24134 matches found
ECHO-03B9-AB17-F82F
Bulletin has no description...
ECHO-AE85-B427-B70F
Bulletin has no description...
ECHO-E988-416F-4E5D
Bulletin has no description...
ECHO-AADE-52E5-F135
Bulletin has no description...
ECHO-8427-6F08-DCFB
Bulletin has no description...
ECHO-877D-C967-81EB
Bulletin has no description...
ECHO-8DAE-30ED-D27D
Bulletin has no description...
ECHO-0788-C33C-70F9
Bulletin has no description...
GHSA-MW9F-CFV6-V3RG vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-75P5-W5J4-V8QJ vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-V3Q7-WG94-9978 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-53903
MCO is vulnerable to an Insecure Direct Object Reference IDOR vulnerability in the /customer/servlet/mco/webapi/trading-document/fetchPdfStatement endpoint. The application does not properly validate whether an authenticated user is authorized to access a requested document, allowing direct...
ECHO-8445-3A6C-9043
Bulletin has no description...
ECHO-5A8A-19C3-EAEF
Bulletin has no description...
EUVD-2026-40949
MCO is vulnerable to an Insecure Direct Object Reference IDOR vulnerability in the /customer/servlet/mco/webapi/trading-document/fetchPdfStatement endpoint. The application does not properly validate whether an authenticated user is authorized to access a requested document, allowing direct...
CVE-2026-53903
CVE-2026-53903 affects MCO via the insecure endpoint /customer/servlet/mco/webapi/trading-document/fetchPdfStatement. The underlying issue is an IDOR: the app does not properly validate that an authenticated user is authorized to access a requested document, allowing retrieval based on a user-sup...
MINI-RFJR-G9C9-5XHV
Bulletin has no description...
CVE-2025-15666
creationtimestamp| type| source ---|---|--- 2026-07-01 10:35:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpld2ms3222b...
WordPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin <= 4.3.9.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
Insecure Direct Object Reference to Authenticated Subscriber+ Sensitive Information Disclosure vulnerability discovered by javitoia in WordPress Plugin LearnPress versions = 4.3.9.1...