CVE-2026-109203

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the ConvertPdf servlet that allows authenticated users to download restricted PDF documents. Attackers can enumerate sequential docId values and use the version parameter to retrieve any PDF and its version...

CVE-2021-22005

This repository does not have a README...

CVE-2018-2893

This repository does not have a README...

CVE-2026-11105-Stack-Buffer-Overflow-in-Custom-Base64-Decoder

CVE-2026-11105 – Stack Buffer Overflow in Custom Base64 Decoder Program Code C // base64vuln.c - Vulnerable Base64 decoder include include include int base64decodeconst char in, sizet inlen, char out, sizet outlen static const char table =...

CVE-2017-5415

This repository does not have a README...

CVE-2026-109203 LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the ConvertPdf servlet that allows authenticated users to download restricted PDF documents. Attackers can enumerate sequential docId values and use the version parameter to retrieve any PDF and its version...

CVE-2026-109203

LogicalDOC Community Edition through version 9.3 is vulnerable to a missing authorization flaw in the ConvertPdf servlet (CWE-862). This vulnerability allows authenticated users to bypass access controls and download restricted PDF documents from folders they are not authorized to view. Attackers...

EUVD-2026-97442

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the ConvertPdf servlet that allows authenticated users to download restricted PDF documents. Attackers can enumerate sequential docId values and use the version parameter to retrieve any PDF and its version...

CVE-2026-109203 LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the ConvertPdf servlet that allows authenticated users to download restricted PDF documents. Attackers can enumerate sequential docId values and use the version parameter to retrieve any PDF and its version...

EUVD-2026-97443

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the zip-export servlet that allows authenticated users to export restricted folders by supplying a folderId parameter. Attackers can request /zip-export with a restricted folder ID, since...

CVE-2026-109202

LogicalDOC Community Edition (through version 9.3) contains a missing authorization vulnerability within the zip-export servlet . The root cause is that the ZipExport.addFolderDocuments() method fails to perform necessary READ and DOWNLOAD permission checks. Consequently, an authenticated user ca...

CVE-2026-109202 LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the zip-export servlet that allows authenticated users to export restricted folders by supplying a folderId parameter. Attackers can request /zip-export with a restricted folder ID, since...

CVE-2026-109202 LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the zip-export servlet that allows authenticated users to export restricted folders by supplying a folderId parameter. Attackers can request /zip-export with a restricted folder ID, since...

CVE-2026-109201 LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated users to access and modify unauthorized documents. Attackers can call copy, getExtractedText, deleteVersion, reindex, deleteLink, or restore via SOAP...

CVE-2026-109201

LogicalDOC Community Edition through version 9.3 contains a missing authorization vulnerability in the SoapDocumentService operations. This flaw allows authenticated users to access, disclose, delete, or tamper with unauthorized documents by calling functions such as copy , getExtractedText , del...

CVE-2026-109201 LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated users to access and modify unauthorized documents. Attackers can call copy, getExtractedText, deleteVersion, reindex, deleteLink, or restore via SOAP...

EUVD-2026-97444

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated users to access and modify unauthorized documents. Attackers can call copy, getExtractedText, deleteVersion, reindex, deleteLink, or restore via SOAP...

CVE-2026-109188

jshERP through 3.6 contains a missing authorization vulnerability that allows low-privilege authenticated users to create tenant-wide master data via add and import endpoints lacking role checks. Attackers can send POST requests to endpoints like /account/add, /material/add, or...

CVE-2026-109185

jshERP through 3.6 contains a missing authorization vulnerability in the UserController updateUser handler that allows authenticated users to assign arbitrary roles to any user. Low-privilege attackers can send their own user id with the tenant administrator roleId to escalate privileges or rebin...

CVE-2026-109179

jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to read the tenant's operation audit log. Low-privilege users can send GET requests to /log/list or /log/info to view other users' login names, client IP addresses, and actions...