29 matches found
CVE-2026-97155
Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...
EUVD-2026-85790
Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...
CVE-2026-97155
The Fabasoft Folio Client (before 2026), including versions shipped with Fabasoft eGov-Suite , is vulnerable to unauthorized function invocation. The root cause is that the VALIDDOMAINS registry value, intended to restrict web origins, is optional and empty by default, causing the client to trust...
EUVD-2014-7431
Malware in sbrugna...
EUVD-2023-36988
Malicious code in bioql PyPI...
EUVD-2022-34218
Malicious code in bioql PyPI...
CVE-2023-32764
Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator...
CVE-2022-29908
The folioupdate service in Fabasoft Cloud Enterprise Client 22.4.0043 allows Local Privilege Escalation...
CVE-2023-32764
Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator...
CVE-2023-32764
Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator...
CVE-2023-32764
Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator...
Code injection
Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator...
CVE-2023-32764
CVE-2023-32764 affects Fabasoft Cloud Enterprise Client 23.3.0.130, with a vulnerability that allows a user to escalate privileges to local administrator. Multiple connected sources corroborate this specific product/version and the local-privilege-escalation impact. The available documents do not...
CVE-2023-32764
Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator...
Fabasoft Cloud Enterprise Client Security Vulnerability
Fabasoft Cloud Enterprise Client is a cloud enterprise client from Fabasoft Austria. It is used to edit documents directly from a web browser. A security vulnerability exists in Fabasoft Cloud Enterprise Client version 23.3.0.130, which originates from allowing a user to escalate privileges to...
CVE-2023-32764
Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator...
CVE-2022-29908
The folioupdate service in Fabasoft Cloud Enterprise Client 22.4.0043 allows Local Privilege Escalation...
CVE-2022-29908
The folioupdate service in Fabasoft Cloud Enterprise Client 22.4.0043 allows Local Privilege Escalation...