91912 matches found
CVE-2026-50749 Apache Answer: Missing authorization in revision audit reject allows authenticated users to reject pending revisions
Improper Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Any authenticated user can reject arbitrary pending edit-revisions without review permission due to a missing authorization check on the reject operation. Users are recommended to upgrade to...
CVE-2026-7456
The Udimi Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxdisconnect function in all versions up to, and including, 3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete...
EUVD-2026-53386
Penpot’s ::import-binfile RPC command lacks authorization on the optional file-id parameter, allowing any authenticated user to overwrite any files on the target server and subscribe to WebSocket events, enabling full data exfiltration and data poisoning...
CVE-2026-17613
Penpot’s ::import-binfile RPC command is reported as lacking authorization on the optional file-id parameter. The vulnerability allows any authenticated user to overwrite arbitrary files on the target server and subscribe to WebSocket events, which can enable full data exfiltration and data poiso...
MINI-GH8V-R6G9-9R9F
Bulletin has no description...
MINI-XW64-4H99-G7WF
Bulletin has no description...
MINI-4FCF-298G-QGF9
Bulletin has no description...
MINI-7V44-XCC4-RVG3
Bulletin has no description...
MINI-MQ3C-X397-6CQ5
Bulletin has no description...
MINI-MW36-WG87-QP73
Bulletin has no description...
MINI-XCFM-57F5-PR5R
Bulletin has no description...
MINI-8WG9-MQX6-GC3P
Bulletin has no description...
MINI-JXRW-QF6F-4W4X
Bulletin has no description...
MINI-2GP5-JHRG-F6P6
Bulletin has no description...
MINI-MWWM-2259-J7G7
Bulletin has no description...
MINI-C5CG-CX46-QFG3
Bulletin has no description...
MINI-CFRC-9G96-4962
Bulletin has no description...
MINI-4RVR-8RGJ-666G
Bulletin has no description...