171504 matches found
CVE-2026-63104
Kaneo versions 2.3.12 before 2.12.2 are vulnerable to a missing authorization flaw in the bulk task endpoint . While the system verifies workspace membership, it fails to invoke the role-based permission checks required for other task endpoints. Authenticated workspace members with viewer or memb...
CVE-2026-63104 Kaneo 2.3.12 < 2.12.2 Missing Authorization via Bulk Task Endpoint
Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks beyond their assigned permissions by exploiting the bulk task endpoint that omits workspace permission checks...
EUVD-2026-84813
Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks beyond their assigned permissions by exploiting the bulk task endpoint that omits workspace permission checks...
CVE-2026-94462 Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR)
Spree is an open source e-commerce solution built with Ruby on Rails. From 5.4.0 until 5.4.4 and 5.5.4, PATCH /api/v3/store/carts/:id/associate in Spree::Api::V3::Store::CartsControllerassociate uses findcartforassociation to locate a cart by prefixedid but does not require a cart token or...
CVE-2026-94462
The open source e-commerce solution Spree is vulnerable to a broken access control (IDOR) issue in versions 5.4.0 through 5.4.4 and 5.5.4 . The vulnerability exists in the Spree::Api::V3::Store::CartsController#associate method, where the PATCH /api/v3/store/carts/:id/associate endpoint uses find...
CVE-2026-94462 Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR)
Spree is an open source e-commerce solution built with Ruby on Rails. From 5.4.0 until 5.4.4 and 5.5.4, PATCH /api/v3/store/carts/:id/associate in Spree::Api::V3::Store::CartsControllerassociate uses findcartforassociation to locate a cart by prefixedid but does not require a cart token or...
CVE-2020-1971
CVE-2020-1971 CVE-2020-1971 Auto Scan & Remote Exploit Script. Auto Local Scan & Patch Script. Currently in development Patched Source Code of OpenSSL 1.1.1i Install from source/Update .deb Script Currently in development 5:38pm Completed 5:50pm Install from source/Update Windows Currently in...
ROOT-OS-DEBIAN-12-CVE-2026-42959 CVE-2026-42959 in unbound - Patched by Root
Root has patched CVE-2026-42959 in the unbound package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-33278 CVE-2026-33278 in unbound - Patched by Root
Root has patched CVE-2026-33278 in the unbound package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-41292 CVE-2026-41292 in unbound - Patched by Root
Root has patched CVE-2026-41292 in the unbound package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-50252 CVE-2026-50252 in unbound - Patched by Root
Root has patched CVE-2026-50252 in the unbound package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-32665 CVE-2026-32665 in unbound - Patched by Root
Root has patched CVE-2026-32665 in the unbound package for Root:Debian:12. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10758 AIKIDO-2026-10758 in next - Patched by Root
Root has patched AIKIDO-2026-10758 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10757 AIKIDO-2026-10757 in next - Patched by Root
Root has patched AIKIDO-2026-10757 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10756 AIKIDO-2026-10756 in next - Patched by Root
Root has patched AIKIDO-2026-10756 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-59471 CVE-2025-59471 in next - Patched by Root
Root has patched CVE-2025-59471 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-RWJ8-PGH3-R573 GHSA-rwj8-pgh3-r573 in GitPython - Patched by Root
Root has patched GHSA-rwj8-pgh3-r573 in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-WVPP-8HX9-P66J GHSA-wvpp-8hx9-p66j in GitPython - Patched by Root
Root has patched GHSA-wvpp-8hx9-p66j in the GitPython package for Root:PyPI. Multiple fixed versions available...