5096 matches found
CVE-2026-52782
OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is an IDOR through /projects//settings/projectstorages/ via PATCH parameter "storagesprojectstorageprojectfolderid" leads to Access to Unauthorized Resources. A project-admin in one project can...
CVE-2026-52782
OpenProject versions prior to 17.3.3 and 17.4.1 are affected by an IDOR in /projects//settings/project_storages/ via PATCH parameter storages_project_storage[project_folder_id], allowing a project-admin to hijack another project’s managed Nextcloud/OneDrive folder on the same storage. The vulnera...
PT-2026-52913
Name of the Vulnerable Software and Affected Versions OpenProject versions prior to 17.3.3 OpenProject versions prior to 17.4.1 Description An Insecure Direct Object Reference IDOR exists in the project storage settings. A project administrator can gain unauthorized access to the managed Nextclou...
CVE-2026-48736 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-38CX-CQ6F-5755 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-38CX-CQ6F-5755 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-48736 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-55767 vulnerabilities
Vulnerabilities for packages: drupal, nextcloud-server, privatebin...
GHSA-CWXW-98QJ-8QJX vulnerabilities
Vulnerabilities for packages: drupal, nextcloud-server, privatebin...
GHSA-WPWQ-4J6V-78M3 vulnerabilities
Vulnerabilities for packages: drupal, nextcloud-server, privatebin...
GHSA-VM85-HXW5-5432 vulnerabilities
Vulnerabilities for packages: drupal, nextcloud-server, privatebin...
GHSA-M557-WRGG-6RP4 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-55766 vulnerabilities
Vulnerabilities for packages: drupal, nextcloud-server, privatebin...
CVE-2026-55568 vulnerabilities
Vulnerabilities for packages: drupal, nextcloud-server, privatebin...
GHSA-M557-WRGG-6RP4 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-55767 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-55766 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-49214 vulnerabilities
Vulnerabilities for packages: nextcloud-server...