4275 matches found
CVE-2026-15502
A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function rewardPurchase of the file /ipn.php of the component PayPal IPN Payment Handler. The manipulation of the argument itemnumber results in sql injection. The attack may be performed from remote. The vendor was contacte...
EUVD-2026-43238
A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function rewardPurchase of the file /ipn.php of the component PayPal IPN Payment Handler. The manipulation of the argument itemnumber results in sql injection. The attack may be performed from remote. The vendor was contacte...
EUVD-2026-41129
API Platform Core vulnerable to cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate...
CGA-2J38-CXFP-C8P6
Bulletin has no description...
MINI-JP24-44R5-PG2H
Bulletin has no description...
MINI-XRGW-4PX4-4PFX
Bulletin has no description...
MINI-G7V2-C3XW-FHGM
Bulletin has no description...
MINI-RGGR-J2HV-52CP
Bulletin has no description...
MINI-8RGP-3226-GQ3V
Bulletin has no description...
MINI-P7MJ-HFQ7-497V
Bulletin has no description...
MINI-WG7P-7VG7-RQ5P
Bulletin has no description...
MINI-RFHP-M2RC-R54M
Bulletin has no description...
CGA-HWPX-W437-XC4C
Bulletin has no description...
MINI-Q78H-G2H3-HVX6
Bulletin has no description...
MINI-J668-RPWG-48R9
Bulletin has no description...
CGA-9HC2-3V7R-3CHW
Bulletin has no description...
CGA-7F86-2394-443G
Bulletin has no description...
PT-2026-57038
Impact A user opens the cart page in the browser. In the background, the order gets completed, e.g. an admin changes the status, or the user finalizes payment in another tab. The browser still displays the old cart: the LiveComponent is unaware the underlying order state has changed. If the user...
GitLab 18.9 < 18.11.7 / 19.0 < 19.0.4 / 19.1 < 19.1.2 (CVE-2026-8472)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticate...