all and provides no getqueryset override, so the default lookup retrieves any annotation by primary key. The view's...

8.7CVSS5.5AI score0.00283EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/24 2:17 p.m.18 views

CVE-2026-76847

act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of that backend, including CreateArtifact, GetSignedArtifactURL, ListArtifacts, FinalizeArtifact and DeleteArtifact, accept a caller-supplied...

8.8CVSS0.00226EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/24 12:49 p.m.5 views

CVE-2026-78365 IDOR and missing authorization in Prospero Flow CRM supplier API allows cross-tenant read and modification

Authorization Bypass Through User-Controlled Key in the supplier API in Roskus Prospero Flow CRM 4.0.0 through 5.3.1 allows any authenticated user to read and modify another company's supplier record, and to reassign it to their own company, via a PUT request to /api/supplier/id setting companyid...

9.3CVSS5.5AI score
SaveExploits0References6
Rows per page
Query Builder