3 matches found
CVE-2026-34834
Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to version 1.4.10, the verifyIdentity function contained logic that returned true if no session cookies were present. This allowed unauthenticated attackers to bypass security checks and access/modify user settings vi...
Easy!Appointments Security Vulnerability
Easy!Appointments is a web-based appointment and schedule management system. A security vulnerability exists in Easy!Appointments, which stems from an insecure authorization issue in the /settings/settingName interface. A low-privileged attacker can exploit this vulnerability to obtain, modify, o...
PT-2015-7003
Name of the Vulnerable Software and Affected Versions baserCMS versions prior to 3.0.8 Description The issue allows remote authenticated users to modify arbitrary user settings via a crafted request. Recommendations For versions prior to 3.0.8, update to version 3.0.8 or later to resolve the issu...