CVE-2026-76901

CordysCRM , an open source AI-powered CRM supporting private deployment, contains a broken object-level authorization flaw prior to version 1.7.4 . The endpoints GET /pool/lead/get/{id} (in PoolClueController.get) and GET /pool/account/get/{id} (in PoolCustomerController.get) perform bare pool-re...

CVE-2021-39574

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function poolread located in pool.c. It allows an attacker to cause code Execution...

CVE-2021-39574

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function poolread located in pool.c. It allows an attacker to cause code Execution...

PT-2021-22649

Name of the Vulnerable Software and Affected Versions: swftools versions through 20200710 Description: An issue exists in the function pool read located in pool.c, which allows an attacker to cause code execution due to a heap-buffer-overflow. Recommendations: For versions through 20200710,...

DEBIAN-CVE-2021-32492

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::hasdata via crafted djvu file may lead to application crash and other consequences...