25151 matches found
PT-2026-51645
Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.4.1 Description An authenticated user with generic asset edit permissions can delete files attached to assets regardless of ownership or company assignment. This is caused by an Insecure Direct Object Reference IDO...
MINI-PQQ2-86H6-W38J
Bulletin has no description...
CVE-2026-49461
pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting the text of a page which contains a form XObject with self-references. This vulnerability is fixed in 6.12....
DEBIAN-CVE-2026-49461
pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting the text of a page which contains a form XObject with self-references. This vulnerability is fixed in 6.12....
Paymenter has broken object level authorization via service reference manipulation on ticket creation
Summary The ticket creation endpoint accepts a user-supplied service identifier without enforcing ownership validation, allowing authenticated users to create support tickets referencing services belonging to other accounts by modifying the service ID in the request. Technical Details The ticket...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the ticket creation process. An attacker can gain unauthorized access to reference services belonging to other users by manipulating the service ID parameter in the request. Remediation Upgrade paymenter/payment...
MINI-33MG-RPJC-RRW8
Bulletin has no description...
MINI-M2F9-H88F-75R9
Bulletin has no description...
MINI-HP36-PR2W-J2PX
Bulletin has no description...
MINI-H2JV-C6FG-3896
Bulletin has no description...
MINI-FX8G-64PQ-2CFC
Bulletin has no description...
MINI-FWPH-Q6QW-JGCW
Bulletin has no description...
MINI-H42C-435V-8RP9
Bulletin has no description...
MINI-CH3H-GHCJ-9MWW
Bulletin has no description...
MINI-WVXW-WV8F-75JG
Bulletin has no description...
MINI-PV5C-WWFQ-9WM7
Bulletin has no description...
MINI-VVQ9-GP5W-FCJ8
Bulletin has no description...
MINI-RCHQ-57C9-38FW
Bulletin has no description...