3639 matches found
EUVD-2026-29885
ChurchCRM is an open-source church management system. Prior to 7.3.2, top-level cross-site GET navigation from an attacker-controlled page to FundRaiserDelete.php, PropertyTypeDelete.php, or NoteDelete.php causes a logged-in ChurchCRM user with the relevant role to silently delete records,...
MINI-J349-2WC9-8PXF
Bulletin has no description...
PT-2026-40464
Name of the Vulnerable Software and Affected Versions ChurchCRM versions prior to 7.3.2 Description Top-level cross-site GET navigation from an attacker-controlled page to the endpoints "FundRaiserDelete.php", "PropertyTypeDelete.php", or "NoteDelete.php" allows a logged-in user with the...
CVE-2026-42291
SysReptor is a fully customizable pentest reporting platform. From version 2026.4 to before version 2026.27, the endpoints for reading and creating sharing links for personal notes is not properly authorized. This allows authenticated attackers who obtain the note ID of victim users to list and...
MINI-F752-X5C6-27P7
Bulletin has no description...
MINI-433P-7P64-4WRW
Bulletin has no description...
MINI-82CF-PQ8C-HCFJ
Bulletin has no description...
MINI-FM2V-6VX6-5PMH
Bulletin has no description...
MINI-VP6V-M57H-MGFX
Bulletin has no description...
MINI-JRFW-P5PV-FXM4
Bulletin has no description...
MINI-FG69-7982-V5GG
Bulletin has no description...
MINI-4F7X-C7P5-Q47M
Bulletin has no description...
MINI-JFQ6-MVW7-MCV9
Bulletin has no description...
MINI-523C-G845-5J2P
Bulletin has no description...
MINI-G562-5V3W-P593
Bulletin has no description...
MINI-3MVJ-4763-5VVC
Bulletin has no description...
MINI-WW26-F2C9-FR9R
Bulletin has no description...
MINI-C674-9P34-MGX2
Bulletin has no description...
EUVD-2021-34804
memono Notepad 4.2 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character buffers into note fields. Attackers can generate a payload containing 350000 repeated characters and paste it twice into a new note to trigger an...