Lucene search
+L

29703 matches found

osv_mini
osv_mini
•added 2026/06/02 10:58 a.m.•15 views

MINI-R39P-WV84-J7P3

Bulletin has no description...

9.1CVSS6.8AI score0.01006EPSS
SaveExploits1
osv_bell
osv_bell
•added 2026/06/02 6:11 a.m.•23 views

BELL-CVE-2026-46206

Bulletin has no description...

7.8CVSS5.8AI score0.00139EPSS
SaveExploits0References1
osv_bell
osv_bell
•added 2026/06/02 6:11 a.m.•25 views

BELL-CVE-2026-46134

Bulletin has no description...

5.5CVSS5.9AI score0.00126EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/01 11:16 p.m.•35 views

CVE-2026-28511

eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited only the title...

4.3CVSS0.00186EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/01 11:16 p.m.•47 views

CVE-2026-24761

Kiteworks is a private data network PDN. Prior to version 9.3.0, an Insecure Direct Object Reference IDOR vulnerability in Kiteworks Secure Data Forms allows an authenticated user to access metadata of resources belonging to other users due to insufficient authorization checks on resource...

4.3CVSS0.00142EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/01 11:16 p.m.•47 views

CVE-2026-24756

Kiteworks is a private data network PDN. Prior to version 9.3.0, an Insecure Direct Object Reference IDOR vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade...

4.3CVSS0.00152EPSS
SaveExploits0References1
osv_mini
osv_mini
•added 2026/06/01 10:29 p.m.•17 views

MINI-XGQJ-389W-P8F5

Bulletin has no description...

7.5CVSS8.2AI score0.00352EPSS
SaveExploits2
Mend
Mend
•added 2026/06/01 10:24 p.m.•10 views

CVE-2026-28511

eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited only the title...

5.3CVSS5.8AI score0.00186EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/06/01 9:52 p.m.•58 views

CVE-2026-24761 Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key

Kiteworks is a private data network PDN. Prior to version 9.3.0, an Insecure Direct Object Reference IDOR vulnerability in Kiteworks Secure Data Forms allows an authenticated user to access metadata of resources belonging to other users due to insufficient authorization checks on resource...

3.7CVSS0.00142EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/01 9:52 p.m.•28 views

EUVD-2026-33840

Kiteworks is a private data network PDN. Prior to version 9.3.0, an Insecure Direct Object Reference IDOR vulnerability in Kiteworks Secure Data Forms allows an authenticated user to access metadata of resources belonging to other users due to insufficient authorization checks on resource...

3.7CVSS5.8AI score0.00142EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/01 9:52 p.m.•67 views

CVE-2026-24761

The CVE-2026-24761 entry concerns Kiteworks Secure Data Forms prior to version 9.3.0, where an Insecure Direct Object Reference (IDOR) allows an authenticated user to access metadata of resources belonging to other users due to insufficient ownership checks. Affected product is Kiteworks Secure D...

4.3CVSS5.9AI score0.00142EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/06/01 9:51 p.m.•59 views

CVE-2026-24756

Kiteworks CVE-2026-24756 affects the Kiteworks Secure Data Forms component. Before version 9.3.0, an Insecure Direct Object Reference (IDOR) allows an authenticated user to modify resources owned by other users due to insufficient authorization checks on ownership. A patch is available in version...

4.3CVSS5.9AI score0.00152EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/06/01 9:51 p.m.•18 views

CVE-2026-24756

Kiteworks is a private data network PDN. Prior to version 9.3.0, an Insecure Direct Object Reference IDOR vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade...

4.3CVSS5.8AI score0.00152EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/06/01 9:51 p.m.•54 views

CVE-2026-24756 Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key

Kiteworks is a private data network PDN. Prior to version 9.3.0, an Insecure Direct Object Reference IDOR vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade...

4.3CVSS0.00152EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/01 9:51 p.m.•30 views

EUVD-2026-33839

Kiteworks is a private data network PDN. Prior to version 9.3.0, an Insecure Direct Object Reference IDOR vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade...

4.3CVSS5.8AI score0.00152EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/01 9:49 p.m.•31 views

EUVD-2026-33838

Kiteworks is a private data network PDN. Prior to version 9.3.0, an Insecure Direct Object Reference IDOR vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify permissions on resources belonging to other users due to insufficient authorization checks on resource...

5.4CVSS5.8AI score0.00138EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/01 9:49 p.m.•22 views

CVE-2026-24755

Kiteworks is a private data network PDN. Prior to version 9.3.0, an Insecure Direct Object Reference IDOR vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify permissions on resources belonging to other users due to insufficient authorization checks on resource...

5.4CVSS5.8AI score0.00138EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/06/01 9:49 p.m.•50 views

CVE-2026-24755 Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key

Kiteworks is a private data network PDN. Prior to version 9.3.0, an Insecure Direct Object Reference IDOR vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify permissions on resources belonging to other users due to insufficient authorization checks on resource...

5.4CVSS0.00138EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/01 9:49 p.m.•52 views

CVE-2026-24755

Kiteworks Secure Data Forms (prior to v9.3.0) contains an Insecure Direct Object Reference (IDOR) vulnerability that allows an authenticated user to modify permissions on resources belonging to other users due to insufficient authorization checks on resource ownership. A patch is available in Kit...

5.4CVSS5.9AI score0.00138EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/06/01 9:45 p.m.•65 views

CVE-2026-24753

Kiteworks (PDN) prior to 9.3.0 is affected by an Insecure Direct Object Reference (IDOR) in Secure Data Forms. An authenticated user can modify resources belonging to other users due to insufficient authorization checks on resource ownership. A patch is available in version 9.3.0 and later; upgra...

6.5CVSS5.9AI score0.00174EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder