82272 matches found
MINI-FGVJ-Q799-P9V3
Bulletin has no description...
MINI-MJFR-GHVH-6VP2
Bulletin has no description...
MINI-85JM-GH4P-4GRW
Bulletin has no description...
MINI-WM5C-967M-JH65
Bulletin has no description...
MINI-5MH6-X6QF-CWFH
Bulletin has no description...
MINI-V7XQ-33WW-PGMQ
Bulletin has no description...
MINI-PXF9-MF4G-WMP4
Bulletin has no description...
MINI-352V-W74C-PP8C
Bulletin has no description...
MINI-MX78-XWMG-MXJ6
Bulletin has no description...
MINI-8FPX-6C43-WQRP
Bulletin has no description...
MINI-45MX-5G93-V3M5
Bulletin has no description...
MINI-9728-GRWX-C52G
Bulletin has no description...
MINI-HHWQ-MFGV-8RCP
Bulletin has no description...
CVE-2026-59235
Missing Authorization CWE-862 in BankAccountListController app/Http/Controllers/Api/BankAccount/BankAccountListController.php, exposed at GET /api/bank-account, in Prospero Flow CRM companyid-get, performing only company scoping and no role or permission check before returning the data. This...
CVE-2026-59235
CVE-2026-59235 describes a missing authorization check in Prospero Flow CRM company_id)->get(), enabling any authenticated, low-privilege user to read all bank accounts within their company. The vulnerability exposes sensitive data (IBAN, SWIFT/BIC, account identifiers) without role/permission...
CVE-2026-59235 Missing authorization in Prospero Flow CRM allows low-privileged users to read all bank accounts
Missing Authorization CWE-862 in BankAccountListController app/Http/Controllers/Api/BankAccount/BankAccountListController.php, exposed at GET /api/bank-account, in Prospero Flow CRM companyid-get, performing only company scoping and no role or permission check before returning the data. This...
EUVD-2026-44608
Missing Authorization CWE-862 in BankAccountListController app/Http/Controllers/Api/BankAccount/BankAccountListController.php, exposed at GET /api/bank-account, in Prospero Flow CRM companyid-get, performing only company scoping and no role or permission check before returning the data. This...
CVE-2026-59235 Missing authorization in Prospero Flow CRM allows low-privileged users to read all bank accounts
Missing Authorization CWE-862 in BankAccountListController app/Http/Controllers/Api/BankAccount/BankAccountListController.php, exposed at GET /api/bank-account, in Prospero Flow CRM companyid-get, performing only company scoping and no role or permission check before returning the data. This...