58485 matches found
MINI-3CM4-X836-JPJ3
Bulletin has no description...
MINI-3292-RQ8X-C7HF
Bulletin has no description...
MINI-5845-8R5X-9W95
Bulletin has no description...
CVE-2026-11499
creationtimestamp| type| source ---|---|--- 2026-06-07 13:51:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116709147982329600 2026-06-08 09:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnrcywmxxc2m 2026-06-08 09:00:41+00:00| seen|...
CVE-2026-11143
A heap buffer overflow flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501674219...
CVE-2026-10895
An use after free flaw was found in the Ozone component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513454018...
MINI-GJXJ-H56F-QQX7
Bulletin has no description...
MINI-4X6Q-HG5M-JV27
Bulletin has no description...
MINI-C3C6-G79H-FJ4F
Bulletin has no description...
Chanjet CRM SQL注入漏洞
Chanjet CRM is a customer relationship management system developed by Chanjet Corporation. Version 1.0 of Chanjet CRM has a SQL injection vulnerability. This vulnerability stems from incorrect handling of the parameter gblOrgID in the HTTP GET Request Handler component...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the UpdateSourceInventory and UpdateAgentStatus handlers due to insufficient validation of the sourceid claim in JSON Web Tokens against the requested source ID. An attacker can gain...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the UpdateSourceInventory and UpdateAgentStatus handlers due to insufficient validation of the sourceid claim in JSON Web Tokens against the requested source ID. An attacker can gain...
GHSA-7P85-W9PX-JPJP
creationtimestamp| type| source ---|---|--- 2026-06-06 23:55:29+00:00| seen| https://gist.github.com/vladko312/39507beaa58eacf3b62e6a6e6cd69128...
CVE-2026-11438
A vulnerability has been found in theonedev onedev up to 15.0.5. Affected by this vulnerability is an unknown functionality of the file /projects. The manipulation of the argument project.forkedFromId leads to improper authorization. The attack is possible to be carried out remotely. Upgrading to...
CVE-2026-11439
The vulnerability CVE-2026-11439 affects Theonedev Onedev up to version 15.0.5 in the Parent Project Handler, specifically the /projects/ function where manipulating the argument project.parentId leads to improper authorization. The attack may be executed remotely. A fix is available in version 1...
CVE-2026-11439
A vulnerability was found in theonedev onedev up to 15.0.5. Affected by this issue is some unknown functionality of the file /projects/ of the component Parent Project Handler. The manipulation of the argument project.parentId results in improper authorization. The attack may be performed from...
EUVD-2026-34974
A vulnerability was found in theonedev onedev up to 15.0.5. Affected by this issue is some unknown functionality of the file /projects/ of the component Parent Project Handler. The manipulation of the argument project.parentId results in improper authorization. The attack may be performed from...
CVE-2026-11439 theonedev Parent Project projects improper authorization
A vulnerability was found in theonedev onedev up to 15.0.5. Affected by this issue is some unknown functionality of the file /projects/ of the component Parent Project Handler. The manipulation of the argument project.parentId results in improper authorization. The attack may be performed from...
CVE-2026-11439 theonedev Parent Project projects improper authorization
A vulnerability was found in theonedev onedev up to 15.0.5. Affected by this issue is some unknown functionality of the file /projects/ of the component Parent Project Handler. The manipulation of the argument project.parentId results in improper authorization. The attack may be performed from...