5970 matches found
CVE-2026-72859 Budibase 3.39.4 before 3.40.0 Authorization Regression via S3 Presigned URL
Budibase versions 3.39.4 before 3.40.0 contain an authorization regression in the S3 attachment upload endpoint that allows BASIC users to obtain S3 PutObject presigned URLs by sending POST requests to the attachments endpoint. The route was changed from a BUILDER permission check to a TABLE/WRIT...
CVE-2026-72859 Budibase 3.39.4 before 3.40.0 Authorization Regression via S3 Presigned URL
Budibase versions 3.39.4 before 3.40.0 contain an authorization regression in the S3 attachment upload endpoint that allows BASIC users to obtain S3 PutObject presigned URLs by sending POST requests to the attachments endpoint. The route was changed from a BUILDER permission check to a TABLE/WRIT...
CVE-2026-72859 Budibase 3.39.4 before 3.40.0 Authorization Regression via S3 Presigned URL
Budibase versions 3.39.4 before 3.40.0 contain an authorization regression in the S3 attachment upload endpoint that allows BASIC users to obtain S3 PutObject presigned URLs by sending POST requests to the attachments endpoint. The route was changed from a BUILDER permission check to a TABLE/WRIT...
PT-2026-76014
When fabric-ca is configured with an LDAP backend, the username from HTTP Basic authentication is included in an LDAP uid search filter without proper escaping. An unauthenticated attacker with network access to the CA enrollment endpoint could exploit this to perform LDAP injection before passwo...
PT-2026-76566
Name of the Vulnerable Software and Affected Versions fabric-ca affected versions not specified Description When configured with an LDAP backend, the software fails to properly escape the username obtained from HTTP Basic authentication before including it in an LDAP uid search filter. This allow...
CVE-2026-66432
Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...
CVE-2026-61966
Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...
EUVD-2026-57865
Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...
CVE-2026-66432 WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...
CVE-2026-66432
Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...
CVE-2026-66432
CVE-2026-66432 affects the WordPress WPJAM Basic plugin, versions
CVE-2026-66432 WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...
EUVD-2026-57971
Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...
CVE-2026-61966
CVE-2026-61966 : Affected software is the WordPress WPJAM Basic plugin in versions ≤ 7.0.1. The vulnerability is a Subscriber SQL Injection in WPJAM Basic, with the underlying issue described across connected sources. The CVSS 3.1 base score is 9.3 (CRITICAL), with network attack vector, low atta...
CVE-2026-61966
Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...
CVE-2026-61966 WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability
Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...
CVE-2026-61966 WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability
Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...
Imperva API Security Token & Authentication Risk Report: Nearly 40% of APIs Face Multiple Authentication Risks
Every year, the security industry publishes benchmark reports built more or less the same way: pick a handful of common vulnerabilities, measure how often they show up, publish the percentages, and move on. We just finished our second year running one of those reports — and the most important thi...
