24118 matches found
CVE-2026-55880 OpenReplay: Cross-user IDOR in notes and dashboard widgets
OpenReplay is a self-hosted session replay suite. In 1.27.0 and earlier, three dashboard and note mutation functions ran their SQL without the ownership predicate that their sibling read and edit functions use: notes.delete filtered only on note id and project id, while dashboards.updatewidget an...
CVE-2026-55880 OpenReplay: Cross-user IDOR in notes and dashboard widgets
OpenReplay is a self-hosted session replay suite. In 1.27.0 and earlier, three dashboard and note mutation functions ran their SQL without the ownership predicate that their sibling read and edit functions use: notes.delete filtered only on note id and project id, while dashboards.updatewidget an...
MINI-VCRV-V854-5MJ3
Bulletin has no description...
MINI-VJR5-CFV7-2F73
Bulletin has no description...
MINI-QPP8-CRPR-HJ9F
Bulletin has no description...
MINI-HJ8P-PGWW-8W8C
Bulletin has no description...
MINI-7VPJ-2C6V-V77R
Bulletin has no description...
MINI-8739-QQCF-FW6R
Bulletin has no description...
MINI-4V4M-JPW2-H2QM
Bulletin has no description...
MINI-V5H9-W3CP-78XQ
Bulletin has no description...
MINI-J7CF-7MWR-CW39
Bulletin has no description...
MINI-V24C-42Q7-57V4
Bulletin has no description...
MINI-W9VQ-P878-QP23
Bulletin has no description...
MINI-24R6-P886-HRV2
Bulletin has no description...
MINI-W92V-8FJF-FGJG
Bulletin has no description...
MINI-MMV4-4VMP-MQV2
Bulletin has no description...
MINI-JM6G-4RXM-WFR8
Bulletin has no description...
MINI-7522-2XCP-H42J
Bulletin has no description...