25056 matches found
ECHO-8445-3A6C-9043
Bulletin has no description...
ECHO-5A8A-19C3-EAEF
Bulletin has no description...
CVE-2026-53903
CVE-2026-53903 affects MCO via the insecure endpoint /customer/servlet/mco/webapi/trading-document/fetchPdfStatement. The underlying issue is an IDOR: the app does not properly validate that an authenticated user is authorized to access a requested document, allowing retrieval based on a user-sup...
EUVD-2026-40949
MCO is vulnerable to an Insecure Direct Object Reference IDOR vulnerability in the /customer/servlet/mco/webapi/trading-document/fetchPdfStatement endpoint. The application does not properly validate whether an authenticated user is authorized to access a requested document, allowing direct...
MINI-RFJR-G9C9-5XHV
Bulletin has no description...
CVE-2025-15666
creationtimestamp| type| source ---|---|--- 2026-07-01 10:35:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpld2ms3222b...
WordPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin <= 4.3.9.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
Insecure Direct Object Reference to Authenticated Subscriber+ Sensitive Information Disclosure vulnerability discovered by javitoia in WordPress Plugin LearnPress versions = 4.3.9.1...
CGA-FFQQ-F3QR-JVV4
Bulletin has no description...
CGA-R398-C7HQ-HGV5
Bulletin has no description...
CGA-HW73-V752-243R
Bulletin has no description...
CGA-4W8Q-3JCG-QMPQ
Bulletin has no description...
CGA-JC77-JCQ4-4X73
Bulletin has no description...
CGA-2MXP-QPW9-H774
Bulletin has no description...
CGA-G83P-V8PF-398F
Bulletin has no description...
CGA-H643-RP2F-JW84
Bulletin has no description...
CGA-GGWM-FG44-F47Q
Bulletin has no description...
CGA-3H4F-PX52-93M4
Bulletin has no description...
kernel: cachestat: fix page cache statistics permission checking
In the Linux kernel, the following vulnerability has been resolved: cachestat: fix page cache statistics permission checking When the 'cachestat' system call was added in commit cf264e1329fb "cachestat: implement cachestat syscall", it was meant to be a much more convenient and performant version...