38 matches found
CVE-2026-97155
Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...
CVE-2026-97155
Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...
CVE-2026-97155
Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...
EUVD-2026-85790
Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...
CVE-2026-97155
The Fabasoft Folio Client (before 2026), including versions shipped with Fabasoft eGov-Suite , is vulnerable to unauthorized function invocation. The root cause is that the VALIDDOMAINS registry value, intended to restrict web origins, is optional and empty by default, causing the client to trust...
CVE-2026-97155: Origin Validation Error
Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...
PT-2026-97701
Name of the Vulnerable Software and Affected Versions Fabasoft Folio Client versions prior to 2026 Description A locally installed component that communicates with the browser extension via web messaging does not restrict which web origins may invoke its functions by default. The registry value...
EUVD-2014-7431
Malware in sbrugna...
EUVD-2022-34218
Malicious code in bioql PyPI...
EUVD-2023-36988
Malicious code in bioql PyPI...
CVE-2023-32764
Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator...
CVE-2022-29908
The folioupdate service in Fabasoft Cloud Enterprise Client 22.4.0043 allows Local Privilege Escalation...
CVE-2023-32764
Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator...
CVE-2023-32764
Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator...
CVE-2023-32764
Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator...
Code injection
Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator...
PT-2023-24011
Name of the Vulnerable Software and Affected Versions Fabasoft Cloud Enterprise Client version 23.3.0.130 Description The issue allows a user to escalate their privileges to local administrator. Recommendations For Fabasoft Cloud Enterprise Client version 23.3.0.130, at the moment, there is no...
CVE-2023-32764
Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator...
Fabasoft Cloud Enterprise Client Security Vulnerability
Fabasoft Cloud Enterprise Client is a cloud enterprise client from Fabasoft Austria. It is used to edit documents directly from a web browser. A security vulnerability exists in Fabasoft Cloud Enterprise Client version 23.3.0.130, which originates from allowing a user to escalate privileges to...