3 matches found
CVE-2026-47414: Authorization Bypass Through User-Controlled Key
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. Five label endpoints — PATCH /workspaces/workspaceid/labels/labelid, DELETE .../labels/labelid, POST .../issues/issueid/labels/labelid, DELETE...
Cross site scripting
Cross-site scripting XSS vulnerability in adminui/userlist.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABELID parameter...
CVE-2014-0330
Cross-site scripting XSS vulnerability in adminui/userlist.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABELID parameter...