29680 matches found
CVE-2026-40865
Horilla is a free and open source Human Resource Management System HRMS. In 1.5.0, an insecure direct object reference in the employee document viewer allows any authenticated user to access other employees’ uploaded documents by changing the document ID in the request. This exposes sensitive HR...
CVE-2026-40866
Horilla is a free and open source Human Resource Management System HRMS. In 1.5.0, an insecure direct object reference in the employee document upload endpoint allows any authenticated user to overwrite or replace or corrupt another employee’s document by changing the document ID in the upload...
CVE-2026-39885
FrontMCP is a TypeScript-first framework for the Model Context Protocol MCP. Prior to 2.3.0, the mcp-from-openapi library uses @apidevtools/json-schema-ref-parser to dereference $ref pointers in OpenAPI specifications without configuring any URL restrictions or custom resolvers. A malicious OpenA...
CVE-2026-44243
A flaw was found in GitPython, a Python library used to interact with Git repositories. This vulnerability allows attackers to supply a specially crafted reference path to an application utilizing GitPython. Due to insufficient validation of these paths during reference creation, renaming, or...
CVE-2026-8679
The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. This is due to the handleplaylistendpoint function hooked to templateredirect accepting a user-controlled playlist ID via the audioigniterplaylistid query var or the...
MINI-CW97-5RWF-4FFC
Bulletin has no description...
MINI-WV6M-VFR3-QCMC
Bulletin has no description...
MINI-V2QG-85JR-2FG9
Bulletin has no description...
MINI-444G-6345-QCFV
Bulletin has no description...
MINI-C4R2-7FHM-HQCM
Bulletin has no description...
MINI-RQPF-WQ25-PMWF
Bulletin has no description...
MINI-QC9C-P5V3-PH8F
Bulletin has no description...
MINI-HMV4-MMC9-5W4F
Bulletin has no description...
MINI-P795-C2MV-V765
Bulletin has no description...
MINI-5FX7-RVX9-FQQR
Bulletin has no description...
MINI-CCX2-J27H-MW95
Bulletin has no description...
MINI-447V-F282-4269
Bulletin has no description...
MINI-Q6H7-3FW7-HM7M
Bulletin has no description...