CVE-2026-1879

A vulnerability was detected in Harvard University IQSS Dataverse up to 6.8. This affects an unknown function of the file /ThemeAndWidgets.xhtml of the component Theme Customization. Performing a manipulation of the argument uploadLogo results in unrestricted upload. Remote exploitation of the...

CVE-2025-29826 Microsoft Dataverse Elevation of Privilege Vulnerability

...

CVE-2025-47732

Microsoft Dataverse Remote Code Execution Vulnerability...

CVE-2025-29807

Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network...

CVE-2025-24053 Microsoft Dataverse Elevation of Privilege Vulnerability

...