Lucene search
+L

9143 matches found

GitLab Advisory Database
GitLab Advisory Database
added 2026/02/27 12:00 a.m.14 views

@actual-app/sync-server: Missing authorization in sync endpoints allows cross-user budget file access in multi-user mode

In multi-user mode OpenID, the sync API endpoints /sync/ don't verify that the authenticated user owns or has access to the file being operated on. Any authenticated user can read, modify, and overwrite any other user's budget files by providing their file ID...

7.1CVSS5.9AI score0.00295EPSS
SaveExploits1References6Affected Software1
CVE
CVE
added 2026/02/26 11:57 p.m.38 views

CVE-2026-27767

The CVE-2026-27767 issue concerns WebSocket endpoints used for Open Charge Point Protocol (OCPP) in charging-station infrastructure. The underlying vulnerability is lack of authentication on these endpoints, allowing an unauthenticated attacker to connect with a known or discovered charging-stati...

9.8CVSS5.5AI score0.00508EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/02/26 11:43 p.m.47 views

CVE-2026-24731

CVE-2026-24731 affects EV2GO EV2GO ev2go.io: WebSocket endpoints lack authentication, allowing unauthenticated charging stations to impersonate a station and issue/receive OCPP commands to the backend. Root cause: missing authentication at the OCPP WebSocket endpoint enabling privilege escalation...

9.8CVSS5.5AI score0.00557EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/26 11:36 p.m.5 views

CVE-2026-27652 CloudCharge cloudcharge.se Insufficient Session Expiration

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers and enables session hijacking or shadowing, where the most recent...

7.3CVSS6AI score0.00313EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/26 11:24 p.m.4 views

CVE-2026-20781

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

9.8CVSS5.8AI score0.00518EPSS
SaveExploits0References4
NVD
NVD
added 2026/02/26 11:16 p.m.28 views

CVE-2026-28230

SteVe is an open-source EV charging station management system. In versions up to and including 3.11.0, when a charger sends a StopTransaction message, SteVe looks up the transaction solely by transactionId a sequential integer starting from 1 without verifying that the requesting charger matches...

7.1CVSS0.0016EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/26 11:16 p.m.14 views

CVE-2026-27839

wger is a free, open-source workout and fitness manager. In versions up to and including 2.4, three nutritionalvalues action endpoints fetch objects via Model.objects.getpk=pk — a raw ORM call that bypasses the user-scoped queryset. Any authenticated user can read another user's private nutrition...

4.3CVSS0.0026EPSS
SaveExploits1References2
CVE
CVE
added 2026/02/26 11:04 p.m.29 views

CVE-2026-25851

The CVE-2026-25851 entries describe a vulnerability where WebSocket endpoints used for Open Charge Point Protocol (OCPP) communications lack authentication. The underlying issue allows an unauthenticated attacker to connect to the OCPP WebSocket endpoint (e.g., with a known or discovered charging...

9.8CVSS5.5AI score0.00643EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/02/26 11:04 p.m.31 views

CVE-2026-25851 Chargemap chargemap.com Missing Authentication for Critical Function

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

9.4CVSS0.00643EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/26 11:04 p.m.5 views

CVE-2026-25851

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

9.8CVSS5.8AI score0.00643EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/02/26 10:56 p.m.33 views

CVE-2026-28275 Initiative Vulnerable to Improper Session Invalidation (JWT Remains Valid)

Initiative is a self-hosted project management platform. Versions of the application prior to 0.32.4 do not invalidate previously issued JWT access tokens after a user changes their password. As a result, older tokens remain valid until expiration and can still be used to access protected API...

8.1CVSS0.00369EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/02/26 10:49 p.m.40 views

CVE-2026-28230 In SteVe, any authenticated charger can terminate any other charger's active transaction (missing ownership verification on StopTransaction)

SteVe is an open-source EV charging station management system. In versions up to and including 3.11.0, when a charger sends a StopTransaction message, SteVe looks up the transaction solely by transactionId a sequential integer starting from 1 without verifying that the requesting charger matches...

7.1CVSS0.0016EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/26 10:49 p.m.10 views

CVE-2026-28230

SteVe is an open-source EV charging station management system. In versions up to and including 3.11.0, when a charger sends a StopTransaction message, SteVe looks up the transaction solely by transactionId a sequential integer starting from 1 without verifying that the requesting charger matches...

7.1CVSS5.7AI score0.0016EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/02/26 10:49 p.m.24 views

CVE-2026-28230

SteVe (open-source EV charging station management) versions up to 3.11.0 are vulnerable to a StopTransaction impact where a charger can terminate another charger’s active session. Root cause: OcppServerRepositoryImpl.getTransaction() queries only by transactionId and does not verify chargeBoxId o...

7.1CVSS5.4AI score0.0016EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/26 10:49 p.m.8 views

CVE-2026-28230 In SteVe, any authenticated charger can terminate any other charger's active transaction (missing ownership verification on StopTransaction)

SteVe is an open-source EV charging station management system. In versions up to and including 3.11.0, when a charger sends a StopTransaction message, SteVe looks up the transaction solely by transactionId a sequential integer starting from 1 without verifying that the requesting charger matches...

7.1CVSS5.9AI score0.0016EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/02/26 10:49 p.m.19 views

EUVD-2026-8917

SteVe is an open-source EV charging station management system. In versions up to and including 3.11.0, when a charger sends a StopTransaction message, SteVe looks up the transaction solely by transactionId a sequential integer starting from 1 without verifying that the requesting charger matches...

7.1CVSS5.4AI score0.0016EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/02/26 10:34 p.m.15 views

CVE-2026-27706

Plane is an an open-source project management tool. Prior to version 1.2.2, a Full Read Server-Side Request Forgery SSRF vulnerability has been identified in the "Add Link" feature. This flaw allows an authenticated attacker with general user privileges to send arbitrary GET requests to the...

7.7CVSS5.6AI score0.00213EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/02/26 10:15 p.m.6 views

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the get function. An attacker can access sensitive dietary and health information belonging to other users by supplying arbitrary primary keys to specific API endpoints while...

5.3CVSS6AI score0.0026EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2026/02/26 10:15 p.m.13 views

wger: IDOR in nutritional_values endpoints exposes private dietary data via direct ORM lookup

Summary Three nutritionalvalues action endpoints fetch objects via Model.objects.getpk=pk — a raw ORM call that bypasses the user-scoped queryset. Any authenticated user can read another user's private nutrition plan data, including caloric intake and full macro breakdown, by supplying an arbitra...

4.3CVSS5.5AI score0.0026EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
added 2026/02/26 10:15 p.m.14 views

EUVD-2026-8907

wger: IDOR in nutritionalvalues endpoints exposes private dietary data via direct ORM lookup...

4.3CVSS5.3AI score0.0026EPSS
SaveExploits1References2
Rows per page
Query Builder